Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   InetStat auf Win 10 entfernen (https://www.trojaner-board.de/173642-inetstat-win-10-entfernen.html)

frankmehlhop 01.12.2015 21:13
InetStat auf Win 10 entfernen
 
Hallo,

ich schaue gerade in meine Registry / Startprogramme und entdecke dort die mit unbekannte Software InetStat. Ich habe im Internet geschaut und gelesen, dass es nicht nützlich für mich ist. Allerdings hat das Ding wohl auch keine Deinstallfunktion und die Deinstallation soll nicht so einfach sein. Das schreibt zumindest ein AntivirenSoftware-Hersteller.

Wie kann ich InetStat sauber von meinem System entfernen?

Grüße!
Frank

cosinus 01.12.2015 21:25
Hallo und :hallo:

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!



Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

frankmehlhop 01.12.2015 21:39
Hallo Cosinus,

danke für deine Unterstützung.
Ich habe die Software installiert und durchlaufen lassen.
Aber ich möchte das Ergebnis nicht öffentlich posten,
da ich finde das ist schon sehr privat, welche Software ich so benutze und das möchte ich nicht veröffentlichen.
Kann ich die die Files direkt zukommen lassen?

Frank

cosinus 01.12.2015 21:42
Nein, das machen wir aus organisatorischen Gründen schon nicht. Zensiere Namen und evtl andere persönliche Infos. Aber mehr nicht.

frankmehlhop 01.12.2015 21:50
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:01-12-2015
durchgeführt von Frank (Administrator) auf THINKPAD (01-12-2015 21:29:40)
Gestartet von C:\Users\Frank\Desktop
Geladene Profile: Frank (Verfügbare Profile: Frank & katri_000)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\System32\SET7744.tmp
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Windows\SysWOW64\SET7535.tmp
(Apple Inc.) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
(Software) C:\Program Files (x86)\Common Files\Hydrup\hydrup.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Beckhoff Automation GmbH) C:\TwinCAT\3.1\Components\TcEventLogger\TcEventLogger.exe
(Beckhoff Automation GmbH) C:\TwinCAT\3.1\System\TCATSysSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SET6847.tmp
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\avfaudiosw.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
() C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoHelper.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe
() C:\Users\Frank\AppData\Roaming\InetStat\inetstat.exe
(Spotify Ltd) C:\Users\Frank\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\Frank\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Frank\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\Frank\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Frank\AppData\Roaming\Spotify\Spotify.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(ScreenCapturer.com) C:\Program Files (x86)\Screen Capturer\ScreenCapturer.exe
(Beckhoff Automation GmbH) C:\TwinCAT\3.1\System\TcSysUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\tpknrres.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbwe\WinStore.Mobile.exe
() C:\Program Files\WindowsApps\Microsoft.ConnectivityStore_1.1511.2.0_x64__8wekyb3d8bbwe\ConnectivityStore.Windows.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Program Files (x86)\OpenVPN\bin\openvpn-gui-1.0.3.exe
() C:\Program Files (x86)\OpenVPN\bin\openvpn.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\VsHub.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VsHub\1.0.0.0\Microsoft.VsHub.Server.HttpHost.exe
(Microsoft Corporation) C:\Users\Frank\_IT\C#\Plattform C\Software\GesimRobotics\trunk\bin\Debug\GesimRobotics.vshost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\CommonExtensions\Microsoft\IntelliTrace\14.0.0\IntelliTrace.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [140872 2013-03-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [382248 2013-02-12] (Lenovo.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [PasswordManager] => C:\Program Files\Lenovo\Password Manager\password_manager.exe [1665824 2014-06-23] (Lenovo Group Limited)
HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937968 2014-08-12] (Lenovo)
HKLM\...\Run: [LMCSSTART1] => C:\WINDOWS\SysWOW64\lmcfrundll.exe C:\Program Files\Lenovo\Communications Utility\libmcsrdllb.dll,InitSubsystemProcesses
HKLM\...\Run: [LMCSSTART2] => C:\WINDOWS\SysWOW64\lmcfrundll.exe C:\Program Files\Lenovo\Communications Utility\libstartstub2.dll,ProxyStart
HKLM\...\Run: [LMCSSTART3] => C:\WINDOWS\SysWOW64\lmcfrundll.exe C:\Program Files\Lenovo\Communications Utility\libmcsrdllb.dll,SetupCamplusDrop
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [TcSysUI] => C:\TwinCAT\3.1\System\TcSysUi.exe [1124512 2014-01-20] (Beckhoff Automation GmbH)
HKLM\...\Policies\Explorer: [DisableThumbsDBOnNetworkFolders] 1
HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\Run: [Google Update] => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-11-01]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\chrome.exe - Verknüpfung.lnk [2015-04-25]
ShortcutTarget: chrome.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Screen Capturer.lnk [2015-05-20]
ShortcutTarget: Screen Capturer.lnk -> C:\Program Files (x86)\Screen Capturer\ScreenCapturer.exe (ScreenCapturer.com)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.8.0.1
Tcpip\..\Interfaces\{06c21700-100f-4b1f-90a7-25b46ac324b8}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2EBB79E2-2239-4482-B956-CFFFD0F199F0}: [DhcpNameServer] 10.8.0.1
Tcpip\..\Interfaces\{32d48913-41d8-4947-a0d8-6dac12ea4805}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{581b9bbd-5b2e-4682-848c-ae7130836f5e}: [DhcpNameServer] 10.8.0.1

Internet Explorer:
==================
HKU\S-1-5-21-94231515-3545142930-1258591251-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-94231515-3545142930-1258591251-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=206&itype=n&ver=14368&tm=525&src=ds&p={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL = hxxp://www.default-search.net/search?sid=476&aid=206&itype=n&ver=14368&tm=525&src=ds&p={searchTerms}
SearchScopes: HKU\S-1-5-21-94231515-3545142930-1258591251-1001 -> {CF5E2AEA-86C6-49DD-8E07-C2D58A31B31A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-20] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-20] (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\70wisqxc.default-1410628380276
FF DefaultSearchEngine: default-search.net
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-09-28] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-09-28] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: @talk.google.com/O1DPlugin -> C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2013-03-25] (Intel)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2013-03-25] (Intel)
FF Plugin ProgramFiles/Appdata: C:\Users\Frank\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Frank\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF SearchPlugin: C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\70wisqxc.default-1410628380276\searchplugins\default-search.xml [2014-11-08]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\default-search.xml [2014-11-08]
FF HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12 [2014-08-27] [ist nicht signiert]

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxps://mail.google.com/mail/u/0/?shva=1#inbox","hxxps://docs.google.com/spreadsheet/ccc?key=0ApEGr6N13b-UdG5WS2N5WVJnZGdfVXZ5bDZzRHJlWFE#gid=0","hxxps://www.google.com/calendar/render?tab=oc&pli=1&t=AKUaPmbs7KHmWy-liuhRBUIBuxEy1H5OcReZ_FtzHymwlg7-bAcVULKmzWs1W64KtL-6_4xtUNnH","hxxp://stackoverflow.com/questions/11152956/example-of-code-to-implement-a-pdf-reader","hxxps://github.com/jblough/Android-Pdf-Viewer-Library","hxxp://www.mkyong.com/android/android-toast-example/","hxxps://www.google.de/?gws_rd=cr&ei=f5Q5UsKrNMmu4QTBl4BI","hxxps://www.google.de/search?q=chrome+startseite+%C3%A4ndern&oq=chrome+startseite&aqs=chrome.1.69i57j0l3.4526j0&sourceid=chrome&ie=UTF-8","hxxp://www.google.com/intl/de/homepage/#instructions-nonie","hxxps://www.google.com/","hxxp://www.sweetpacks-search.com/?barid={25A67C0D-16C8-11E3-A4E3-BC5FF45A1F25}&src=10&crg=3.5000006.10061&st=23","hxxp://start.iminent.com/?appId=74210A49-0CC6-4121-B601-605B60F6855F","chrome://chrome-signin/?source=0","hxxp://www.mystartsearch.com/?type=hp&ts=1432287695&z=2c5a4a5e53b68773349945egfz7c2ocoabfm6m4efg&from=cvs1&uid=INTELXSSDSC2BW240A4_CVDA3300008N2403GN"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (TIPP10 - Kostenloser 10-Finger-Schreibtrainer) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\akfcabopgpiohpfcjkpifbmoclclfkhn [2014-02-27]
CHR Extension: (Google Drive) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (Web Developer) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2014-05-25]
CHR Extension: (WhatsChrome) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgkodfmeijboinjdegggmkbkjfiagaan [2015-10-09]
CHR Extension: (ColorZilla) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2015-06-25]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-11-21]
CHR Extension: (HelloFax: 50 kostenlose Fax-Seiten) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocmleclimfnadgmcdgecijlblfcmfnm [2015-02-26]
CHR Extension: (Adblock Plus) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-24]
CHR Extension: (Webseiten-Screenshot - Webpage Screenshot) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki [2014-11-28]
CHR Extension: (Alexa Traffic Rank) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel [2014-08-12]
CHR Extension: (Dropbox für Gmail) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpdmhfocilnekecfjgimjdeckachfbec [2015-11-21]
CHR Extension: (Block site) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2015-08-01]
CHR Extension: (Full Page Screen Capture) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2015-05-12]
CHR Extension: (Type Scout - Besser tippen! :)) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fedokkaolmkkoeedicihicdeppjjeamj [2015-06-23]
CHR Extension: (Web Lab) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgacgeibpdjllcjckbmgecpahipdjabe [2014-02-27]
CHR Extension: (Wunderlist - To-do and Task list) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc [2015-11-27]
CHR Extension: (Stoppuhr / Timer) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggnidjbcahhbnleinchgobfnabopeioh [2014-02-27]
CHR Extension: (Google Docs Offline) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Instant Translate) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2015-11-27]
CHR Extension: (Eingabe-Test - KeyHero) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkcieoaeooeidmpaopkpjpjfakidlabm [2014-07-30]
CHR Extension: (Webpage Screenshot Gallery) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohfjeijmlcjiofmmcfichimcnbclkhp [2014-05-28]
CHR Extension: (3D Solar System Web) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdaaepplopehigjgkolniddiadbbkphd [2014-02-27]
CHR Extension: (Regen-Alarm) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\meaikaglpfemjncbioflellmppndgmok [2014-11-17]
CHR Extension: (Rechner) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkgoipeflibinmadcecedifdonakgalk [2015-04-23]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-01]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2015-11-29]
CHR Extension: (Wunderlist for Chrome) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojcflmmmcfpacggndoaaflkmcoblhnbh [2015-11-27]
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [560584 2015-01-21] (Lenovo Corporation)
R2 Bonjour Service; C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe [384512 2015-08-18] (Apple Inc.) [Datei ist nicht signiert]
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2015-11-28] (Microsoft Corporation)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 Hydrup; C:\Program Files (x86)\Common Files\Hydrup\hydrup.exe [266536 2015-04-17] (Software)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-01-14] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21744 2015-07-09] (Microsoft Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2016472 2015-01-23] (Lenovo Group Limited)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)
S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [626120 2015-01-21] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
S3 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [474608 2014-08-12] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [469720 2015-01-09] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272424 2015-08-17] (Lenovo)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [36352 2009-12-12] () [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21536 2015-11-11] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255096 2015-10-25] (Synaptics Incorporated)
S3 TcAdsWcfHost; C:\TwinCAT\AdsApi\TcAdsWcf\v4.0.30319\TcAdsWcfHost.exe [7680 2013-09-20] (Beckhoff Automation GmbH) [Datei ist nicht signiert]
R2 TcEventLogger; C:\TwinCAT\3.1\Components\TcEventLogger\TcEventLogger.exe [249504 2014-01-20] (Beckhoff Automation GmbH)
R2 TcSysSrv; C:\TwinCAT\3.1\System\TCATSysSrv.exe [498688 2014-03-23] (Beckhoff Automation GmbH) [Datei ist nicht signiert]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [134656 2015-07-09] (Microsoft Corporation) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49968 2015-03-03] (Synaptics Incorporated)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
R3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-07] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [37472 2013-02-14] (Advanced Micro Devices, Inc.)
U5 iaStorA; C:\Windows\System32\Drivers\iaStorA.sys [652344 2012-11-19] (Intel Corporation)
R3 LnvHIDHW; C:\Windows\System32\drivers\LnvHIDHW.sys [29496 2014-04-07] (Lenovo)
R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3343872 2015-10-30] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-05] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243272 2013-03-21] (Realtek Semiconductor Corp.)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [51320 2015-10-25] (Synaptics Incorporated)
R1 SMIDriver; C:\Windows\System32\drivers\smi.sys [19656 2015-03-03] (Windows (R) Win 7 DDK provider)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [34976 2015-06-29] (Lenovo Group Limited)
R2 TcIo; C:\TwinCAT\3.1\Driver\TcIo.sys [875680 2014-01-20] (Beckhoff Automation GmbH)
R2 TcRouter; C:\TwinCAT\3.1\Driver\TcRouter.sys [666672 2014-02-04] (Beckhoff Automation GmbH)
R2 TcRTime; C:\TwinCAT\3.1\Driver\TcRTime.sys [436384 2014-01-20] (Beckhoff Automation GmbH)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48024 2013-01-28] (Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [194456 2013-01-28] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-01 21:29 - 2015-12-01 21:30 - 00035797 _____ C:\Users\Frank\Desktop\FRST.txt
2015-12-01 21:29 - 2015-12-01 21:29 - 00000000 ____D C:\FRST
2015-12-01 21:28 - 2015-12-01 21:29 - 02350080 _____ (Farbar) C:\Users\Frank\Desktop\FRST64.exe
2015-12-01 18:54 - 2015-12-01 18:54 - 00000000 ____D C:\Users\Frank\.jmc
2015-12-01 18:54 - 2015-12-01 18:54 - 00000000 ____D C:\Users\Frank\.eclipse
2015-12-01 18:52 - 2015-12-01 18:52 - 00000000 ___HD C:\OneDriveTemp
2015-11-30 19:13 - 2015-11-30 19:13 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-11-29 19:20 - 2015-11-29 19:20 - 00000000 ____D C:\Program Files\Microsoft Identity Extensions
2015-11-29 18:29 - 2015-11-29 18:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Office365 Tools
2015-11-29 18:13 - 2015-10-29 20:12 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxToolsReportGenerator.dll
2015-11-29 18:13 - 2015-10-29 20:12 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxToolsReportGenerator.dll
2015-11-29 18:13 - 2015-10-29 19:41 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARP12Debug.dll
2015-11-29 18:13 - 2015-10-29 19:40 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARP12Debug.dll
2015-11-29 18:13 - 2015-10-29 19:38 - 00369152 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DXCpl.exe
2015-11-29 18:13 - 2015-10-29 19:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARPDebug.dll
2015-11-29 18:13 - 2015-10-29 19:37 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXGIDebug.dll
2015-11-29 18:13 - 2015-10-29 19:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsProxyStub.dll
2015-11-29 18:13 - 2015-10-29 19:36 - 00349184 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DXCpl.exe
2015-11-29 18:13 - 2015-10-29 19:36 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARPDebug.dll
2015-11-29 18:13 - 2015-10-29 19:35 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXGIDebug.dll
2015-11-29 18:13 - 2015-10-29 19:35 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsProxyStub.dll
2015-11-29 18:13 - 2015-10-29 19:34 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\perf_gputiming.dll
2015-11-29 18:13 - 2015-10-29 19:34 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsReporting.dll
2015-11-29 18:13 - 2015-10-29 19:32 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsMonitor.dll
2015-11-29 18:13 - 2015-10-29 19:31 - 00727552 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsExperiment.dll
2015-11-29 18:13 - 2015-10-29 19:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perf_gputiming.dll
2015-11-29 18:13 - 2015-10-29 19:31 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsCapture.dll
2015-11-29 18:13 - 2015-10-29 19:31 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsReporting.dll
2015-11-29 18:13 - 2015-10-29 19:30 - 01073664 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsOfflineAnalysis.dll
2015-11-29 18:13 - 2015-10-29 19:30 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1debug3.dll
2015-11-29 18:13 - 2015-10-29 19:29 - 05667840 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe
2015-11-29 18:13 - 2015-10-29 19:29 - 05562368 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsRemoteEngine.exe
2015-11-29 18:13 - 2015-10-29 19:29 - 00889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCap.exe
2015-11-29 18:13 - 2015-10-29 19:29 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsMonitor.dll
2015-11-29 18:13 - 2015-10-29 19:29 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsCapture.dll
2015-11-29 18:13 - 2015-10-29 19:28 - 03292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12warp.dll
2015-11-29 18:13 - 2015-10-29 19:28 - 00763904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsOfflineAnalysis.dll
2015-11-29 18:13 - 2015-10-29 19:28 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsExperiment.dll
2015-11-29 18:13 - 2015-10-29 19:27 - 04533760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsDesktopEngine.exe
2015-11-29 18:13 - 2015-10-29 19:27 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCap.exe
2015-11-29 18:13 - 2015-10-29 19:27 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1debug3.dll
2015-11-29 18:13 - 2015-10-29 19:26 - 02470912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12warp.dll
2015-11-29 18:13 - 2015-10-29 19:25 - 04445696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsRemoteEngine.exe
2015-11-29 18:13 - 2015-10-29 19:24 - 08574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCaptureReplay.dll
2015-11-29 18:13 - 2015-10-29 19:22 - 06584320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCaptureReplay.dll
2015-11-29 18:13 - 2015-10-29 19:13 - 01001984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12SDKLayers.dll
2015-11-29 18:13 - 2015-10-29 19:12 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11_3SDKLayers.dll
2015-11-29 18:13 - 2015-10-29 19:11 - 01064960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_3SDKLayers.dll
2015-11-29 18:13 - 2015-10-29 19:11 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12SDKLayers.dll
2015-11-29 12:12 - 2015-11-29 12:12 - 00000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\ATI
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\Apple Computer
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\TSVNCache
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\Publishers
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\ATI
2015-11-28 23:36 - 2015-11-29 18:01 - 00000000 ____D C:\Users\Frank\AppData\Local\MicrosoftEdge
2015-11-28 23:36 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\Adobe
2015-11-28 23:36 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\Packages
2015-11-28 23:36 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\Lenovo
2015-11-28 23:36 - 2015-11-28 23:36 - 00002335 _____ C:\Users\katri_000\Desktop\Google Chrome.lnk
2015-11-28 23:36 - 2015-11-28 23:36 - 00000020 ___SH C:\Users\katri_000\ntuser.ini
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Vorlagen
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Startmenü
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Netzwerkumgebung
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Lokale Einstellungen
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Eigene Dateien
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Druckumgebung
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Documents\Eigene Videos
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Documents\Eigene Musik
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Documents\Eigene Bilder
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\AppData\Local\Verlauf
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\AppData\Local\Anwendungsdaten
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Anwendungsdaten
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 __SHD C:\Users\katri_000\IntelGraphicsProfiles
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\Subversion
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 ____D C:\Users\katri_000\AppData\Local\VirtualStore
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 ____D C:\Users\katri_000\AppData\Local\TileDataLayer
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 ____D C:\Users\katri_000
2015-11-28 23:36 - 2015-11-28 20:22 - 00000000 ____D C:\Users\katri_000\Documents\Visual Studio 2013
2015-11-28 23:36 - 2015-11-28 20:22 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\Macromedia
2015-11-28 23:36 - 2015-11-28 20:22 - 00000000 ____D C:\Users\katri_000\AppData\Local\ScreenCapture
2015-11-28 23:36 - 2015-11-28 20:22 - 00000000 ____D C:\Users\katri_000\AppData\Local\Google
2015-11-28 23:36 - 2015-04-25 17:51 - 00001739 _____ C:\Users\katri_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LenovoToast.lnk
2015-11-28 20:33 - 2015-11-28 20:34 - 00002404 _____ C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-28 20:33 - 2015-11-28 20:34 - 00000000 ___RD C:\Users\Frank\OneDrive
2015-11-28 20:33 - 2015-11-28 20:33 - 00000000 ____D C:\ProgramData\ATI
2015-11-28 20:32 - 2015-11-28 20:32 - 00000000 ____D C:\Users\Frank\AppData\Local\ActiveSync
2015-11-28 20:32 - 2015-11-28 20:32 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-11-28 20:31 - 2015-11-28 20:31 - 00000000 ____D C:\Users\Frank\AppData\Local\Publishers
2015-11-28 20:30 - 2015-12-01 18:52 - 00000000 __SHD C:\Users\Frank\IntelGraphicsProfiles
2015-11-28 20:30 - 2015-11-28 23:36 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-11-28 20:30 - 2015-11-28 20:30 - 00000020 ___SH C:\Users\Frank\ntuser.ini
2015-11-28 20:30 - 2015-11-28 20:30 - 00000000 ____D C:\Users\Frank\AppData\Local\TileDataLayer
2015-11-28 20:30 - 2015-11-28 20:30 - 00000000 ____D C:\Users\Frank\AppData\Local\Comms
2015-11-28 20:27 - 2015-11-28 20:27 - 00000000 ____D C:\ProgramData\USOShared
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-11-28 20:25 - 2015-11-28 20:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-28 20:22 - 2015-11-28 20:22 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2013
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default\AppData\Local\ScreenCapture
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2013
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default User\AppData\Local\ScreenCapture
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2015-11-28 20:00 - 2015-11-28 20:00 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-11-28 19:59 - 2015-12-01 18:54 - 00000000 ____D C:\Users\Frank
2015-11-28 19:59 - 2015-11-28 21:43 - 02003118 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-28 19:59 - 2015-11-28 19:59 - 01909068 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Vorlagen
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Startmenü
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Netzwerkumgebung
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Lokale Einstellungen
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Eigene Dateien
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Druckumgebung
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Documents\Eigene Videos
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Documents\Eigene Musik
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Documents\Eigene Bilder
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\AppData\Local\Verlauf
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\AppData\Local\Anwendungsdaten
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Anwendungsdaten
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-11-28 19:58 - 2015-11-29 19:19 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-28 19:58 - 2015-11-28 20:23 - 00000000 ____D C:\ProgramData\Validity
2015-11-28 19:58 - 2015-11-28 20:23 - 00000000 ____D C:\ProgramData\Lenovo
2015-11-28 19:58 - 2015-11-28 20:07 - 00000000 ____D C:\Program Files\Synaptics
2015-11-28 19:58 - 2015-11-28 20:07 - 00000000 ____D C:\Program Files\Intel
2015-11-28 19:58 - 2015-11-28 20:07 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_09_00.Wdf
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\Program Files\Realtek
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\Program Files\ATI Technologies
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\Program Files\AMD
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\AMD
2015-11-28 19:58 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-11-28 19:57 - 2015-11-28 20:34 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-28 19:57 - 2015-11-28 20:23 - 04857008 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-28 19:54 - 2015-11-28 19:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 22394880 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 13376512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 13017088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 12120064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 03670832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-11-28 19:54 - 2015-11-28 19:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-11-28 19:54 - 2015-11-28 19:54 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01998848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01707008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01212416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-11-28 19:54 - 2015-11-28 19:54 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-11-28 19:54 - 2015-11-28 19:54 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00000000 ____D C:\Windows.old
2015-11-28 19:52 - 2015-11-28 19:52 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-11-28 19:51 - 2015-11-29 18:43 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-11-28 19:51 - 2015-11-28 20:23 - 00000000 ____D C:\Program Files\MSBuild
2015-11-28 19:51 - 2015-11-28 19:51 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-11-28 19:51 - 2015-11-28 19:51 - 00000000 ____D C:\Program Files\Windows Identity Foundation
2015-11-28 19:51 - 2015-11-28 19:51 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-11-28 19:51 - 2015-11-28 19:51 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-11-28 19:50 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-11-28 19:50 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-11-28 19:50 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-11-28 19:50 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-11-28 19:50 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-11-28 19:50 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-11-18 14:12 - 2015-11-25 18:51 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-07 10:49 - 2015-11-07 10:49 - 00040237 _____ C:\Users\Frank\Desktop\konditionen.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-01 21:29 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-01 21:04 - 2013-10-16 16:52 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-01 20:46 - 2013-10-23 19:40 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001UA.job
2015-12-01 19:04 - 2013-10-16 16:52 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-01 18:57 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-01 18:57 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-01 18:57 - 2015-10-14 18:12 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Spotify
2015-12-01 18:52 - 2015-10-14 18:12 - 00000000 ____D C:\Users\Frank\AppData\Local\Spotify
2015-12-01 18:52 - 2015-06-06 15:54 - 00000000 ____D C:\Users\Frank\AppData\Local\TSVNCache
2015-12-01 18:52 - 2013-10-26 21:31 - 00000000 __RDO C:\Users\Frank\SkyDrive
2015-11-30 19:05 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-11-30 18:15 - 2013-10-22 18:56 - 00000000 ____D C:\Users\Frank\AppData\Roaming\FileZilla
2015-11-29 21:46 - 2013-10-23 19:40 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001Core.job
2015-11-29 21:44 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-29 19:39 - 2015-10-05 18:19 - 00000000 ____D C:\Users\Frank\Documents\Visual Studio 2015
2015-11-29 19:36 - 2015-06-06 11:57 - 00000000 ____D C:\ProgramData\Microsoft Visual Studio
2015-11-29 19:29 - 2015-05-05 16:21 - 00000000 ____D C:\Program Files (x86)\AppInsights
2015-11-29 19:29 - 2015-05-05 16:00 - 00000000 ____D C:\Program Files (x86)\NuGet
2015-11-29 19:20 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-11-29 19:20 - 2015-06-06 11:49 - 00000000 ____D C:\Program Files\SharePoint Client Components
2015-11-29 18:49 - 2015-10-05 18:17 - 00000000 ____D C:\ProgramData\Windows App Certification Kit
2015-11-29 18:49 - 2015-10-05 18:17 - 00000000 ____D C:\Program Files\Application Verifier
2015-11-29 18:49 - 2015-10-05 18:17 - 00000000 ____D C:\Program Files (x86)\Application Verifier
2015-11-29 18:45 - 2015-10-05 17:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0
2015-11-29 18:43 - 2015-10-21 21:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.0
2015-11-29 18:40 - 2015-10-21 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK
2015-11-29 18:35 - 2015-10-21 21:12 - 00000000 ____D C:\Program Files\Microsoft DNX
2015-11-29 18:29 - 2015-10-05 17:56 - 00000000 ____D C:\Program Files\IIS Express
2015-11-29 18:29 - 2015-10-05 17:56 - 00000000 ____D C:\Program Files (x86)\IIS Express
2015-11-29 18:25 - 2015-10-21 21:08 - 00001509 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk
2015-11-29 18:24 - 2015-10-05 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.1
2015-11-29 18:17 - 2015-05-05 16:11 - 00000000 ____D C:\Program Files (x86)\HTML Help Workshop
2015-11-29 18:15 - 2013-11-12 16:26 - 00000000 ____D C:\WINDOWS\SysWOW64\1033
2015-11-29 18:13 - 2015-10-21 21:04 - 00001518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2015-11-29 18:13 - 2015-10-05 18:26 - 00000000 ____D C:\Users\Frank\AppData\Local\VSIXInstaller
2015-11-29 18:13 - 2013-11-12 16:26 - 00000000 ____D C:\WINDOWS\system32\1033
2015-11-29 13:19 - 2013-11-11 12:39 - 00000000 ____D C:\Users\Frank\Documents\Visual Studio 2013
2015-11-29 12:14 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-11-28 23:37 - 2013-10-16 22:32 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-11-28 23:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-11-28 21:43 - 2015-10-30 19:35 - 00853752 _____ C:\WINDOWS\system32\perfh007.dat
2015-11-28 21:43 - 2015-10-30 19:35 - 00187942 _____ C:\WINDOWS\system32\perfc007.dat
2015-11-28 20:49 - 2013-10-16 16:47 - 00000000 ____D C:\Users\Frank\AppData\Local\Packages
2015-11-28 20:47 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-11-28 20:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-11-28 20:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-11-28 20:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-11-28 20:30 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-11-28 20:30 - 2015-05-05 16:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0
2015-11-28 20:30 - 2013-11-11 12:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2015-11-28 20:27 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-11-28 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-11-28 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2015-11-28 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-11-28 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-11-28 20:26 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-11-28 20:25 - 2015-08-31 19:49 - 00002132 _____ C:\WINDOWS\System32\Tasks\{3839690F-193C-41E0-80F4-3BC8EBB96139}
2015-11-28 20:25 - 2015-03-21 10:27 - 00002764 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-11-28 20:25 - 2014-09-26 21:29 - 00002872 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2015-11-28 20:25 - 2014-09-26 21:29 - 00002494 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2015-11-28 20:25 - 2014-08-27 07:52 - 00002118 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask
2015-11-28 20:25 - 2014-02-27 18:48 - 00002016 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-11-28 20:25 - 2014-01-04 12:03 - 00001972 _____ C:\WINDOWS\System32\Tasks\{36EAE65D-D216-4C80-98DD-6D6FF2060B75}
2015-11-28 20:25 - 2013-10-26 21:24 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-11-28 20:25 - 2013-10-26 21:21 - 00030483 _____ C:\WINDOWS\diagwrn.xml
2015-11-28 20:25 - 2013-10-26 21:21 - 00030483 _____ C:\WINDOWS\diagerr.xml
2015-11-28 20:25 - 2013-10-23 19:40 - 00003582 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001UA
2015-11-28 20:25 - 2013-10-23 19:40 - 00003310 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001Core
2015-11-28 20:25 - 2013-10-21 22:28 - 00002594 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-ThinkPad-Frank
2015-11-28 20:25 - 2013-10-16 16:54 - 00002808 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-94231515-3545142930-1258591251-1001
2015-11-28 20:25 - 2013-10-16 16:52 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-11-28 20:25 - 2013-10-16 16:52 - 00003276 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-11-28 20:25 - 2013-08-09 11:03 - 00002312 _____ C:\WINDOWS\System32\Tasks\Dolby
2015-11-28 20:25 - 2013-08-09 11:03 - 00002186 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_Dolby
2015-11-28 20:25 - 2013-08-09 11:03 - 00002174 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2015-11-28 20:24 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-11-28 20:24 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-11-28 20:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-11-28 20:23 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-11-28 20:23 - 2015-10-22 06:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-11-28 20:23 - 2015-10-21 21:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python Tools for Visual Studio 2015
2015-11-28 20:23 - 2015-10-21 21:41 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js
2015-11-28 20:23 - 2015-10-21 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android SDK Tools
2015-11-28 20:23 - 2015-10-04 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free
2015-11-28 20:23 - 2015-10-02 21:06 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2015-11-28 20:23 - 2015-06-06 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN
2015-11-28 20:23 - 2015-05-20 18:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screen Capturer
2015-11-28 20:23 - 2015-05-20 18:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-11-28 20:23 - 2015-05-16 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2015-11-28 20:23 - 2015-05-12 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-11-28 20:23 - 2015-05-05 16:32 - 00000000 ____D C:\ProgramData\regid.2008-09.org.wixtoolset
2015-11-28 20:23 - 2015-05-05 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WiX Toolset v3.9
2015-11-28 20:23 - 2015-01-27 18:58 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GesimGui
2015-11-28 20:23 - 2014-11-08 22:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellarium
2015-11-28 20:23 - 2014-10-30 18:46 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PolygonAusLinien
2015-11-28 20:23 - 2014-08-27 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2015-11-28 20:23 - 2014-08-27 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2015-11-28 20:23 - 2014-07-22 16:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.2
2015-11-28 20:23 - 2014-07-22 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber
2015-11-28 20:23 - 2014-03-20 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-11-28 20:23 - 2014-03-08 12:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-11-28 20:23 - 2014-02-27 17:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2015-11-28 20:23 - 2014-02-23 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2015-11-28 20:23 - 2014-01-04 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Astrosoft
2015-11-28 20:23 - 2014-01-04 12:06 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Galiastro
2015-11-28 20:23 - 2013-11-24 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
2015-11-28 20:23 - 2013-11-19 07:53 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-28 20:23 - 2013-11-12 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2013
2015-11-28 20:23 - 2013-10-22 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2015-11-28 20:23 - 2013-10-22 18:47 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-11-28 20:23 - 2013-10-22 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3Gain
2015-11-28 20:23 - 2013-10-21 22:25 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-11-28 20:23 - 2013-10-21 22:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-11-28 20:23 - 2013-10-21 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-11-28 20:23 - 2013-10-20 17:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-28 20:23 - 2013-10-20 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2015-11-28 20:23 - 2013-10-20 15:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-11-28 20:23 - 2013-10-20 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ColorPic 4
2015-11-28 20:23 - 2013-10-20 10:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-11-28 20:23 - 2013-10-20 09:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2015-11-28 20:23 - 2013-10-16 16:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-28 20:23 - 2013-08-09 11:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Absolute Software
2015-11-28 20:23 - 2013-08-09 11:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(R) center
2015-11-28 20:23 - 2013-08-09 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2015-11-28 20:22 - 2013-08-22 14:36 - 00000000 ____D C:\Users\Default.migrated
2015-11-28 20:07 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-11-28 20:07 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Cursors
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-11-28 20:07 - 2015-10-21 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2015-11-28 20:07 - 2015-08-31 19:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-11-28 20:07 - 2015-05-05 16:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
2015-11-28 20:07 - 2015-05-05 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2015-11-28 20:07 - 2014-12-20 13:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Lenovo
2015-11-28 20:07 - 2014-12-20 13:26 - 00000000 ____D C:\WINDOWS\system32\Lenovo
2015-11-28 20:07 - 2014-08-27 07:56 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2015-11-28 20:07 - 2013-11-14 15:50 - 00000000 ____D C:\Program Files\IIS
2015-11-28 20:07 - 2013-11-12 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2015-11-28 20:07 - 2013-11-01 21:39 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2015-11-28 20:07 - 2013-10-26 21:19 - 00000000 ____D C:\Program Files (x86)\Intel
2015-11-28 20:07 - 2013-10-22 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AceBIT
2015-11-28 20:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-11-28 20:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-11-28 20:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-11-28 20:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-11-28 20:07 - 2013-08-09 11:14 - 00000000 ____D C:\Program Files\Intel Corporation
2015-11-28 20:07 - 2013-08-09 11:03 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2015-11-28 20:07 - 2013-08-09 11:01 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2015-11-28 20:07 - 2013-08-09 11:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-11-28 20:07 - 2013-08-09 11:00 - 00000000 ____D C:\Program Files\Common Files\Intel
2015-11-28 20:07 - 2013-03-25 22:03 - 00000000 ____D C:\ProgramData\PRICache
2015-11-28 19:59 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-11-28 19:59 - 2014-02-27 17:59 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenVPN
2015-11-28 19:59 - 2014-01-04 13:54 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Astrosoft
2015-11-28 19:59 - 2013-12-26 13:30 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Basic 2005 Power Packs
2015-11-28 19:57 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-11-28 19:57 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-11-28 19:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-11-28 19:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-28 19:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-11-28 19:54 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-11-28 19:54 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-11-28 19:51 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-11-28 19:51 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-11-28 19:39 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-11-28 18:39 - 2013-10-27 11:34 - 00000000 ____D C:\Users\Frank\AppData\Local\CrashDumps
2015-11-26 22:00 - 2013-10-22 19:13 - 00000000 ____D C:\Users\Frank\_Buchhaltung
2015-11-25 19:10 - 2013-10-20 10:06 - 00000000 ____D C:\Users\Frank\AppData\Roaming\vlc
2015-11-22 00:27 - 2013-10-20 17:05 - 04035584 ___SH C:\Users\Frank\Desktop\Thumbs.db
2015-11-20 20:14 - 2013-08-09 11:11 - 00000000 ____D C:\WINDOWS\System32\Tasks\TVT
2015-11-20 20:14 - 2013-08-09 11:10 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2015-11-20 20:14 - 2013-08-09 11:01 - 00000000 ____D C:\Program Files (x86)\Lenovo
2015-11-18 14:36 - 2013-10-16 16:54 - 00000000 ____D C:\Users\Frank\AppData\Local\Adobe
2015-11-18 14:12 - 2013-08-09 11:10 - 00000000 ____D C:\ProgramData\Adobe
2015-11-18 14:12 - 2013-08-09 11:10 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-13 23:36 - 2013-10-16 17:43 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-13 23:33 - 2013-10-16 17:43 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 22:21 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-11-10 20:27 - 2015-01-27 19:09 - 00000994 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-11-10 20:27 - 2013-11-24 14:19 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-11-07 16:28 - 2013-11-05 17:03 - 00001456 _____ C:\Users\Frank\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2015-11-03 01:12 - 2015-10-30 08:26 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-03 01:12 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-10-16 16:48 - 2013-10-20 09:40 - 0001492 _____ () C:\Users\Frank\AppData\Roaming\AbsoluteReminder.xml
2014-03-05 18:53 - 2014-10-06 20:01 - 0000132 _____ () C:\Users\Frank\AppData\Roaming\Adobe PNG Format CS5 Prefs
2013-11-05 17:03 - 2015-11-07 16:28 - 0001456 _____ () C:\Users\Frank\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2015-02-12 20:40 - 2015-05-02 19:12 - 0000600 _____ () C:\Users\Frank\AppData\Local\PUTTY.RND
2013-10-16 16:47 - 2014-06-03 18:40 - 0000466 _____ () C:\Users\Frank\AppData\Local\RegisteredPackageInformation.xml
2013-11-14 10:12 - 2013-11-14 10:12 - 0007597 _____ () C:\Users\Frank\AppData\Local\Resmon.ResmonCfg
2013-12-01 20:12 - 2013-12-01 20:22 - 0013708 _____ () C:\Users\Frank\AppData\Local\WiDiSetupLog.20131201.201220.wdl
2013-12-02 19:44 - 2013-12-02 19:44 - 0014377 _____ () C:\Users\Frank\AppData\Local\WiDiSetupLog.20131202.194423.wdl
2015-11-28 19:58 - 2015-11-28 19:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-10-20 15:35 - 2013-11-01 21:45 - 0006550 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-28 19:57

==================== Ende von FRST.txt ============================

frankmehlhop 01.12.2015 21:52
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:01-12-2015
durchgeführt von Frank (2015-12-01 21:30:19)
Gestartet von C:\Users\Frank\Desktop
Windows 10 Home (X64) (2015-11-28 19:30:28)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-94231515-3545142930-1258591251-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-94231515-3545142930-1258591251-503 - Limited - Disabled)
Frank (S-1-5-21-94231515-3545142930-1258591251-1001 - Administrator - Enabled) => C:\Users\Frank
Gast (S-1-5-21-94231515-3545142930-1258591251-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-94231515-3545142930-1258591251-1005 - Limited - Enabled)
katri_000 (S-1-5-21-94231515-3545142930-1258591251-1010 - Limited - Enabled) => C:\Users\katri_000

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.1.0.9 - Absolute Software)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)AIMP3 (HKLM-x32\...\AIMP3) (Version: v3.55.1324, 15.11.2013 - AIMP DevTeam)
AIO_CDA_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDA_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{562A4E12-E8E5-4B6F-C3D9-70B3FB842D91}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 1.16 - Google Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden
Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3.1 - Microsoft Corporation) Hidden
Astrosoft-DLLs (Betrifft alle Programme!) (HKLM-x32\...\Astrosoft) (Version:  - )
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Beckhoff TwinCAT PnP Driver Package (HKLM-x32\...\{EAD2D1A2-88E3-4E8D-8ED5-A4423B53C5AA}) (Version: 3.1.2.6 - Beckhoff Automation)
Beckhoff TwinCAT3.1 (HKLM-x32\...\{EFB7EA8E-CBB5-4F62-A148-E91CFBAC21CD}) (Version: 3.1.4014.2 - Beckhoff Automation)
Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.51210.80 - Microsoft Corporation) Hidden
Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.51210.80 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 DEU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Windows Phone 8.0 (x32 Version: 3.0.30924.0 - Microsoft Corporation) Hidden
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools for Windows 10 - ENU (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
Build Tools for Windows 10 (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
C5100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
c5100_Help (x32 Version: 82.0.256.000 - Hewlett-Packard) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.5.5666 - CDBurnerXP)
CodedUITest81 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
CodedUITestUAP (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
ColorPic (HKLM-x32\...\ColorPic) (Version: 4 - Iconico)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Dependency Package Update (Version: 1.6.25.00 - Lenovo Inc.) Hidden
Dependency Package Update (Version: 1.6.29.00 - Lenovo Inc.) Hidden
Dependency Package Update (Version: 1.6.36.00 - Lenovo Inc.) Hidden
Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Devenv-Ressourcen für Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.3.1 - Dolby Laboratories Inc)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dropbox (HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.1.20150424 - Landesfinanzdirektion Thüringen)
Entity Framework 6.1.1 Tools  for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
Entity Framework 6.1.3 Tools  for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation)
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
Ferramentas do Windows Phone 8.1 para Visual Studio 2015 - PTB (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
foobar2000 v1.3.6 (HKLM-x32\...\foobar2000) (Version: 1.3.6 - Peter Pawlowski)
Galiastro 4.7.3 (HKLM-x32\...\{4AB11DC7-2FB7-4A41-82C3-1A119BF50B24}) (Version: 4.7.3 - Paessler Software)
Gemeinsam genutzte Microsoft Azure-Komponenten für Visual Studio 2013 Sprachpaket (DEU) - v1.3 (x32 Version: 1.3.21014.1603 - Microsoft Corporation) Hidden
GesimGui (HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\5a437fb8e85a9888) (Version: 1.0.0.2 - GesimGui)
Git version 1.9.5-preview20141217 (HKLM-x32\...\Git_is1) (Version: 1.9.5-preview20141217 - The Git Development Community)
GMX SMS-Manager (HKLM-x32\...\com.unitedinternet.ums.sms-mms-manager) (Version: 3.3 - 1 und 1 Internet AG)
GMX SMS-Manager (x32 Version: 3.3 - 1 und 1 Internet AG) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Hello Engines! 8 (HKLM-x32\...\{F753F17D-8743-4C90-8478-8479ACF8030A}_is1) (Version: 8.0.2 - AceBIT)
Herramientas de Windows Phone 8.1 para Visual Studio 2015 - ESN (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart All-In-One Driver Software (HKLM\...\{4F6C1178-3FC0-44BB-8F9A-28D8516DFEE2}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
IDE Tools for Windows 10 - ENU (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
IDE Tools for Windows 10 (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version:  - )
Integrated Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10224 - Realtek Semiconductor Corp.)
Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41900) (Version: 3.8.0.41900.72 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{62E7C369-64FF-452C-8F46-6BE9B77FF097}) (Version: 4.0.18.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{fad118b4-798f-4755-9e67-a622eec95b62}) (Version: 15.6.1 - Intel Corporation)
Intellisense Lang Pack Mobile Extension SDK 10.0.10240.0 (x32 Version: 10.0.10240.0 - Microsoft Corporation) Hidden
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle)
Kit SDK de vérification de Visual Studio*2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.02 - )
Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.36.00 - Lenovo Group Limited)
Lenovo Fingerprint Manager (HKLM\...\{45CC6269-15F2-4734-A7D1-46A032E85CAE}) (Version: 4.5.127.0 - Validity Sensors, Inc.)
Lenovo HID HW Radio Driver 1.0.0.58 (HKLM\...\{E5325F32-D15A-4131-B029-4A5B7609E532}_is1) (Version: 1.0.0.58 - Lenovo)
Lenovo Multimedia and Communications Core Runtime (HKLM\...\{033DC0E0-DA89-4C33-B66C-89B64D312CD1}_is1) (Version: 5.0.13.94 - Lenovo Corporation)
Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.10.15 - Lenovo)
Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.3.19.209 - Lenovo Corporation)
Lenovo Settings - Location Awareness (HKLM-x32\...\{C79D4402-E622-4922-9C02-89F9080BF081}_is1) (Version: 1.4.0.5 - Lenovo Group Limited)
Lenovo Settings - Power (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 7.49.4 - Lenovo Group Limited)
Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 2.3.3.33 - Lenovo Group Limited)
Lenovo Settings Mobile Hotspot (HKLM\...\{42603F7D-B08D-436B-B0D8-3E2DEF1AFD41}_is1) (Version: 2.3.0.85 - Lenovo)
Lenovo Settings Service (HKLM\...\{8C6F1EBA-17F1-4481-B688-9777E63E985F}_is1) (Version: 2.3.3.7 - Lenovo Group Limited)
Lenovo Settings UMDF driver (HKLM\...\{2BDC7413-65EA-4B99-8C4B-02F11075BE6D}_is1) (Version: 1.2.0.7 - Lenovo Group Limited)
Lenovo Solution Center (HKLM\...\{E92E1FF1-B188-43FE-BECA-2248E227E67D}) (Version: 2.8.005.00 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0019 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo)
LibreOffice 4.2.5.2 (HKLM-x32\...\{93AD8CBD-C32E-4318-90BB-A294BE2D712C}) (Version: 4.2.5.2 - The Document Foundation)
LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for de-de (x32 Version: 8.59.29989 - Microsoft) Hidden
LocalESPCui for de-de Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
LocalESPCui for en-us (x32 Version: 8.59.29989 - Microsoft) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
MFC RunTime files (x32 Version: 1.0.0 - Extensoft) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM-x32\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (Deutsch) (HKLM-x32\...\{EE8BD24B-75E1-4BBF-86B9-91FE16ADE71C}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{3D3CEBE6-40EA-4C48-97FD-73828281AB4A}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft Help Viewer 2.2 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.2 Sprachpaket - DEU) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{F09DEB00-9F41-4BC9-BA81-9F131B12B3D5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB  (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (14.0.50616.0) (HKLM-x32\...\{FA604873-01A0-4834-AF87-418534E465BB}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\...\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (HKLM-x32\...\{BCB8A870-2B3D-4CC0-87D6-F931E065AC0C}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft Visual Basic Power Packs 3.0 (HKLM-x32\...\{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}) (Version: 9.0.30214 - Microsoft)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{9634d50a-0c4d-4f52-8a9f-894a2baae370}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2015 SDK - ENU (HKLM-x32\...\{028a4515-c200-4460-bccf-a9b338b0c0f4}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Visual Studio Community 2013 with Update 4 (HKLM-x32\...\{96a8b90c-0a91-4e76-ab34-730c23923d11}) (Version: 12.0.31101 - Microsoft Corporation)
Microsoft Visual Studio Professional 2015 (HKLM-x32\...\{1ef6a030-1244-4d01-95f3-299c0e3a3362}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Visual Studio Tools for Apache Cordova (HKLM-x32\...\{7b2e7b58-5889-4834-80f2-7dcbd56c066e}) (Version: 14.0.50925.4 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2013 with Update 4 (HKLM-x32\...\{dca572ee-b6f6-4560-9879-fec58cc0022c}) (Version: 12.0.31101 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
Mozilla Firefox 38.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0 (x86 de)) (Version: 38.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0 - Mozilla)
MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Nástroje Windows Phone 8.1 pro sadu Visual Studio 2015 – CSY (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
Node.js (HKLM-x32\...\{69735668-F8BC-4E9A-839A-4006FDFDD5AC}) (Version: 0.12.2 - Joyent, Inc. and other Node contributors)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.1 - Notepad++ Team)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Ihr Firmenname)
OEM Application Profile (HKLM-x32\...\{C89A97B6-F991-EBB5-77B7-927BCF420EBE}) (Version: 1.00.0000 - Ihr Firmenname)
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
OpenVPN 2.1.1 (HKLM-x32\...\OpenVPN) (Version: 2.1.1 - )
Outils Windows Phone*8.1 pour Visual Studio*2015 - FRA (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM-x32\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 RC für Windows Store-Apps (Deutsch) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM-x32\...\{3F514FDC-F0F2-3B99-86D6-F7B3A2679B39}) (Version: 4.5.51209 - Microsoft Corporation)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PolygonAusLinien (HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\f7a0237a60b83bf1) (Version: 1.0.0.2 - PolygonAusLinien)
PowerXpressHybrid (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden
PreEmptive Analytics Client German Language Pack (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Prerequisites for SSDT  (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Project and Item Templates for Visual Studio Community 2015 - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Project and Item Templates for Visual Studio Express 2015 for Windows 10 - ENU (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
Project and Item Templates for Visual Studio Professionald 2015 - ENU (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Python Tools - Umleitungsvorlage (x32 Version: 1.3 - Microsoft Corporation) Hidden
Python Tools 2.2 for Visual Studio 2015 (HKLM-x32\...\{DE3F045F-57D5-4DAF-A479-DB759047966B}) (Version: 2.2.30718.00 - Microsoft Corporation)
Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.10.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7250 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.9200.29040 - Realtek Semiconductor Corp.)
Release Management for Visual Studio 2013 (x32 Version: 1.0 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Screen Capturer (HKLM-x32\...\Screen Capturer) (Version: 1.0.4.42 - ScreenCapturer.com)
SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
SharePoint Client Components (Version: 15.0.4641.1002 - Microsoft Corporation) Hidden
SharePoint Client Components (Version: 16.0.3104.1200 - Microsoft Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 7.10 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.10.101 - Skype Technologies S.A.)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Spotify (HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Stellarium 0.12.0 (HKLM-x32\...\Stellarium_is1) (Version: 0.12.0 - Stellarium team)
Strumenti di Windows Phone 8.1 per Visual Studio 2015 - ITA (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.80.99066 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.27 - Synaptics Incorporated)
Synaptics WBF DDK 5011 (HKLM\...\{4D70781C-36A9-4335-9568-565C6F61B5EB}) (Version: 4.5.289.0 - )
Synaptics WBF DDK 5011 (HKLM\...\{9062E143-DEDB-4F8C-B5B8-30AEC328400C}) (Version: 4.5.289.0 - Synaptics)
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
ThinkVantage Password Manager (HKLM-x32\...\{70EE2BAA-F82A-4B8A-950E-649EFD64D5B9}) (Version: 4.60.4.0 - Lenovo Group Limited)
ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.11 - Lenovo)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TortoiseSVN 1.8.11.26392 (64 bit) (HKLM\...\{11309CA9-9118-44D6-B345-83C86A5111D5}) (Version: 1.8.26392 - TortoiseSVN)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
TreeSize Free V3.3.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.3.2 - JAM Software)
TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
TypeScript Power Tool (x32 Version: 1.6.3.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.6.3.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 1.6.3.0 (HKLM-x32\...\{da31aa25-410a-4c1b-9ec0-114dd8dff786}) (Version: 1.6.23313.0 - Microsoft Corporation)
Universal CRT Extension SDK (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Redistributable (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VIS (HKLM-x32\...\VIS) (Version:  - ) <==== ACHTUNG
VISION 4 für Windows (HKLM-x32\...\WinVision) (Version:  - )
Visual C++ for Mobile Development (Android support) (HKLM-x32\...\{de973d66-fb42-4f73-85cd-7167caaaa669}) (Version: 14.0.23027.0 - Microsoft Corporation)
Visual C++ for Mobile Development (iOS support) (HKLM-x32\...\{bc53ba6f-cc3a-487b-b600-fb0814668a99}) (Version: 14.0.23027.0 - Microsoft Corporation)
Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\...\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
WinAppDeploy (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Windows Software Development Kit - Windows 10.0.26624 (HKLM-x32\...\{e7a0c8b6-b0e9-41e2-8a0a-a6784f88d1d4}) (Version: 10.0.26624 - Microsoft Corporation)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (11/19/2012 11.7.0.1013) (HKLM\...\D1AAAA88A17BD0C40261ADD70E15166BF4D1C076) (Version: 11/19/2012 11.7.0.1013 - Intel Corporation)
Windows-Treiberpaket - Lenovo 1.66.00.22 (11/30/2012 1.66.00.22) (HKLM\...\16E722986C4293F5D6BF43595DFFD631398D5F21) (Version: 11/30/2012 1.66.00.22 - Lenovo)
WinRT Intellisense Desktop - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Xbox Live Extension SDK - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Xbox Live Extension SDK - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WiX Toolset v3.9 Core (x32 Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9 Managed SDK (x32 Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9 Native 2013 SDK (x32 Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9 Visual Studio Integration (x32 Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9 X64 (Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9.1208.0 (HKLM-x32\...\{0f7c49f2-f5d2-4eaa-9de5-a274bdcbe6af}) (Version: 3.9.1208.0 - Outercurve Foundation)
Workflow Manager Client 1.0 (Version: 2.0.50408.1 - Microsoft Corporation) Hidden
Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.50408.2 - Microsoft Corporation) Hidden
Xaldon WebSpider2 (HKLM-x32\...\WebSpider2) (Version:  - )
Xamarin (HKLM-x32\...\{9D5E4FC0-7E1B-4934-8504-C0958FA73EA5}) (Version: 3.11.837.0 - Xamarin)
XAMPP (HKLM-x32\...\xampp) (Version: 1.8.3-5 - Bitnami)
Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
Средства Windows Phone 8.1 для Visual Studio 2015 — RUS (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
用于 Visual Studio 2015 的 Windows Phone 8.1 工具 - 简体中文 (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
適用於 Visual Studio 2015 的 Windows Phone 8.1 工具 - 繁體中文 (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Frank\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei

==================== Wiederherstellungspunkte =========================

29-11-2015 18:10:36 Microsoft Visual Studio Professional 2015

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2015-09-30 17:50 - 00001068 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 ac3.msn.com

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {154904C5-00C1-43E5-BAC0-09BF3DC93F00} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {1F95C7D9-A617-46DE-8AE8-FA5E6070C242} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] ()
Task: {306F83F7-1366-405F-87C5-7B1D79863B14} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {39F67AA1-095E-4C6C-A14C-BD307825DD7F} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2015-03-06] ()
Task: {3C00D097-7EFC-4409-9096-41AC153CFD2C} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe
Task: {48842158-A9BC-410D-9559-06D3C02B2223} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {50CEF86B-E06B-4B75-BE8B-289D30DA62F1} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {5220916F-B9FA-4FF0-8F58-6D9DE5F28C88} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2015-08-17] (Lenovo)
Task: {5760AC53-8FF7-4A7E-BB1B-7B241AB76D3A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {584B53E6-0781-4BBF-AF66-7A12113F73D8} - System32\Tasks\AdobeAAMUpdater-1.0-ThinkPad-Frank => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {5F8D6FE3-D132-406D-A52F-6063E0232906} - System32\Tasks\{36EAE65D-D216-4C80-98DD-6D6FF2060B75} => pcalua.exe -a E:\cdstart.exe -d E:\
Task: {61F528FD-0A48-4D85-BCED-52C1867F84F7} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {62001FC3-988A-4E4C-BD27-FAADBA48BA3A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-13] (Microsoft Corporation)
Task: {6776BC2B-1290-40F9-A933-95C8E30DCFE4} - System32\Tasks\Lenovo\Lenovo Settings Power => Rundll32.exe "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.dll",PwrMgrBkGndMonitor
Task: {712DD93C-5743-4DCB-9BD4-C0A6DDED5B78} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {745EA71C-F24C-4FCF-8D2C-F08F21714F4E} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13] (Realtek Semiconductor)
Task: {79DFD140-9F7F-4399-9DFC-5DDA16301186} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {7D1CC0E6-1959-492A-BA46-808B04516569} - System32\Tasks\Dolby => c:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
Task: {7E5619D7-1A13-43B3-9BE1-A6AD9DF349E1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001Core => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {81A21F46-3400-4FC0-9CB6-0FB270C20FA2} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-20] (Realtek Semiconductor)
Task: {85CB4F93-0F9C-4AB2-A2D1-C750278E5457} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {8654FF5D-7ECE-47B0-9B9B-12DA4614D66C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {949585B6-6860-4503-A326-6DC574C59634} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {95505009-9DFC-43A7-ACAC-34055F1092E1} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe
Task: {9A1BA2FA-958F-4436-9CF8-91854EBAD184} - System32\Tasks\CCleanerSkipUAC => F:\PortableApps\CCleaner.exe
Task: {A1B9A94B-49C3-4B1F-8ED9-7A78BD06A358} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-08-17] (Lenovo)
Task: {A80CA30B-9C16-46DE-B5E4-600E8D484478} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {BCD10AD1-6648-4FE2-B81A-0B6CDA36EF5A} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-01] (Lenovo)
Task: {CD2E3D97-4BE0-47CB-8CB2-5EAA2A60C7AE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {D18F741C-AEEC-49AC-B2E1-38B3B1F18F80} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001UA => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {D407231D-3812-4404-99CA-D20C545E54E6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {D4C6417D-9B2C-44AF-BBE3-62C8B251E421} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-08-17] (Lenovo)
Task: {DBC035D6-AD32-4F0E-B04C-EFAEEEAD2E9B} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2013-03-25] (Intel Corporation)
Task: {DC7617A0-EC86-44E8-BE26-30C951DF8F24} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {DE49B109-B81D-4A17-967A-5429DC0A0E8F} - System32\Tasks\{3839690F-193C-41E0-80F4-3BC8EBB96139} => Chrome.exe hxxp://ui.skype.com/ui/0/7.8.0.102/de/abandoninstall?source=lightinstaller&amp;page=tsBing
Task: {E4E7308D-3A1D-4534-AC25-67FF233C3127} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2015-11-11] ()
Task: {E85CA425-8CF0-4B6A-919E-955D566935F7} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E88D8FF0-9C70-4156-956A-BE4DFD26E9EC} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001Core.job => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001UA.job => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js command prompt.lnk -> C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files (x86)\nodejs\nodevars.bat" <==== ACHTUNG

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-04-21 18:14 - 2015-01-16 07:49 - 00118272 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.dll
2013-06-21 14:42 - 2015-01-09 15:40 - 00469720 _____ () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 02652784 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 02652784 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-03-19 18:55 - 2015-03-19 18:55 - 00088960 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2015-10-16 11:02 - 2015-10-16 11:02 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-05-12 10:49 - 2014-05-12 10:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2013-06-21 14:42 - 2015-01-09 15:40 - 00013528 _____ () C:\Program Files (x86)\Lenovo\LocationAware\lpdagent.exe
2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-04-21 18:14 - 2015-01-16 07:49 - 00118272 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.DLL
2014-07-22 16:17 - 2014-07-22 16:17 - 01325536 _____ () C:\Users\Frank\AppData\Roaming\InetStat\inetstat.exe
2015-11-28 21:12 - 2015-11-28 21:12 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-11-28 21:08 - 2015-11-28 21:08 - 09074176 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2015-11-28 21:08 - 2015-11-28 21:08 - 02416640 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2015-12-01 18:57 - 2015-12-01 18:57 - 00014336 _____ () C:\Program Files\WindowsApps\Microsoft.ConnectivityStore_1.1511.2.0_x64__8wekyb3d8bbwe\ConnectivityStore.Windows.exe
2015-12-01 18:57 - 2015-12-01 18:57 - 05351424 _____ () C:\Program Files\WindowsApps\Microsoft.ConnectivityStore_1.1511.2.0_x64__8wekyb3d8bbwe\ConnectivityStore.Windows.dll
2009-12-12 00:48 - 2009-12-12 00:48 - 00104696 _____ () C:\Program Files (x86)\OpenVPN\bin\openvpn-gui-1.0.3.exe
2009-12-12 00:47 - 2009-12-12 00:47 - 00578048 _____ () C:\Program Files (x86)\OpenVPN\bin\openvpn.exe
2013-08-09 10:59 - 2013-01-14 19:25 - 01200088 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-10-14 18:12 - 2015-10-14 18:12 - 50680424 _____ () C:\Users\Frank\AppData\Roaming\Spotify\libcef.dll
2015-10-14 18:12 - 2015-10-14 18:12 - 01882728 _____ () C:\Users\Frank\AppData\Roaming\Spotify\libglesv2.dll
2015-10-14 18:12 - 2015-10-14 18:12 - 00083048 _____ () C:\Users\Frank\AppData\Roaming\Spotify\libegl.dll
2008-12-08 15:05 - 2008-12-08 15:04 - 00110592 _____ () C:\Program Files (x86)\Screen Capturer\Extensions\ScreenCapture\bin\TaksiDll.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00016896 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\featureController.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00062976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\osEvents.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00322048 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\log4cplus.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00400384 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\sqlite3.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00195584 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\libgsoap.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00020480 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\eventsSender.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00062464 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\zlib1.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00446976 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\deviceProfile.dll
2013-08-09 11:11 - 2013-03-25 22:08 - 00064512 _____ () C:\Program Files (x86)\Intel\IntelAppStore\bin\serviceManagerStarter.dll
2015-11-28 21:12 - 2015-11-28 21:12 - 00152064 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-11-28 21:12 - 2015-11-28 21:12 - 18906624 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2009-12-12 00:48 - 2009-12-12 00:48 - 01206784 _____ () C:\Program Files (x86)\OpenVPN\bin\libeay32.dll
2009-12-12 00:48 - 2009-12-12 00:48 - 00232448 _____ () C:\Program Files (x86)\OpenVPN\bin\libssl32.dll
2009-12-12 00:48 - 2009-12-12 00:48 - 00086528 _____ () C:\Program Files (x86)\OpenVPN\bin\libpkcs11-helper-1.dll
2015-10-16 11:02 - 2015-10-16 11:02 - 00039384 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2015-03-19 18:29 - 2015-03-19 18:29 - 00072064 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll
2015-11-11 19:04 - 2015-11-07 05:36 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libglesv2.dll
2015-11-11 19:04 - 2015-11-07 05:36 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libegl.dll
2015-12-01 19:29 - 2015-12-01 19:29 - 00689664 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.Vbeb7089b#\67e531335267e2c098f07f40fdaeb147\Microsoft.VisualStudio.Threading.ni.dll
2015-12-01 19:29 - 2015-12-01 19:29 - 00047104 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.Vd43b287e#\8124737dd7e9e2f892fefa20a729c254\Microsoft.VisualStudio.Validation.ni.dll
2015-12-01 19:21 - 2015-12-01 19:21 - 00980992 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.Vfd40090d#\2e8a7415e0ea70f484c4553b903084fe\Microsoft.VisualStudio.Composition.ni.dll
2015-12-01 19:21 - 2015-12-01 19:21 - 00261120 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.Vad841153#\d80e8a7530c32da2708279be9d316845\Microsoft.VisualStudio.Composition.Configuration.ni.dll
2015-12-01 19:22 - 2015-12-01 19:22 - 01810432 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Microsoft.V528b314c#\ad27eb458a781d57f4680cf978b3362e\Microsoft.VisualStudio.ProjectSystem.V14Only.ni.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-94231515-3545142930-1258591251-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.178.1 - 10.8.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "PasswordManager"
HKLM\...\StartupApproved\Run32: => "AdobeCS5ServiceManager"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{DE6312E8-4EE3-4AAF-9B61-796C7B390708}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe
FirewallRules: [{2F58C98C-3781-40D6-8523-A4CE5CBE576F}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe
FirewallRules: [{CF4AAAB1-F625-4B22-8E9F-34D437468C77}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F135A645-F228-4B1F-B4CC-B669AEB4E292}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{D6855C1D-6AF0-415A-9FBA-2A9B491FC403}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C3CF170D-6C42-46ED-A0DB-F8463297425D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FC06ED09-120C-4794-A660-D66E1A27E786}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{66306615-C661-4BAC-AEA3-D834621241FC}] => (Allow) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
FirewallRules: [{33F252D6-B339-40AC-9726-05A9851E1368}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{714DED83-0CD8-4689-800D-F14E5BE8617F}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{88997D32-A584-412D-9E71-0C191769D972}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{89620FF0-45F7-4954-B064-8F8F64C9654A}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{E98E2341-63CE-499C-AB62-7360A0FDA3FB}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{6D77755C-E779-4E62-A392-C54CECEF18D6}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{EEFEF4AA-F503-4D6C-AC57-4E155069128C}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{2CBC4C60-BB4B-40C8-88D9-AFBA5AEB7E0B}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{7CF586CD-66F0-45D4-BECB-6B6533913685}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{112A294C-7E41-4DF2-B57C-E7934A95B7F8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CDB9431C-C7F0-46DA-874F-7AB1DC0A4687}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [UDP Query User{6E4D0B5C-28BA-496E-82AF-1DE1D79ECA24}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [TCP Query User{C5F4201F-A825-4853-8484-D8D36333009D}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [UDP Query User{37A50136-6FB0-44CD-9BE2-2192D9209E3B}C:\users\frank\_it\xampp\mysql\bin\mysqld.exe] => (Allow) C:\users\frank\_it\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{8DF6998F-237C-4012-B7F7-02CE8B6B4297}C:\users\frank\_it\xampp\mysql\bin\mysqld.exe] => (Allow) C:\users\frank\_it\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{6068133F-4048-4B9D-A905-5BCB109DC795}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [TCP Query User{F0E4F307-7DCD-4874-A618-DC3AC75EFD89}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [UDP Query User{AAF86D38-6197-4737-8C76-2D5965D1CEE1}C:\users\frank\_it\xampp\apache\bin\httpd.exe] => (Allow) C:\users\frank\_it\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{178F5E83-C451-4D55-B784-CAC1CFED9FDD}C:\users\frank\_it\xampp\apache\bin\httpd.exe] => (Allow) C:\users\frank\_it\xampp\apache\bin\httpd.exe
FirewallRules: [{3642EA59-17A0-412E-AC61-DCD3680F8170}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{1EFA2D11-91FA-48DB-8B88-46B5D0EF5CFE}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{F06AC417-4C59-418A-970C-89EB586D0C9C}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{3580FD1D-CC99-495E-A00F-D58B288947E7}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{9F7C2AE3-B388-46AC-AA11-CAD152463CF9}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{6D1790C8-0023-47D1-AF30-C5577674CFC0}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{A2E1334D-3845-4185-85DC-101B6C5D0BF7}] => (Allow) C:\Program Files (x86)\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{0A97A30F-6EDB-4251-B41F-86E0529DA5EB}] => (Allow) C:\Program Files (x86)\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{4EEE3C2C-3A87-4A0B-AD84-E23BB42270B3}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [UDP Query User{C7F89FFF-EF49-4B33-8A5E-C19CB3689BB1}C:\users\frank\desktop\140117_2_biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\desktop\140117_2_biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [TCP Query User{F3F9A95E-2FB7-42BC-A66A-265EFD90AD34}C:\users\frank\desktop\140117_2_biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\desktop\140117_2_biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [UDP Query User{453B2F07-8E26-4607-B12A-319FD1BE3131}C:\users\frank\desktop\bs\biosynthesizer\bin\debug\biosynthesizer.vshost.exe] => (Allow) C:\users\frank\desktop\bs\biosynthesizer\bin\debug\biosynthesizer.vshost.exe
FirewallRules: [TCP Query User{848123A7-500A-49E1-AF07-B2CE88C44584}C:\users\frank\desktop\bs\biosynthesizer\bin\debug\biosynthesizer.vshost.exe] => (Allow) C:\users\frank\desktop\bs\biosynthesizer\bin\debug\biosynthesizer.vshost.exe
FirewallRules: [UDP Query User{2316EB23-8247-4665-A4D1-B0B22E9AB445}C:\users\frank\documents\visual studio 2013\projects\140110_biosynt\140110_biosynt\140105_biosynt\140103_biosynt\biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\documents\visual studio 2013\projects\140110_biosynt\140110_biosynt\140105_biosynt\140103_biosynt\biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [TCP Query User{A2150D54-C816-42CA-B3E2-CF0F4A62A74F}C:\users\frank\documents\visual studio 2013\projects\140110_biosynt\140110_biosynt\140105_biosynt\140103_biosynt\biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\documents\visual studio 2013\projects\140110_biosynt\140110_biosynt\140105_biosynt\140103_biosynt\biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [UDP Query User{66F9DC43-5D68-4E38-A480-17CD25F5EDD1}C:\users\frank\desktop\biosynthesizer\bin\debug\biosynthesizer.vshost.exe] => (Allow) C:\users\frank\desktop\biosynthesizer\bin\debug\biosynthesizer.vshost.exe
FirewallRules: [TCP Query User{F0B2DA2C-350F-4140-8700-3B58C33E7416}C:\users\frank\desktop\biosynthesizer\bin\debug\biosynthesizer.vshost.exe] => (Allow) C:\users\frank\desktop\biosynthesizer\bin\debug\biosynthesizer.vshost.exe
FirewallRules: [UDP Query User{68C8603C-25AD-4FBF-AE34-725927346A8F}C:\users\frank\desktop\biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\desktop\biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [TCP Query User{6D6D48E0-D2E8-4304-A15A-110A6387E948}C:\users\frank\desktop\biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\desktop\biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [{90C3623E-9F0A-481C-B936-440BA4CD3361}] => (Allow) C:\Users\Frank\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{3855A39A-807A-4FF6-A29A-FD7285D8EDEC}] => (Allow) C:\Users\Frank\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [UDP Query User{DD876CE6-5AD4-4FEC-A53E-374D8E2C4D7E}C:\users\frank\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\frank\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{48B56188-1EF0-4F8F-A906-D8A396B385C2}C:\users\frank\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\frank\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{3AFE78F0-BA10-4F38-AD86-9F6BA430763A}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{70031FC1-D872-4690-97FF-692EF55F884E}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{D5BA54F4-FF0C-464F-8F17-FD34B2E6083D}] => (Allow) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
FirewallRules: [{C7AC09BB-AA10-4D66-9391-D314E8146FB6}] => (Allow) C:\Users\Frank\AppData\Local\Temp\7zS50E1\setup\hpznui40.exe
FirewallRules: [{3ABDD9E3-5913-4E44-B8D1-B881B8D08C9D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{B09ACF79-DE35-4ACE-A0FC-66CD361ADFB5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{3A2BAE36-A28D-4A18-B0CD-2BBB71AB0109}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{EE9A2DEA-825D-4420-82A9-51E6808F63AE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{E091E7A9-F797-45A8-B135-1649BA79547B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{F3CE4FD4-AE73-433F-827D-1C9731EC2C24}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{B9FCFB43-B831-4AF3-BE61-59E494264FC0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{0290A555-9A05-44F9-B6F2-25339DCC1D90}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{61A3E0C2-88EE-4FCE-AE8E-3ABCCAC55C06}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{CF0EA181-E387-41EC-A0F3-1A0917DD7A33}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{267306DB-7B3E-4B2D-8A9E-2E6E358B1BA1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{F97D71BA-C76A-4A3B-812F-7774972F995E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{1C107E1A-8D0A-4F98-BDFF-A49BD0CB457C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{689B98B1-444D-4482-9BE5-B004CD7D2A95}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{05172C87-66DA-48B9-BBF1-01D6DF952CA5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{07D6F24C-6506-41E6-9F30-07882F98C592}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{5A2A86FA-FBB0-4B70-BB38-176D38D95C09}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{D3D91206-5F25-4676-B4A1-E142B2C34853}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{1CF006D0-6192-4D82-8ED6-108824ED7335}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{A987E928-5EC7-4F56-A25E-6B9AF1197687}] => (Allow) C:\Users\Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{7170C4FF-9613-4622-B113-27DE8EDE473F}] => (Allow) C:\Users\Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{FC21550D-3510-4B7B-8B9E-2605C00B0F0E}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{FE60925C-F24F-48C6-8F57-680EE3B0A399}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{CCEF4BE9-B0B8-4C94-967A-34E21F662F7C}] => (Allow) LPort=12292
FirewallRules: [TCP Query User{B8C3B99E-2BF3-4C3C-B11D-D6C12D7C9B07}C:\program files\java\jdk1.7.0_45\bin\javaw.exe] => (Block) C:\program files\java\jdk1.7.0_45\bin\javaw.exe
FirewallRules: [UDP Query User{C3C6DBD2-6E55-4FD4-A1A4-E191EDA7C6FA}C:\program files\java\jdk1.7.0_45\bin\javaw.exe] => (Block) C:\program files\java\jdk1.7.0_45\bin\javaw.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Photosmart C5100 series
Description: Photosmart C5100 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: HP Photosmart C5100
Description: HP Photosmart C5100
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Hewlett-Packard
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft Visual Studio Location Simulator Sensor
Description: Microsoft Visual Studio Location Simulator Sensor
Class Guid: {5175d334-c371-4806-b3ba-71fd53c9258d}
Manufacturer: Microsoft Corporation
Service: SensorsSimulatorDriver
Problem: : Windows is removing this device. (Code 21)
Resolution: Wait several seconds, and then press the F5 key to update the Device Manager view.
If that does not resolve the problem, restart your computer.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/01/2015 07:02:11 PM) (Source: Perflib) (EventID: 1017) (User: )
Description: ASP.NET_2.0.50727

Error: (12/01/2015 07:02:11 PM) (Source: Perflib) (EventID: 1021) (User: )
Description: ASP.NET_2.0.507278

Error: (12/01/2015 06:55:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d8f4
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632d193
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000edfac
ID des fehlerhaften Prozesses: 0x27b0
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Vollständiger Name des fehlerhaften Pakets: DllHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DllHost.exe5

Error: (11/29/2015 06:48:42 PM) (Source: MsiInstaller) (EventID: 10005) (User: THINKPAD)
Description: Product: Microsoft VisualStudio JavaScript Project System -- A newer version of this product is already installed.

Error: (11/29/2015 06:10:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (11/28/2015 09:26:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: WhatsNew.Store.exe, Version: 1.0.0.0, Zeitstempel: 0x563bf1a5
Name des fehlerhaften Moduls: twinapi.appcore.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632d2f5
Ausnahmecode: 0xc000027b
Fehleroffset: 0x000000000004b199
ID des fehlerhaften Prozesses: 0x15a4
Startzeit der fehlerhaften Anwendung: 0xWhatsNew.Store.exe0
Pfad der fehlerhaften Anwendung: WhatsNew.Store.exe1
Pfad des fehlerhaften Moduls: WhatsNew.Store.exe2
Berichtskennung: WhatsNew.Store.exe3
Vollständiger Name des fehlerhaften Pakets: WhatsNew.Store.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WhatsNew.Store.exe5

Error: (11/28/2015 09:22:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THINKPAD)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/28/2015 09:08:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THINKPAD)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/28/2015 09:03:55 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THINKPAD)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (11/28/2015 09:03:13 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THINKPAD)
Description: Bei der Aktivierung der App „Microsoft.WindowsPhone_8wekyb3d8bbwe!CompanionApp.App“ ist folgender Fehler aufgetreten: -2147024770. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.


Systemfehler:
=============
Error: (12/01/2015 06:54:18 PM) (Source: DCOM) (EventID: 10016) (User: THINKPAD)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}ThinkPadFrankS-1-5-21-94231515-3545142930-1258591251-1001LocalHost (unter Verwendung von LRPC)Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbweS-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157

Error: (11/30/2015 09:05:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_7667097" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/30/2015 09:05:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _7667097" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/30/2015 09:05:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_7667097" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/30/2015 09:05:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_7667097" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/30/2015 09:05:42 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (11/29/2015 10:37:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_27da5e2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/29/2015 10:37:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _27da5e2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/29/2015 10:37:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_27da5e2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/29/2015 10:37:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_27da5e2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2015-11-30 19:33:51.478
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:51.461
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:51.445
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:51.431
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:51.411
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:51.397
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:51.383
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:51.368
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:50.922
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-11-30 19:33:50.625
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-3537U CPU @ 2.00GHz
Prozentuale Nutzung des RAM: 48%
Installierter physikalischer RAM: 10073.67 MB
Verfügbarer physikalischer RAM: 5138.08 MB
Summe virtueller Speicher: 12249.67 MB
Verfügbarer virtueller Speicher: 6849.67 MB

==================== Laufwerke ================================

Drive c: (Windows8_OS) (Fixed) (Total:223.81 GB) (Free:56.64 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (2TB) (Fixed) (Total:1863.01 GB) (Free:266.37 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 69677AFB)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 1863 GB) (Disk ID: A8D132A2)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

cosinus 01.12.2015 21:57
Ist das ein gewerblich genutztes System? Und was sollen diese Hosteinträge:

Zitat:
127.0.0.1 activate.adobe.com (pic. A)
127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 ac3.msn.com
Der erste weist so ziemlich eindeutig auf gecrackte Adobe-Software hin....

frankmehlhop 01.12.2015 22:04
Tut mir leid, ich weiß nicht was diese Hosteinträge bedeuten.
Ich habe davon keine Ahnung.

Vielleicht hat das mit OpenVPN zu tun?

cosinus 01.12.2015 22:07
Vergiss es, offensichtlich war da mal gecrackte Adobe Software drauf. Denn ich seh nix mehr an non-freeware von Adobe im Log.


Adware/Junkware/Toolbars entfernen

1. Schritt: Malwarebytes

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

2. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).



3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


frankmehlhop 02.12.2015 12:05
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 01.12.2015
Suchlaufzeit: 22:19
Protokolldatei:
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2015.12.01.06
Rootkit-Datenbank: v2015.11.26.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Frank

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 578379
Abgelaufene Zeit: 21 Min., 17 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 2
PUP.Optional.Hydrup, C:\Program Files (x86)\Common Files\Hydrup\hydrup.exe, 2428, , [93575a451675ef473640f13a6899cc34]
PUP.Optional.InetStat, C:\Users\Frank\AppData\Roaming\InetStat\inetstat.exe, 8540, , [d812d5ca147772c426e85539798a9a66]

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 21
PUP.Optional.Hydrup, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Hydrup, , [93575a451675ef473640f13a6899cc34],
PUP.Optional.DynConIE, HKLM\SOFTWARE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [d119a1fe4b40f1455e0051f418ea15eb],
PUP.Optional.DynConIE, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [d119a1fe4b40f1455e0051f418ea15eb],
PUP.Optional.DynConIE, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6}, , [d119a1fe4b40f1455e0051f418ea15eb],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [d416a9f60d7e94a2e65e48fe8d75c838],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [fbefbfe0731815210e3b62e4887ad52b],
PUP.Optional.Iminent, HKLM\SOFTWARE\Iminent, , [d614d8c7c6c5e94d4154b4d956ad34cc],
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}, , [5298940b8209f04668664f9c1be85fa1],
PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\Iminent, , [c327f6a97516bc7a1e77a1ec47bc59a7],
PUP.Optional.SettingsManager, HKLM\SOFTWARE\WOW6432NODE\SmdmF, , [e802ecb3bad1d363b3d82282e122ae52],
PUP.Optional.CrossRider, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\Crossrider, , [be2cd6c94744d6607288b9c740c329d7],
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}, , [37b3009ffd8ed0668846b9322ad97b85],
PUP.Optional.CrossRider, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, , [5298f7a8c2c9eb4b765f9be42ed5a35d],
PUP.Optional.Iminent, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\Iminent, , [f8f2702f2f5c55e1b1d5deafd72cd729],
PUP.Optional.CrossRider, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\APPDATALOW\SOFTWARE\Crossrider, , [ea00bbe43b50fb3b587d5728a162bb45],
PUP.Optional.MultiIE, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\APPDATALOW\SOFTWARE\DynConIE, , [c1292e71eaa14de95bff286f3ec5817f],
PUP.Optional.GlobalUpdate, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY, , [fbef7e217d0e3afc09772c5d4cb7d927],
PUP.Optional.CrossRider, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{282DE97C-E528-49BE-A15C-F9A832557D99}, , [9456c0df5e2d1a1c1dc8eb9556ad45bb],
PUP.Optional.CrossRider, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DCCCABF-486B-4973-8F47-AFD77F994937}, , [01e95a456b200e283ea74a3607fcf50b],
PUP.Optional.CrossRider, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99AD6C20-F2D8-4919-87E1-332BBC48CF80}, , [5991f6a9d2b940f69c4a8000f0133dc3],
PUP.Optional.CrossRider, HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\LOCAL SETTINGS\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APPCONTAINER\STORAGE\WINDOWS_IE_AC_001\SOFTWARE\Crossrider, , [0bdfe6b9dbb0cd697c080be1986bce32],

Registrierungswerte: 13
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|URL, hxxp://www.default-search.net/search?sid=476&aid=206&itype=n&ver=14368&tm=525&src=ds&p={searchTerms}, , [5298940b8209f04668664f9c1be85fa1]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|DisplayName, default-search.net, , [06e4128dbad1c57186a791f124dfb14f]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|SuggestionsURL_JSON, hxxp://www.default-search.net?sid=476&aid=206&itype=n&ver=14368&tm=525&src=ds&p={searchTerms}&ft=json, , [9654415ea0eb2c0a210ce89ae320e11f]
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|FaviconPath, C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico, , [e9015a450982b38355ef1ed254aff20e]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|URL, hxxp://www.default-search.net/search?sid=476&aid=206&itype=n&ver=14368&tm=525&src=ds&p={searchTerms}, , [37b3009ffd8ed0668846b9322ad97b85]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|DisplayName, default-search.net, , [d812e1be612a96a0220b97eb0ef541bf]
PUP.Optional.DefaultSearch.ShrtCln, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|SuggestionsURL_JSON, hxxp://www.default-search.net?sid=476&aid=206&itype=n&ver=14368&tm=525&src=ds&p={searchTerms}&ft=json, , [bd2d8b14711aff37b07ddca658ab6997]
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}|FaviconPath, C:\Program Files (x86)\Settings Manager\smdmf\favicon.ico, , [8a60dcc3c0cbb97d291be10fc0438d73]
PUP.Optional.Hydrup, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\HYDRUP|ImagePath, C:\Program Files (x86)\Common Files\Hydrup\hydrup.exe, , [cd1db1ee147724122789721ab350eb15]
PUP.Optional.GlobalUpdate, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\GLOBALUPDATE\UPDATE\PROXY|source, IE, , [fbef7e217d0e3afc09772c5d4cb7d927]
PUP.Optional.CrossRider, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{282DE97C-E528-49BE-A15C-F9A832557D99}|AppName, 7eca1cd8-2a95-4759-9c0f-ae713062040a-2.exe-buttonutil.exe, , [9456c0df5e2d1a1c1dc8eb9556ad45bb]
PUP.Optional.CrossRider, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{6DCCCABF-486B-4973-8F47-AFD77F994937}|AppName, 7eca1cd8-2a95-4759-9c0f-ae713062040a-2.exe-buttonutil.exe, , [01e95a456b200e283ea74a3607fcf50b]
PUP.Optional.CrossRider, HKU\S-1-5-21-94231515-3545142930-1258591251-1001\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{99AD6C20-F2D8-4919-87E1-332BBC48CF80}|AppName, 7eca1cd8-2a95-4759-9c0f-ae713062040a-2.exe-codedownloader.exe, , [5991f6a9d2b940f69c4a8000f0133dc3]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 12
PUP.Optional.Iminent, C:\Program Files (x86)\Common Files\Umbrella, , [4aa09a05f69575c13038ace18f74827e],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy, , [08e2d8c7701b2d0919cd7be64db53cc4],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy\0A32362CDAB74D8783F8D845570F7178, , [08e2d8c7701b2d0919cd7be64db53cc4],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy\54DC52C3D1F8446794919E25E0392F12, , [08e2d8c7701b2d0919cd7be64db53cc4],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy\E019C41862664EF0BF64B1B68016C59B, , [08e2d8c7701b2d0919cd7be64db53cc4],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy\E4EF284A6CE846428DF9F034170226BB, , [08e2d8c7701b2d0919cd7be64db53cc4],
PUP.Optional.IHlpr, C:\Users\Frank\AppData\Roaming\IHlpr\0A32362CDAB74D8783F8D845570F7178, , [91594956800b2e0829327a059c669868],
PUP.Optional.IHlpr, C:\Users\Frank\AppData\Roaming\IHlpr\E4EF284A6CE846428DF9F034170226BB, , [c921e4bb5c2fad897fdcbac56b97cf31],
PUP.Optional.SettingsManager, C:\Program Files (x86)\Settings Manager\smdmf, , [7377930c6229f44288e5b1daf60ca060],
PUP.Optional.SettingsManager, C:\Program Files (x86)\Settings Manager\smdmf\x64, , [7377930c6229f44288e5b1daf60ca060],
PUP.Optional.Bandoo.AppFlsh, C:\Users\Frank\AppData\Roaming\FirefoxToolbar, , [19d1198625660d2930522d6a7989e818],
PUP.Optional.Bandoo.AppFlsh, C:\Users\Frank\AppData\Roaming\FirefoxToolbar\Settings Manager, , [19d1198625660d2930522d6a7989e818],

Dateien: 15
PUP.Optional.Hydrup, C:\Program Files (x86)\Common Files\Hydrup\hydrup.exe, , [93575a451675ef473640f13a6899cc34],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy\54DC52C3D1F8446794919E25E0392F12\LatestDLMgr.exe, , [67838619f3983105ea97ec4112efa45c],
PUP.Optional.Browser, C:\ProgramData\Browser\prompt.exe.config, , [5595eab5206b49ed1a1e255249ba06fa],
PUP.Optional.DefaultSearch.ShrtCln, C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\70wisqxc.default-1410628380276\searchplugins\default-search.xml, , [3eace4bb0d7e5dd9aa7cc4becc37ea16],
PUP.Optional.DefaultSearch.ShrtCln, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml, , [3fab6837d9b257df71b84e34ee1509f7],
PUP.Optional.Iminent, C:\Program Files (x86)\Common Files\Umbrella\UriData.data, , [4aa09a05f69575c13038ace18f74827e],
PUP.Optional.Iminent, C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage, , [effb7629a9e295a1abc4e9a430d3946c],
PUP.Optional.InetStat, C:\Users\Frank\AppData\Roaming\InetStat\inetstat.exe, , [d812d5ca147772c426e85539798a9a66],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy\54DC52C3D1F8446794919E25E0392F12\Setup1004732_DE-1.exe, , [08e2d8c7701b2d0919cd7be64db53cc4],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy\54DC52C3D1F8446794919E25E0392F12\Trial-14.0.1000.89_de-DE_1004732_DE-1.exe, , [08e2d8c7701b2d0919cd7be64db53cc4],
PUP.Optional.OpenCandy, C:\Users\Frank\AppData\Roaming\OpenCandy\E019C41862664EF0BF64B1B68016C59B\TuneUp2014GER15day-de-DE-p4v1.exe, , [08e2d8c7701b2d0919cd7be64db53cc4],
PUP.Optional.IHlpr, C:\Users\Frank\AppData\Roaming\IHlpr\E4EF284A6CE846428DF9F034170226BB\LenovoShareIt-win.exe, , [c921e4bb5c2fad897fdcbac56b97cf31],
PUP.Optional.SettingsManager, C:\Program Files (x86)\Settings Manager\smdmf\del_DM_LL_nsqD02D.dll, , [7377930c6229f44288e5b1daf60ca060],
PUP.Optional.SettingsManager, C:\Program Files (x86)\Settings Manager\smdmf\x64\del_DM_LL_nsqD02D.dll, , [7377930c6229f44288e5b1daf60ca060],
PUP.Optional.DefaultSearch.ShrtCln, C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\70wisqxc.default-1410628380276\prefs.js, Gut: (), Schlecht: (user_pref("browser.search.defaultenginename", "default-search.net");), ,[905addc2602b4cea7673534011f3e11f]

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

AdwCleaner Logfile:

       
Code:

       
# AdwCleaner v5.023 - Bericht erstellt am 02/12/2015 um 11:51:32
# Aktualisiert am 30/11/2015 von Xplode
# Datenbank : 2015-11-30.1 [Server]
# Betriebssystem : Windows 10 Home  (x64)
# Benutzername : Frank - THINKPAD
# Gestartet von : C:\Users\Frank\Desktop\AdwCleaner_5.023.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
[-] Ordner Gelöscht : C:\Program Files (x86)\Iminent
[-] Ordner Gelöscht : C:\Program Files (x86)\Settings Manager
[-] Ordner Gelöscht : C:\Program Files (x86)\Common Files\Hydrup
[-] Ordner Gelöscht : C:\ProgramData\Browser
[-] Ordner Gelöscht : C:\Users\Frank\AppData\Local\DownloadGuide
[-] Ordner Gelöscht : C:\Users\Frank\AppData\Local\globalUpdate
[-] Ordner Gelöscht : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel
[-] Ordner Gelöscht : C:\Users\Frank\AppData\Roaming\InetStat
[-] Ordner Gelöscht : C:\Users\Frank\AppData\Roaming\Windows Net Data
[-] Ordner Gelöscht : C:\Users\Frank\AppData\Roaming\IHlpr

***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cknebhggccemgcnbidipinkifmmegdel_0.localstorage
[-] Datei Gelöscht : C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cknebhggccemgcnbidipinkifmmegdel_0.localstorage-journal

***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{58124A0B-DC32-4180-9BFF-E0E21AE34026}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E}
[-] Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
[-] Schlüssel Gelöscht : HKCU\Software\InetStat
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\Softonic
[-] Schlüssel Gelöscht : HKCU\Software\Linkey
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VIS
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FAD0F79E-5EA4-542B-76A3-46093E52C1F5}
[-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\AppDataLow\Software\Super Radio
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18C9E3869A16248439FE3FF9EB02207A
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3204F747B20694B8D49EF92D8DC94B
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFA531D0F3A71504DA7AC6A11CE33739

***** [ Internetbrowser ] *****

[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : search.snap.do
[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : start.iminent.com
[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : mystartsearch
[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://start.iminent.com/?appId=74210A49-0CC6-4121-B601-605B60F6855F
[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Startup_URLs] Gelöscht : hxxp://www.mystartsearch.com/?type=hp&ts=1432287695&z=2c5a4a5e53b68773349945egfz7c2ocoabfm6m4efg&from=cvs1&uid=INTELXSSDSC2BW240A4_CVDA3300008N2403GN
[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : booedmolknjekdopkepjjeckmjkdpfgl
[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : cknebhggccemgcnbidipinkifmmegdel
[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : flpcjncodpafbgdpnkljologafpionhb
[-] [C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : fpmeembnagmagppkgghhfjfdfajdfcah

*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [15391 Bytes] ##########

--- --- ---

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.1 (11.24.2015)
Operating System: Windows 10 Home x64
Ran by Frank (Administrator) on 02.12.2015 at 12:03:17,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 3

Successfully deleted: C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel (Folder)
Successfully deleted: C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cknebhggccemgcnbidipinkifmmegdel_0.localstorage-journal (File)
Successfully deleted: C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cknebhggccemgcnbidipinkifmmegdel_0.localstorage (File)



Registry: 3

Successfully deleted: HKLM\SYSTEM\CurrentControlSet\services\HYDRUP (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF5E2AEA-86C6-49DD-8E07-C2D58A31B31A} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 02.12.2015 at 12:04:52,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus 02.12.2015 12:08
Nochmal der Hinweis:

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

frankmehlhop 02.12.2015 12:18
Code:
FRST Logfile:

       
Code:

       
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:01-12-2015
durchgeführt von Frank (Administrator) auf THINKPAD (02-12-2015 12:07:14)
Gestartet von C:\Users\Frank\Desktop
Geladene Profile: Frank (Verfügbare Profile: Frank & katri_000)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe
(Apple Inc.) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
(Lenovo Corporation) C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(LENOVO INCORPORATED.) C:\Program Files\Lenovo\iMController\SystemAgentService.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe
(Beckhoff Automation GmbH) C:\TwinCAT\3.1\Components\TcEventLogger\TcEventLogger.exe
(Beckhoff Automation GmbH) C:\TwinCAT\3.1\System\TCATSysSrv.exe
(Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [140872 2013-03-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [TpShocks] => C:\WINDOWS\system32\TpShocks.exe [382248 2013-02-12] (Lenovo.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [PasswordManager] => C:\Program Files\Lenovo\Password Manager\password_manager.exe [1665824 2014-06-23] (Lenovo Group Limited)
HKLM\...\Run: [LnvMobHotspotClient] => C:\Program Files\Lenovo\Lenovo Mobile Hotspot\MobileHotspotclient.exe [937968 2014-08-12] (Lenovo)
HKLM\...\Run: [LMCSSTART1] => C:\WINDOWS\SysWOW64\lmcfrundll.exe C:\Program Files\Lenovo\Communications Utility\libmcsrdllb.dll,InitSubsystemProcesses
HKLM\...\Run: [LMCSSTART2] => C:\WINDOWS\SysWOW64\lmcfrundll.exe C:\Program Files\Lenovo\Communications Utility\libstartstub2.dll,ProxyStart
HKLM\...\Run: [LMCSSTART3] => C:\WINDOWS\SysWOW64\lmcfrundll.exe C:\Program Files\Lenovo\Communications Utility\libmcsrdllb.dll,SetupCamplusDrop
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [TcSysUI] => C:\TwinCAT\3.1\System\TcSysUi.exe [1124512 2014-01-20] (Beckhoff Automation GmbH)
HKLM\...\Policies\Explorer: [DisableThumbsDBOnNetworkFolders] 1
HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\Run: [Google Update] => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll [2012-09-19] (SugarSync, Inc.)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-12-01]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\chrome.exe - Verknüpfung.lnk [2015-12-01]
ShortcutTarget: chrome.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
Startup: C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Screen Capturer.lnk [2015-12-01]
ShortcutTarget: Screen Capturer.lnk -> C:\Program Files (x86)\Screen Capturer\ScreenCapturer.exe (ScreenCapturer.com)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.135.1
Tcpip\..\Interfaces\{06c21700-100f-4b1f-90a7-25b46ac324b8}: [DhcpNameServer] 192.168.135.1
Tcpip\..\Interfaces\{2EBB79E2-2239-4482-B956-CFFFD0F199F0}: [DhcpNameServer] 10.8.0.1
Tcpip\..\Interfaces\{32d48913-41d8-4947-a0d8-6dac12ea4805}: [DhcpNameServer] 192.168.135.1
Tcpip\..\Interfaces\{581b9bbd-5b2e-4682-848c-ae7130836f5e}: [DhcpNameServer] 10.8.0.1

Internet Explorer:
==================
HKU\S-1-5-21-94231515-3545142930-1258591251-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.lenovo.com/welcome/thinkpad
HKU\S-1-5-21-94231515-3545142930-1258591251-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.lenovo.com/welcome/thinkpad
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-20] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-20] (Oracle Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Frank\AppData\Roaming\Mozilla\Firefox\Profiles\70wisqxc.default-1410628380276
FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-10-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-09-28] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-09-28] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: @talk.google.com/O1DPlugin -> C:\Users\Frank\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2013-03-25] (Intel)
FF Plugin HKU\S-1-5-21-94231515-3545142930-1258591251-1001: intel.com/AppUpx64 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll [2013-03-25] (Intel)
FF Plugin ProgramFiles/Appdata: C:\Users\Frank\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Frank\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\Firefox\Extensions: [{F74D5734-46F5-4B16-96F0-1E7FBF41B750}] - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12
FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Password Manager\PWM Firefox Extension\2.0b12 [2014-08-27] [ist nicht signiert]

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxps://mail.google.com/mail/u/0/?shva=1#inbox","hxxps://docs.google.com/spreadsheet/ccc?key=0ApEGr6N13b-UdG5WS2N5WVJnZGdfVXZ5bDZzRHJlWFE#gid=0","hxxps://www.google.com/calendar/render?tab=oc&pli=1&t=AKUaPmbs7KHmWy-liuhRBUIBuxEy1H5OcReZ_FtzHymwlg7-bAcVULKmzWs1W64KtL-6_4xtUNnH","hxxp://stackoverflow.com/questions/11152956/example-of-code-to-implement-a-pdf-reader","hxxps://github.com/jblough/Android-Pdf-Viewer-Library","hxxp://www.mkyong.com/android/android-toast-example/","hxxps://www.google.de/?gws_rd=cr&ei=f5Q5UsKrNMmu4QTBl4BI","hxxps://www.google.de/search?q=chrome+startseite+%C3%A4ndern&oq=chrome+startseite&aqs=chrome.1.69i57j0l3.4526j0&sourceid=chrome&ie=UTF-8","hxxp://www.google.com/intl/de/homepage/#instructions-nonie","hxxps://www.google.com/","hxxp://www.sweetpacks-search.com/?barid={25A67C0D-16C8-11E3-A4E3-BC5FF45A1F25}&src=10&crg=3.5000006.10061&st=23","hxxp://start.iminent.com/?appId=74210A49-0CC6-4121-B601-605B60F6855F","chrome://chrome-signin/?source=0","hxxp://www.mystartsearch.com/?type=hp&ts=1432287695&z=2c5a4a5e53b68773349945egfz7c2ocoabfm6m4efg&from=cvs1&uid=INTELXSSDSC2BW240A4_CVDA3300008N2403GN"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (TIPP10 - Kostenloser 10-Finger-Schreibtrainer) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\akfcabopgpiohpfcjkpifbmoclclfkhn [2014-02-27]
CHR Extension: (Google Drive) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (Web Developer) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2014-05-25]
CHR Extension: (WhatsChrome) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgkodfmeijboinjdegggmkbkjfiagaan [2015-10-09]
CHR Extension: (ColorZilla) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2015-06-25]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-11-21]
CHR Extension: (HelloFax: 50 kostenlose Fax-Seiten) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\bocmleclimfnadgmcdgecijlblfcmfnm [2015-02-26]
CHR Extension: (Adblock Plus) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-24]
CHR Extension: (Webseiten-Screenshot - Webpage Screenshot) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki [2014-11-28]
CHR Extension: (Alexa Traffic Rank) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel [2015-12-02]
CHR Extension: (Dropbox für Gmail) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpdmhfocilnekecfjgimjdeckachfbec [2015-11-21]
CHR Extension: (Block site) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\eiimnmioipafcokbfikbljfdeojpcgbh [2015-08-01]
CHR Extension: (Full Page Screen Capture) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2015-05-12]
CHR Extension: (Type Scout - Besser tippen! :)) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fedokkaolmkkoeedicihicdeppjjeamj [2015-06-23]
CHR Extension: (Web Lab) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgacgeibpdjllcjckbmgecpahipdjabe [2014-02-27]
CHR Extension: (Wunderlist - To-do and Task list) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc [2015-11-27]
CHR Extension: (Stoppuhr / Timer) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggnidjbcahhbnleinchgobfnabopeioh [2014-02-27]
CHR Extension: (Google Docs Offline) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Instant Translate) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2015-11-27]
CHR Extension: (Eingabe-Test - KeyHero) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkcieoaeooeidmpaopkpjpjfakidlabm [2014-07-30]
CHR Extension: (Webpage Screenshot Gallery) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\kohfjeijmlcjiofmmcfichimcnbclkhp [2014-05-28]
CHR Extension: (3D Solar System Web) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdaaepplopehigjgkolniddiadbbkphd [2014-02-27]
CHR Extension: (Regen-Alarm) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\meaikaglpfemjncbioflellmppndgmok [2014-11-17]
CHR Extension: (Rechner) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkgoipeflibinmadcecedifdonakgalk [2015-04-23]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-01]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2015-11-29]
CHR Extension: (Wunderlist for Chrome) - C:\Users\Frank\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojcflmmmcfpacggndoaaflkmcoblhnbh [2015-11-27]
CHR HKLM-x32\...\Chrome\Extension: [lpdfbkehegfmedglgemnhbnpmfmioggj] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVControlCenter; C:\Program Files\Lenovo\Communications Utility\AVControlCenter32.exe [560584 2015-01-21] (Lenovo Corporation)
R2 Bonjour Service; C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe [384512 2015-08-18] (Apple Inc.) [Datei ist nicht signiert]
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2015-11-28] (Microsoft Corporation)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131032 2013-01-14] (Intel Corporation)
R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [21744 2015-07-09] (Microsoft Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165336 2013-01-14] (Intel Corporation)
R2 Lenovo Settings Service; C:\Program Files\Lenovo\SettingsDependency\SettingsService.exe [2016472 2015-01-23] (Lenovo Group Limited)
R2 Lenovo System Agent Service; C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632 2015-03-06] (LENOVO INCORPORATED.)
S3 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [626120 2015-01-21] (Lenovo Corporation)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [136288 2012-08-10] (Lenovo Group Limited)
S3 LnvHotSpotSvc; C:\Program Files\Lenovo\Lenovo Mobile Hotspot\LnvHotSpotSvc.exe [474608 2014-08-12] (Lenovo)
R2 LocationTaskManager; C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe [469720 2015-01-09] ()
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [272424 2015-08-17] (Lenovo)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [36352 2009-12-12] () [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21536 2015-11-11] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255096 2015-10-25] (Synaptics Incorporated)
S3 TcAdsWcfHost; C:\TwinCAT\AdsApi\TcAdsWcf\v4.0.30319\TcAdsWcfHost.exe [7680 2013-09-20] (Beckhoff Automation GmbH) [Datei ist nicht signiert]
R2 TcEventLogger; C:\TwinCAT\3.1\Components\TcEventLogger\TcEventLogger.exe [249504 2014-01-20] (Beckhoff Automation GmbH)
R2 TcSysSrv; C:\TwinCAT\3.1\System\TCATSysSrv.exe [498688 2014-03-23] (Beckhoff Automation GmbH) [Datei ist nicht signiert]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe [134656 2015-07-09] (Microsoft Corporation) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
R2 valWBFPolicyService; C:\Windows\system32\valWBFPolicyService.exe [49968 2015-03-03] (Synaptics Incorporated)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [89232 2014-07-22] (Microsoft Corporation)
S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [52968 2015-07-07] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [37472 2013-02-14] (Advanced Micro Devices, Inc.)
U5 iaStorA; C:\Windows\System32\Drivers\iaStorA.sys [652344 2012-11-19] (Intel Corporation)
R3 LnvHIDHW; C:\Windows\System32\drivers\LnvHIDHW.sys [29496 2014-04-07] (Lenovo)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\System32\drivers\NETwew01.sys [3343872 2015-10-30] (Intel Corporation)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-05] (Realtek Semiconductor Corp.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8243272 2013-03-21] (Realtek Semiconductor Corp.)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [216064 2015-10-30] (Microsoft Corporation)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [51320 2015-10-25] (Synaptics Incorporated)
R1 SMIDriver; C:\Windows\System32\drivers\smi.sys [19656 2015-03-03] (Windows (R) Win 7 DDK provider)
S3 SWIX64; C:\Program Files (x86)\Lenovo\System Update\tvsuhd64.sys [34976 2015-06-29] (Lenovo Group Limited)
R2 TcIo; C:\TwinCAT\3.1\Driver\TcIo.sys [875680 2014-01-20] (Beckhoff Automation GmbH)
R2 TcRouter; C:\TwinCAT\3.1\Driver\TcRouter.sys [666672 2014-02-04] (Beckhoff Automation GmbH)
R2 TcRTime; C:\TwinCAT\3.1\Driver\TcRTime.sys [436384 2014-01-20] (Beckhoff Automation GmbH)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [48024 2013-01-28] (Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [194456 2013-01-28] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-02 12:04 - 2015-12-02 12:04 - 00001384 _____ C:\Users\Frank\Desktop\JRT.txt
2015-12-02 12:02 - 2015-12-02 12:03 - 01599336 _____ (Malwarebytes) C:\Users\Frank\Desktop\JRT.exe
2015-12-02 11:49 - 2015-12-02 11:51 - 00000000 ____D C:\AdwCleaner
2015-12-02 10:28 - 2015-12-02 11:48 - 01736704 _____ C:\Users\Frank\Desktop\AdwCleaner_5.023.exe
2015-12-01 22:41 - 2015-12-01 22:41 - 00011665 _____ C:\malware.txt
2015-12-01 22:19 - 2015-12-02 11:56 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-01 22:18 - 2015-12-01 22:41 - 00001182 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-12-01 22:18 - 2015-12-01 22:18 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-01 22:18 - 2015-12-01 22:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-01 22:18 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-01 22:18 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-01 22:18 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-01 22:16 - 2015-12-01 22:17 - 22908888 _____ (Malwarebytes ) C:\Users\Frank\Desktop\mbam-setup-2.2.0.1024.exe
2015-12-01 21:30 - 2015-12-01 21:31 - 00087577 _____ C:\Users\Frank\Desktop\Addition.txt
2015-12-01 21:29 - 2015-12-02 12:07 - 00031512 _____ C:\Users\Frank\Desktop\FRST.txt
2015-12-01 21:29 - 2015-12-02 12:07 - 00000000 ____D C:\FRST
2015-12-01 21:28 - 2015-12-01 21:29 - 02350080 _____ (Farbar) C:\Users\Frank\Desktop\FRST64.exe
2015-12-01 18:54 - 2015-12-01 18:54 - 00000000 ____D C:\Users\Frank\.jmc
2015-12-01 18:54 - 2015-12-01 18:54 - 00000000 ____D C:\Users\Frank\.eclipse
2015-11-30 19:13 - 2015-11-30 19:13 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-11-29 19:20 - 2015-11-29 19:20 - 00000000 ____D C:\Program Files\Microsoft Identity Extensions
2015-11-29 18:29 - 2015-11-29 18:29 - 00000000 ____D C:\Program Files (x86)\Microsoft Office365 Tools
2015-11-29 18:13 - 2015-10-29 20:12 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DxToolsReportGenerator.dll
2015-11-29 18:13 - 2015-10-29 20:12 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\DxToolsReportGenerator.dll
2015-11-29 18:13 - 2015-10-29 19:41 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARP12Debug.dll
2015-11-29 18:13 - 2015-10-29 19:40 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARP12Debug.dll
2015-11-29 18:13 - 2015-10-29 19:38 - 00369152 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\DXCpl.exe
2015-11-29 18:13 - 2015-10-29 19:38 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSD3DWARPDebug.dll
2015-11-29 18:13 - 2015-10-29 19:37 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXGIDebug.dll
2015-11-29 18:13 - 2015-10-29 19:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsProxyStub.dll
2015-11-29 18:13 - 2015-10-29 19:36 - 00349184 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\DXCpl.exe
2015-11-29 18:13 - 2015-10-29 19:36 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VSD3DWARPDebug.dll
2015-11-29 18:13 - 2015-10-29 19:35 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXGIDebug.dll
2015-11-29 18:13 - 2015-10-29 19:35 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsProxyStub.dll
2015-11-29 18:13 - 2015-10-29 19:34 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\perf_gputiming.dll
2015-11-29 18:13 - 2015-10-29 19:34 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsReporting.dll
2015-11-29 18:13 - 2015-10-29 19:32 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsMonitor.dll
2015-11-29 18:13 - 2015-10-29 19:31 - 00727552 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsExperiment.dll
2015-11-29 18:13 - 2015-10-29 19:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perf_gputiming.dll
2015-11-29 18:13 - 2015-10-29 19:31 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsCapture.dll
2015-11-29 18:13 - 2015-10-29 19:31 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsReporting.dll
2015-11-29 18:13 - 2015-10-29 19:30 - 01073664 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXToolsOfflineAnalysis.dll
2015-11-29 18:13 - 2015-10-29 19:30 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1debug3.dll
2015-11-29 18:13 - 2015-10-29 19:29 - 05667840 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsDesktopEngine.exe
2015-11-29 18:13 - 2015-10-29 19:29 - 05562368 _____ (Microsoft Corporation) C:\WINDOWS\system32\VsGraphicsRemoteEngine.exe
2015-11-29 18:13 - 2015-10-29 19:29 - 00889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCap.exe
2015-11-29 18:13 - 2015-10-29 19:29 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsMonitor.dll
2015-11-29 18:13 - 2015-10-29 19:29 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsCapture.dll
2015-11-29 18:13 - 2015-10-29 19:28 - 03292672 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12warp.dll
2015-11-29 18:13 - 2015-10-29 19:28 - 00763904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXToolsOfflineAnalysis.dll
2015-11-29 18:13 - 2015-10-29 19:28 - 00561664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsExperiment.dll
2015-11-29 18:13 - 2015-10-29 19:27 - 04533760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsDesktopEngine.exe
2015-11-29 18:13 - 2015-10-29 19:27 - 00655360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCap.exe
2015-11-29 18:13 - 2015-10-29 19:27 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1debug3.dll
2015-11-29 18:13 - 2015-10-29 19:26 - 02470912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12warp.dll
2015-11-29 18:13 - 2015-10-29 19:25 - 04445696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VsGraphicsRemoteEngine.exe
2015-11-29 18:13 - 2015-10-29 19:24 - 08574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\DXCaptureReplay.dll
2015-11-29 18:13 - 2015-10-29 19:22 - 06584320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DXCaptureReplay.dll
2015-11-29 18:13 - 2015-10-29 19:13 - 01001984 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d12SDKLayers.dll
2015-11-29 18:13 - 2015-10-29 19:12 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11_3SDKLayers.dll
2015-11-29 18:13 - 2015-10-29 19:11 - 01064960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_3SDKLayers.dll
2015-11-29 18:13 - 2015-10-29 19:11 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d12SDKLayers.dll
2015-11-29 12:12 - 2015-11-29 12:12 - 00000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\ATI
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\Apple Computer
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\TSVNCache
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\Publishers
2015-11-28 23:37 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\ATI
2015-11-28 23:36 - 2015-11-29 18:01 - 00000000 ____D C:\Users\Frank\AppData\Local\MicrosoftEdge
2015-11-28 23:36 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\Adobe
2015-11-28 23:36 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\Packages
2015-11-28 23:36 - 2015-11-28 23:37 - 00000000 ____D C:\Users\katri_000\AppData\Local\Lenovo
2015-11-28 23:36 - 2015-11-28 23:36 - 00002335 _____ C:\Users\katri_000\Desktop\Google Chrome.lnk
2015-11-28 23:36 - 2015-11-28 23:36 - 00000020 ___SH C:\Users\katri_000\ntuser.ini
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Vorlagen
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Startmenü
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Netzwerkumgebung
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Lokale Einstellungen
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Eigene Dateien
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Druckumgebung
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Documents\Eigene Videos
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Documents\Eigene Musik
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Documents\Eigene Bilder
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\AppData\Local\Verlauf
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\AppData\Local\Anwendungsdaten
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 _SHDL C:\Users\katri_000\Anwendungsdaten
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 __SHD C:\Users\katri_000\IntelGraphicsProfiles
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\Subversion
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 ____D C:\Users\katri_000\AppData\Local\VirtualStore
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 ____D C:\Users\katri_000\AppData\Local\TileDataLayer
2015-11-28 23:36 - 2015-11-28 23:36 - 00000000 ____D C:\Users\katri_000
2015-11-28 23:36 - 2015-11-28 20:22 - 00000000 ____D C:\Users\katri_000\Documents\Visual Studio 2013
2015-11-28 23:36 - 2015-11-28 20:22 - 00000000 ____D C:\Users\katri_000\AppData\Roaming\Macromedia
2015-11-28 23:36 - 2015-11-28 20:22 - 00000000 ____D C:\Users\katri_000\AppData\Local\ScreenCapture
2015-11-28 23:36 - 2015-11-28 20:22 - 00000000 ____D C:\Users\katri_000\AppData\Local\Google
2015-11-28 23:36 - 2015-04-25 17:51 - 00001739 _____ C:\Users\katri_000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LenovoToast.lnk
2015-11-28 20:33 - 2015-12-01 22:41 - 00002404 _____ C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-11-28 20:33 - 2015-11-28 20:34 - 00000000 ___RD C:\Users\Frank\OneDrive
2015-11-28 20:33 - 2015-11-28 20:33 - 00000000 ____D C:\ProgramData\ATI
2015-11-28 20:32 - 2015-11-28 20:32 - 00000000 ____D C:\Users\Frank\AppData\Local\ActiveSync
2015-11-28 20:32 - 2015-11-28 20:32 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-11-28 20:31 - 2015-11-28 20:31 - 00000000 ____D C:\Users\Frank\AppData\Local\Publishers
2015-11-28 20:30 - 2015-12-02 11:54 - 00000000 __SHD C:\Users\Frank\IntelGraphicsProfiles
2015-11-28 20:30 - 2015-11-28 23:36 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-11-28 20:30 - 2015-11-28 20:30 - 00000020 ___SH C:\Users\Frank\ntuser.ini
2015-11-28 20:30 - 2015-11-28 20:30 - 00000000 ____D C:\Users\Frank\AppData\Local\TileDataLayer
2015-11-28 20:30 - 2015-11-28 20:30 - 00000000 ____D C:\Users\Frank\AppData\Local\Comms
2015-11-28 20:27 - 2015-11-28 20:27 - 00000000 ____D C:\ProgramData\USOShared
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-11-28 20:26 - 2015-11-28 20:26 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-11-28 20:25 - 2015-12-02 11:53 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-11-28 20:22 - 2015-12-01 22:42 - 00001552 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2013
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default\AppData\Local\ScreenCapture
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2013
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default User\AppData\Local\ScreenCapture
2015-11-28 20:22 - 2015-11-28 20:22 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2015-11-28 20:00 - 2015-11-28 20:00 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-11-28 19:59 - 2015-12-02 11:58 - 02003182 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-11-28 19:59 - 2015-12-01 18:54 - 00000000 ____D C:\Users\Frank
2015-11-28 19:59 - 2015-11-28 19:59 - 01909068 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Vorlagen
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Startmenü
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Netzwerkumgebung
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Lokale Einstellungen
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Eigene Dateien
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Druckumgebung
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Documents\Eigene Videos
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Documents\Eigene Musik
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Documents\Eigene Bilder
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\AppData\Local\Verlauf
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\AppData\Local\Anwendungsdaten
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 _SHDL C:\Users\Frank\Anwendungsdaten
2015-11-28 19:59 - 2015-11-28 19:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-11-28 19:58 - 2015-12-02 11:53 - 00000000 ____D C:\ProgramData\Validity
2015-11-28 19:58 - 2015-11-29 19:19 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-28 19:58 - 2015-11-28 20:23 - 00000000 ____D C:\ProgramData\Lenovo
2015-11-28 19:58 - 2015-11-28 20:07 - 00000000 ____D C:\Program Files\Synaptics
2015-11-28 19:58 - 2015-11-28 20:07 - 00000000 ____D C:\Program Files\Intel
2015-11-28 19:58 - 2015-11-28 20:07 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_wbf_vfs_lvcmn_01_09_00.Wdf
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_SensorsSimulatorDriver_01_11_00.Wdf
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\Program Files\Realtek
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\Program Files\ATI Technologies
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\Program Files\AMD
2015-11-28 19:58 - 2015-11-28 19:58 - 00000000 ____D C:\AMD
2015-11-28 19:58 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-11-28 19:57 - 2015-12-02 10:24 - 04857640 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-28 19:57 - 2015-11-28 20:34 - 00000000 ___DC C:\WINDOWS\Panther
2015-11-28 19:54 - 2015-11-28 19:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 22394880 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 13376512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 13017088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 12120064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 03670832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-11-28 19:54 - 2015-11-28 19:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-11-28 19:54 - 2015-11-28 19:54 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01998848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01707008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01212416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-11-28 19:54 - 2015-11-28 19:54 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-11-28 19:54 - 2015-11-28 19:54 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-11-28 19:54 - 2015-11-28 19:54 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-11-28 19:54 - 2015-11-28 19:54 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-11-28 19:54 - 2015-11-28 19:54 - 00000000 ____D C:\Windows.old
2015-11-28 19:52 - 2015-11-28 19:52 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-11-28 19:51 - 2015-11-29 18:43 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-11-28 19:51 - 2015-11-28 20:23 - 00000000 ____D C:\Program Files\MSBuild
2015-11-28 19:51 - 2015-11-28 19:51 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-11-28 19:51 - 2015-11-28 19:51 - 00000000 ____D C:\Program Files\Windows Identity Foundation
2015-11-28 19:51 - 2015-11-28 19:51 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-11-28 19:51 - 2015-11-28 19:51 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-11-28 19:50 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-11-28 19:50 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-11-28 19:50 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-11-28 19:50 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-11-28 19:50 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-11-28 19:50 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-11-18 14:12 - 2015-12-01 22:42 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-07 10:49 - 2015-11-07 10:49 - 00040237 _____ C:\Users\Frank\Desktop\konditionen.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-02 12:04 - 2013-10-16 16:52 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-02 11:58 - 2015-10-30 19:35 - 00853752 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-02 11:58 - 2015-10-30 19:35 - 00187942 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-02 11:58 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-02 11:54 - 2015-06-06 15:54 - 00000000 ____D C:\Users\Frank\AppData\Local\TSVNCache
2015-12-02 11:54 - 2013-10-16 16:52 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-02 11:53 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2015-12-02 10:46 - 2013-10-23 19:40 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001UA.job
2015-12-02 10:24 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-01 22:42 - 2015-10-21 21:08 - 00001509 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2015.lnk
2015-12-01 22:42 - 2015-10-21 21:04 - 00001518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015.lnk
2015-12-01 22:42 - 2015-07-31 06:42 - 00002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mouse Properties (Touchpad Clickpad Trackpad TrackPoint Mouse Pointer Pointing Pad).lnk
2015-12-01 22:42 - 2015-06-27 09:17 - 00001128 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2015-12-01 22:42 - 2015-01-27 19:09 - 00000994 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-12-01 22:42 - 2015-01-10 13:52 - 00001136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2015-12-01 22:42 - 2014-08-27 07:56 - 00002091 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Umschaltbare Grafik.lnk
2015-12-01 22:42 - 2014-03-18 18:15 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-12-01 22:42 - 2013-12-21 18:03 - 00001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-01 22:42 - 2013-11-01 21:39 - 00001388 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2015-12-01 22:42 - 2013-11-01 21:39 - 00001080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
2015-12-01 22:42 - 2013-10-26 21:31 - 00000000 __RDO C:\Users\Frank\SkyDrive
2015-12-01 22:42 - 2013-10-22 18:45 - 00001030 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2015-12-01 22:42 - 2013-10-22 18:44 - 00002069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WebSpider2.lnk
2015-12-01 22:42 - 2013-10-22 18:42 - 00001148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GMX-SMS-Manager.lnk
2015-12-01 22:42 - 2013-10-21 22:17 - 00001008 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2015-12-01 22:42 - 2013-08-09 11:14 - 00001981 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2015-12-01 22:42 - 2013-08-09 11:11 - 00001969 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Cloud Storage by SugarSync.lnk
2015-12-01 22:41 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\SKB
2015-12-01 22:41 - 2013-11-01 21:39 - 00001382 _____ C:\Users\Public\Desktop\HP Solution Center.lnk
2015-12-01 22:41 - 2013-10-16 16:47 - 00001745 _____ C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LenovoToast.lnk
2015-12-01 21:46 - 2013-10-23 19:40 - 00001086 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001Core.job
2015-12-01 18:57 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-01 18:57 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-01 18:57 - 2015-10-14 18:12 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Spotify
2015-12-01 18:52 - 2015-10-14 18:12 - 00000000 ____D C:\Users\Frank\AppData\Local\Spotify
2015-11-30 18:15 - 2013-10-22 18:56 - 00000000 ____D C:\Users\Frank\AppData\Roaming\FileZilla
2015-11-29 21:44 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-29 19:39 - 2015-10-05 18:19 - 00000000 ____D C:\Users\Frank\Documents\Visual Studio 2015
2015-11-29 19:36 - 2015-06-06 11:57 - 00000000 ____D C:\ProgramData\Microsoft Visual Studio
2015-11-29 19:29 - 2015-05-05 16:21 - 00000000 ____D C:\Program Files (x86)\AppInsights
2015-11-29 19:29 - 2015-05-05 16:00 - 00000000 ____D C:\Program Files (x86)\NuGet
2015-11-29 19:20 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-11-29 19:20 - 2015-06-06 11:49 - 00000000 ____D C:\Program Files\SharePoint Client Components
2015-11-29 18:49 - 2015-10-05 18:17 - 00000000 ____D C:\ProgramData\Windows App Certification Kit
2015-11-29 18:49 - 2015-10-05 18:17 - 00000000 ____D C:\Program Files\Application Verifier
2015-11-29 18:49 - 2015-10-05 18:17 - 00000000 ____D C:\Program Files (x86)\Application Verifier
2015-11-29 18:45 - 2015-10-05 17:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 14.0
2015-11-29 18:43 - 2015-10-21 21:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.0
2015-11-29 18:40 - 2015-10-21 21:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK
2015-11-29 18:35 - 2015-10-21 21:12 - 00000000 ____D C:\Program Files\Microsoft DNX
2015-11-29 18:29 - 2015-10-05 17:56 - 00000000 ____D C:\Program Files\IIS Express
2015-11-29 18:29 - 2015-10-05 17:56 - 00000000 ____D C:\Program Files (x86)\IIS Express
2015-11-29 18:24 - 2015-10-05 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.1
2015-11-29 18:17 - 2015-05-05 16:11 - 00000000 ____D C:\Program Files (x86)\HTML Help Workshop
2015-11-29 18:15 - 2013-11-12 16:26 - 00000000 ____D C:\WINDOWS\SysWOW64\1033
2015-11-29 18:13 - 2015-10-05 18:26 - 00000000 ____D C:\Users\Frank\AppData\Local\VSIXInstaller
2015-11-29 18:13 - 2013-11-12 16:26 - 00000000 ____D C:\WINDOWS\system32\1033
2015-11-29 13:19 - 2013-11-11 12:39 - 00000000 ____D C:\Users\Frank\Documents\Visual Studio 2013
2015-11-29 12:14 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-11-28 23:37 - 2013-10-16 22:32 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-11-28 23:36 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-11-28 20:49 - 2013-10-16 16:47 - 00000000 ____D C:\Users\Frank\AppData\Local\Packages
2015-11-28 20:47 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-11-28 20:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-11-28 20:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-11-28 20:31 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-11-28 20:30 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-11-28 20:30 - 2015-05-05 16:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 11.0
2015-11-28 20:30 - 2013-11-11 12:28 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 12.0
2015-11-28 20:27 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-11-28 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-11-28 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2015-11-28 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-11-28 20:26 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-11-28 20:26 - 2015-10-30 07:28 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
2015-11-28 20:25 - 2015-08-31 19:49 - 00002132 _____ C:\WINDOWS\System32\Tasks\{3839690F-193C-41E0-80F4-3BC8EBB96139}
2015-11-28 20:25 - 2015-03-21 10:27 - 00002764 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-11-28 20:25 - 2014-09-26 21:29 - 00002872 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2015-11-28 20:25 - 2014-09-26 21:29 - 00002494 _____ C:\WINDOWS\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2015-11-28 20:25 - 2014-08-27 07:52 - 00002118 _____ C:\WINDOWS\System32\Tasks\DolbySelectorTask
2015-11-28 20:25 - 2014-02-27 18:48 - 00002016 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-11-28 20:25 - 2014-01-04 12:03 - 00001972 _____ C:\WINDOWS\System32\Tasks\{36EAE65D-D216-4C80-98DD-6D6FF2060B75}
2015-11-28 20:25 - 2013-10-26 21:24 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-11-28 20:25 - 2013-10-26 21:21 - 00030483 _____ C:\WINDOWS\diagwrn.xml
2015-11-28 20:25 - 2013-10-26 21:21 - 00030483 _____ C:\WINDOWS\diagerr.xml
2015-11-28 20:25 - 2013-10-23 19:40 - 00003582 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001UA
2015-11-28 20:25 - 2013-10-23 19:40 - 00003310 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001Core
2015-11-28 20:25 - 2013-10-21 22:28 - 00002594 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-ThinkPad-Frank
2015-11-28 20:25 - 2013-10-16 16:54 - 00002808 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-94231515-3545142930-1258591251-1001
2015-11-28 20:25 - 2013-10-16 16:52 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-11-28 20:25 - 2013-10-16 16:52 - 00003276 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-11-28 20:25 - 2013-08-09 11:03 - 00002312 _____ C:\WINDOWS\System32\Tasks\Dolby
2015-11-28 20:25 - 2013-08-09 11:03 - 00002186 _____ C:\WINDOWS\System32\Tasks\RtHDVBg_Dolby
2015-11-28 20:25 - 2013-08-09 11:03 - 00002174 _____ C:\WINDOWS\System32\Tasks\RTKCPL
2015-11-28 20:24 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-11-28 20:24 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-11-28 20:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-11-28 20:23 - 2015-10-22 06:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-11-28 20:23 - 2015-10-21 21:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Python Tools for Visual Studio 2015
2015-11-28 20:23 - 2015-10-21 21:41 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js
2015-11-28 20:23 - 2015-10-21 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android SDK Tools
2015-11-28 20:23 - 2015-10-04 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free
2015-11-28 20:23 - 2015-10-02 21:06 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2015-11-28 20:23 - 2015-06-06 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TortoiseSVN
2015-11-28 20:23 - 2015-05-20 18:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screen Capturer
2015-11-28 20:23 - 2015-05-20 18:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-11-28 20:23 - 2015-05-16 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2015-11-28 20:23 - 2015-05-12 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-11-28 20:23 - 2015-05-05 16:32 - 00000000 ____D C:\ProgramData\regid.2008-09.org.wixtoolset
2015-11-28 20:23 - 2015-05-05 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WiX Toolset v3.9
2015-11-28 20:23 - 2015-01-27 18:58 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GesimGui
2015-11-28 20:23 - 2014-11-08 22:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellarium
2015-11-28 20:23 - 2014-10-30 18:46 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PolygonAusLinien
2015-11-28 20:23 - 2014-08-27 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2015-11-28 20:23 - 2014-08-27 07:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
2015-11-28 20:23 - 2014-07-22 16:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.2
2015-11-28 20:23 - 2014-07-22 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber
2015-11-28 20:23 - 2014-03-20 20:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
2015-11-28 20:23 - 2014-03-08 12:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-11-28 20:23 - 2014-02-27 17:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN
2015-11-28 20:23 - 2014-02-23 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2015-11-28 20:23 - 2014-01-04 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Astrosoft
2015-11-28 20:23 - 2014-01-04 12:06 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Galiastro
2015-11-28 20:23 - 2013-11-24 15:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3
2015-11-28 20:23 - 2013-11-19 07:53 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-28 20:23 - 2013-11-12 16:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2013
2015-11-28 20:23 - 2013-10-22 18:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2015-11-28 20:23 - 2013-10-22 18:47 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-11-28 20:23 - 2013-10-22 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3Gain
2015-11-28 20:23 - 2013-10-21 22:25 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-11-28 20:23 - 2013-10-21 22:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-11-28 20:23 - 2013-10-21 21:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-11-28 20:23 - 2013-10-20 17:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-28 20:23 - 2013-10-20 17:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2015-11-28 20:23 - 2013-10-20 15:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-11-28 20:23 - 2013-10-20 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ColorPic 4
2015-11-28 20:23 - 2013-10-20 10:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-11-28 20:23 - 2013-10-20 09:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2015-11-28 20:23 - 2013-10-16 16:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-28 20:23 - 2013-08-09 11:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Absolute Software
2015-11-28 20:23 - 2013-08-09 11:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(R) center
2015-11-28 20:23 - 2013-08-09 11:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2015-11-28 20:22 - 2013-08-22 14:36 - 00000000 ____D C:\Users\Default.migrated
2015-11-28 20:07 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-11-28 20:07 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Cursors
2015-11-28 20:07 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-11-28 20:07 - 2015-10-21 21:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2015
2015-11-28 20:07 - 2015-08-31 19:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-11-28 20:07 - 2015-05-05 16:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
2015-11-28 20:07 - 2015-05-05 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
2015-11-28 20:07 - 2014-12-20 13:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Lenovo
2015-11-28 20:07 - 2014-12-20 13:26 - 00000000 ____D C:\WINDOWS\system32\Lenovo
2015-11-28 20:07 - 2014-08-27 07:56 - 00000000 ____D C:\Program Files (x86)\AMD AVT
2015-11-28 20:07 - 2013-11-14 15:50 - 00000000 ____D C:\Program Files\IIS
2015-11-28 20:07 - 2013-11-12 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
2015-11-28 20:07 - 2013-11-01 21:39 - 00000000 ____D C:\WINDOWS\SysWOW64\spool
2015-11-28 20:07 - 2013-10-26 21:19 - 00000000 ____D C:\Program Files (x86)\Intel
2015-11-28 20:07 - 2013-10-22 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AceBIT
2015-11-28 20:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-11-28 20:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-11-28 20:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-11-28 20:07 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-11-28 20:07 - 2013-08-09 11:14 - 00000000 ____D C:\Program Files\Intel Corporation
2015-11-28 20:07 - 2013-08-09 11:03 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2015-11-28 20:07 - 2013-08-09 11:01 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2015-11-28 20:07 - 2013-08-09 11:00 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-11-28 20:07 - 2013-08-09 11:00 - 00000000 ____D C:\Program Files\Common Files\Intel
2015-11-28 20:07 - 2013-03-25 22:03 - 00000000 ____D C:\ProgramData\PRICache
2015-11-28 19:59 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-11-28 19:59 - 2014-02-27 17:59 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenVPN
2015-11-28 19:59 - 2014-01-04 13:54 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Astrosoft
2015-11-28 19:59 - 2013-12-26 13:30 - 00000000 ____D C:\Users\Frank\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Basic 2005 Power Packs
2015-11-28 19:57 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-11-28 19:57 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-11-28 19:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-11-28 19:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-11-28 19:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-11-28 19:54 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-11-28 19:54 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-11-28 19:51 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-11-28 19:51 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-11-28 19:39 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-11-28 18:39 - 2013-10-27 11:34 - 00000000 ____D C:\Users\Frank\AppData\Local\CrashDumps
2015-11-26 22:00 - 2013-10-22 19:13 - 00000000 ____D C:\Users\Frank\_Buchhaltung
2015-11-25 19:10 - 2013-10-20 10:06 - 00000000 ____D C:\Users\Frank\AppData\Roaming\vlc
2015-11-22 00:27 - 2013-10-20 17:05 - 04035584 ___SH C:\Users\Frank\Desktop\Thumbs.db
2015-11-20 20:14 - 2013-08-09 11:11 - 00000000 ____D C:\WINDOWS\System32\Tasks\TVT
2015-11-20 20:14 - 2013-08-09 11:10 - 00000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2015-11-20 20:14 - 2013-08-09 11:01 - 00000000 ____D C:\Program Files (x86)\Lenovo
2015-11-18 14:36 - 2013-10-16 16:54 - 00000000 ____D C:\Users\Frank\AppData\Local\Adobe
2015-11-18 14:12 - 2013-08-09 11:10 - 00000000 ____D C:\ProgramData\Adobe
2015-11-18 14:12 - 2013-08-09 11:10 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-11-13 23:36 - 2013-10-16 17:43 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-13 23:33 - 2013-10-16 17:43 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 22:21 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-11-10 20:27 - 2013-11-24 14:19 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-11-07 16:28 - 2013-11-05 17:03 - 00001456 _____ C:\Users\Frank\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2015-11-03 01:12 - 2015-10-30 08:26 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-03 01:12 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-10-16 16:48 - 2013-10-20 09:40 - 0001492 _____ () C:\Users\Frank\AppData\Roaming\AbsoluteReminder.xml
2015-02-12 20:40 - 2015-05-02 19:12 - 0000600 _____ () C:\Users\Frank\AppData\Local\PUTTY.RND
2013-10-16 16:47 - 2014-06-03 18:40 - 0000466 _____ () C:\Users\Frank\AppData\Local\RegisteredPackageInformation.xml
2013-11-14 10:12 - 2013-11-14 10:12 - 0007597 _____ () C:\Users\Frank\AppData\Local\Resmon.ResmonCfg
2013-12-01 20:12 - 2013-12-01 20:22 - 0013708 _____ () C:\Users\Frank\AppData\Local\WiDiSetupLog.20131201.201220.wdl
2013-12-02 19:44 - 2013-12-02 19:44 - 0014377 _____ () C:\Users\Frank\AppData\Local\WiDiSetupLog.20131202.194423.wdl
2015-11-28 19:58 - 2015-11-28 19:58 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2013-10-20 15:35 - 2013-11-01 21:45 - 0006550 _____ () C:\ProgramData\hpzinstall.log

Einige Dateien in TEMP:
====================
C:\Users\Frank\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-28 19:57

==================== Ende von FRST.txt ============================

--- --- ---

Sorry, habe heute das mit dem "#" vergessen.

Jetzt noch eine Frage, wie erzeuge ich eine neue Addition.txt?
(der letzte Punkt von den vielen ToDo's)

Frank

cosinus 02.12.2015 12:21
Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Untersuchen klicken.

http://www.trojaner-board.de/picture...&pictureid=611

frankmehlhop 02.12.2015 12:29
Addition.txt:
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:01-12-2015
durchgeführt von Frank (2015-12-02 12:22:20)
Gestartet von C:\Users\Frank\Desktop
Windows 10 Home (X64) (2015-11-28 19:30:28)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-94231515-3545142930-1258591251-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-94231515-3545142930-1258591251-503 - Limited - Disabled)
Frank (S-1-5-21-94231515-3545142930-1258591251-1001 - Administrator - Enabled) => C:\Users\Frank
Gast (S-1-5-21-94231515-3545142930-1258591251-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-94231515-3545142930-1258591251-1005 - Limited - Enabled)
katri_000 (S-1-5-21-94231515-3545142930-1258591251-1010 - Limited - Enabled) => C:\Users\katri_000

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
7-Zip 9.22 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0922-000001000000}) (Version: 9.22.00.0 - Igor Pavlov)
Absolute Reminder (HKLM-x32\...\{40F4FF7A-B214-4453-B973-080B09CED019}) (Version: 2.1.0.9 - Absolute Software)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
AIO_CDA_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDA_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
AMD Catalyst Install Manager (HKLM\...\{562A4E12-E8E5-4B6F-C3D9-70B3FB842D91}) (Version: 8.0.911.0 - Advanced Micro Devices, Inc.)
Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 1.16 - Google Inc.)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Application Insights Tools for Visual Studio 2013 (x32 Version: 2.4 - Microsoft Corporation) Hidden
Application Insights Tools for Visual Studio 2015 (x32 Version: 3.3.1 - Microsoft Corporation) Hidden
Astrosoft-DLLs (Betrifft alle Programme!) (HKLM-x32\...\Astrosoft) (Version:  - )
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Audiograbber 1.83 SE  (HKLM-x32\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Azure AD Authentication Connected Service (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.1.10731.1602 - Microsoft Corporation) Hidden
AzureTools.Notifications (x32 Version: 2.7.30611.1601 - Microsoft Corporation) Hidden
Beckhoff TwinCAT PnP Driver Package (HKLM-x32\...\{EAD2D1A2-88E3-4E8D-8ED5-A4423B53C5AA}) (Version: 3.1.2.6 - Beckhoff Automation)
Beckhoff TwinCAT3.1 (HKLM-x32\...\{EFB7EA8E-CBB5-4F62-A148-E91CFBAC21CD}) (Version: 3.1.4014.2 - Beckhoff Automation)
Behaviors SDK (Windows Phone) for Visual Studio 2013 (x32 Version: 12.0.51210.80 - Microsoft Corporation) Hidden
Behaviors SDK (Windows) for Visual Studio 2013 (x32 Version: 12.0.51210.80 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 DEU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio 2013 ENU resources (x32 Version: 12.0.41002.1 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Windows Phone 8.0 (x32 Version: 3.0.30924.0 - Microsoft Corporation) Hidden
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Build Tools - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools for Windows 10 - ENU (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
Build Tools for Windows 10 (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
Build Tools Language Resources - amd64 (Version: 12.0.31101 - Microsoft Corporation) Hidden
Build Tools Language Resources - x86 (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
C5100 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
c5100_Help (x32 Version: 82.0.256.000 - Hewlett-Packard) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.5.5666 - CDBurnerXP)
CodedUITest81 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
CodedUITestUAP (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
ColorPic (HKLM-x32\...\ColorPic) (Version: 4 - Iconico)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Dependency Package Update (Version: 1.6.25.00 - Lenovo Inc.) Hidden
Dependency Package Update (Version: 1.6.29.00 - Lenovo Inc.) Hidden
Dependency Package Update (Version: 1.6.36.00 - Lenovo Inc.) Hidden
Dependency Package Update (x32 Version: 1.6.32.00 - Lenovo Group Limited) Hidden
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Devenv-Ressourcen für Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.6.3.1 - Dolby Laboratories Inc)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition 5.18.1 (x32 Version: 5.18.1.2898 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4954.46574 - PreEmptive Solutions) Hidden
Dropbox (HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.1.20150424 - Landesfinanzdirektion Thüringen)
Entity Framework 6.1.1 Tools  for Visual Studio 2013 (HKLM-x32\...\{85253F13-EE42-4850-A3A5-79B90E92D7AC}) (Version: 12.0.30610.0 - Microsoft Corporation)
Entity Framework 6.1.3 Tools  for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation)
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
Ferramentas do Windows Phone 8.1 para Visual Studio 2015 - PTB (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
FileZilla Client 3.14.1 (HKLM-x32\...\FileZilla Client) (Version: 3.14.1 - Tim Kosse)
foobar2000 v1.3.6 (HKLM-x32\...\foobar2000) (Version: 1.3.6 - Peter Pawlowski)
Galiastro 4.7.3 (HKLM-x32\...\{4AB11DC7-2FB7-4A41-82C3-1A119BF50B24}) (Version: 4.7.3 - Paessler Software)
Gemeinsam genutzte Microsoft Azure-Komponenten für Visual Studio 2013 Sprachpaket (DEU) - v1.3 (x32 Version: 1.3.21014.1603 - Microsoft Corporation) Hidden
GesimGui (HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\5a437fb8e85a9888) (Version: 1.0.0.2 - GesimGui)
Git version 1.9.5-preview20141217 (HKLM-x32\...\Git_is1) (Version: 1.9.5-preview20141217 - The Git Development Community)
GMX SMS-Manager (HKLM-x32\...\com.unitedinternet.ums.sms-mms-manager) (Version: 3.3 - 1 und 1 Internet AG)
GMX SMS-Manager (x32 Version: 3.3 - 1 und 1 Internet AG) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Talk Plugin (HKLM-x32\...\{CA3DD97D-1FD7-37A7-BD5C-FC4430C8B8E6}) (Version: 5.41.2.0 - Google)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Hello Engines! 8 (HKLM-x32\...\{F753F17D-8743-4C90-8478-8479ACF8030A}_is1) (Version: 8.0.2 - AceBIT)
Herramientas de Windows Phone 8.1 para Visual Studio 2015 - ESN (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart All-In-One Driver Software (HKLM\...\{4F6C1178-3FC0-44BB-8F9A-28D8516DFEE2}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0001 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
IDE Tools for Windows 10 - ENU (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
IDE Tools for Windows 10 (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version:  - )
Integrated Camera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10224 - Realtek Semiconductor Corp.)
Intel AppUp(R) center (HKLM-x32\...\Intel AppUp(R) center 41900) (Version: 3.8.0.41900.72 - Intel)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.30.1349 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
Intel(R) WiDi (HKLM\...\{62E7C369-64FF-452C-8F46-6BE9B77FF097}) (Version: 4.0.18.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{fad118b4-798f-4755-9e67-a622eec95b62}) (Version: 15.6.1 - Intel Corporation)
Intellisense Lang Pack Mobile Extension SDK 10.0.10240.0 (x32 Version: 10.0.10240.0 - Microsoft Corporation) Hidden
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle)
Kit SDK de vérification de Visual Studio*2012 - fra (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
Lenovo Auto Scroll Utility (HKLM\...\LenovoAutoScrollUtility) (Version: 2.02 - )
Lenovo Dependency Package (HKLM\...\Lenovo Dependency Package_is1) (Version: 1.6.36.00 - Lenovo Group Limited)
Lenovo Fingerprint Manager (HKLM\...\{45CC6269-15F2-4734-A7D1-46A032E85CAE}) (Version: 4.5.127.0 - Validity Sensors, Inc.)
Lenovo HID HW Radio Driver 1.0.0.58 (HKLM\...\{E5325F32-D15A-4131-B029-4A5B7609E532}_is1) (Version: 1.0.0.58 - Lenovo)
Lenovo Multimedia and Communications Core Runtime (HKLM\...\{033DC0E0-DA89-4C33-B66C-89B64D312CD1}_is1) (Version: 5.0.13.94 - Lenovo Corporation)
Lenovo Patch Utility (x32 Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Patch Utility 64 bit (Version: 1.3.2.6 - Lenovo Group Limited) Hidden
Lenovo Power Management Driver (HKLM\...\Power Management Driver) (Version: 1.67.10.15 - Lenovo)
Lenovo Settings - Camera Audio (HKLM\...\{88C6A6D9-324C-46E8-BA87-563D14021442}_is1) (Version: 4.3.19.209 - Lenovo Corporation)
Lenovo Settings - Location Awareness (HKLM-x32\...\{C79D4402-E622-4922-9C02-89F9080BF081}_is1) (Version: 1.4.0.5 - Lenovo Group Limited)
Lenovo Settings - Power (HKLM-x32\...\{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}) (Version: 7.49.4 - Lenovo Group Limited)
Lenovo Settings Dependency Package (HKLM\...\{3694BA2E-BE31-4B7E-886B-A0B559E69D4D}_is1) (Version: 2.3.3.33 - Lenovo Group Limited)
Lenovo Settings Mobile Hotspot (HKLM\...\{42603F7D-B08D-436B-B0D8-3E2DEF1AFD41}_is1) (Version: 2.3.0.85 - Lenovo)
Lenovo Settings Service (HKLM\...\{8C6F1EBA-17F1-4481-B688-9777E63E985F}_is1) (Version: 2.3.3.7 - Lenovo Group Limited)
Lenovo Settings UMDF driver (HKLM\...\{2BDC7413-65EA-4B99-8C4B-02F11075BE6D}_is1) (Version: 1.2.0.7 - Lenovo Group Limited)
Lenovo Solution Center (HKLM\...\{E92E1FF1-B188-43FE-BECA-2248E227E67D}) (Version: 2.8.005.00 - Lenovo Group Limited)
Lenovo System Update (HKLM-x32\...\{25C64847-B900-48AD-A164-1B4F9B774650}) (Version: 5.07.0019 - Lenovo)
Lenovo User Guide (HKLM-x32\...\{13F59938-C595-479C-B479-F171AB9AF64F}) (Version: 1.0.0012.00 - Lenovo Group Limited)
Lenovo Warranty Information (HKLM-x32\...\{FD4EC278-C1B1-4496-99ED-C0BE1B0AA521}) (Version: 1.0.0011.00 - Lenovo)
LibreOffice 4.2.5.2 (HKLM-x32\...\{93AD8CBD-C32E-4318-90BB-A294BE2D712C}) (Version: 4.2.5.2 - The Document Foundation)
LocalESPC (x32 Version: 8.59.29989 - Microsoft Corporation) Hidden
LocalESPC Dev12 (x32 Version: 8.100.25984 - Microsoft Corporation) Hidden
LocalESPCui for de-de (x32 Version: 8.59.29989 - Microsoft) Hidden
LocalESPCui for de-de Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
LocalESPCui for en-us (x32 Version: 8.59.29989 - Microsoft) Hidden
LocalESPCui for en-us Dev12 (x32 Version: 8.100.25984 - Microsoft) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Memory Profiler (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
Metric Collection SDK (x32 Version: 1.1.0005.00 - Lenovo Group Limited) Hidden
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
MFC RunTime files (x32 Version: 1.0.0 - Extensoft) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{4AE57014-05C4-4864-A13D-86517A7E1BA4}) (Version: 4.5.50710 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (ENU) (HKLM-x32\...\{D3517C62-68A5-37CF-92F7-93C029A89681}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (Deutsch) (HKLM-x32\...\{CBD7095F-7211-43FD-9FE7-FB08D753AF79}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (ENU) (HKLM-x32\...\{290FC320-2F5A-329E-8840-C4193BD7A9EE}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (Deutsch) (HKLM-x32\...\{EE8BD24B-75E1-4BBF-86B9-91FE16ADE71C}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (ENU) (HKLM-x32\...\{3D3CEBE6-40EA-4C48-97FD-73828281AB4A}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation)
Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Help Viewer 2.1 (HKLM-x32\...\Microsoft Help Viewer 2.1) (Version: 2.1.21005 - Microsoft Corporation)
Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft Help Viewer 2.2 Sprachpaket - DEU (HKLM-x32\...\Microsoft Help Viewer 2.2 Sprachpaket - DEU) (Version: 2.2.23107 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{F09DEB00-9F41-4BC9-BA81-9F131B12B3D5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{1B876496-B3A2-4D22-9B12-B608A3FD4B8B}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (x64) (HKLM\...\{A6BA243E-85A3-4635-A269-32949C98AC7F}) (Version: 11.1.2902.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{2F7DBBE6-8EBC-495C-9041-46A772F4E311}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{43A5C316-9521-49C3-B9B6-FCE5E1005DF0}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{D411E9C9-CE62-4DBF-9D92-4CB22B750ED5}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{54C5041B-0E91-4E92-8417-AAA12493C790}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{04DD7AF4-A6D3-4E30-9BB9-3B3670719234}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft SQL Server 2014 Express LocalDB  (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (HKLM-x32\...\{2774595F-BC2A-4B12-A25B-0C37A37049B0}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Management Objects  (x64) (HKLM\...\{1F9EB3B6-AED7-4AA7-B8F1-8E314B74B2A5}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 Transact-SQL ScriptDom  (HKLM\...\{020CDFE0-C127-4047-B571-37C82396B662}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server 2014 T-SQL Language Service  (HKLM-x32\...\{47D08E7A-92A1-489B-B0BF-415516497BCE}) (Version: 12.0.2000.8 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (14.0.50616.0) (HKLM-x32\...\{FA604873-01A0-4834-AF87-418534E465BB}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (12.0.41012.0) (HKLM-x32\...\{AC8E0CF4-42A1-4151-B684-97CF6FD726CF}) (Version: 12.0.41012.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools - enu (14.0.50616.0) (HKLM-x32\...\{58246C80-3941-4B69-AE31-264644E2ADB8}) (Version: 14.0.50616.0 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (12.0.30919.1) (HKLM-x32\...\{BCB8A870-2B3D-4CC0-87D6-F931E065AC0C}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - enu (12.0.30919.1) (HKLM-x32\...\{6781FF9B-E87D-4A03-9373-A55A288B83FA}) (Version: 12.0.30919.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{070C38AC-05CE-43DF-9A20-141332F6AB2B}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{05FF8209-C4F1-4C77-BC28-791653156D20}) (Version: 11.1.3366.16 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2014 (HKLM-x32\...\{718FFB65-F6E4-4D62-861F-ED10ED32C936}) (Version: 12.0.2402.11 - Microsoft Corporation)
Microsoft Visual Basic Power Packs 3.0 (HKLM-x32\...\{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}) (Version: 9.0.30214 - Microsoft)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{9634d50a-0c4d-4f52-8a9f-894a2baae370}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{307a22b8-8353-4c5e-b67b-2404c5734558}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2015 SDK - ENU (HKLM-x32\...\{028a4515-c200-4460-bccf-a9b338b0c0f4}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Visual Studio Community 2013 with Update 4 (HKLM-x32\...\{96a8b90c-0a91-4e76-ab34-730c23923d11}) (Version: 12.0.31101 - Microsoft Corporation)
Microsoft Visual Studio Professional 2015 (HKLM-x32\...\{1ef6a030-1244-4d01-95f3-299c0e3a3362}) (Version: 14.0.23107.10 - Microsoft Corporation)
Microsoft Visual Studio Tools for Apache Cordova (HKLM-x32\...\{7b2e7b58-5889-4834-80f2-7dcbd56c066e}) (Version: 14.0.50925.4 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2013 with Update 4 (HKLM-x32\...\{dca572ee-b6f6-4560-9879-fec58cc0022c}) (Version: 12.0.31101 - Microsoft Corporation)
Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation)
Mozilla Firefox 38.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0 (x86 de)) (Version: 38.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0 - Mozilla)
MSBuild/NuGet Integration 14.0 (x86) (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
Multi-Device Hybrid Apps using C# - Templates - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Nástroje Windows Phone 8.1 pro sadu Visual Studio 2015 – CSY (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
Node.js (HKLM-x32\...\{69735668-F8BC-4E9A-839A-4006FDFDD5AC}) (Version: 0.12.2 - Joyent, Inc. and other Node contributors)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.1 - Notepad++ Team)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Ihr Firmenname)
OEM Application Profile (HKLM-x32\...\{C89A97B6-F991-EBB5-77B7-927BCF420EBE}) (Version: 1.00.0000 - Ihr Firmenname)
Open XML SDK 2.5 for Microsoft Office (x32 Version: 2.5.5631 - Microsoft Corporation) Hidden
OpenVPN 2.1.1 (HKLM-x32\...\OpenVPN) (Version: 2.1.1 - )
Outils Windows Phone*8.1 pour Visual Studio*2015 - FRA (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM-x32\...\{D5409B11-EF28-37A1-AE7A-6051A5BAD923}) (Version: 4.5.50932 - Microsoft Corporation)
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.1 RC für Windows Store-Apps (Deutsch) (x32 Version: 4.5.21005 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen für Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM-x32\...\{3F514FDC-F0F2-3B99-86D6-F7B3A2679B39}) (Version: 4.5.51209 - Microsoft Corporation)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PolygonAusLinien (HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\f7a0237a60b83bf1) (Version: 1.0.0.2 - PolygonAusLinien)
PowerXpressHybrid (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
PowreShellIntegration.Notifications (x32 Version: 2.5.21003.1603 - Microsoft Corporation) Hidden
PreEmptive Analytics Client German Language Pack (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.3197.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.2.5134.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{21373064-AD95-48DB-A32E-0D9E08EF7355}) (Version: 12.0.2000.8 - Microsoft Corporation)
Prerequisites for SSDT  (HKLM-x32\...\{35C1D9D6-87C0-46A3-B1B4-EDBCC063221C}) (Version: 11.1.3000.0 - Microsoft Corporation)
Project and Item Templates for Visual Studio Community 2015 - ENU (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Project and Item Templates for Visual Studio Express 2015 for Windows 10 - ENU (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
Project and Item Templates for Visual Studio Professionald 2015 - ENU (x32 Version: 14.0.23309 - Microsoft Corporation) Hidden
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Python Tools - Umleitungsvorlage (x32 Version: 1.3 - Microsoft Corporation) Hidden
Python Tools 2.2 for Visual Studio 2015 (HKLM-x32\...\{DE3F045F-57D5-4DAF-A479-DB759047966B}) (Version: 2.2.30718.00 - Microsoft Corporation)
Python Tools Redirection Template (x32 Version: 1.3 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.10.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7250 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.9200.29040 - Realtek Semiconductor Corp.)
Release Management for Visual Studio 2013 (x32 Version: 1.0 - Microsoft Corporation) Hidden
Roslyn Language Services - x86 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Screen Capturer (HKLM-x32\...\Screen Capturer) (Version: 1.0.4.42 - ScreenCapturer.com)
SDK de comprobación de Visual Studio 2012 - esn (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
SharePoint Client Components (Version: 15.0.4641.1002 - Microsoft Corporation) Hidden
SharePoint Client Components (Version: 16.0.3104.1200 - Microsoft Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 7.10 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.10.101 - Skype Technologies S.A.)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Spotify (HKU\S-1-5-21-94231515-3545142930-1258591251-1001\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Stellarium 0.12.0 (HKLM-x32\...\Stellarium_is1) (Version: 0.12.0 - Stellarium team)
Strumenti di Windows Phone 8.1 per Visual Studio 2015 - ITA (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
SugarSync Manager (HKLM-x32\...\SugarSync) (Version: 1.9.80.99066 - SugarSync, Inc.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.17.27 - Synaptics Incorporated)
Synaptics WBF DDK 5011 (HKLM\...\{4D70781C-36A9-4335-9568-565C6F61B5EB}) (Version: 4.5.289.0 - )
Synaptics WBF DDK 5011 (HKLM\...\{9062E143-DEDB-4F8C-B5B8-30AEC328400C}) (Version: 4.5.289.0 - Synaptics)
Team Explorer for Microsoft Visual Studio 2013 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Team Explorer for Microsoft Visual Studio 2015 (x32 Version: 14.0.23102 - Microsoft Corporation) Hidden
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
Test Tools for Microsoft Visual Studio 2015 (x32 Version: 14.0.23107 - Microsoft Corporation) Hidden
ThinkVantage Password Manager (HKLM-x32\...\{70EE2BAA-F82A-4B8A-950E-649EFD64D5B9}) (Version: 4.60.4.0 - Lenovo Group Limited)
ThinkVantage System für aktiven Festplattenschutz (HKLM\...\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}) (Version: 1.77.0.11 - Lenovo)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TortoiseSVN 1.8.11.26392 (64 bit) (HKLM\...\{11309CA9-9118-44D6-B345-83C86A5111D5}) (Version: 1.8.26392 - TortoiseSVN)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
TreeSize Free V3.3.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.3.2 - JAM Software)
TypeScript Power Tool (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
TypeScript Power Tool (x32 Version: 1.6.3.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2013 (x32 Version: 1.0.5.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 (x32 Version: 1.6.3.0 - Microsoft Corporation) Hidden
TypeScript Tools for Microsoft Visual Studio 2015 1.6.3.0 (HKLM-x32\...\{da31aa25-410a-4c1b-9ec0-114dd8dff786}) (Version: 1.6.23313.0 - Microsoft Corporation)
Universal CRT Extension SDK (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (x32 Version: 10.0.10150 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Redistributable (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
VISION 4 für Windows (HKLM-x32\...\WinVision) (Version:  - )
Visual C++ for Mobile Development (Android support) (HKLM-x32\...\{de973d66-fb42-4f73-85cd-7167caaaa669}) (Version: 14.0.23027.0 - Microsoft Corporation)
Visual C++ for Mobile Development (iOS support) (HKLM-x32\...\{bc53ba6f-cc3a-487b-b600-fb0814668a99}) (Version: 14.0.23027.0 - Microsoft Corporation)
Visual Studio 2013 Update 4 (KB2829760) (HKLM-x32\...\{53d408db-eb91-43fb-9d8f-167681c19763}) (Version: 12.0.31101 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VS Update core components (x32 Version: 12.0.31101 - Microsoft Corporation) Hidden
WCF Data Services 5.6.0 Runtime (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services 5.6.4 Runtime (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2013 (x32 Version: 5.6.61587.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2015 (x32 Version: 5.6.62175.4 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{5D8DD6A8-C4D7-4554-93F9-F1CC28C72600}) (Version: 4.1.62812.0 - Microsoft Corporation)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
Winamp (HKLM-x32\...\Winamp) (Version: 5.65  - Nullsoft, Inc)
Windows Software Development Kit - Windows 10.0.26624 (HKLM-x32\...\{e7a0c8b6-b0e9-41e2-8a0a-a6784f88d1d4}) (Version: 10.0.26624 - Microsoft Corporation)
Windows-Treiberpaket - Intel Corporation (iaStorA) HDC  (11/19/2012 11.7.0.1013) (HKLM\...\D1AAAA88A17BD0C40261ADD70E15166BF4D1C076) (Version: 11/19/2012 11.7.0.1013 - Intel Corporation)
Windows-Treiberpaket - Lenovo 1.66.00.22 (11/30/2012 1.66.00.22) (HKLM\...\16E722986C4293F5D6BF43595DFFD631398D5F21) (Version: 11/30/2012 1.66.00.22 - Lenovo)
WinRT Intellisense Desktop - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Xbox Live Extension SDK - en-us (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WinRT Intellisense Xbox Live Extension SDK - Other Languages (x32 Version: 10.0.26624 - Microsoft Corporation) Hidden
WiX Toolset v3.9 Core (x32 Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9 Managed SDK (x32 Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9 Native 2013 SDK (x32 Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9 Visual Studio Integration (x32 Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9 X64 (Version: 3.9.1208.0 - Outercurve Foundation) Hidden
WiX Toolset v3.9.1208.0 (HKLM-x32\...\{0f7c49f2-f5d2-4eaa-9de5-a274bdcbe6af}) (Version: 3.9.1208.0 - Outercurve Foundation)
Workflow Manager Client 1.0 (Version: 2.0.50408.1 - Microsoft Corporation) Hidden
Workflow Manager Tools 1.0 for Visual Studio (Version: 2.0.50408.2 - Microsoft Corporation) Hidden
Xaldon WebSpider2 (HKLM-x32\...\WebSpider2) (Version:  - )
Xamarin (HKLM-x32\...\{9D5E4FC0-7E1B-4934-8504-C0958FA73EA5}) (Version: 3.11.837.0 - Xamarin)
XAMPP (HKLM-x32\...\xampp) (Version: 1.8.3-5 - Bitnami)
Пакет Visual Studio 2012 Verification SDK - rus (x32 Version: 12.0.30501 - Microsoft Corporation) Hidden
Средства Windows Phone 8.1 для Visual Studio 2015 — RUS (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
用于 Visual Studio 2015 的 Windows Phone 8.1 工具 - 简体中文 (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden
適用於 Visual Studio 2015 的 Windows Phone 8.1 工具 - 繁體中文 (x32 Version: 14.0.23315 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{5C8C2A98-6133-4EBA-BBCC-34D9EA01FC2E}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.1\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Frank\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{78550997-5DEF-4A8A-BAF9-D5774E87AC98}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.13\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AC}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{9E506282-69D3-5ABA-9C1D-15994B37F4AD}\InprocServer32 -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp_x64.dll (Intel)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{C3BC25C0-FCD3-4F01-AFDD-41373F017C9A}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.26.9\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Frank\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-94231515-3545142930-1258591251-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Frank\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => Keine Datei

==================== Wiederherstellungspunkte =========================

29-11-2015 18:10:36 Microsoft Visual Studio Professional 2015
02-12-2015 12:03:18 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2015-09-30 17:50 - 00001068 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 rad.msn.com
127.0.0.1 live.rads.msn.com
127.0.0.1 ads1.msn.com
127.0.0.1 static.2mdn.net
127.0.0.1 g.msn.com
127.0.0.1 a.ads2.msads.net
127.0.0.1 b.ads2.msads.net
127.0.0.1 ac3.msn.com

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0E10C6F8-4F58-44CE-98B7-D6008074F5DA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-11-13] (Microsoft Corporation)
Task: {154904C5-00C1-43E5-BAC0-09BF3DC93F00} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {1F95C7D9-A617-46DE-8AE8-FA5E6070C242} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] ()
Task: {306F83F7-1366-405F-87C5-7B1D79863B14} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {39F67AA1-095E-4C6C-A14C-BD307825DD7F} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2015-03-06] ()
Task: {3C00D097-7EFC-4409-9096-41AC153CFD2C} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe
Task: {48842158-A9BC-410D-9559-06D3C02B2223} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {50CEF86B-E06B-4B75-BE8B-289D30DA62F1} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {5220916F-B9FA-4FF0-8F58-6D9DE5F28C88} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2015-08-17] (Lenovo)
Task: {5760AC53-8FF7-4A7E-BB1B-7B241AB76D3A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {584B53E6-0781-4BBF-AF66-7A12113F73D8} - System32\Tasks\AdobeAAMUpdater-1.0-ThinkPad-Frank => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {5F8D6FE3-D132-406D-A52F-6063E0232906} - System32\Tasks\{36EAE65D-D216-4C80-98DD-6D6FF2060B75} => pcalua.exe -a E:\cdstart.exe -d E:\
Task: {61F528FD-0A48-4D85-BCED-52C1867F84F7} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {6776BC2B-1290-40F9-A933-95C8E30DCFE4} - System32\Tasks\Lenovo\Lenovo Settings Power => Rundll32.exe "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.dll",PwrMgrBkGndMonitor
Task: {712DD93C-5743-4DCB-9BD4-C0A6DDED5B78} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {745EA71C-F24C-4FCF-8D2C-F08F21714F4E} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-05-13] (Realtek Semiconductor)
Task: {79DFD140-9F7F-4399-9DFC-5DDA16301186} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {7D1CC0E6-1959-492A-BA46-808B04516569} - System32\Tasks\Dolby => c:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
Task: {7E5619D7-1A13-43B3-9BE1-A6AD9DF349E1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001Core => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {81A21F46-3400-4FC0-9CB6-0FB270C20FA2} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-05-20] (Realtek Semiconductor)
Task: {85CB4F93-0F9C-4AB2-A2D1-C750278E5457} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {8654FF5D-7ECE-47B0-9B9B-12DA4614D66C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {949585B6-6860-4503-A326-6DC574C59634} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {95505009-9DFC-43A7-ACAC-34055F1092E1} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe
Task: {9A1BA2FA-958F-4436-9CF8-91854EBAD184} - System32\Tasks\CCleanerSkipUAC => F:\PortableApps\CCleaner.exe
Task: {A1B9A94B-49C3-4B1F-8ED9-7A78BD06A358} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2015-08-17] (Lenovo)
Task: {A80CA30B-9C16-46DE-B5E4-600E8D484478} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {BCD10AD1-6648-4FE2-B81A-0B6CDA36EF5A} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-01] (Lenovo)
Task: {CD2E3D97-4BE0-47CB-8CB2-5EAA2A60C7AE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {D18F741C-AEEC-49AC-B2E1-38B3B1F18F80} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001UA => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {D407231D-3812-4404-99CA-D20C545E54E6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {D4C6417D-9B2C-44AF-BBE3-62C8B251E421} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\lenovo\lenovo solution center\App\LSCService.exe [2015-08-17] (Lenovo)
Task: {DBC035D6-AD32-4F0E-B04C-EFAEEEAD2E9B} - System32\Tasks\Intel\Intel Service Manager => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [2013-03-25] (Intel Corporation)
Task: {DC7617A0-EC86-44E8-BE26-30C951DF8F24} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {DE49B109-B81D-4A17-967A-5429DC0A0E8F} - System32\Tasks\{3839690F-193C-41E0-80F4-3BC8EBB96139} => Chrome.exe hxxp://ui.skype.com/ui/0/7.8.0.102/de/abandoninstall?source=lightinstaller&amp;page=tsBing
Task: {E4E7308D-3A1D-4534-AC25-67FF233C3127} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [2015-11-11] ()
Task: {E85CA425-8CF0-4B6A-919E-955D566935F7} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {E88D8FF0-9C70-4156-956A-BE4DFD26E9EC} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2015-08-17] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001Core.job => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-94231515-3545142930-1258591251-1001UA.job => C:\Users\Frank\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2014-04-21 18:14 - 2015-01-16 07:49 - 00118272 ____N () C:\Program Files (x86)\ThinkPad\Utilities\GR\PWMRT64V.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 02652784 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 02652784 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-03-19 18:55 - 2015-03-19 18:55 - 00088960 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2014-05-12 10:49 - 2014-05-12 10:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-10-16 11:02 - 2015-10-16 11:02 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2015-11-28 21:12 - 2015-11-28 21:12 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2013-06-21 14:42 - 2015-01-09 15:40 - 00469720 _____ () C:\Program Files (x86)\Lenovo\LocationAware\loctaskmgr.exe
2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-11-28 21:08 - 2015-11-28 21:08 - 09074176 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2015-11-28 21:08 - 2015-11-28 21:08 - 02416640 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_2015.23.23.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2015-11-28 21:12 - 2015-11-28 21:12 - 00152064 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-11-28 21:12 - 2015-11-28 21:12 - 18906624 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-12-01 19:32 - 2015-12-01 19:32 - 00335360 _____ () C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Windows.Foundation\a0151f05db127c5e199c10af8a83aa95\Windows.Foundation.ni.dll
2013-08-09 10:59 - 2013-01-14 19:25 - 01200088 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-10-16 11:02 - 2015-10-16 11:02 - 00039384 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2015-03-19 18:29 - 2015-03-19 18:29 - 00072064 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll
2015-11-11 19:04 - 2015-11-07 05:36 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libglesv2.dll
2015-11-11 19:04 - 2015-11-07 05:36 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.86\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-94231515-3545142930-1258591251-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.135.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "PasswordManager"
HKLM\...\StartupApproved\Run32: => "AdobeCS5ServiceManager"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{DE6312E8-4EE3-4AAF-9B61-796C7B390708}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe
FirewallRules: [{2F58C98C-3781-40D6-8523-A4CE5CBE576F}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe
FirewallRules: [{CF4AAAB1-F625-4B22-8E9F-34D437468C77}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F135A645-F228-4B1F-B4CC-B669AEB4E292}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{D6855C1D-6AF0-415A-9FBA-2A9B491FC403}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{C3CF170D-6C42-46ED-A0DB-F8463297425D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{FC06ED09-120C-4794-A660-D66E1A27E786}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{66306615-C661-4BAC-AEA3-D834621241FC}] => (Allow) C:\Program Files (x86)\Xamarin\Bonjour\mDNSResponder.exe
FirewallRules: [{33F252D6-B339-40AC-9726-05A9851E1368}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 14.0\Common7\IDE\devenv.exe
FirewallRules: [{714DED83-0CD8-4689-800D-F14E5BE8617F}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{88997D32-A584-412D-9E71-0C191769D972}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{89620FF0-45F7-4954-B064-8F8F64C9654A}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{E98E2341-63CE-499C-AB62-7360A0FDA3FB}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{6D77755C-E779-4E62-A392-C54CECEF18D6}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{EEFEF4AA-F503-4D6C-AC57-4E155069128C}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{2CBC4C60-BB4B-40C8-88D9-AFBA5AEB7E0B}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [{7CF586CD-66F0-45D4-BECB-6B6533913685}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{112A294C-7E41-4DF2-B57C-E7934A95B7F8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CDB9431C-C7F0-46DA-874F-7AB1DC0A4687}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\devenv.exe
FirewallRules: [UDP Query User{6E4D0B5C-28BA-496E-82AF-1DE1D79ECA24}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [TCP Query User{C5F4201F-A825-4853-8484-D8D36333009D}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [UDP Query User{37A50136-6FB0-44CD-9BE2-2192D9209E3B}C:\users\frank\_it\xampp\mysql\bin\mysqld.exe] => (Allow) C:\users\frank\_it\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{8DF6998F-237C-4012-B7F7-02CE8B6B4297}C:\users\frank\_it\xampp\mysql\bin\mysqld.exe] => (Allow) C:\users\frank\_it\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{6068133F-4048-4B9D-A905-5BCB109DC795}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [TCP Query User{F0E4F307-7DCD-4874-A618-DC3AC75EFD89}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [UDP Query User{AAF86D38-6197-4737-8C76-2D5965D1CEE1}C:\users\frank\_it\xampp\apache\bin\httpd.exe] => (Allow) C:\users\frank\_it\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{178F5E83-C451-4D55-B784-CAC1CFED9FDD}C:\users\frank\_it\xampp\apache\bin\httpd.exe] => (Allow) C:\users\frank\_it\xampp\apache\bin\httpd.exe
FirewallRules: [{3642EA59-17A0-412E-AC61-DCD3680F8170}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{1EFA2D11-91FA-48DB-8B88-46B5D0EF5CFE}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{F06AC417-4C59-418A-970C-89EB586D0C9C}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{3580FD1D-CC99-495E-A00F-D58B288947E7}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{9F7C2AE3-B388-46AC-AA11-CAD152463CF9}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{6D1790C8-0023-47D1-AF30-C5577674CFC0}] => (Allow) C:\Program Files (x86)\Nero\KM\NMDllHost.exe
FirewallRules: [{A2E1334D-3845-4185-85DC-101B6C5D0BF7}] => (Allow) C:\Program Files (x86)\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{0A97A30F-6EDB-4251-B41F-86E0529DA5EB}] => (Allow) C:\Program Files (x86)\Nero\Nero Blu-ray Player\Blu-rayPlayer.exe
FirewallRules: [{4EEE3C2C-3A87-4A0B-AD84-E23BB42270B3}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [UDP Query User{C7F89FFF-EF49-4B33-8A5E-C19CB3689BB1}C:\users\frank\desktop\140117_2_biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\desktop\140117_2_biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [TCP Query User{F3F9A95E-2FB7-42BC-A66A-265EFD90AD34}C:\users\frank\desktop\140117_2_biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\desktop\140117_2_biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [UDP Query User{453B2F07-8E26-4607-B12A-319FD1BE3131}C:\users\frank\desktop\bs\biosynthesizer\bin\debug\biosynthesizer.vshost.exe] => (Allow) C:\users\frank\desktop\bs\biosynthesizer\bin\debug\biosynthesizer.vshost.exe
FirewallRules: [TCP Query User{848123A7-500A-49E1-AF07-B2CE88C44584}C:\users\frank\desktop\bs\biosynthesizer\bin\debug\biosynthesizer.vshost.exe] => (Allow) C:\users\frank\desktop\bs\biosynthesizer\bin\debug\biosynthesizer.vshost.exe
FirewallRules: [UDP Query User{2316EB23-8247-4665-A4D1-B0B22E9AB445}C:\users\frank\documents\visual studio 2013\projects\140110_biosynt\140110_biosynt\140105_biosynt\140103_biosynt\biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\documents\visual studio 2013\projects\140110_biosynt\140110_biosynt\140105_biosynt\140103_biosynt\biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [TCP Query User{A2150D54-C816-42CA-B3E2-CF0F4A62A74F}C:\users\frank\documents\visual studio 2013\projects\140110_biosynt\140110_biosynt\140105_biosynt\140103_biosynt\biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\documents\visual studio 2013\projects\140110_biosynt\140110_biosynt\140105_biosynt\140103_biosynt\biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [UDP Query User{66F9DC43-5D68-4E38-A480-17CD25F5EDD1}C:\users\frank\desktop\biosynthesizer\bin\debug\biosynthesizer.vshost.exe] => (Allow) C:\users\frank\desktop\biosynthesizer\bin\debug\biosynthesizer.vshost.exe
FirewallRules: [TCP Query User{F0B2DA2C-350F-4140-8700-3B58C33E7416}C:\users\frank\desktop\biosynthesizer\bin\debug\biosynthesizer.vshost.exe] => (Allow) C:\users\frank\desktop\biosynthesizer\bin\debug\biosynthesizer.vshost.exe
FirewallRules: [UDP Query User{68C8603C-25AD-4FBF-AE34-725927346A8F}C:\users\frank\desktop\biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\desktop\biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [TCP Query User{6D6D48E0-D2E8-4304-A15A-110A6387E948}C:\users\frank\desktop\biosynt\biosyn\bin\debug\biosyn.vshost.exe] => (Allow) C:\users\frank\desktop\biosynt\biosyn\bin\debug\biosyn.vshost.exe
FirewallRules: [{90C3623E-9F0A-481C-B936-440BA4CD3361}] => (Allow) C:\Users\Frank\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [{3855A39A-807A-4FF6-A29A-FD7285D8EDEC}] => (Allow) C:\Users\Frank\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
FirewallRules: [UDP Query User{DD876CE6-5AD4-4FEC-A53E-374D8E2C4D7E}C:\users\frank\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\frank\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{48B56188-1EF0-4F8F-A906-D8A396B385C2}C:\users\frank\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\frank\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{3AFE78F0-BA10-4F38-AD86-9F6BA430763A}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{70031FC1-D872-4690-97FF-692EF55F884E}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe
FirewallRules: [{D5BA54F4-FF0C-464F-8F17-FD34B2E6083D}] => (Allow) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
FirewallRules: [{C7AC09BB-AA10-4D66-9391-D314E8146FB6}] => (Allow) C:\Users\Frank\AppData\Local\Temp\7zS50E1\setup\hpznui40.exe
FirewallRules: [{3ABDD9E3-5913-4E44-B8D1-B881B8D08C9D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{B09ACF79-DE35-4ACE-A0FC-66CD361ADFB5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{3A2BAE36-A28D-4A18-B0CD-2BBB71AB0109}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{EE9A2DEA-825D-4420-82A9-51E6808F63AE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{E091E7A9-F797-45A8-B135-1649BA79547B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{F3CE4FD4-AE73-433F-827D-1C9731EC2C24}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{B9FCFB43-B831-4AF3-BE61-59E494264FC0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{0290A555-9A05-44F9-B6F2-25339DCC1D90}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{61A3E0C2-88EE-4FCE-AE8E-3ABCCAC55C06}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{CF0EA181-E387-41EC-A0F3-1A0917DD7A33}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{267306DB-7B3E-4B2D-8A9E-2E6E358B1BA1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{F97D71BA-C76A-4A3B-812F-7774972F995E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{1C107E1A-8D0A-4F98-BDFF-A49BD0CB457C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{689B98B1-444D-4482-9BE5-B004CD7D2A95}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{05172C87-66DA-48B9-BBF1-01D6DF952CA5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{07D6F24C-6506-41E6-9F30-07882F98C592}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{5A2A86FA-FBB0-4B70-BB38-176D38D95C09}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{D3D91206-5F25-4676-B4A1-E142B2C34853}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{1CF006D0-6192-4D82-8ED6-108824ED7335}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{A987E928-5EC7-4F56-A25E-6B9AF1197687}] => (Allow) C:\Users\Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{7170C4FF-9613-4622-B113-27DE8EDE473F}] => (Allow) C:\Users\Frank\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{FC21550D-3510-4B7B-8B9E-2605C00B0F0E}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{FE60925C-F24F-48C6-8F57-680EE3B0A399}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{CCEF4BE9-B0B8-4C94-967A-34E21F662F7C}] => (Allow) LPort=12292
FirewallRules: [TCP Query User{B8C3B99E-2BF3-4C3C-B11D-D6C12D7C9B07}C:\program files\java\jdk1.7.0_45\bin\javaw.exe] => (Block) C:\program files\java\jdk1.7.0_45\bin\javaw.exe
FirewallRules: [UDP Query User{C3C6DBD2-6E55-4FD4-A1A4-E191EDA7C6FA}C:\program files\java\jdk1.7.0_45\bin\javaw.exe] => (Block) C:\program files\java\jdk1.7.0_45\bin\javaw.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Photosmart C5100 series
Description: Photosmart C5100 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: HP LaserJet 500 color M551
Description: HP LaserJet 500 color M551
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: Hewlett-Packard
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: HP Photosmart C5100
Description: HP Photosmart C5100
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Hewlett-Packard
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/02/2015 00:03:19 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/02/2015 11:52:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SkypeHost.exe, Version: 10.0.0.507, Zeitstempel: 0x56422ca1
Name des fehlerhaften Moduls: SkyWrap.dll, Version: 10.0.0.507, Zeitstempel: 0x56422e1d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x002eb721
ID des fehlerhaften Prozesses: 0xa28
Startzeit der fehlerhaften Anwendung: 0xSkypeHost.exe0
Pfad der fehlerhaften Anwendung: SkypeHost.exe1
Pfad des fehlerhaften Moduls: SkypeHost.exe2
Berichtskennung: SkypeHost.exe3
Vollständiger Name des fehlerhaften Pakets: SkypeHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SkypeHost.exe5

Error: (12/02/2015 09:51:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SystemSettingsBroker.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d7b4
Name des fehlerhaften Moduls: SettingsHandlers_Notifications.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632d70b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002b7d1
ID des fehlerhaften Prozesses: 0x6f8
Startzeit der fehlerhaften Anwendung: 0xSystemSettingsBroker.exe0
Pfad der fehlerhaften Anwendung: SystemSettingsBroker.exe1
Pfad des fehlerhaften Moduls: SystemSettingsBroker.exe2
Berichtskennung: SystemSettingsBroker.exe3
Vollständiger Name des fehlerhaften Pakets: SystemSettingsBroker.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SystemSettingsBroker.exe5

Error: (12/02/2015 09:48:58 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ShellExperienceHost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d93d
Name des fehlerhaften Moduls: QuickActions.dll, Version: 0.0.0.0, Zeitstempel: 0x5632d71c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000001931
ID des fehlerhaften Prozesses: 0x6b0
Startzeit der fehlerhaften Anwendung: 0xShellExperienceHost.exe0
Pfad der fehlerhaften Anwendung: ShellExperienceHost.exe1
Pfad des fehlerhaften Moduls: ShellExperienceHost.exe2
Berichtskennung: ShellExperienceHost.exe3
Vollständiger Name des fehlerhaften Pakets: ShellExperienceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ShellExperienceHost.exe5

Error: (12/01/2015 10:42:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: THINKPAD)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/01/2015 07:02:11 PM) (Source: Perflib) (EventID: 1017) (User: )
Description: ASP.NET_2.0.50727

Error: (12/01/2015 07:02:11 PM) (Source: Perflib) (EventID: 1021) (User: )
Description: ASP.NET_2.0.507278

Error: (12/01/2015 06:55:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d8f4
Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632d193
Ausnahmecode: 0xc0000374
Fehleroffset: 0x00000000000edfac
ID des fehlerhaften Prozesses: 0x27b0
Startzeit der fehlerhaften Anwendung: 0xDllHost.exe0
Pfad der fehlerhaften Anwendung: DllHost.exe1
Pfad des fehlerhaften Moduls: DllHost.exe2
Berichtskennung: DllHost.exe3
Vollständiger Name des fehlerhaften Pakets: DllHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: DllHost.exe5

Error: (11/29/2015 06:48:42 PM) (Source: MsiInstaller) (EventID: 10005) (User: THINKPAD)
Description: Product: Microsoft VisualStudio JavaScript Project System -- A newer version of this product is already installed.

Error: (11/29/2015 06:10:38 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (12/02/2015 11:53:56 AM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Dieser Computer ist als Mitglied einer Arbeitsgruppe konfiguriert, nicht als
Mitglied einer Domäne. Der Anmeldedienst braucht bei dieser
Konfiguration nicht gestartet zu sein.

Error: (12/02/2015 11:53:34 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {A677570A-2BA2-4E9A-B2E2-8A02CD8B4FD3}

Error: (12/02/2015 11:53:32 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Lenovo PM Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/02/2015 11:53:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_4e878" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/02/2015 11:53:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _4e878" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/02/2015 11:53:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_4e878" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/02/2015 11:53:28 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_4e878" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/02/2015 11:53:28 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (12/02/2015 11:52:00 AM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
%%1056

Error: (12/02/2015 11:51:32 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Lenovo AVFramework Microphone Volume Controller and Dolby Interface" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2015-12-02 10:17:00.373
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:17:00.366
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:17:00.359
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:16:56.000
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:16:55.924
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:16:55.769
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:16:55.709
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:16:55.579
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:16:55.504
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2015-12-02 10:16:55.340
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i7-3537U CPU @ 2.00GHz
Prozentuale Nutzung des RAM: 29%
Installierter physikalischer RAM: 10073.67 MB
Verfügbarer physikalischer RAM: 7056.52 MB
Summe virtueller Speicher: 12249.67 MB
Verfügbarer virtueller Speicher: 9065.58 MB

==================== Laufwerke ================================

Drive c: (Windows8_OS) (Fixed) (Total:223.81 GB) (Free:56.83 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 69677AFB)

Partition: GPT.

==================== Ende von Addition.txt ============================
Fedsch.

Sollte sich das mit der InetStat nun erledigt haben?
Das Selbe für die "Bonbons"? (oder wie heißt das gleich?!)

Grüße,
Frank

cosinus 02.12.2015 13:05
FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
hosts:
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Alle Zeitangaben in WEZ +1. Es ist jetzt 15:51 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131