| Andreas30 | 03.12.2015 11:54 |
Direkt nach dem Start erscheint "Modul nicht gefunden".
>Guten morgen zusammen,
ich habe seit ein paar Tagen das Problem, dass mir nach dem Start der Hinweis "Modul nicht gefunden" angezeigt wird und ich auch nach einem Scan von Comodo nicht mehr weiss, was ich machen soll! Eigentlich arbeitet mein PC nach löschungen verschiedener Programme mittlerweile wieder ganz ordentlich, aber der Hinweis wird wahrscheinlich auf Reste eines Trojaners oder so hinweisen! (Weg damit)
Hab hier im Forum auch vorher schon nach diesem Problem geschaut und hab dieses vorhin mit fabers recovery scan tool bearbeitet! Aber jetzt brauch ich dann wirklich Hilfe
ich pack euch die ergebnisse mal direkt rein, vllt könnt ihr mir ja gleich helfen
vielen dank schonmal im voraus
Frst.txt - Editor
FRST Logfile: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:01-12-2015
durchgeführt von Andreas (Administrator) auf ANDREAS (03-12-2015 11:03:59)
Gestartet von C:\Users\Andreas\Downloads
Geladene Profile: Andreas (Verfügbare Profile: Andreas)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Edge)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(Softex Inc.) C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe
(Intel Corporation) C:\Windows\System32\SET557A.tmp
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Windows\SysWOW64\SET4486.tmp
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Abengine) C:\Program Files (x86)\Fast-Search\acengine.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe
(DTools LIMITED) C:\ProgramData\9WMiniPro9\WMiniPro.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
() C:\Program Files (x86)\ScreenSnapshotTool\1.1.0.10921\ScreenShotServ.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfemms.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\CSP\1.6.1180.0\McCSPServiceHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
() C:\Program Files (x86)\ScreenSnapshotTool\1.1.0.10921\ScreenSnapshot.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe
(Space Sound Pro) C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Comodo) C:\Program Files (x86)\Comodo\Chromodo\chromodo.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1386712 2014-06-24] (Realtek Semiconductor)
HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\ClientCore.exe [3962936 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe [415288 2014-03-28] (Hewlett-Packard)
HKLM\...\Run: [Sound+] => C:\Program Files\Sound+\Sound+.exe [4143616 2015-10-23] (Sound+)
HKLM\...\Run: [SpaceSoundPro] => C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe [4203520 2015-08-03] (Space Sound Pro)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944136 2015-07-17] (Synaptics Incorporated)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPMSGSVC.exe [506680 2014-06-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [mpck_en_004090152] => "C:\Program Files (x86)\mpck_en_004090152\mpck_en_004090152.exe"
HKLM-x32\...\Run: [rec_en_77] => C:\Program Files (x86)\rec_en_77\rec_en_77.exe [4018392 2015-11-23] ()
HKLM-x32\...\Run: [gmsd_de_005010153] => [X]
HKLM-x32\...\Run: [gmsd_de_005010154] => [X]
HKLM-x32\...\Run: [gmsd_de_005010155] => C:\Program Files (x86)\gmsd_de_005010155\gmsd_de_005010155.exe [4336304 2015-11-23] ()
HKLM-x32\...\Run: [tvncontrol] => C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2015-01-30] (Comodo Security Solutions, Inc.)
HKLM-x32\...\Run: [gmsd_de_005010156] => C:\Program Files (x86)\gmsd_de_005010156\gmsd_de_005010156.exe [4338864 2015-11-24] ()
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1884890629-360092094-2303528047-1001\...\Run: [GoogleChromeAutoLaunch_46A172103AF55F16E10754CCD32BD34E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [811848 2015-11-07] (Google Inc.)
HKU\S-1-5-21-1884890629-360092094-2303528047-1001\...\Run: [InetStat] => C:\Users\Andreas\AppData\Roaming\InetStat\inetstat.exe [840206 2015-11-24] ()
HKU\S-1-5-21-1884890629-360092094-2303528047-1001\...\RunOnce: [Uninstall C:\Users\Andreas\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Andreas\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start GeekBuddy.lnk [2015-11-28]
ShortcutTarget: Start GeekBuddy.lnk -> C:\Program Files\COMODO\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Winsock: Catalog9-x64 01 C:\WINDOWS\system32\acengine64.dll [308136 2015-11-19] (Abengine)
Winsock: Catalog9-x64 02 C:\WINDOWS\system32\acengine64.dll [308136 2015-11-19] (Abengine)
Winsock: Catalog9-x64 03 C:\WINDOWS\system32\acengine64.dll [308136 2015-11-19] (Abengine)
Winsock: Catalog9-x64 04 C:\WINDOWS\system32\acengine64.dll [308136 2015-11-19] (Abengine)
Winsock: Catalog9-x64 05 C:\WINDOWS\system32\acengine64.dll [308136 2015-11-19] (Abengine)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{f202c746-f929-4b93-b5b8-ecb6ea4ea064}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartpageing.com/web/?type=ds&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartpageing.com/?type=hp&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartpageing.com/web/?type=ds&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.uk.msn.com/HPNOT14/4
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/4
HKU\S-1-5-21-1884890629-360092094-2303528047-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.hao123.com/?tn=sdks_inner_hp_01_hao123_de&guid=2bd6920bddaba7dd82be3ebd89f18f0a
HKU\S-1-5-21-1884890629-360092094-2303528047-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartpageing.com/?type=hp&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartpageing.com/web/?type=ds&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartpageing.com/web/?type=ds&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartpageing.com/web/?type=ds&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartpageing.com/web/?type=ds&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0&q={searchTerms}
SearchScopes: HKLM-x32 -> {60495DA5-575C-451E-990C-FCC7EFB8778B} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-1884890629-360092094-2303528047-1001 -> {02E9C7D7-ED67-4E53-9ABE-4FD4AC094231} URL = hxxp://www-searching.com/s.ashx?prd=opensearch&q={searchTerms}&s=FBMzftpbl2,c9254ac0-9cf9-45ad-8455-626ac6d01873,
SearchScopes: HKU\S-1-5-21-1884890629-360092094-2303528047-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartpageing.com/web/?type=ds&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1884890629-360092094-2303528047-1001 -> {60495DA5-575C-451E-990C-FCC7EFB8778B} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2015-09-28] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2015-09-28] (McAfee, Inc.)
FireFox:
========
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-09-28] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll [2013-09-05] (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-13] ()
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-09-28] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-20] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2015-11-23] [ist nicht signiert]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.sweet-page.com/?type=hp&ts=1448810962&z=ca2c397948453f8734d181agez0z9bbbcg8e8t1w5t&from=cornl&uid=ST500LT012-1DG142_S3PGKCJ0
CHR StartupUrls: Default -> "hxxp://www.sweet-page.com/?type=hp&ts=1448810962&z=ca2c397948453f8734d181agez0z9bbbcg8e8t1w5t&from=cornl&uid=ST500LT012-1DG142_S3PGKCJ0"
CHR DefaultSearchURL: Default -> hxxp://www.sweet-page.com/web/?type=ds&ts=1448810962&z=ca2c397948453f8734d181agez0z9bbbcg8e8t1w5t&from=cornl&uid=ST500LT012-1DG142_S3PGKCJ0&q={searchTerms}
CHR DefaultSearchKeyword: Default -> sweet-page
CHR Profile: C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-20]
CHR Extension: (Google Docs) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-20]
CHR Extension: (Google Drive) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-20]
CHR Extension: (YouTube) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-20]
CHR Extension: (Google Search) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-20]
CHR Extension: (Google Sheets) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-20]
CHR Extension: (Google Docs Offline) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-20]
CHR Extension: (Background for LinkedIn) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmamnhfbiackmckkaopokinkpmccdnki [2015-11-20]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-20]
CHR Extension: (Gmail) - C:\Users\Andreas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-20]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 acengine; C:\Program Files (x86)\Fast-Search\acengine.exe [2436152 2015-11-19] (Abengine) [Datei ist nicht signiert]
R2 ChromodoUpdater; C:\Program Files (x86)\Comodo\Chromodo\chromodo_updater.exe [1984696 2015-11-13] (Comodo)
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70872 2015-03-05] (Comodo Security Solutions, Inc.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2015-01-30] (Comodo Security Solutions, Inc.)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2014-06-03] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [475960 2014-06-19] (Hewlett-Packard Development Company, L.P.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [783120 2015-09-28] (McAfee, Inc.)
S3 McAWFwk; C:\Program Files\Common Files\mcafee\ActWiz\McAWFwk.exe [334608 2013-07-29] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.6.1180.0\McCSPServiceHost.exe [1694152 2015-09-01] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [639456 2015-08-11] (McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232656 2015-07-31] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [376264 2015-08-10] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [254792 2015-07-31] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [368584 2015-09-01] (McAfee, Inc.)
R2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [88064 2014-03-28] (Softex Inc.) [Datei ist nicht signiert]
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-06-24] (Realtek Semiconductor)
S2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-17] (Synaptics Incorporated)
R2 TheScreenSnapshotService; C:\Program Files (x86)\ScreenSnapshotTool\1.1.0.10921\ScreenShotServ.exe [152016 2015-09-17] ()
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WdsManPro; C:\ProgramData\9WMiniPro9\WMiniPro.exe [309384 2015-11-29] (DTools LIMITED)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [245248 2015-10-30] (Microsoft Corporation)
R1 CFRMD; C:\Windows\System32\DRIVERS\CFRMD.sys [40224 2014-06-26] (Windows (R) Win 7 DDK provider)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [80768 2015-08-10] (McAfee, Inc.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91912 2013-11-12] (CyberLink)
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [31232 2013-11-11] (Intel Corporation)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207208 2015-05-19] (McAfee, Inc.)
R0 MBI; C:\Windows\System32\drivers\MBI.sys [29464 2014-01-23] (Intel Corporation)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [413432 2015-08-10] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349096 2015-08-10] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [82072 2015-08-10] (McAfee, Inc.)
S3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [495856 2015-08-10] (McAfee, Inc.)
U3 mfefirek01; kein ImagePath
U3 mfefirek02; kein ImagePath
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [839376 2015-08-10] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [537408 2015-08-12] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [111256 2015-08-12] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [244024 2015-08-10] (McAfee, Inc.)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-05] (Realtek Semiconductor Corp.)
R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [624424 2015-10-30] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [4629744 2015-08-28] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-17] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-12-03 11:03 - 2015-12-03 11:05 - 00023861 _____ C:\Users\Andreas\Downloads\FRST.txt
2015-12-03 11:03 - 2015-12-03 11:03 - 00000000 ____D C:\FRST
2015-12-03 11:01 - 2015-12-03 11:02 - 02350080 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64.exe
2015-12-03 10:58 - 2015-12-03 10:59 - 01721344 _____ (Farbar) C:\Users\Andreas\Downloads\FRST.exe
2015-12-03 10:42 - 2015-12-03 10:42 - 00000000 ___HD C:\OneDriveTemp
2015-12-03 10:41 - 2015-12-03 10:41 - 00000000 ____D C:\WINDOWS\LastGood
2015-12-02 18:32 - 2015-12-02 18:32 - 00000000 ____D C:\Users\Andreas\AppData\Local\NetworkTiles
2015-12-02 16:39 - 2015-12-02 16:41 - 00002405 _____ C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-02 16:27 - 2015-12-02 16:27 - 00000000 ____D C:\Users\Andreas\AppData\Local\Publishers
2015-12-02 16:20 - 2015-12-02 16:20 - 00000000 ____D C:\ProgramData\Microsoft OneDrive
2015-12-02 16:15 - 2015-12-02 16:15 - 00000000 ____D C:\Users\Andreas\AppData\Local\Comms
2015-12-02 16:12 - 2015-12-02 16:12 - 00000000 ____D C:\Users\Andreas\AppData\Local\ActiveSync
2015-12-02 16:11 - 2015-12-03 10:41 - 00000000 __SHD C:\Users\Andreas\IntelGraphicsProfiles
2015-12-02 16:11 - 2015-12-02 16:11 - 00000000 ____D C:\Users\Andreas\AppData\Local\TileDataLayer
2015-12-02 16:10 - 2015-12-03 10:41 - 00000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat
2015-12-02 16:10 - 2015-12-02 16:10 - 00000020 ___SH C:\Users\Andreas\ntuser.ini
2015-12-02 16:09 - 2015-12-02 16:09 - 00000000 ____D C:\ProgramData\USOShared
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-12-02 12:55 - 2015-12-02 12:55 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-12-02 12:52 - 2015-12-02 12:52 - 00022960 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-02 12:51 - 2015-12-02 12:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-02 12:38 - 2015-12-02 12:38 - 00000000 ____D C:\Users\Public\Documents\Baidu
2015-12-02 12:34 - 2015-12-02 12:34 - 00000000 ____D C:\Users\Default\Documents\hp.system.package.metadata
2015-12-02 12:34 - 2015-12-02 12:34 - 00000000 ____D C:\Users\Default\Documents\hp.applications.package.appdata
2015-12-02 12:34 - 2015-12-02 12:34 - 00000000 ____D C:\Users\Default User\Documents\hp.system.package.metadata
2015-12-02 12:34 - 2015-12-02 12:34 - 00000000 ____D C:\Users\Default User\Documents\hp.applications.package.appdata
2015-12-02 12:33 - 2015-12-02 12:33 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-02 12:28 - 2015-12-02 12:28 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-02 12:26 - 2015-12-02 16:11 - 00000000 ____D C:\Users\Andreas
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Vorlagen
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Startmenü
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Netzwerkumgebung
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Lokale Einstellungen
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Eigene Dateien
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Druckumgebung
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Documents\Eigene Videos
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Documents\Eigene Musik
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Documents\Eigene Bilder
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\AppData\Local\Verlauf
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\AppData\Local\Anwendungsdaten
2015-12-02 12:26 - 2015-12-02 12:26 - 00000000 _SHDL C:\Users\Andreas\Anwendungsdaten
2015-12-02 12:25 - 2015-12-02 16:28 - 02003182 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-02 12:25 - 2015-12-02 12:25 - 01909068 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-12-02 12:22 - 2015-12-02 12:22 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2015-12-02 12:21 - 2015-12-02 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Music, Photos and Videos
2015-12-02 12:21 - 2015-12-02 12:28 - 00000000 ____D C:\Program Files\Intel
2015-12-02 12:21 - 2015-12-02 12:21 - 00000000 ____D C:\WINDOWS\SysWOW64\sda
2015-12-02 12:21 - 2015-12-02 12:21 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-02 12:21 - 2015-12-02 12:21 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2015-12-02 12:21 - 2015-12-02 12:21 - 00000000 ____D C:\Program Files\Realtek
2015-12-02 12:21 - 2015-08-27 18:20 - 00072704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2015-12-02 12:21 - 2015-08-27 18:20 - 00069120 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2015-12-02 12:20 - 2015-12-02 12:20 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2015-12-02 12:20 - 2015-12-02 12:20 - 00000000 ____D C:\Program Files\Synaptics
2015-12-02 12:18 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-02 12:15 - 2015-12-02 12:37 - 00279280 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-02 12:13 - 2015-12-02 16:10 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-02 12:07 - 2015-12-02 12:07 - 00000000 ____D C:\Windows.old
2015-12-02 12:06 - 2015-12-02 12:06 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 22394880 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 13376512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 13017088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 12120064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 03670832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-02 12:06 - 2015-12-02 12:06 - 02918808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-02 12:06 - 2015-12-02 12:06 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-02 12:06 - 2015-12-02 12:06 - 02587136 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 02544264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 02179584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 02064384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 01998848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 01707008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-02 12:06 - 2015-12-02 12:06 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 01212416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00914944 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-02 12:06 - 2015-12-02 12:06 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-02 12:06 - 2015-12-02 12:06 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-02 12:06 - 2015-12-02 12:06 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-02 12:06 - 2015-12-02 12:06 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-02 12:06 - 2015-12-02 12:06 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-02 12:06 - 2015-12-02 12:06 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-02 12:06 - 2015-12-02 12:06 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-02 12:06 - 2015-12-02 12:06 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-02 12:03 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-02 12:03 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-02 12:03 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-02 12:03 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-02 12:03 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-02 11:52 - 2015-12-02 11:52 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-02 11:49 - 2015-12-02 11:49 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-12-02 11:49 - 2015-12-02 11:49 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-02 11:49 - 2015-12-02 11:49 - 00000000 ____D C:\Program Files\MSBuild
2015-12-02 11:49 - 2015-12-02 11:49 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-02 11:49 - 2015-12-02 11:49 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-02 11:49 - 2015-12-02 11:49 - 00000000 ____D C:\inetpub
2015-12-02 11:48 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-02 11:48 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-02 11:48 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-02 11:48 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-02 11:48 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-02 11:48 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-02 11:25 - 2015-12-02 12:54 - 00009528 _____ C:\WINDOWS\diagwrn.xml
2015-12-02 11:25 - 2015-12-02 12:54 - 00009528 _____ C:\WINDOWS\diagerr.xml
2015-11-29 16:30 - 2015-11-29 16:31 - 00000000 ____D C:\ProgramData\9WMiniPro9
2015-11-29 16:29 - 2015-11-29 16:29 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\sweet-page
2015-11-29 15:55 - 2015-11-29 15:58 - 29234869 _____ (AVG Technologies) C:\Users\Andreas\Downloads\AVG_Antivirus7161Free_x86_694.exe
2015-11-29 14:40 - 2015-11-29 14:40 - 00000000 ____D C:\Program Files (x86)\ESET
2015-11-29 14:39 - 2015-11-29 14:39 - 02870984 _____ (ESET) C:\Users\Andreas\Downloads\esetsmartinstaller_deu.exe
2015-11-29 14:09 - 2015-11-29 14:09 - 07635472 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\GetWindows10-sds_____________.exe
2015-11-29 01:56 - 2015-11-29 01:56 - 00000000 ____D C:\ProgramData\Nico Mak Computing
2015-11-29 00:09 - 2015-11-29 00:09 - 00000000 ____D C:\ProgramData\ReviverSoft
2015-11-28 12:10 - 2015-11-28 12:10 - 00000000 ____D C:\Program Files\ReviverSoft
2015-11-28 11:59 - 2015-12-03 10:42 - 00003256 _____ C:\WINDOWS\System32\Tasks\WinZip Malware Protector_startup
2015-11-28 11:58 - 2015-11-29 01:52 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Nico Mak Computing
2015-11-28 11:57 - 2015-12-02 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Malware Protector
2015-11-28 11:57 - 2015-11-29 01:53 - 00000000 ____D C:\Program Files (x86)\WinZip Malware Protector
2015-11-28 11:57 - 2015-11-28 11:55 - 00107016 _____ (GreenTree Applications SRL) C:\Users\Andreas\Downloads\FlashPlayer_Updater [1].exe
2015-11-28 11:57 - 2015-03-17 11:03 - 00020480 _____ C:\WINDOWS\system32\wsusnative64.exe
2015-11-28 11:54 - 2015-11-28 11:54 - 00975264 _____ (Generic app ) C:\Users\Andreas\Downloads\FlashPlayer_Updater.exe
2015-11-28 11:36 - 2015-11-28 11:36 - 00686160 _____ C:\Users\Andreas\Downloads\Setup (2).exe
2015-11-28 11:36 - 2015-11-28 11:36 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Ashampoo
2015-11-28 11:36 - 2015-11-28 11:36 - 00000000 ____D C:\Users\Andreas\AppData\Local\ashampoo
2015-11-28 11:35 - 2015-12-02 12:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2015-11-28 11:35 - 2015-11-28 11:35 - 00001346 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio 2015.lnk
2015-11-28 11:31 - 2015-12-02 12:52 - 00002614 _____ C:\WINDOWS\System32\Tasks\WinZipDriverUpdater_UPDATES
2015-11-28 11:31 - 2015-12-02 11:31 - 00000316 _____ C:\WINDOWS\Tasks\WinZipDriverUpdater_UPDATES.job
2015-11-28 11:31 - 2015-11-29 01:41 - 00000000 ____D C:\Program Files (x86)\Ashampoo
2015-11-28 11:31 - 2015-11-28 11:36 - 00000000 ____D C:\ProgramData\Ashampoo
2015-11-28 11:30 - 2015-12-02 16:19 - 00003252 _____ C:\WINDOWS\System32\Tasks\WinZipDriverUpdaterRunAtStartup
2015-11-28 11:30 - 2015-11-29 01:52 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\WinZip
2015-11-28 11:30 - 2015-11-28 11:30 - 00686168 _____ C:\Users\Andreas\Downloads\Setup (1).exe
2015-11-28 11:29 - 2015-12-02 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip Driver Updater
2015-11-28 11:29 - 2015-11-29 01:52 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\yoursearching
2015-11-28 11:29 - 2015-11-29 01:52 - 00000000 ____D C:\Program Files (x86)\WinZip Driver Updater
2015-11-28 11:29 - 2015-11-29 00:42 - 00000000 ____D C:\Program Files (x86)\OneSystemCare
2015-11-28 11:29 - 2015-11-28 11:30 - 00000000 ____D C:\ProgramData\4WMiniPro4
2015-11-28 11:29 - 2015-11-28 11:29 - 00034498 _____ C:\Users\Andreas\AppData\Roaming\ICSW_0P1F1E1T0J1T1CtJ1V0P1C1L1R1P0F1F2Y1G2Z1T1L1G1V0P0P0I.txt
2015-11-28 11:29 - 2015-11-28 11:29 - 00000296 _____ C:\WINDOWS\Tasks\One System CarePeriod.job
2015-11-28 11:28 - 2015-11-29 16:24 - 29727656 _____ (Oracle Corporation) C:\Users\Andreas\Downloads\setup [1].exe
2015-11-28 11:27 - 2015-11-28 11:27 - 00962696 _____ (Software ) C:\Users\Andreas\Downloads\setup.exe
2015-11-25 19:53 - 2015-11-25 19:53 - 71087912 _____ C:\Users\Andreas\Downloads\c66739117ad9598e39c6418989440fb1.mp4
2015-11-24 18:29 - 2015-12-02 12:51 - 00002256 _____ C:\WINDOWS\System32\Tasks\Beach Comp
2015-11-24 18:29 - 2015-11-24 18:29 - 00000000 ____D C:\Users\Andreas\AppData\Local\Beach Comp
2015-11-24 18:28 - 2015-12-02 12:27 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat
2015-11-24 18:28 - 2015-11-29 01:52 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\InetStat
2015-11-24 18:20 - 2015-12-02 09:42 - 00000000 ____D C:\Users\Andreas\AppData\Local\gmsd_de_005010156
2015-11-24 18:20 - 2015-11-29 01:52 - 00000000 ____D C:\Program Files (x86)\gmsd_de_005010156
2015-11-23 21:40 - 2015-11-23 21:40 - 00000000 ____D C:\Program Files (x86)\Comodo
2015-11-23 18:23 - 2015-12-02 12:36 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpaceSoundPro 1.0
2015-11-23 18:23 - 2015-11-29 01:52 - 00000000 ____D C:\Program Files (x86)\SpaceSondPro_v53.9510
2015-11-23 18:15 - 2015-11-23 18:15 - 00000000 ___HD C:\VTRoot
2015-11-23 18:14 - 2015-11-23 21:37 - 00033462 _____ C:\WINDOWS\system32\Drivers\fvstore.dat
2015-11-23 18:13 - 2015-11-23 18:14 - 01466656 _____ C:\Users\Andreas\Downloads\VLC media player 32 Bit - CHIP-Installer.exe
2015-11-23 18:08 - 2015-11-23 18:56 - 791547261 _____ C:\Users\Andreas\Downloads\video.mp4
2015-11-23 17:51 - 2015-11-23 17:51 - 00000000 ____D C:\WINDOWS\System32\Tasks\COMODO
2015-11-23 17:49 - 2015-11-23 21:37 - 00007520 _____ C:\WINDOWS\system32\Drivers\sfi.dat
2015-11-23 17:49 - 2015-11-23 17:49 - 651293402 _____ C:\WINDOWS\MEMORY.DMP
2015-11-23 17:20 - 2015-11-23 17:20 - 00000000 ____D C:\ProgramData\Shared Space
2015-11-23 17:19 - 2015-12-02 12:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2015-11-23 17:19 - 2015-11-28 11:58 - 00002342 _____ C:\Users\Public\Desktop\GeekBuddy.lnk
2015-11-23 17:19 - 2015-11-23 21:38 - 00000000 ____D C:\Program Files\COMODO
2015-11-23 17:19 - 2015-11-23 17:19 - 00000000 ____D C:\Users\Andreas\AppData\Local\Comodo
2015-11-23 17:18 - 2015-11-23 17:18 - 00000000 ____D C:\ProgramData\Comodo Downloader
2015-11-23 17:11 - 2015-11-23 21:38 - 00000000 ____D C:\ProgramData\Comodo
2015-11-23 16:43 - 2015-11-23 17:08 - 225688096 _____ (COMODO) C:\Users\Andreas\Downloads\cispremium_installer_v8.2.0.4703.exe
2015-11-23 16:38 - 2015-12-02 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP
2015-11-23 16:38 - 2015-12-02 09:37 - 00000000 ____D C:\Users\Andreas\AppData\Local\gmsd_de_005010155
2015-11-23 16:38 - 2015-11-29 01:52 - 00000000 ____D C:\Program Files (x86)\gmsd_de_005010155
2015-11-23 16:09 - 2015-08-22 14:42 - 00066400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:42 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00063840 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-11-23 16:09 - 2015-08-22 14:35 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-11-22 23:12 - 2015-11-23 00:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-22 23:12 - 2015-10-27 18:43 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-22 22:57 - 2015-12-02 20:44 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\ScreenSnapshotTool
2015-11-22 22:57 - 2015-11-22 22:57 - 00000000 ____D C:\Users\Public\Documents\Guid
2015-11-22 22:57 - 2015-11-22 22:57 - 00000000 ____D C:\Program Files (x86)\ScreenSnapshotTool
2015-11-22 22:42 - 2015-11-22 22:42 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2015-11-22 20:21 - 2015-07-22 15:19 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcResources.dll
2015-11-22 20:20 - 2014-07-10 05:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2015-11-22 18:14 - 2015-11-29 01:52 - 00000000 ____D C:\Users\Andreas\AppData\Local\SearchModule
2015-11-22 17:59 - 2014-10-31 04:23 - 00733696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2015-11-22 17:50 - 2014-10-29 02:54 - 00408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll
2015-11-22 17:48 - 2014-10-29 02:59 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe
2015-11-22 16:56 - 2015-12-02 12:51 - 00002176 _____ C:\WINDOWS\System32\Tasks\{72B3C6E9-C316-429E-92A6-E973A08C5823}
2015-11-22 15:14 - 2015-11-22 15:14 - 00296785 _____ C:\Users\Andreas\Downloads\C750.tmp
2015-11-21 19:44 - 2015-12-02 12:37 - 00009000 _____ C:\WINDOWS\SysWOW64\acengineOff.ini
2015-11-21 19:44 - 2015-12-02 12:37 - 00009000 _____ C:\WINDOWS\system32\acengineOff.ini
2015-11-21 19:44 - 2015-11-21 19:46 - 00000592 _____ C:\task.vbs
2015-11-21 19:44 - 2015-11-19 14:29 - 00308136 _____ (Abengine) C:\WINDOWS\system32\acengine64.dll
2015-11-21 19:44 - 2015-11-19 14:29 - 00260728 _____ (Abengine) C:\WINDOWS\SysWOW64\acengine.dll
2015-11-21 19:43 - 2015-12-01 17:20 - 00000000 ____D C:\Program Files (x86)\Fast-Search
2015-11-21 19:43 - 2015-11-29 16:30 - 00000098 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-11-21 19:43 - 2015-11-29 01:52 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\istartpageing
2015-11-21 19:43 - 2015-11-23 21:38 - 00000000 ____D C:\Program Files\SpaceSoundPro
2015-11-21 19:43 - 2015-11-23 21:38 - 00000000 ____D C:\Program Files (x86)\SFK
2015-11-21 19:43 - 2015-11-23 16:37 - 00000000 ____D C:\Program Files (x86)\Opera
2015-11-21 19:43 - 2015-11-21 19:46 - 00000000 ____D C:\Program Files (x86)\SpaceSondPro_v53.9414
2015-11-21 19:43 - 2015-11-21 19:44 - 00000000 ____D C:\ProgramData\ZWMiniProZ
2015-11-21 19:43 - 2015-11-21 19:43 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\cpuminer
2015-11-21 19:43 - 2015-11-21 19:43 - 00000000 ____D C:\Program Files (x86)\SpaceSondPro
2015-11-21 19:19 - 2015-11-23 18:33 - 00000000 ____D C:\Program Files (x86)\rec_en_77
2015-11-21 19:19 - 2015-11-21 19:19 - 00000000 ____D C:\Users\Andreas\AppData\Local\rec_en_77
2015-11-21 19:09 - 2015-11-23 16:09 - 00000000 ____D C:\Users\Andreas\AppData\Local\D2A8B3F8-1448132992-E411-A654-3863BB803291
2015-11-21 19:09 - 2013-08-22 14:25 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2015-11-21 19:08 - 2015-12-01 17:19 - 00000000 ____D C:\Program Files (x86)\D2A8B3F8-1448129326-E411-A654-3863BB803291
2015-11-21 19:08 - 2015-11-29 01:52 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\NUIns
2015-11-21 19:04 - 2015-11-25 17:12 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2015-11-20 17:35 - 2015-12-02 23:40 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d123b16d1b2c0c.job
2015-11-20 17:35 - 2015-12-02 12:52 - 00003502 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1d123b16d1b2c0c
2015-11-20 17:31 - 2015-12-02 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MOBILEPCSTARTERKIT
2015-11-20 17:31 - 2015-12-02 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-20 17:31 - 2015-12-01 20:37 - 00000000 ____D C:\Program Files (x86)\RayDld
2015-11-20 17:31 - 2015-11-23 17:54 - 00000000 ____D C:\Program Files (x86)\mpck_en_004090152
2015-11-20 17:31 - 2015-11-23 17:19 - 00001145 _____ C:\Users\Public\Desktop\Internet (Chromodo).lnk
2015-11-20 17:31 - 2015-11-21 18:59 - 00000000 ____D C:\Users\Andreas\AppData\Local\mpck_en_004090152
2015-11-20 17:30 - 2015-12-03 10:41 - 00001130 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-20 17:30 - 2015-12-02 23:40 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-20 17:30 - 2015-12-02 12:51 - 00003502 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-11-20 17:30 - 2015-12-02 12:51 - 00003274 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-11-20 17:30 - 2015-12-02 12:36 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sound+ 1.0
2015-11-20 17:30 - 2015-12-02 12:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNEn
2015-11-20 17:30 - 2015-11-23 19:02 - 00000000 ____D C:\Users\Andreas\AppData\Local\Google
2015-11-20 17:30 - 2015-11-23 18:24 - 00000008 _____ C:\END
2015-11-20 17:30 - 2015-11-21 19:01 - 00000000 ____D C:\Program Files (x86)\spaceeplus_v138.9392
2015-11-20 17:30 - 2015-11-20 17:30 - 00000807 _____ C:\Users\Andreas\Desktop\Sound+.lnk
2015-11-20 17:30 - 2015-11-20 17:30 - 00000000 ____D C:\Program Files\Sound+
2015-11-20 17:30 - 2015-11-20 17:30 - 00000000 ____D C:\Program Files (x86)\spaceeplus
2015-11-20 17:30 - 2015-11-20 17:30 - 00000000 ____D C:\Program Files (x86)\Google
2015-11-20 17:26 - 2015-11-20 17:26 - 00000000 ____D C:\Program Files\Common Files\AV
2015-11-20 17:25 - 2015-11-24 18:31 - 00000000 __SHD C:\Users\Andreas\AppData\Local\EmieUserList
2015-11-20 17:25 - 2015-11-24 18:31 - 00000000 __SHD C:\Users\Andreas\AppData\Local\EmieSiteList
2015-11-20 17:25 - 2015-11-20 17:25 - 00000000 __SHD C:\Users\Andreas\AppData\LocalLow\EmieUserList
2015-11-20 17:22 - 2015-12-03 10:45 - 00004158 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{DD81F2A9-78EA-4C5F-837F-47B6F5DC573E}
2015-11-20 17:22 - 2015-11-20 17:25 - 00000000 __SHD C:\Users\Andreas\AppData\LocalLow\EmieSiteList
2015-11-20 14:22 - 2015-11-20 14:22 - 00000000 ____D C:\Users\Andreas\AppData\Local\GWX
2015-11-20 14:21 - 2015-12-03 10:42 - 00000000 __RDO C:\Users\Andreas\OneDrive
2015-11-20 14:21 - 2015-12-02 12:51 - 00002750 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1884890629-360092094-2303528047-1001
2015-11-20 14:20 - 2015-11-20 14:20 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Macromedia
2015-11-20 14:18 - 2015-12-03 10:46 - 00000000 ____D C:\Users\Andreas\Documents\Youcam
2015-11-20 14:18 - 2015-11-20 14:18 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Hewlett-Packard
2015-11-20 14:18 - 2015-11-20 14:18 - 00000000 ____D C:\Users\Andreas\AppData\Local\CyberLink
2015-11-20 14:17 - 2015-11-20 14:17 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\hpqlog
2015-11-20 14:17 - 2015-11-20 14:17 - 00000000 ____D C:\Users\Andreas\AppData\Local\Hewlett-Packard
2015-11-20 14:16 - 2015-11-20 14:16 - 00000000 ____D C:\WINDOWS\System32\Tasks\WPD
2015-11-20 14:16 - 2015-11-20 14:16 - 00000000 ____D C:\Users\Andreas\AppData\Local\PackageStaging
2015-11-20 14:15 - 2015-12-02 17:23 - 00000000 ____D C:\Users\Andreas\AppData\Local\Packages
2015-11-20 14:15 - 2015-11-22 22:53 - 00001457 _____ C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet-Explorer.lnk
2015-11-20 14:15 - 2015-11-20 14:15 - 00000186 _____ C:\WINDOWS\insFileSpec
2015-11-20 14:15 - 2015-11-20 14:15 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Adobe
2015-11-20 14:15 - 2015-11-20 14:15 - 00000000 ____D C:\Users\Andreas\AppData\Local\VirtualStore
2015-11-20 14:15 - 2014-10-31 17:31 - 00002249 _____ C:\Users\Public\Desktop\Snapfish Fotos.lnk
2015-11-20 14:15 - 2014-10-31 17:15 - 00001322 _____ C:\Users\Public\Desktop\TripAdvisor.lnk
2015-11-20 14:14 - 2015-11-20 14:14 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\Synaptics
2015-11-20 14:12 - 2014-09-03 06:02 - 00000000 ___HD C:\Users\Andreas\Documents\hp.system.package.metadata
2015-11-20 14:12 - 2014-09-03 06:02 - 00000000 ___HD C:\Users\Andreas\Documents\hp.applications.package.appdata
2015-11-20 14:08 - 2015-03-14 02:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-11-20 09:44 - 2015-11-20 09:44 - 00000000 _____ C:\Recovery.txt
2015-11-20 05:41 - 2015-12-02 16:11 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Vorlagen
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Startmenü
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Netzwerkumgebung
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Lokale Einstellungen
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Eigene Dateien
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Druckumgebung
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Videos
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Musik
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Documents\Eigene Bilder
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Verlauf
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\AppData\Local\Anwendungsdaten
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Users\Default.migrated\Anwendungsdaten
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Programme
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\ProgramData\Vorlagen
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\ProgramData\Startmenü
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\ProgramData\Dokumente
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\ProgramData\Anwendungsdaten
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Program Files\Gemeinsame Dateien
2015-11-20 00:51 - 2015-11-20 00:51 - 00000000 _SHDL C:\Dokumente und Einstellungen
2015-11-20 00:46 - 2015-12-02 12:51 - 00002378 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1884890629-360092094-2303528047-500
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-12-03 11:03 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-03 10:53 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-03 10:43 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-12-02 20:41 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-02 18:15 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-02 17:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-02 16:28 - 2015-10-30 19:35 - 00853752 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-02 16:28 - 2015-10-30 19:35 - 00187942 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-02 16:25 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-02 16:25 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-02 16:25 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-02 16:25 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-02 16:25 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-02 16:16 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-02 16:09 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-02 12:55 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-02 12:55 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-12-02 12:53 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-02 12:51 - 2014-10-31 17:23 - 00002346 _____ C:\WINDOWS\System32\Tasks\YCMServiceAgent
2015-12-02 12:41 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-02 12:36 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-02 12:36 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-02 12:36 - 2015-10-30 07:28 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-02 12:36 - 2014-10-31 17:24 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-02 12:36 - 2014-10-31 17:23 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Communication and Chat
2015-12-02 12:36 - 2014-09-03 06:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2015-12-02 12:36 - 2014-09-03 06:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security and Protection
2015-12-02 12:36 - 2014-09-03 06:06 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Productivity and Tools
2015-12-02 12:34 - 2013-08-22 14:36 - 00000000 ____D C:\Users\Default.migrated
2015-12-02 12:31 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2015-12-02 12:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2015-12-02 12:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2015-12-02 12:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\et-EE
2015-12-02 12:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-02 12:31 - 2014-09-03 06:17 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2015-12-02 12:31 - 2014-03-18 11:06 - 00000000 ____D C:\WINDOWS\SysWOW64\gl-es
2015-12-02 12:31 - 2014-03-18 11:06 - 00000000 ____D C:\WINDOWS\SysWOW64\eu-es
2015-12-02 12:31 - 2014-03-18 11:06 - 00000000 ____D C:\WINDOWS\SysWOW64\ca-es-valencia
2015-12-02 12:31 - 2014-03-18 11:06 - 00000000 ____D C:\WINDOWS\SysWOW64\ca-es
2015-12-02 12:31 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Shared
2015-12-02 12:31 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\WindowsInternal.Inbox.Media.Shared
2015-12-02 12:30 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\system32\slmgr
2015-12-02 12:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-02 12:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-02 12:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lv-LV
2015-12-02 12:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\lt-LT
2015-12-02 12:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\InputMethod
2015-12-02 12:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\et-EE
2015-12-02 12:30 - 2014-03-18 11:06 - 00000000 ____D C:\WINDOWS\system32\gl-es
2015-12-02 12:30 - 2014-03-18 11:06 - 00000000 ____D C:\WINDOWS\system32\eu-es
2015-12-02 12:29 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2015-12-02 12:29 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\InputMethod
2015-12-02 12:29 - 2014-03-18 11:06 - 00000000 ____D C:\WINDOWS\system32\ca-es-valencia
2015-12-02 12:29 - 2014-03-18 11:06 - 00000000 ____D C:\WINDOWS\system32\ca-es
2015-12-02 12:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\MediaViewer
2015-12-02 12:29 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\ADFS
2015-12-02 12:28 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-02 12:28 - 2014-09-03 06:02 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2015-12-02 12:25 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-02 12:15 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-02 12:13 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-02 12:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-02 12:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-02 12:07 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-02 12:07 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-02 12:07 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-02 12:04 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2015-12-02 12:02 - 2015-10-30 19:44 - 00000000 ____D C:\Program Files\Windows Journal
2015-12-02 12:02 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2015-12-02 12:02 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2015-12-02 12:02 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2015-12-02 12:02 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\system32\winrm
2015-12-02 12:02 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\system32\WCN
2015-12-02 12:02 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\dsc
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\migwiz
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\en-GB
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\IME
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows Defender
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\System
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2015-12-02 12:02 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2015-12-02 12:02 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\servicing
2015-12-02 11:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-12-02 11:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-12-02 11:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-12-02 11:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-12-02 11:49 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-12-02 11:49 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-12-02 11:49 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-12-02 11:49 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-12-02 11:49 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-12-02 11:49 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-12-02 11:49 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-12-02 11:49 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-12-02 11:49 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-12-02 11:49 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-12-02 11:49 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-12-02 11:49 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-12-02 11:26 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT
2015-11-29 01:52 - 2014-09-03 06:07 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-29 01:41 - 2014-10-31 17:03 - 00000000 ____D C:\Program Files (x86)\Realtek
2015-11-29 00:55 - 2014-10-31 17:10 - 00000000 ___HD C:\Program Files (x86)\Temp
2015-11-29 00:25 - 2014-09-03 06:02 - 00000000 ____D C:\Program Files\Hewlett-Packard
2015-11-25 19:28 - 2014-10-31 17:35 - 00000000 ____D C:\Program Files (x86)\McAfee
2015-11-25 17:16 - 2014-10-31 17:35 - 00000000 ____D C:\Program Files\Common Files\mcafee
2015-11-25 17:08 - 2014-10-31 17:34 - 00000000 ____D C:\ProgramData\McAfee
2015-11-24 02:36 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-11-22 22:51 - 2014-09-03 06:20 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-21 19:09 - 2014-10-31 17:33 - 00000000 ____D C:\Users\Public\CyberLink
2015-11-20 17:48 - 2014-10-31 17:36 - 00001881 _____ C:\Users\Public\Desktop\McAfee LiveSafe - Internet Security.lnk
2015-11-20 14:18 - 2014-09-03 06:21 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2015-11-20 14:15 - 2014-04-05 00:45 - 00000000 ___HD C:\SYSTEM.SAV
2015-11-03 01:12 - 2015-10-30 08:26 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-03 01:12 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-11-28 11:29 - 2015-11-28 11:29 - 0034498 _____ () C:\Users\Andreas\AppData\Roaming\ICSW_0P1F1E1T0J1T1CtJ1V0P1C1L1R1P0F1F2Y1G2Z1T1L1G1V0P0P0I.txt
2015-11-21 19:43 - 2015-11-29 16:30 - 0000098 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-12-02 12:14
==================== Ende von FRST.txt ============================
--- --- ---
Addition.txt - EditorFRST Additions Logfile: Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:01-12-2015
durchgeführt von Andreas (2015-12-03 11:06:43)
Gestartet von C:\Users\Andreas\Downloads
Windows 10 Home (X64) (2015-12-02 15:09:34)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-1884890629-360092094-2303528047-500 - Administrator - Disabled)
Andreas (S-1-5-21-1884890629-360092094-2303528047-1001 - Administrator - Enabled) => C:\Users\Andreas
DefaultAccount (S-1-5-21-1884890629-360092094-2303528047-503 - Limited - Disabled)
Gast (S-1-5-21-1884890629-360092094-2303528047-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1884890629-360092094-2303528047-1003 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.4.144 - Adobe Systems, Inc.)
Advanced ScreenSnapshot 1.1 (HKLM\...\{61FFE1F9-137D-4c31-A181-3415FCAA5946}) (Version: 1.1.0.10921 - qiusheng xie) <==== ACHTUNG
Ashampoo Burning Studio 2015 v.1.15.0 (HKLM-x32\...\{91B33C97-21E3-DF34-9630-2EE80DDE1648}_is1) (Version: 1.15.0 - Ashampoo GmbH & Co. KG)
Beach Comp (HKU\S-1-5-21-1884890629-360092094-2303528047-1001\...\{A6B7E7DC-4B07-0CD0-7EE6-78BF4681A8DA}) (Version: 1.1.3 - Download Experience corp)
Bejeweled 3 (x32 Version: 3.0.2.59 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Build-a-lot (x32 Version: 2.2.0.98 - WildTangent) Hidden
Building the Great Wall of China Collector's Edition (x32 Version: 3.0.2.48 - WildTangent) Hidden
Chromodo (HKLM-x32\...\Chromodo) (Version: 45.7.11.387 - Comodo)
Crazy Chicken Soccer (x32 Version: 2.2.0.110 - WildTangent) Hidden
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.7.4023 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.1.5406 - CyberLink Corp.)
Cyberlink PhotoDirector (Version: 5.0.1.5406 - Ihr Firmenname) Hidden
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.7.4016 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.1.3024 - CyberLink Corp.)
CyberLink PowerDirector 12 (Version: 12.0.1.3024 - Ihr Firmenname) Hidden
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.4.4223 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.4.4218 - CyberLink Corp.)
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Farm Frenzy (x32 Version: 3.0.2.59 - WildTangent) Hidden
Fast-Search (HKLM-x32\...\Fast-Search) (Version: 3.0.1.5 - Geronimo Kenanyahu) <==== ACHTUNG
Foxit PhantomPDF (HKLM-x32\...\{00CD7D62-056A-4F0F-9143-44522D44E6DD}) (Version: 6.0.32.507 - Foxit Corporation)
GamesDesktop 014.005010155 (HKLM-x32\...\gmsd_de_005010155_is1) (Version: - GAMESDESKTOP) <==== ACHTUNG
GamesDesktop 014.005010156 (HKLM-x32\...\gmsd_de_005010156_is1) (Version: - GAMESDESKTOP) <==== ACHTUNG
GeekBuddy (HKLM\...\{266FA04F-F0FA-4F7A-AA1E-387A57F579F2}) (Version: 4.19.131 - Comodo Security Solutions Inc)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (x32 Version: 3.0.2.59 - WildTangent) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Documentation (HKLM-x32\...\{90CE78B2-4F84-4BE8-B55C-ED85759C8445}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7745.4851 - Hewlett-Packard)
HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.01.11 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{7FE016CC-DAA9-4E21-BD2F-98390D1E6F3F}) (Version: 7.6.23.8 - Hewlett-Packard Company)
HP System Event Utility (HKLM-x32\...\{E20B0C89-ACCF-4EBB-909D-2E5BD4A9C024}) (Version: 1.1.11 - Hewlett-Packard Company)
HP Utility Center (HKLM\...\{E8F2076D-1885-4A0F-83D8-77B1F9D384CE}) (Version: 2.5.2 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company)
InetStat (HKU\S-1-5-21-1884890629-360092094-2303528047-1001\...\InetStat) (Version: 0.5b - InetStat) <==== ACHTUNG
Inst5675 (Version: 8.01.11 - Softex Inc.) Hidden
Inst5676 (Version: 8.01.11 - Softex Inc.) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Sideband Fabric Device Driver (HKLM-x32\...\C5A8BC6E-723A-4C0F-96E1-C426D1A4BCA9) (Version: 1.70.305.16316 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)
istartpageing (HKLM-x32\...\istartpageing) (Version: 1.0.0.4 - ) <==== ACHTUNG
Jewel Match 3 (x32 Version: 3.0.2.59 - WildTangent) Hidden
McAfee LiveSafe - Internet Security (HKLM-x32\...\MSC) (Version: 14.0.5120 - McAfee, Inc.)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MobilePCStarterKit 000.004090152 (HKLM-x32\...\mpck_en_004090152_is1) (Version: - MOBILEPCSTARTERKIT) <==== ACHTUNG
Note-UP (HKLM-x32\...\NUIns) (Version: - QUAHOG LIMITED)
Plants vs. Zombies - Game of the Year (x32 Version: 3.0.2.51 - WildTangent) Hidden
Polar Bowler 1st Frame (x32 Version: 3.0.2.59 - WildTangent) Hidden
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.33 - REALTEK Semiconductor Corp.)
SearchModule (HKU\S-1-5-21-1884890629-360092094-2303528047-1001\...\{D2E9FE6A-7003-42A0-96F6-5569DFC2A3A8}_is1) (Version: 2.7.6.1776 - Goobzo LTD)
Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) <==== ACHTUNG
Sound+ (HKLM-x32\...\zz.9392.sp) (Version: 1.0.0 - CSDI) <==== ACHTUNG
SpaceSoundPro (HKLM\...\SpaceSoundPro) (Version: 1.0 - ) <==== ACHTUNG
SpaceSoundPro Service (HKLM-x32\...\zz.9414.ssp) (Version: 1.0.0 - CSDI) <==== ACHTUNG
SpaceSoundPro Service (HKLM-x32\...\zz.9510.ssp) (Version: 1.0.0 - CSDI) <==== ACHTUNG
SVH (HKLM-x32\...\rec_en_77_is1) (Version: - ) <==== ACHTUNG
sweet-page uninstall (HKLM-x32\...\sweet-page uninstall) (Version: - sweet-page) <==== ACHTUNG
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.95 - Synaptics Incorporated)
Trinklit Supreme (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Virtual Families (x32 Version: 2.2.0.98 - WildTangent) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App für HP (x32 Version: 4.0.11.9 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WinZip Driver Updater (HKLM-x32\...\{9854A5C4-5BE5-46E2-A989-352DD8B37E20}_is1) (Version: 1.0.648.16566 - WinZip Computing, S.L. (WinZip Computing))
WinZip Malware Protector (HKLM-x32\...\WinZip Malware Protector_is1) (Version: 2.1.1000.15248 - WinZip International LLC)
Youda Jewel Shop (x32 Version: 3.0.2.51 - WildTangent) Hidden
yoursearching uninstall (HKLM-x32\...\yoursearching uninstall) (Version: - yoursearching)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1884890629-360092094-2303528047-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Andreas\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1884890629-360092094-2303528047-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
==================== Wiederherstellungspunkte =========================
02-12-2015 18:14:46 Windows Update
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {070DAEAC-8CFD-4E19-BB16-2CE8427F8B68} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {081F01E5-F47F-4EE3-AD48-357997E92032} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-20] (Google Inc.)
Task: {0B2BF874-558F-4627-976D-7A51CD39DDC9} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {12A47C55-9EC9-4413-A7CC-C21DCF8D78A8} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {1F0B9FF1-A074-44E2-8FD2-B0B19C7822BF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-03] (Hewlett-Packard Company)
Task: {20BA4C6A-9014-4B88-98AA-B53E68B993B2} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-10-27] (Microsoft Corporation)
Task: {25243BD7-FE2D-4500-84D7-8DBF8F089C4D} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {2B2E3826-2EF4-44A1-BA89-CFCB65C76300} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent
Task: {38A55D5C-F367-40E7-8347-6ACCFF6B5883} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2014-06-03] (Hewlett-Packard Company)
Task: {3AB9317A-7938-467C-B355-2DBA3AD8DFB3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-20] (Google Inc.)
Task: {41AAE44A-1548-45DD-B933-CCB29F111EC5} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {4208FD2C-7D17-4D69-A873-5579341E4087} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {51AF312A-A1F4-4A05-861A-9F23F580A87A} - System32\Tasks\{72B3C6E9-C316-429E-92A6-E973A08C5823} => pcalua.exe -a "C:\Program Files (x86)\SpaceSondPro_v53.9414\SpaceSondPro_Service.exe" -d "C:\Program Files (x86)\SpaceSondPro_v53.9414\"
Task: {57FFDA18-74E6-4B12-90D3-1CBE103340E7} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {6B7E8466-0672-419A-8287-6D2CE1AE1070} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {6FD43B5D-7CED-4B68-AB04-C9817019D7DE} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {882AEA57-EE1F-4F8B-A2D4-F376DC73D0A7} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2014-06-18] (CyberLink Corp.)
Task: {8FDC4106-8E3D-4ACC-AB68-D64A571319F1} - System32\Tasks\WinZipDriverUpdaterRunAtStartup => C:\Program Files (x86)\WinZip Driver Updater\winzipdu.exe [2015-04-02] (WinZip Computing, S.L. (WinZip Computing))
Task: {90974206-859F-4EFB-9119-AB2896C8F23B} - System32\Tasks\WinZip Malware Protector_startup => C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe [2015-05-20] (Nico Mak Computing)
Task: {95CE79F4-3084-4642-B196-053DBFDE7F5F} - System32\Tasks\Beach Comp => Rundll32.exe "C:\Users\Andreas\AppData\Local\Beach Comp\zBin\BeachComp.dll",#3 <==== ACHTUNG
Task: {981145AB-9AE2-4BF0-B1F8-5FD25CB8D062} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {99B7D262-88DA-429A-AE13-A8595DDEB425} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {99CA7D23-A236-4965-B81E-F0464DC27B1F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {A786DAD0-7B3B-47E5-93FF-A75013CC0A5A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {ADE6F998-5CAF-4EE2-80D4-7FBF4C0994F6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-11-04] (HP Inc.)
Task: {B26799FB-4B94-4C5D-8BF2-23513EA08A64} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-11-04] (HP Inc.)
Task: {B76CEF5C-0D92-440E-B8BE-7976BF75E315} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe
Task: {B9898D8E-2573-4DC1-AB92-D0AC43091506} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
Task: {DBAD47DF-7E24-4A67-860C-F1630E704D2C} - System32\Tasks\WinZipDriverUpdater_UPDATES => C:\Program Files (x86)\WinZip Driver Updater\winzipdu.exe [2015-04-02] (WinZip Computing, S.L. (WinZip Computing))
Task: {E87E5EA4-C423-4141-9329-9C78C1720646} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {EF8678CF-2B41-4FCA-9FBC-A86A88BE7364} - System32\Tasks\GoogleUpdateTaskMachineUA1d123b16d1b2c0c => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-20] (Google Inc.)
Task: {F160501F-631C-4CB2-90A4-2961784CA284} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1d123b16d1b2c0c.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\One System CarePeriod.job => C:\Program Files (x86)\OneSystemCare\OneSystemCare.exe
Task: C:\WINDOWS\Tasks\WinZipDriverUpdater_UPDATES.job => C:\Program Files (x86)\WinZip Driver Updater\winzipdu.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Andreas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.istartpageing.com/?type=sc&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0 <==== ACHTUNG
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.istartpageing.com/?type=sc&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0 <==== ACHTUNG
ShortcutWithArgument: C:\Users\Public\Desktop\GeekBuddy.lnk -> C:\Program Files\COMODO\GeekBuddy\launcher.exe (Comodo Security Solutions, Inc.) -> hxxp://www.istartpageing.com/?type=sc&ts=1448708311&z=0c29afdb54b4bdd5daffad2g0z5z6bbm4e7b7c1g3g&from=cornl&uid=st500lt012-1dg142_s3pgkcj0 <==== ACHTUNG
ShortcutWithArgument: C:\Users\Public\Desktop\Snapfish Fotos.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.snapfish.com/hp_notebook_desktopicon_2014_de <==== ACHTUNG
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-03-28 12:31 - 2014-03-28 12:31 - 02110464 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll
2014-03-28 12:27 - 2014-03-28 12:27 - 00021504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cryptodll.dll
2014-03-28 12:27 - 2014-03-28 12:27 - 00035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll
2014-03-28 12:27 - 2014-03-28 12:27 - 00055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll
2014-03-28 12:48 - 2014-03-28 12:48 - 00367504 _____ () C:\Program Files\Hewlett-Packard\SimplePass\mstrpwd.dll
2014-03-28 12:48 - 2014-03-28 12:48 - 00712080 _____ () C:\Program Files\Hewlett-Packard\SimplePass\GraphicalPwd.dll
2014-10-31 17:44 - 2014-04-14 18:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2015-09-17 09:11 - 2015-09-17 09:11 - 00152016 _____ () C:\Program Files (x86)\ScreenSnapshotTool\1.1.0.10921\ScreenShotServ.exe
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-09-17 09:11 - 2015-09-17 09:11 - 01834448 _____ () C:\Program Files (x86)\ScreenSnapshotTool\1.1.0.10921\ScreenSnapshot.exe
2015-10-30 08:17 - 2015-10-30 08:17 - 02652784 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 02652784 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-10-30 08:17 - 2015-10-30 08:17 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 08005632 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-30 08:18 - 2015-10-30 19:44 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-03-28 12:36 - 2014-03-28 12:36 - 00065024 _____ () C:\Program Files\Hewlett-Packard\SimplePass\opvapp.exe
2015-12-02 17:38 - 2015-12-02 17:40 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-09-17 09:11 - 2015-09-17 09:11 - 00543392 _____ () C:\Program Files (x86)\ScreenSnapshotTool\1.1.0.10921\EVPTask.dll
2015-09-17 09:11 - 2015-09-17 09:11 - 00406688 _____ () C:\Program Files (x86)\ScreenSnapshotTool\1.1.0.10921\EVPNet.dll
2015-09-17 09:11 - 2015-09-17 09:11 - 00428704 _____ () C:\Program Files (x86)\ScreenSnapshotTool\1.1.0.10921\EVPDR.dll
2015-11-28 11:57 - 2015-03-17 11:03 - 00886272 _____ () C:\Program Files (x86)\WinZip Malware Protector\System.Data.SQLite.dll
2015-11-28 11:57 - 2015-05-20 13:51 - 01717960 _____ () C:\Program Files (x86)\WinZip Malware Protector\aspsys.dll
2015-11-28 11:57 - 2015-03-17 11:03 - 00168448 _____ () C:\Program Files (x86)\WinZip Malware Protector\UNRAR.DLL
2015-11-13 18:53 - 2015-11-13 18:53 - 01881784 _____ () C:\Program Files (x86)\Comodo\Chromodo\libglesv2.dll
2015-11-13 18:43 - 2015-11-13 18:43 - 00082104 _____ () C:\Program Files (x86)\Comodo\Chromodo\libegl.dll
2015-12-02 17:38 - 2015-12-02 17:40 - 00152064 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-12-02 17:38 - 2015-12-02 17:40 - 18906624 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_1.11.19004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Andreas\Downloads\video.mp4:$CmdZnID
AlternateDataStreams: C:\Users\Andreas\Downloads\VLC media player 32 Bit - CHIP-Installer.exe:$CmdZnID
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1884890629-360092094-2303528047-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Andreas\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\dsc_0201.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\StartupFolder: => "Start GeekBuddy.lnk"
HKLM\...\StartupApproved\Run: => "Sound+"
HKLM\...\StartupApproved\Run32: => "rec_en_77"
HKLM\...\StartupApproved\Run32: => "gmsd_de_005010156"
HKLM\...\StartupApproved\Run32: => "tvncontrol"
HKLM\...\StartupApproved\Run32: => "gmsd_de_005010155"
HKU\S-1-5-21-1884890629-360092094-2303528047-1001\...\StartupApproved\Run: => "InetStat"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{5B3D653B-6824-4C59-8416-C6900287AE57}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
FirewallRules: [{832C0BA7-9301-4D90-AA90-9719B02E415F}] => (Allow) C:\Program Files (x86)\WinZip Driver Updater\winzipdu.exe
FirewallRules: [{5E4CC67D-1D10-4760-BE68-6A2D76A12408}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{7E631BA4-C7C7-48CF-B432-E87F8EF6FD22}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE
FirewallRules: [{8B9FC500-2960-467C-8542-2FF385F0D664}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{9E65C981-215E-4DFE-BF86-84D37EB82C3B}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{2D4008FA-077F-40F7-A0C9-46DCB187BBCF}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{8ACB7FA8-A197-4A43-9E42-306E6226C8DB}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{2FA9C81F-7693-4E6C-981F-0A3AA8A302FB}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{837AFD22-E6AC-4DFE-91B1-D91C6633D796}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{D149D774-90BB-4090-9DD2-FEDA3AB74EE0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{1991B6AF-C9CD-441D-942E-F3ACE4CAE764}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{20F1F91E-3BDF-42BB-8F22-412D0434AC4B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{9BDABC1F-6A93-4CB1-AB7E-B16323EE1471}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{35942880-1184-476E-B801-07E583A172AA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B9EA844A-BC1B-4CDC-85F4-1686290278B9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/03/2015 10:41:50 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SynTPEnh.exe, Version: 19.0.12.95, Zeitstempel: 0x559a67c8
Name des fehlerhaften Moduls: SynCOM.dll, Version: 19.0.12.95, Zeitstempel: 0x559a644b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000001e8e8
ID des fehlerhaften Prozesses: 0x2770
Startzeit der fehlerhaften Anwendung: 0xSynTPEnh.exe0
Pfad der fehlerhaften Anwendung: SynTPEnh.exe1
Pfad des fehlerhaften Moduls: SynTPEnh.exe2
Berichtskennung: SynTPEnh.exe3
Vollständiger Name des fehlerhaften Pakets: SynTPEnh.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SynTPEnh.exe5
Error: (12/03/2015 10:40:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname Andreas.local already in use; will try Andreas-2.local instead
Error: (12/03/2015 10:40:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 Andreas.local. Addr 192.168.178.29
Error: (12/03/2015 10:40:42 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.29:5353 16 Andreas.local. AAAA 2A02:0908:EB10:C420:31B4:4BCF:C1E5:4DD5
Error: (12/02/2015 11:45:56 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ANDREAS)
Description: Bei der Aktivierung der App „Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/02/2015 11:45:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ShellExperienceHost.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d93d
Name des fehlerhaften Moduls: StartUI.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632d84d
Ausnahmecode: 0x80000003
Fehleroffset: 0x00000000002b7beb
ID des fehlerhaften Prozesses: 0x1ce4
Startzeit der fehlerhaften Anwendung: 0xShellExperienceHost.exe0
Pfad der fehlerhaften Anwendung: ShellExperienceHost.exe1
Pfad des fehlerhaften Moduls: ShellExperienceHost.exe2
Berichtskennung: ShellExperienceHost.exe3
Vollständiger Name des fehlerhaften Pakets: ShellExperienceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ShellExperienceHost.exe5
Error: (12/02/2015 08:59:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8171
Error: (12/02/2015 08:59:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8171
Error: (12/02/2015 08:59:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (12/02/2015 08:59:29 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1484
Systemfehler:
=============
Error: (12/03/2015 10:40:35 AM) (Source: ACPI) (EventID: 13) (User: )
Description: : Der eingebettete Controller (EC) hat nicht innerhalb des angegebenen Zeitlimits reagiert. Dies deutet auf einen Fehler in der EC-Hardware oder -Firmware hin bzw. darauf, dass das BIOS auf falsche Art auf den EC zugreift. Fragen Sie den Computerhersteller nach einem aktualisierten BIOS. Dieser Fehler kann in einigen Situationen zur Folge haben, dass der Computer fehlerhaft läuft.
Error: (12/02/2015 11:46:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Synchronisierungshost_1269ad9 erreicht.
Error: (12/02/2015 11:46:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Benutzerdatenspeicher _1269ad9 erreicht.
Error: (12/02/2015 11:45:56 PM) (Source: DCOM) (EventID: 10010) (User: ANDREAS)
Description: App.AppXx4zfy1ffv3wctgdz2vypnybzjkh27jhw.mca
Error: (12/02/2015 11:45:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_1269ad9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/02/2015 11:45:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _1269ad9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/02/2015 11:45:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_1269ad9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/02/2015 11:45:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_1269ad9" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/02/2015 11:45:50 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
Error: (12/02/2015 08:59:23 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar
CodeIntegrity:
===================================
Date: 2015-12-03 10:45:35.958
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-02 12:42:15.782
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-02 12:40:44.800
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-02 12:16:42.711
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Celeron(R) CPU N2840 @ 2.16GHz
Prozentuale Nutzung des RAM: 50%
Installierter physikalischer RAM: 3984.27 MB
Verfügbarer physikalischer RAM: 1966.72 MB
Summe virtueller Speicher: 5392.27 MB
Verfügbarer virtueller Speicher: 3082.68 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:442.2 GB) (Free:385.81 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:21.76 GB) (Free:2.44 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: E6DC802C)
Partition: GPT.
==================== Ende von Addition.txt ============================
--- --- --- |
Lesestoff:
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
FRST 32-Bit | FRST 64-Bit
SecurityCheck und:
