Trojaner-Board - Notebook reagiert verzögert, Ativirus findet nichts

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Notebook reagiert verzögert, Ativirus findet nichts (https://www.trojaner-board.de/183422-notebook-reagiert-verzoegert-ativirus-findet-nichts.html)

querotudo

09.12.2016 10:27

Notebook reagiert verzögert, Ativirus findet nichts

Hallo zusammen,

mein Notebook reagiert seit einiger Zeit unregelmäßig verzögert auf Tastatureingaben. Manchmal ist alles ok und manchmal tippe ich und es dauert einige Sekunden, bis das Ergebnis am Bildschirm erscheint. Auch Internetseiten haben immer wieder Verzögerungen beim Laden. Videos über Youtube haben unregelmäßige Tonaussetzer.
Es fühlt sich an, als ob mein Rechner immer auf andere Prozesse wartet. Ich kann mit meinen beschränkten Mitteln jedoch nichts entdecken.
Mein Notebook ist ein XPS L502X von Dell mit Windows 10.

Vielen Dank für Eure Hilfe bereits im Voraus,
querotudo

FRST.TXT

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016

durchgeführt von Norman (Administrator) auf NORMAN-PC (09-12-2016 10:42:07)

Gestartet von C:\Users\Norman\Downloads

Geladene Profile: Norman (Verfügbare Profile: Norman & Admin)

Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AviraSpeedup\Avira.SystemSpeedup.SpeedupService.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Synaptics Incorporated) C:\Program Files (x86)\Synaptics\Scrybe\scrybe.exe

() C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe

(Intel Corporation) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

() C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(Synaptics, Inc.) C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1611.3123.0_x64__8wekyb3d8bbwe\Calculator.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMC\Aggregation.exe

(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)

HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [4146848 2012-08-16] (Dell Inc.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945672 2015-07-16] (Synaptics Incorporated)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [916072 2016-10-29] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-11-15] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\AviraSpeedup\Avira.SystemSpeedup.Core.Common.Starter.exe [25256 2016-11-23] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [Spotify Web Helper] => C:\Users\Norman\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-12-08] (Spotify Ltd)

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [Spotify] => C:\Users\Norman\AppData\Roaming\Spotify\Spotify.exe [6987376 2016-12-08] (Spotify Ltd)

HKU\S-1-5-21-143339661-846541388-530592055-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)

HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMSE.EXE [298560 2014-03-20] (SEIKO EPSON CORPORATION)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconCheck] -> {d36d0796-4913-3dde-9159-1c7b348e59d2} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconError] -> {e4f57fbd-4e00-317c-9f90-d4e427981873} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconSync] -> {f1fc1212-b289-31bc-ae4d-56f707c68259} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk [2011-04-09]

ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

Startup: C:\Users\Norman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HiDrive.lnk [2016-12-08]

ShortcutTarget: HiDrive.lnk -> C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe ()

CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{265e45c3-1e8f-4edc-a3d0-688e3ac43142}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{2e9792a9-ff47-43c3-8e9c-09fa2f58c42b}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{56280e52-12c5-47a2-b502-fc59803f99c9}: [NameServer] 0.0.0.0

Tcpip\..\Interfaces\{bfb34b69-9053-433d-8225-c2dee194a17b}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{ff8b3f00-7008-4310-a736-92ad7f7d0007}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen

HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de

SearchScopes: HKU\S-1-5-21-143339661-846541388-530592055-1002 -> DefaultScope {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-09-25] (Oracle Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-09-25] (Oracle Corporation)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

DPF: HKLM-x32 {2D20E99C-1FD7-48EC-9FDF-CF3555B273D4} hxxp://192.168.1.129/VDControl.CAB?2,0,0,89

DPF: HKLM-x32 {A4150320-98EC-4DB6-9BFB-EBF4B6FBEB16} hxxp://192.168.1.137/codebase/DVM_IPCam2.ocx
 

Edge: 

======

Edge HomeButtonPage: HKU\S-1-5-21-143339661-846541388-530592055-1002 -> hxxp://google.de/
 

FireFox:

========

FF ProfilePath: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default [2016-12-09]

FF Homepage: Mozilla\Firefox\Profiles\jy1jlaly.default -> google.de

FF Extension: (AdBlocker Ultimate) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\adblockultimate@adblockultimate.net.xpi [2016-12-08]

FF Extension: (Image Zoom) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi [2016-04-28]

FF Extension: (Adblock Plus) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24]

FF SearchPlugin: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml [2016-10-02]

FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\extensions\@greatdealz.xpi => nicht gefunden

FF HKU\S-1-5-21-143339661-846541388-530592055-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Norman\AppData\Roaming\IDM\idmmzcc3 => nicht gefunden

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-19] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2013-09-17] (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-09-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-09-25] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-19] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-02-20] ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [Keine Datei]

FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2010-03-26] (GARMIN Corp.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)

FF Plugin-x32: @t-immersion.com/DFusionHomeWebPlugIn -> C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll [2011-06-30] (Total Immersion)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
 

Chrome: 

=======

CHR DefaultProfile: Profile 1

CHR Profile: C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-12-08]

CHR Extension: (Google Drive) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-20]

CHR Extension: (Image Zoom) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bdmfgepgnaffojoiojoeadeofipcfndh [2014-11-26]

CHR Extension: (YouTube) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-30]

CHR Extension: (Amazon) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-04-01]

CHR Extension: (Adblock Plus) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-12]

CHR Extension: (Replace New Tab Page) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cnkhddihkmmiiclaipbaaelfojkmlkja [2014-11-27]

CHR Extension: (Google-Suche) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-20]

CHR Extension: (Avira Browserschutz) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-23]

CHR Extension: (Google Docs Offline) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-23]

CHR Extension: (AdBlock Plus) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kfcfceejhleedfbabanmaamfiagjhncj [2014-11-26]

CHR Extension: (Caipirinha) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lllaffajmaihmacifgegebccnnhddemj [2015-09-30]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-23]

CHR Extension: (Google Mail) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-29]

CHR Extension: (Chrome Media Router) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-12]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Admin\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-09-30]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [ngnjhfpfhadncgafgbneeljaginimmmk] - <kein Path/update_url>
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1089088 2016-10-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [475232 2016-10-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [475232 2016-10-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1488240 2016-10-29] (Avira Operations GmbH & Co. KG)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [350528 2016-11-24] (Avira Operations GmbH & Co. KG)

R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [283296 2014-04-07] (Intel Corporation)

R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)

S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2011-04-22] (Macrovision Europe Ltd.) [Datei ist nicht signiert]

R2 FreeStyleLibre MAS Server; C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe [285184 2016-01-19] () [Datei ist nicht signiert]

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)

R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703696 2016-08-08] (SEIKO EPSON CORPORATION)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)

R2 ScrybeUpdater; C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)

S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-05-23] (Sony Corporation) [Datei ist nicht signiert]

R2 SpeedupService; C:\Program Files (x86)\Avira\AviraSpeedup\Avira.SystemSpeedup.SpeedupService.exe [33896 2016-11-23] (Avira Operations GmbH & Co. KG)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-16] (Synaptics Incorporated)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [151352 2016-10-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [153392 2016-10-08] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [78208 2016-05-15] (Avira Operations GmbH & Co. KG)

S3 btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)

S3 GigasetGenericUSB_x64; C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2016-01-12] (Siemens Home and Office Communication Devices GmbH & Co. KG)

R3 i8042HDR; C:\WINDOWS\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider)

S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_86f2ae812568c59a\nvlddmkm.sys [14242872 2016-09-20] (NVIDIA Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

S3 NvStUSB; C:\WINDOWS\system32\DRIVERS\nvstusb.sys [121960 2010-12-12] ()

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56376 2016-08-04] (NVIDIA Corporation)

U5 PROCMON23; C:\Windows\System32\Drivers\PROCMON23.sys [92344 2016-12-04] (Sysinternals - www.sysinternals.com)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )

R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-16] (Synaptics Incorporated)

S3 SRS_HDAL_Service; C:\WINDOWS\System32\drivers\SRS_HDAL_amd64.sys [533280 2010-11-15] ()

S3 tapstrong; C:\WINDOWS\system32\DRIVERS\tapstrong.sys [38760 2013-11-16] (The OpenVPN Project)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

S3 DIRECTIO; \??\C:\Program Files\PerformanceTest\DirectIo64.sys [X]

U3 idsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-09 10:41 - 2016-12-09 10:41 - 00000000 ____D C:\Users\Norman\Downloads\FRST-OlderVersion

2016-12-08 18:32 - 2016-12-08 18:32 - 00000000 __SHD C:\Users\Norman\AppData\Roaming\wyUpdate AU

2016-12-08 17:58 - 2016-12-08 17:59 - 38791360 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (3).zip

2016-12-08 17:56 - 2016-12-08 17:57 - 27175600 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (2).zip

2016-12-08 17:29 - 2016-12-08 17:29 - 32849489 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2.zip

2016-12-08 17:29 - 2016-12-08 17:29 - 16045741 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (1).zip

2016-12-05 21:34 - 2016-12-05 21:39 - 00071488 _____ C:\Users\Norman\Downloads\Addition.txt

2016-12-05 21:31 - 2016-12-09 10:43 - 00026849 _____ C:\Users\Norman\Downloads\FRST.txt

2016-12-05 21:31 - 2016-12-09 10:42 - 00000000 ____D C:\FRST

2016-12-05 21:29 - 2016-12-09 10:41 - 02420224 _____ (Farbar) C:\Users\Norman\Downloads\FRST64.exe

2016-12-04 23:17 - 2016-12-05 20:46 - 00011172 _____ C:\Users\Norman\Desktop\focal anschliessen.xlsx

2016-12-04 20:25 - 2016-12-04 20:25 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2016-12-04 01:37 - 2016-12-04 01:37 - 00015408 _____ C:\Users\Norman\Desktop\JRT.txt

2016-12-04 01:31 - 2016-12-04 01:31 - 01631928 _____ (Malwarebytes) C:\Users\Norman\Downloads\JRT.exe

2016-12-01 23:05 - 2016-12-01 23:05 - 00001272 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk

2016-12-01 23:04 - 2016-12-08 18:31 - 00000000 ____D C:\Users\Public\Speedup Sessions

2016-11-27 22:30 - 2016-11-27 22:30 - 00014743 _____ C:\Users\Norman\Desktop\Unitymedia Retourenmarke.pdf

2016-11-17 20:08 - 2016-12-09 10:06 - 00000000 ____D C:\Users\Norman\AppData\LocalLow\Mozilla

2016-11-13 00:19 - 2016-11-13 00:19 - 04756984 _____ (Softperfect ) C:\Users\Norman\Downloads\networx_setup.exe

2016-11-12 23:40 - 2016-11-13 00:09 - 07353936 _____ (Lucom GmbH) C:\Users\Norman\Downloads\FFWFiller3.4.1_build106_Setup.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-09 10:06 - 2016-09-21 21:48 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2016-12-08 18:30 - 2016-09-21 22:49 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-12-08 18:30 - 2016-09-21 21:52 - 00000000 ____D C:\ProgramData\NVIDIA

2016-12-08 18:29 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI

2016-12-08 18:19 - 2013-10-31 00:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2016-12-08 18:19 - 2013-08-10 11:39 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-08 17:13 - 2016-05-16 16:00 - 00000000 ____D C:\Users\Norman\AppData\Local\Spotify

2016-12-08 17:13 - 2016-05-16 15:59 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Spotify

2016-12-08 17:05 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps

2016-12-08 17:05 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-12-07 17:30 - 2016-05-04 19:43 - 00000000 ____D C:\Users\Norman\AppData\Local\CrashDumps

2016-12-06 01:06 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF

2016-12-05 21:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat

2016-12-05 21:01 - 2016-10-31 22:26 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit

2016-12-04 23:18 - 2016-09-21 22:46 - 00000000 ___DC C:\WINDOWS\Panther

2016-12-04 22:08 - 2016-11-02 19:56 - 00092344 ____H (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCMON23.SYS

2016-12-04 01:34 - 2013-02-03 15:37 - 00000000 ____D C:\ProgramData\IObit

2016-12-04 01:08 - 2016-10-24 18:53 - 00000000 ____D C:\Program Files\Mozilla Firefox

2016-12-04 01:07 - 2016-09-21 21:59 - 00000000 ____D C:\Users\Norman

2016-12-01 23:03 - 2012-10-17 12:46 - 00000000 ____D C:\Program Files (x86)\Avira

2016-11-30 23:17 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-11-22 22:35 - 2016-09-24 09:51 - 00018915 _____ C:\WINDOWS\SysWOW64\Defrag.debuglog

2016-11-22 22:34 - 2016-09-25 19:26 - 00008026 _____ C:\WINDOWS\SysWOW64\MyDefrag.dat

2016-11-22 22:31 - 2016-09-21 21:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-11-22 22:31 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MsDtc

2016-11-22 22:31 - 2014-12-29 00:00 - 00000000 ____D C:\NVIDIA

2016-11-22 22:31 - 2014-12-28 13:17 - 00000000 ____D C:\Log

2016-11-22 22:31 - 2013-11-08 01:23 - 00000000 ____D C:\Intel

2016-11-22 22:31 - 2011-10-17 19:33 - 00000000 ____D C:\Users\Norman\AppData\Local\Rohos

2016-11-22 22:31 - 2011-04-09 21:58 - 00000000 ____D C:\dell

2016-11-22 00:39 - 2016-09-10 00:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

2016-11-20 19:30 - 2014-11-25 23:33 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2016-11-19 11:30 - 2011-04-13 21:35 - 00000000 ____D C:\Users\Norman\AppData\Local\Adobe

2016-11-19 11:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2016-11-19 11:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed

2016-11-17 01:43 - 2016-10-28 11:41 - 01368548 _____ C:\WINDOWS\SysWOW64\winapp2_disk.csv

2016-11-13 00:11 - 2011-06-26 10:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lucom

2016-11-12 14:49 - 2011-04-17 14:51 - 00000000 ____D C:\Users\Norman\AppData\Local\Google

2016-11-12 01:29 - 2014-11-02 17:01 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-11-09 23:42 - 2016-09-21 23:25 - 00000000 ____D C:\Users\Norman\AppData\Local\ConnectedDevicesPlatform

2016-11-09 21:50 - 2016-11-01 20:18 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Acrylic Wi-Fi Home

2016-11-09 21:50 - 2016-11-01 20:18 - 00000000 ____D C:\Program Files\Acrylic Wi-Fi Home

2016-11-09 02:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache

2016-11-09 01:52 - 2013-01-27 22:59 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-11-09 01:13 - 2016-09-21 21:48 - 05003872 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-11-09 01:10 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2016-11-09 01:10 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe

2016-11-09 01:10 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz

2016-11-09 01:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-11-09 01:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences

2016-11-09 01:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr

2016-11-09 00:16 - 2016-09-21 22:49 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2011-05-01 12:25 - 2011-05-01 12:25 - 0000132 _____ () C:\Users\Norman\AppData\Roaming\Adobe BMP Format CS5 Prefs

2011-05-01 12:28 - 2011-05-01 12:28 - 0000132 _____ () C:\Users\Norman\AppData\Roaming\Adobe PNG Format CS5 Prefs

2013-05-20 16:50 - 2013-05-20 16:50 - 0000005 _____ () C:\Users\Norman\AppData\Roaming\BCT-TTL.DAT

2012-01-26 20:38 - 2012-01-26 20:38 - 0076070 _____ () C:\Users\Norman\AppData\Roaming\Photo.jpg

2013-07-27 12:51 - 2013-07-31 10:51 - 0000076 _____ () C:\Users\Norman\AppData\Roaming\WB.CFG

2013-06-16 23:51 - 2013-08-09 23:51 - 0000005 _____ () C:\Users\Norman\AppData\Roaming\WBPU-TTL.DAT

2015-03-21 11:41 - 2015-03-21 11:41 - 0000038 ___SH () C:\Users\Norman\AppData\Local\69ff07055291669bb2b218.72821112

2012-12-16 00:38 - 2012-12-16 11:07 - 0001456 _____ () C:\Users\Norman\AppData\Local\Adobe Für Web speichern 12.0 Prefs

2011-08-27 10:36 - 2011-08-27 10:36 - 0002403 _____ () C:\Users\Norman\AppData\Local\FastClean.20110827.113609.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0002403 _____ () C:\Users\Norman\AppData\Local\FastClean.20110930.213107.txt

2011-08-26 23:58 - 2011-08-26 23:59 - 0024474 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.005843.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0002220 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.113710.txt

2011-08-27 10:37 - 2011-08-27 10:38 - 0025436 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.113735.txt

2011-09-30 20:31 - 2011-09-30 20:32 - 0002408 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110930.213154.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0026418 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110930.213219.txt

2012-02-11 20:08 - 2012-02-11 20:08 - 0002532 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20120211.200800.txt

2011-04-25 15:31 - 2011-04-25 15:31 - 0001500 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163125.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001522 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163232.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001265 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163236.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001265 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163258.txt

2011-08-26 23:51 - 2011-08-26 23:51 - 0001567 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005113.txt

2011-08-26 23:57 - 2011-08-26 23:57 - 0001587 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005706.txt

2011-08-26 23:57 - 2011-08-26 23:57 - 0000631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005729.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0000673 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005804.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001565 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005806.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001283 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005814.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001229 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005831.txt

2011-08-26 23:59 - 2011-08-26 23:59 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005905.txt

2011-08-27 10:25 - 2011-08-27 10:25 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.112544.txt

2011-08-27 10:33 - 2011-08-27 10:33 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113354.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0001559 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113615.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0000844 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113630.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113657.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001556 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113701.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113707.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113709.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001227 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113728.txt

2011-08-27 10:38 - 2011-08-27 10:38 - 0001247 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113802.txt

2011-08-27 10:41 - 2011-08-27 10:41 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.114142.txt

2011-08-27 13:28 - 2011-08-27 13:28 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.142850.txt

2011-08-27 13:32 - 2011-08-27 13:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143221.txt

2011-08-27 13:33 - 2011-08-27 13:33 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143328.txt

2011-08-27 13:35 - 2011-08-27 13:35 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143504.txt

2011-08-27 13:36 - 2011-08-27 13:36 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143643.txt

2011-08-27 13:41 - 2011-08-27 13:41 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144114.txt

2011-08-27 13:41 - 2011-08-27 13:41 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144131.txt

2011-08-27 13:44 - 2011-08-27 13:44 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144447.txt

2011-08-27 13:54 - 2011-08-27 13:54 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.145439.txt

2011-08-27 21:23 - 2011-08-27 21:23 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.222325.txt

2011-08-27 21:35 - 2011-08-27 21:35 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.223514.txt

2011-08-27 21:49 - 2011-08-27 21:49 - 0001548 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.224955.txt

2011-08-28 08:25 - 2011-08-28 08:25 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110828.092549.txt

2011-08-28 22:42 - 2011-08-28 22:42 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110828.234241.txt

2011-08-30 22:28 - 2011-08-30 22:28 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110830.232851.txt

2011-08-30 22:36 - 2011-08-30 22:36 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110830.233651.txt

2011-08-31 18:45 - 2011-08-31 18:45 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110831.194523.txt

2011-09-04 19:48 - 2011-09-04 19:48 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110904.204837.txt

2011-09-04 19:51 - 2011-09-04 19:51 - 0001548 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110904.205152.txt

2011-09-04 23:45 - 2011-09-04 23:45 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110905.004523.txt

2011-09-06 20:46 - 2011-09-06 20:46 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110906.214631.txt

2011-09-06 21:02 - 2011-09-06 21:02 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110906.220235.txt

2011-09-07 18:55 - 2011-09-07 18:55 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110907.195552.txt

2011-09-08 17:57 - 2011-09-08 17:57 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110908.185702.txt

2011-09-09 19:07 - 2011-09-09 19:07 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110909.200710.txt

2011-09-09 19:11 - 2011-09-09 19:11 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110909.201118.txt

2011-09-10 18:22 - 2011-09-10 18:22 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110910.192247.txt

2011-09-12 18:38 - 2011-09-12 18:39 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.193859.txt

2011-09-12 19:33 - 2011-09-12 19:33 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.203313.txt

2011-09-12 19:36 - 2011-09-12 19:36 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.203611.txt

2011-09-12 19:42 - 2011-09-12 19:42 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.204240.txt

2011-09-12 20:00 - 2011-09-12 20:00 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.210050.txt

2011-09-12 20:10 - 2011-09-12 20:10 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.211009.txt

2011-09-13 18:41 - 2011-09-13 18:41 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110913.194154.txt

2011-09-16 13:19 - 2011-09-16 13:19 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.141913.txt

2011-09-16 13:31 - 2011-09-16 13:31 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.143126.txt

2011-09-16 18:06 - 2011-09-16 18:06 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.190621.txt

2011-09-19 19:06 - 2011-09-19 19:06 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110919.200637.txt

2011-09-19 19:08 - 2011-09-19 19:08 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110919.200812.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195304.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195316.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195347.txt

2011-09-22 19:57 - 2011-09-22 19:57 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.205748.txt

2011-09-22 19:59 - 2011-09-22 19:59 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.205918.txt

2011-09-22 20:02 - 2011-09-22 20:02 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.210246.txt

2011-09-22 22:32 - 2011-09-22 22:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.233237.txt

2011-09-23 19:30 - 2011-09-23 19:30 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110923.203026.txt

2011-09-23 19:38 - 2011-09-23 19:39 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110923.203858.txt

2011-09-25 16:30 - 2011-09-25 16:30 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110925.173029.txt

2011-09-25 16:32 - 2011-09-25 16:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110925.173257.txt

2011-09-30 20:20 - 2011-09-30 20:20 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.212009.txt

2011-09-30 20:28 - 2011-09-30 20:28 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.212829.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001691 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213116.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000775 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213137.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213144.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001663 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213146.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213149.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213154.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213211.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0001229 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213248.txt

2011-09-30 20:35 - 2011-09-30 20:35 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213545.txt

2011-09-30 20:37 - 2011-09-30 20:37 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213751.txt

2011-10-03 23:40 - 2011-10-03 23:40 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111004.004009.txt

2011-10-16 17:12 - 2011-10-16 17:12 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111016.181247.txt

2011-10-16 17:31 - 2011-10-16 17:31 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111016.183111.txt

2011-10-21 21:09 - 2011-10-21 21:09 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111021.220926.txt

2011-10-24 19:03 - 2011-10-24 19:03 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111024.200357.txt

2011-10-24 19:05 - 2011-10-24 19:05 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111024.200500.txt

2011-10-24 23:43 - 2011-10-24 23:43 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111025.004352.txt

2011-10-30 12:45 - 2011-10-30 12:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.124516.txt

2011-10-30 12:46 - 2011-10-30 12:46 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.124632.txt

2011-10-30 17:34 - 2011-10-30 17:34 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.173449.txt

2011-10-30 19:45 - 2011-10-30 19:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.194515.txt

2011-11-01 20:21 - 2011-11-01 20:22 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111101.202157.txt

2011-11-01 20:29 - 2011-11-01 20:29 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111101.202932.txt

2011-11-04 20:38 - 2011-11-04 20:38 - 0001654 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111104.203817.txt

2011-11-04 20:41 - 2011-11-04 20:41 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111104.204113.txt

2011-11-05 22:43 - 2011-11-05 22:43 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111105.224326.txt

2011-11-06 17:39 - 2011-11-06 17:39 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.173943.txt

2011-11-06 19:45 - 2011-11-06 19:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.194515.txt

2011-11-06 23:10 - 2011-11-06 23:10 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.231034.txt

2011-11-06 23:11 - 2011-11-06 23:11 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.231132.txt

2011-11-09 23:16 - 2011-11-09 23:16 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111109.231646.txt

2011-11-11 20:48 - 2011-11-11 20:48 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111111.204845.txt

2011-11-11 20:51 - 2011-11-11 20:51 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111111.205142.txt

2011-11-13 21:45 - 2011-11-13 21:45 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214545.txt

2011-11-13 21:46 - 2011-11-13 21:46 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214631.txt

2011-11-13 21:49 - 2011-11-13 21:49 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214912.txt

2011-11-13 22:09 - 2011-11-13 22:09 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.220915.txt

2011-11-15 21:44 - 2011-11-15 21:44 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111115.214441.txt

2011-11-15 22:05 - 2011-11-15 22:05 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111115.220500.txt

2011-11-20 18:14 - 2011-11-20 18:14 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111120.181429.txt

2011-11-20 18:15 - 2011-11-20 18:15 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111120.181514.txt

2011-11-26 08:35 - 2011-11-26 08:35 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111126.083554.txt

2011-11-27 17:15 - 2011-11-27 17:15 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.171555.txt

2011-11-27 17:16 - 2011-11-27 17:16 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.171657.txt

2011-11-27 17:20 - 2011-11-27 17:20 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.172036.txt

2011-11-28 20:48 - 2011-11-28 20:48 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111128.204808.txt

2011-12-04 18:39 - 2011-12-04 18:39 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111204.183910.txt

2011-12-04 18:49 - 2011-12-04 18:49 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111204.184903.txt

2011-12-06 09:46 - 2011-12-06 09:46 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.094601.txt

2011-12-06 09:47 - 2011-12-06 09:47 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.094714.txt

2011-12-06 17:00 - 2011-12-06 17:00 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.170007.txt

2011-12-06 17:00 - 2011-12-06 17:00 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.170054.txt

2011-12-07 19:43 - 2011-12-07 19:43 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111207.194355.txt

2011-12-07 19:46 - 2011-12-07 19:46 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111207.194638.txt

2011-12-18 19:24 - 2011-12-18 19:24 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111218.192455.txt

2011-12-18 19:27 - 2011-12-18 19:27 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111218.192711.txt

2011-12-23 21:02 - 2011-12-23 21:02 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111223.210230.txt

2011-12-23 21:03 - 2011-12-23 21:04 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111223.210359.txt

2011-12-26 21:48 - 2011-12-26 21:48 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.214850.txt

2011-12-26 21:52 - 2011-12-26 21:52 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215206.txt

2011-12-26 21:53 - 2011-12-26 21:53 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215304.txt

2011-12-26 21:57 - 2011-12-26 21:57 - 0001656 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215720.txt

2011-12-26 21:58 - 2011-12-26 21:58 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215853.txt

2011-12-27 10:41 - 2011-12-27 10:41 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111227.104144.txt

2011-12-27 10:42 - 2011-12-27 10:42 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111227.104218.txt

2011-12-30 21:43 - 2011-12-30 21:43 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111230.214320.txt

2011-12-30 21:45 - 2011-12-30 21:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111230.214521.txt

2012-01-01 20:51 - 2012-01-01 20:51 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120101.205109.txt

2012-01-02 22:21 - 2012-01-02 22:21 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120102.222141.txt

2012-01-07 21:55 - 2012-01-07 21:55 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215502.txt

2012-01-07 21:55 - 2012-01-07 21:55 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215551.txt

2012-01-07 21:59 - 2012-01-07 22:00 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215959.txt

2012-01-07 22:02 - 2012-01-07 22:02 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.220201.txt

2012-01-07 22:04 - 2012-01-07 22:04 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.220434.txt

2012-01-09 21:54 - 2012-01-09 21:54 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120109.215418.txt

2012-01-09 21:57 - 2012-01-09 21:58 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120109.215758.txt

2012-01-20 20:53 - 2012-01-20 20:53 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120120.205322.txt

2012-01-21 21:58 - 2012-01-21 21:58 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120121.215816.txt

2012-02-11 19:51 - 2012-02-11 19:51 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195109.txt

2012-02-11 19:53 - 2012-02-11 19:53 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195320.txt

2012-02-11 19:54 - 2012-02-11 19:54 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195456.txt

2011-08-14 14:00 - 2016-10-31 21:54 - 0007615 _____ () C:\Users\Norman\AppData\Local\Resmon.ResmonCfg

2012-09-03 19:04 - 2012-09-03 19:04 - 0000437 _____ () C:\Users\Norman\AppData\Local\WiDiLog.20120903.200455.txt

2012-02-11 20:06 - 2012-02-11 20:08 - 0035304 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120211.200659.txt

2012-07-14 19:32 - 2012-07-14 19:34 - 0036810 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120714.203253.txt

2012-08-01 20:11 - 2012-08-01 20:11 - 0004356 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120801.211142.txt

2012-08-01 20:15 - 2012-08-01 20:15 - 0004300 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120801.211509.txt

2012-08-10 19:13 - 2012-08-10 19:13 - 0004254 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120810.201324.txt

2012-09-03 19:02 - 2012-09-03 19:05 - 0068266 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120903.200248.txt

2011-07-27 23:59 - 2011-07-27 23:59 - 0000000 _____ () C:\Users\Norman\AppData\Local\{5ED86D1B-2D7E-4120-BB20-3AEC8A26F554}

2011-07-30 04:45 - 2011-07-30 04:45 - 0000000 _____ () C:\Users\Norman\AppData\Local\{60B26B5E-87FD-42A4-83DC-4530F1960E8F}

2011-05-02 18:10 - 2011-05-02 18:10 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8A1F6FEE-5E6C-4272-9022-CB830817BA15}

2011-07-23 08:52 - 2011-07-23 08:52 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8A6B9F28-8DC5-4030-ABD2-70F4FD63FFE4}

2011-07-25 18:17 - 2011-07-25 18:17 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8EFAA6EA-5166-4E13-99E4-CB1B5DF8D35F}

2011-07-29 17:46 - 2011-07-29 17:46 - 0000000 _____ () C:\Users\Norman\AppData\Local\{C8C88F15-814A-4E08-8403-ACDF6E87EDC0}

2011-08-20 10:15 - 2014-03-26 19:34 - 0000125 ___SH () C:\ProgramData\.zreglib
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\Users\Public\AlexaNSISPlugin.8636.dll
 
 

Einige mit null Byte Größe Dateien/Ordner:

==========================

C:\Windows\System32\Drivers\iqvw64e.sys
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2016-12-04 23:03
 

==================== Ende von FRST.txt ============================

--- --- ---

cosinus

09.12.2016 11:39

+++ WICHTIGER HINWEIS +++

Während der Analyse und Bereinigung nimmst du KEINERLEI Änderungen auf eigene Faust vor, d.h. du installierst oder deinstallierst keine Software ohne Absprache.
Auch veränderst du keine Systemeinstellungen, solange wir deinen Fall bearbeiten. Änderungen, Installationen oder Deinstallationen machst du AUSSCHLIESSLICH nur auf Anweisung!
Es wird erforderlich sein, deinen Virenscanner zu deaktivieren und in bestimmten Fällen auch zu deinstallieren, damit vernünftig bereinigt werden kann. Dein System ist daher erst wenn wir hier fertig sind wieder für den alltäglichen Gebrauch wie surfen oder mailen von mir freigegeben.

Gelesen und verstanden?

Addition.txt Logfile von FRST fehlt, bitte nachreichen

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

querotudo

09.12.2016 11:53

Hallo Cosinus,

vielen Dank, dass Du mir bei meinem Problem hilfst.
Die Regeln habe ich gelesen, verstanden und ich werde mich daran halten.
Den Addition.txt und das Logfile von FRST hatte ich schon durch Editieren meines Originalposts oben eingefügt.

Vielen Dank,
querotudo

Sorry, scheinbar hatte ich einen Fehler bei der Addition.txt gemacht. Hier also der zweite Versuch:

Code:

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016

durchgefÃ¼hrt von Norman (09-12-2016 10:44:55)

Gestartet von C:\Users\Norman\Downloads

Windows 10 Pro Version 1607 (X64) (2016-09-21 21:54:50)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Admin (S-1-5-21-143339661-846541388-530592055-1004 - Administrator - Enabled) => C:\Users\Admin

Administrator (S-1-5-21-143339661-846541388-530592055-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-143339661-846541388-530592055-503 - Limited - Disabled)

Gast (S-1-5-21-143339661-846541388-530592055-501 - Limited - Disabled)

Norman (S-1-5-21-143339661-846541388-530592055-1002 - Administrator - Enabled) => C:\Users\Norman
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)

Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)

Adobe Photoshop CS5 (HKLM-x32\...\{15FEDA5F-141C-4127-8D7E-B962D1742728}) (Version: 12.0 - Adobe Systems Incorporated)

Adobe Photoshop Lightroom 5.7 64-bit (HKLM\...\{1B77B02E-17E4-4B6D-B8A1-74B29AF3D8DD}) (Version: 5.7.0 - Adobe Systems Incorporated)

Adobe Premiere Elements 7.0 (HKLM-x32\...\PremElem70) (Version: 7.0 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.5.146 - Adobe Systems, Inc.)

Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)

Ansel (Version: 372.90 - NVIDIA Corporation) Hidden

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Application Verifier (x64) (HKLM\...\{361A49FA-59B3-49FB-8C3E-08AF3EA5791A}) (Version: 4.0.917 - Microsoft Corporation)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.23.58 - Avira Operations GmbH & Co. KG)

Avira Connect (HKLM-x32\...\{707e8edf-9482-4417-ae39-c9b5fe605e87}) (Version: 1.2.76.27124 - Avira Operations GmbH & Co. KG)

Avira Connect (x32 Version: 1.2.76.27124 - Avira Operations GmbH & Co. KG) Hidden

Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4489 - APN, LLC)

Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 3.0.0.3502 - Avira Operations GmbH & Co. KG)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data (HKLM-x32\...\Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data) (Version:  - )

Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data (HKLM-x32\...\Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data) (Version:  - )

Canon Easy-PhotoPrint Pro (HKLM-x32\...\Easy-PhotoPrint Pro) (Version:  - )

Canon MG6200 series On-screen Manual (HKLM-x32\...\Canon MG6200 series On-screen Manual) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Debugging Tools for Windows (x64) (HKLM\...\{7F2E5C3B-DBDF-469D-AD8D-F686D3B71176}) (Version: 6.11.1.404 - Microsoft Corporation)

Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)

Dell System Detect - 1  (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\73f463568823ebbe) (Version: 6.6.0.2 - Dell)

Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.1.1.1303 - CyberLink Corp.)

Dell VideoStage (x32 Version: 1.1.1.1303 - CyberLink Corp.) Hidden

Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.22 - DivX, LLC)

EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)

Epson Easy Photo Print 2 (HKLM-x32\...\{07AA1C7F-E8CA-4FDC-B975-BC9EBC22B6DE}) (Version: 2.7.0.0 - SEIKO EPSON CORPORATION)

EPSON ET-4550 Series Printer Uninstall (HKLM\...\EPSON ET-4550 Series) (Version:  - SEIKO EPSON Corporation)

Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)

FormsForWebÂ® Filler 3.4.1 (HKLM-x32\...\{3C4DE3A5-B120-4A36-9B61-477D59333BA7}) (Version: 3.4.1 - Lucom GmbH)

Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)

FreeStyle Libre (HKLM-x32\...\FreeStyle Libre 1.0) (Version: 1.0 - Abbott Diabetes Care)

Garmin City Navigator Europe NT 2011.10 (HKLM-x32\...\{74D21920-3B72-494F-9042-8C26E1E99FDC}) (Version: 14.10.0.0 - Garmin Ltd or its subsidiaries)

Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)

Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)

Gigaset QuickSync (HKLM\...\{aef81617-c1c0-495e-83ae-91c94ecc562b}) (Version: 8.5.0874.3 - Gigaset Communications GmbH)

GmapTool 0.8.11 (HKLM-x32\...\{1873789F-59D5-4002-8A2F-60A827B78F98}_is1) (Version:  - AP)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)

Google Chrome (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Google Chrome) (Version: 13.0.782.215 - Google Inc.)

Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden

GTS  (HKLM-x32\...\{2E6AA783-D4A9-4AD3-9994-B64D923738D7}) (Version: 1.00.17 - vwd AG)

HiDrive (HKLM-x32\...\{88D57A8B-DF01-4C4D-8EF4-289C08BD2F96}) (Version: 4.2.1.0 - STRATO AG)

Image Data Converter (HKLM-x32\...\{87998E4E-6D9C-411B-AAE9-B8523FFE357D}) (Version: 4.2.02.10112 - Sony Corporation)

Intel Driver Update Utility (HKLM-x32\...\{ca4bc3a8-b99c-4416-90d8-351a8ceab458}) (Version: 2.2.0.2 - Intel)

Intel WiDi Media Share (x32 Version: 1.1.0.0 - Intel Corporation) Hidden

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Driver Update Utility 2.2 (x32 Version: 2.2.0.1 - Intel) Hidden

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Intel(R) WiDi (HKLM\...\{83A1A885-9BE7-4B1A-A3F9-88E81890173F}) (Version: 4.3.4.0 - Intel Corporation)

IntelÂ® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)

IntelÂ® WiDi Media Share (HKLM-x32\...\{32d14b1d-18fa-48e7-867d-93b7a72c816a}) (Version: 1.1.0.0 - Intel Corporation)

IntelÂ® WiDi Remote (HKLM-x32\...\{f329f83b-c06f-48ce-99eb-f324e2f94b01}) (Version: 1.0.0.0 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)

iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)

Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)

JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.55.0 - JMicron Technology Corp.)

Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

MapTk (MapToolKit) (HKLM-x32\...\{0236FF14-34AF-4D37-BA6C-17567B7A8685}_is1) (Version:  - )

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Document Explorer 2008 (HKLM-x32\...\Microsoft Document Explorer 2008) (Version:  - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Outlook Hotmail Connector 64-Bit (HKLM\...\{95140000-007A-0407-1000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Outlook Social Connector Provider for Windows Live Messenger 64-bit (HKLM\...\{95140000-007D-0409-1000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{6F29F195-B11C-3EAD-B883-997BB29DFA17}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x64 (HKLM\...\{965DF723-5688-359E-84D2-417CAFE644B5}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86 (HKLM-x32\...\{44D9A2CB-0692-3180-B5E2-26F4E807D067}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools fÃ¼r Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)

Mozilla Firefox 50.0 (x64 de) (HKLM\...\Mozilla Firefox 50.0 (x64 de)) (Version: 50.0 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - SEIKO EPSON Corporation)

MyEpson Portal (x32 Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden

NirSoft WirelessNetView (HKLM-x32\...\NirSoft WirelessNetView) (Version:  - )

NVIDIA 3D Vision Treiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.90 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Paragon Backup and Recoveryâ„¢ 2014 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)

PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.1 - pdfforge)

Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.24 - Dell Inc.)

QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)

Reader for PC (HKLM-x32\...\{D279DFB7-97A3-439D-8BE9-95D8AFA68562}) (Version: 2.4.01.10241 - Sony Corporation)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.2.1405.1601 - LG Electronics Inc.)

Spotify (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (HKLM-x32\...\{147DFAD8-34C3-4DE1-9FCA-ACEFDE9EF810}) (Version: 1.6.5.17120 - Synaptics Inc.)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.15.2 - Synaptics Incorporated)

System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC)

Total Immersion D'Fusion @Home Web Plug-In (HKLM-x32\...\D'Fusion @Home Web Plug-In) (Version:  - Total Immersion)

TRC-Brasil 11.05 2011-05-22 (HKLM-x32\...\Tracksource RoteÃ¡vel Completo - TRC-Brasil_is1) (Version: 11.05 2011-05-22 - Projeto Tracksource Brasil)

Ãœberwachungstool fÃ¼r die IntelÂ® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {035A9A4F-B696-49DC-9565-6A36C0EBEF1D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)

Task: {0D78C388-7509-4FE6-A5FB-098175E1545E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)

Task: {11788F8E-6BA1-45C8-B13A-FA9F2681E4BA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)

Task: {133555AB-2B60-4BA9-BDAA-F01F3AE03402} - System32\Tasks\{877A3688-B368-4D99-B519-DB656244B393} => pcalua.exe -a "C:\Program Files (x86)\Canon\IJ Manual\Canon MG6200 series\uninstall.exe"

Task: {1A438826-8381-44D6-A6B9-8F489490F86D} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1BE75B25-9E44-4F82-95D6-D79F60FF3247} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1DE85612-34FA-429A-9D31-5CDBC2650323} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1F9A0589-84B5-42BA-AFDE-228B26EA0EC2} - System32\Tasks\EPSON ET-4550 Series Update {F58BC06F-9519-4B48-B3D9-392DEEA747B9} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {28AF8722-4067-428D-8BE0-E65205185B0B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {31158C7A-66C9-4F5A-93B2-4EFD47974767} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-11-08] (Microsoft Corporation)

Task: {321BC64F-22B4-4376-A69F-320A591125C3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {3517BCB2-F82F-43FF-92CD-65B00301C15E} - \PCDoctorBackgroundMonitorTask -> Keine Datei <==== ACHTUNG

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe

Task: {3D88E051-66CE-4CFC-9371-5E60E0A371C5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {3EEB8463-7733-4D40-8E4F-CBABDC0ACE94} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {4324C4A4-5416-4DA7-9F0B-FDF41833D324} - \SystemToolsDailyTest -> Keine Datei <==== ACHTUNG

Task: {4484C003-4F32-4384-8030-E4C4851E3F59} - System32\Tasks\{8AC66CE9-0E07-4269-869C-86FDAA1E2C04} => pcalua.exe -a C:\Users\Norman\AppData\Local\Apps\2.0\WPX0DM2N.492\KAANJB92.8H0\dell..tion_e30b47f5d4a30e9e_0006.0006_e3e278ac9f13d461\Uninstaller.exe -c uninstall

Task: {44E5FC0B-7C72-45E2-9C56-43CC558E11E3} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {527B5428-05E5-403D-B2D7-755ED2A1DEFB} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {5499FFD0-826B-4096-8C27-30A24297365B} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {54D09165-62A4-46D6-AB2D-84F926E6A64D} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe

Task: {56F78C49-02AC-472B-9AF3-557B49123E26} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22] (Oracle Corporation)

Task: {582170F0-FF9B-400D-AE49-75009B2E6767} - System32\Tasks\EPSON ET-4550 Series Update {8F854212-531C-4F83-90B2-997F22F7FA1F} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {5D79A697-EFF9-4FD8-B420-18AC0D375505} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)

Task: {632484DB-1288-42DB-B76E-83BEC2218227} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {70F31CE2-B841-4129-99F4-B4823E566B60} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {7C94D902-6042-4C63-9E48-BB6585BFA4E8} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {7FFB4346-F6CE-46BD-B04C-70751983D698} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {81AA9449-0338-4196-AB82-C8EB4802916D} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8E6552C0-1141-45A4-8D28-92FC52F385F1} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {97CDDA5E-013E-4420-A8E9-75A1ECA04D5C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {996AC3FA-FE8C-4877-8FDA-8528B5969542} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {9AE661AD-32D1-4A04-99D0-D58B7CDB48F3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9C3C6ACD-5255-4E03-BD26-7092C6EF74C2} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe

Task: {A85F96BF-E61D-4F05-9957-2F739826DBA2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe

Task: {B499892F-1E79-4D05-BAFD-4E7C12930048} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe [2014-03-13] (LG Electronics Inc.)

Task: {B98F5A2E-3D00-42ED-A557-E79AF9B0BF6C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {BD585239-8EB9-4933-A8E8-B0FA3A35010E} - \PCDEventLauncherTask -> Keine Datei <==== ACHTUNG

Task: {BEE9CE76-88FB-41FB-B94E-36A4B7A35958} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {D2E516C1-237E-465F-8481-60E17010A5DD} - System32\Tasks\{0EE9F46A-89CF-4603-BE10-7B3B15B52B1F} => pcalua.exe -a "C:\Program Files (x86)\test und FINANZtest Archiv CD-Rom 2012\Uninst.exe"

Task: {D5EAEB49-5195-4869-99F4-B092EA0AA9C9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {D7213CF8-8470-44E2-91BF-02A9FF5BFF4C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-19] (Adobe Systems Incorporated)

Task: {DE52E1A7-88F9-4E76-9F05-434F048511DD} - System32\Tasks\EPSON ET-4550 Series Update {9FB6518E-86D9-4A7F-A4EC-B9E4721EE623} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {E518C07C-FA41-4267-BD27-7BCE1EE2293D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {EFBE991D-2AB8-42F8-BA1D-C936AD834C64} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F6520BE3-B270-482E-B856-0538FBB0FCFC} - System32\Tasks\Moo0 System Monitor 1.76 => C:\Program Files (x86)\Moo0\SystemMonitor 1.76\SystemMonitor.exe

Task: {F6AEB890-1D27-4C31-8B90-99C7563D5E1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {FABBEB4E-6065-4957-8BFD-1BA469C1CCA8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {8F854212-531C-4F83-90B2-997F22F7FA1F}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{8F854212-531C-4F83-90B2-997F22F7FA1F} /F:UpdateWORKGROUP\NORMAN-PC$

Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {9FB6518E-86D9-4A7F-A4EC-B9E4721EE623}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{9FB6518E-86D9-4A7F-A4EC-B9E4721EE623} /F:Update WORKGROUP\NORMAN-PC$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {F58BC06F-9519-4B48-B3D9-392DEEA747B9}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{F58BC06F-9519-4B48-B3D9-392DEEA747B9} /F:Update WORKGROUP\NORMAN-PC$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== VerknÃ¼pfungen =============================
 

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-09-29 21:55 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-09-21 21:52 - 2016-09-16 23:54 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2006-12-04 00:26 - 2006-12-04 00:26 - 00022016 _____ () C:\WINDOWS\System32\sugo3l6.dll

2016-09-29 21:55 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll

2016-09-21 23:30 - 2016-09-21 23:30 - 00959168 _____ () C:\Users\Norman\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64\ClientTelemetry.dll

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2016-09-21 22:41 - 2016-09-21 22:41 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2016-11-08 22:59 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2016-11-08 22:58 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-08 22:59 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-08 22:58 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2016-11-08 22:58 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll

2016-11-08 22:58 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-08 22:58 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-11-17 20:12 - 2016-11-17 20:12 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2016-11-17 20:12 - 2016-11-17 20:12 - 00178688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2016-11-17 20:12 - 2016-11-17 20:12 - 41609728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2016-02-28 13:56 - 2016-01-19 08:16 - 00081408 _____ () C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe

2015-06-01 20:00 - 2015-06-01 20:00 - 00102912 _____ () C:\WINDOWS\system32\IccLibDll_x64.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 06673568 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe

2016-02-28 13:56 - 2016-01-19 08:16 - 00285184 _____ () C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe

2016-10-05 22:21 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-11-17 20:11 - 2016-11-17 20:11 - 03766272 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1611.3123.0_x64__8wekyb3d8bbwe\Calculator.exe

2016-10-05 22:21 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-05-04 19:34 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2013-06-25 17:23 - 2013-06-25 17:23 - 00880640 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\fsk.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00040264 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskMediaPlayers.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00239944 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\Fskin.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00026952 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskinLocalize.dll

2013-05-23 18:54 - 2013-05-23 18:54 - 00798720 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskSecurity.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00125256 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskDocumentViewer.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00016200 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskPower.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00024904 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskNetInterface.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00017224 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskMobileMediaDevice.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00015176 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskTimeHardware.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00034632 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ticket.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00018760 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ebookDeviceNotifier.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00092488 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ebookUsb.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00149832 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\readerAppHelper.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00178504 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\USBDetector.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 01035936 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\CefSharp.Core.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 48943768 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\libcef.dll

2015-03-19 19:47 - 2013-12-06 22:06 - 00642016 _____ () C:\Program Files (x86)\LG Software\LG Smart Share\DMS\sqlite3.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1 [104]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)
 
 

==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-143339661-846541388-530592055-1002\...\localhost -> localhost
 

==================== Hosts Inhalt: ==========================
 

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)
 

2009-07-14 03:34 - 2011-04-13 20:56 - 00002378 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

127.0.0.1 activate.adobe.com 

127.0.0.1 practivate.adobe.com

127.0.0.1 adobeereg.com

127.0.0.1 www.adobeereg.com

127.0.0.1 activate.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 wwis-dubc1-vip60.adobe.com

127.0.0.1 192.150.18.108

127.0.0.1 activate.adobe.com:443

127.0.0.1 3dns.adobe.com

127.0.0.1 3dns-1.adobe.com

127.0.0.1 3dns-2.adobe.com

127.0.0.1 3dns-3.adobe.com

127.0.0.1 3dns-4.adobe.com

127.0.0.1 adobeereg.com

127.0.0.1 www.adobeereg.com

127.0.0.1 activate.adobe.com

127.0.0.1 activate-sea.adobe.com

127.0.0.1 activate-sjc0.adobe.com

127.0.0.1 wwis-dubc1-vip60.adobe.com

127.0.0.1 192.150.18.108

127.0.0.1 adobe-dns.adobe.com

127.0.0.1 adobe-dns-1.adobe.com

127.0.0.1 adobe-dns-2.adobe.com

127.0.0.1 adobe-dns-3.adobe.com

127.0.0.1 adobe-dns-4.adobe.com

127.0.0.1 adobe-dns-5.adobe.com

127.0.0.1 ereg.wip3.adobe.com

127.0.0.1 ereg.adobe.com
 

Da befinden sich 20 zusÃ¤tzliche EintrÃ¤ge.
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKU\S-1-5-21-143339661-846541388-530592055-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Norman\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\irfanview_wallpaper.bmp

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AERTFilters => 2

MSCONFIG\Services: chip1click => 2

MSCONFIG\Services: SDScannerService => 2

MSCONFIG\Services: SDUpdateService => 2

MSCONFIG\Services: SDWSCService => 2

MSCONFIG\startupreg: "C: => 

MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe

HKLM\...\StartupApproved\StartupFolder: => "Scrybe.lnk"

HKLM\...\StartupApproved\Run: => "CanonMyPrinter"

HKLM\...\StartupApproved\Run: => "HotKeysCmds"

HKLM\...\StartupApproved\Run: => "BCSSync"

HKLM\...\StartupApproved\Run: => "BrowserChoice"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher"

HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "Reader Application Helper"

HKLM\...\StartupApproved\Run32: => "DivXMediaServer"

HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "IDMan"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Nero MediaHome 4"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "SandboxieControl"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "AnyDVD"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Amazon Cloud Player"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "DellSystemDetect"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [UDP Query User{DF082938-94F6-47D7-8944-92EE30ACBA5E}C:\program files\microsoft office\office14\groove.exe] => C:\program files\microsoft office\office14\groove.exe

FirewallRules: [TCP Query User{9AEFE5FF-34BA-4323-B353-0E5B75FEC22F}C:\program files\microsoft office\office14\groove.exe] => C:\program files\microsoft office\office14\groove.exe

FirewallRules: [{8F3E64EF-0E2B-4316-8E1B-F4EFAA1F95ED}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

FirewallRules: [{16EC4BD1-ECC9-410D-BE22-D6157E21151C}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

FirewallRules: [UDP Query User{AF4C3C75-E7AA-4848-B62B-7B4E6F72E80D}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{BD5F3226-231D-47F8-AD8B-E2C7084BAE5D}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{6C97E9F9-0FF6-4A0E-8F23-6BF57E6443FE}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{F71890F2-2919-40C3-9B58-A07A12032A60}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [{672399EC-8C2A-49C0-AAEA-4514CB17CFE8}] => C:\Users\Norman\AppData\Roaming\Andy\Setup.exe

FirewallRules: [{2487166A-C3D3-4F08-ABA6-C40A238041A3}] => C:\Users\Norman\AppData\Roaming\Andy\Setup.exe

FirewallRules: [{88711F82-1A87-41EE-894E-F029647E8C2E}] => C:\Program Files\Andy\HandyAndy.exe

FirewallRules: [{079B6616-12F1-42B0-8E3E-8AE9E1B20D57}] => C:\Program Files\Andy\HandyAndy.exe

FirewallRules: [{3F5EC342-383C-41BB-B930-81473B993008}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{C8B259E6-A396-4F3B-B90B-EB77D296FB1E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{F9B30D0D-9CEB-415B-A06F-00250C2EE94B}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{1A89FDA3-7922-4BCF-90A9-D54022FF612D}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{FF0815FF-32AB-4992-B9D3-32C511DE8361}] => C:\Program Files\Andy\andy.exe

FirewallRules: [{625FE1AB-FC14-44E8-BEFD-A77EE0F2E25B}] => C:\Program Files\Andy\andy.exe

FirewallRules: [{714C8173-6057-424A-BA3C-58170EE21B1D}] => C:\Users\Norman\Downloads\DCS-5222L_REVB_SETUPWIZARD_1.04.10_WIN\wizard\autorun.exe

FirewallRules: [{FF9AD526-0C85-4EAE-AFE1-245EEDFBF129}] => C:\Users\Norman\Downloads\dlink\wizard\autorun.exe

FirewallRules: [UDP Query User{4841AF52-F27F-45C4-A420-522FC883F89C}C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe] => C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe

FirewallRules: [TCP Query User{A4E6880C-6074-45B3-84B2-16A98A2B5FC2}C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe] => C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe

FirewallRules: [UDP Query User{BE4021CE-4781-4EF4-A5EC-1A4AC9456762}C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe] => C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe

FirewallRules: [TCP Query User{B7E1B6E7-D51D-4F43-A603-2D026566B640}C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe] => C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe

FirewallRules: [{AD697AB1-1F75-4C42-BA0B-CFFC7E9272B9}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe

FirewallRules: [{1398A097-CCAD-43B2-947F-C8909095796B}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe

FirewallRules: [UDP Query User{F40E9912-4765-460F-BF5B-CFA167C4EB6A}C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe] => C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe

FirewallRules: [TCP Query User{42A1759D-B976-4DAC-88AA-191EF1837A48}C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe] => C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe

FirewallRules: [UDP Query User{DF8247B3-6D53-48B8-A220-7EB20C63FA82}C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe] => C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe

FirewallRules: [TCP Query User{0DE45B44-2632-4D4F-961B-C49D9D41EC2E}C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe] => C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe

FirewallRules: [UDP Query User{2608149C-6A8F-4DE1-96B1-1C3EB0AF0BE1}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{4C849D8A-2F79-461C-8969-936DA8E94B50}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{E38E860E-9E63-43F9-8E58-E8F16F540C55}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{BCBC1985-1AD8-48DE-A39E-1BC56B26ABF1}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{0A3B5422-5970-4320-AC7D-029CF7018AA8}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{65E8BFFF-D4F0-4C38-9BEB-CC718C1D23A4}] => C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{43F34969-359C-43DF-8298-279FC511286B}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [TCP Query User{BFE8205E-BD23-433A-830A-9ACFD6F9D1EA}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [{D58390AF-C6F3-479A-94CF-CBB13E74CF65}] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [{4DAFCAE7-B2DE-4F1D-B3A3-4559A83C27BC}] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{7163A2CA-DC51-4C73-83DD-9884AEE20CBE}C:\program files (x86)\mozilla firefox\plugin-container.exe] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [TCP Query User{321CD3A1-A232-4126-A715-538AB644DC13}C:\program files (x86)\mozilla firefox\plugin-container.exe] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{3149A794-517A-4F57-9CF2-723164FDDAB2}C:\program files (x86)\gts\gts.exe] => C:\program files (x86)\gts\gts.exe

FirewallRules: [TCP Query User{FF94542E-68A5-4DAE-8011-0259C4D61344}C:\program files (x86)\gts\gts.exe] => C:\program files (x86)\gts\gts.exe

FirewallRules: [UDP Query User{E5746F8B-D5C0-4354-B434-F34C8A6C2F9C}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [TCP Query User{1D3940C3-1304-49F7-AE14-74D4DE38ED2C}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [{7B47768D-0201-4978-813C-55CE7CCD2DE5}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{4EB9D924-2B5C-4515-8DCB-73093E3969FB}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{430199CD-23D4-4060-A869-234507B433C9}] => c:\Program Files (x86)\Dell\VideoStage\VideoStage.exe

FirewallRules: [{2A5E8176-D9F5-406B-83AA-17B3FB8B0A78}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{467F2E48-9B8A-441E-B34F-8354E20470B7}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{8C8135CF-40B2-488E-B1CC-BB13C0155914}] => C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [{6CDD6428-3209-4BC2-8441-00DFE1ED5F18}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{6D96BFEA-C893-4A9D-A409-BC6148B5FA11}] => LPort=2869

FirewallRules: [{F38F5CFF-F70D-4E99-BA64-06BC83E4228B}] => LPort=1900

FirewallRules: [{62B4C63A-7436-45C5-8F81-D436A3FC4DFF}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{85F03B60-5720-41F5-A23D-79C856C4A2F3}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

FirewallRules: [{B504C53B-4CE5-4F3E-BBC4-B03E3C573E67}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

FirewallRules: [{0F1E28A3-8336-4271-9449-38A6442CC981}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{57747E09-46BC-4DED-82ED-012BAA3E51BA}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{9C905D26-63DC-4FE2-A8E2-D34B36830001}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{CBFE21B9-D98C-470E-B0E6-6C553A237F05}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{919D4C7B-FCDE-4EA2-A840-08A223618767}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{5CBAE31B-A73A-4BD4-8689-DC805E449A3F}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{69976F95-3638-43EB-BF63-CEFFDDE14669}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{E099848A-6CB2-4C3D-9AA0-6D2B0BA3EE11}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{29940111-2D72-455D-ABE5-B85F083DCC9D}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{633FE991-A1C7-4938-B071-CB2B9919CFBD}] => C:\Program Files\Acrylic Wi-Fi Home\Acrylic.exe

FirewallRules: [{EEA2650F-77E9-4C7B-90E1-0EE2B5967E4E}] => C:\Program Files\Acrylic Wi-Fi Home\Acrylic.exe

FirewallRules: [{5ED2F3A2-25F3-4811-A0DB-1BAA639F652B}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Wiederherstellungspunkte =========================
 

30-11-2016 00:07:54 Geplanter PrÃ¼fpunkt

04-12-2016 01:32:16 JRT Pre-Junkware Removal

05-12-2016 21:46:47 chip 1-click download service wurde entfernt.
 

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/08/2016 09:11:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)

Description: Bei der Aktivierung der App â€žMicrosoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideoâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (12/08/2016 06:18:08 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
 

Error: (12/08/2016 06:17:48 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur fÃ¼r den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten fÃ¼r diesen Dienst sind nicht verfÃ¼gbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 

Error: (12/08/2016 06:14:41 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm MicrosoftEdge.exe, Version 11.0.14393.447 kann nicht mehr unter Windows ausgefÃ¼hrt werden und wurde beendet. ÃœberprÃ¼fen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: c638
 

Startzeit: 01d251721014c28c
 

Beendigungszeit: 4294967295
 

Anwendungspfad: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
 

Berichts-ID: c713be12-bd69-11e6-8027-88532e0c320c
 

VollstÃ¤ndiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID: MicrosoftEdge
 

Error: (12/07/2016 10:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)

Description: Bei der Aktivierung der App â€žMicrosoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIâ€œ ist folgender Fehler aufgetreten: -2147024891. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (12/07/2016 08:15:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)

Description: Bei der Aktivierung der App â€žMicrosoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusicâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (12/07/2016 05:29:59 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.321, Zeitstempel: 0x57f4c291

Ausnahmecode: 0xc000041d

Fehleroffset: 0x000da6f2

ID des fehlerhaften Prozesses: 0x2670

Startzeit der fehlerhaften Anwendung: 0x01d250a71f7c6cc4

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: 584df13e-5a27-4b57-9245-0da14fd6253b

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/07/2016 05:26:45 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
 

Error: (12/07/2016 05:26:43 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur fÃ¼r den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten fÃ¼r diesen Dienst sind nicht verfÃ¼gbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 

Error: (12/06/2016 11:05:31 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)

Description: Bei der Aktivierung der App â€žMicrosoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusicâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 
 

Systemfehler:

=============

Error: (12/09/2016 10:06:18 AM) (Source: BTHUSB) (EventID: 16) (User: )

Description: Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Adapter und einem GerÃ¤t mit Bluetooth-Adapteradresse (0c:a6:94:7d:cb:5d) ist fehlgeschlagen.
 

Error: (12/09/2016 12:14:25 AM) (Source: BTHUSB) (EventID: 16) (User: )

Description: Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Adapter und einem GerÃ¤t mit Bluetooth-Adapteradresse (0c:a6:94:7d:cb:5d) ist fehlgeschlagen.
 

Error: (12/08/2016 10:14:00 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 und der APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/08/2016 09:36:53 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{DABF28BE-F6B4-4E40-8F40-C4FB26F3116C}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/08/2016 09:11:40 PM) (Source: BTHUSB) (EventID: 16) (User: )

Description: Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Adapter und einem GerÃ¤t mit Bluetooth-Adapteradresse (0c:a6:94:7d:cb:5d) ist fehlgeschlagen.
 

Error: (12/08/2016 07:18:00 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 und der APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/08/2016 06:38:31 PM) (Source: BTHUSB) (EventID: 16) (User: )

Description: Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Adapter und einem GerÃ¤t mit Bluetooth-Adapteradresse (0c:a6:94:7d:cb:5d) ist fehlgeschlagen.
 

Error: (12/08/2016 06:34:55 PM) (Source: BTHUSB) (EventID: 16) (User: )

Description: Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Adapter und einem GerÃ¤t mit Bluetooth-Adapteradresse (0c:a6:94:7d:cb:5d) ist fehlgeschlagen.
 

Error: (12/08/2016 06:31:56 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/08/2016 06:30:28 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 und der APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 
 

CodeIntegrity:

===================================

  Date: 2016-10-03 20:02:58.109

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-s..-credentialprovider_31bf3856ad364e35_10.0.10586.0_none_79f13fc599eae8eb\BioCredProv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:02:58.105

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-s..-credentialprovider_31bf3856ad364e35_10.0.10586.0_none_79f13fc599eae8eb\BioCredProv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:02:58.101

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-s..-credentialprovider_31bf3856ad364e35_10.0.10586.0_none_79f13fc599eae8eb\BioCredProv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:02:58.086

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-s..-credentialprovider_31bf3856ad364e35_10.0.10586.0_none_79f13fc599eae8eb\BioCredProv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:59.822

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-edp-audit_31bf3856ad364e35_10.0.10586.0_none_fbfd18fdbfe77d1b\edpauditapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:59.819

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-edp-audit_31bf3856ad364e35_10.0.10586.0_none_fbfd18fdbfe77d1b\edpauditapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:59.816

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-edp-audit_31bf3856ad364e35_10.0.10586.0_none_fbfd18fdbfe77d1b\edpauditapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:59.789

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-edp-audit_31bf3856ad364e35_10.0.10586.0_none_fbfd18fdbfe77d1b\edpauditapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:38.338

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.10586.589_none_b5eef605bad2c432\GamePanel.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:38.332

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.10586.589_none_b5eef605bad2c432\GamePanel.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-2720QM CPU @ 2.20GHz

Prozentuale Nutzung des RAM: 40%

Installierter physikalischer RAM: 8086.16 MB

Verfügbarer physikalischer RAM: 4850.68 MB

Summe virtueller Speicher: 9366.16 MB

Verfügbarer virtueller Speicher: 6032.14 MB
 

==================== Laufwerke ================================
 

Drive c: (OS) (Fixed) (Total:402.19 GB) (Free:278.07 GB) NTFS

Drive d: (Data) (Fixed) (Total:1862.89 GB) (Free:1495.17 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 07F2837E)

Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)

Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=402.2 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=48.8 GB) - (Type=05)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

cosinus

09.12.2016 14:06

Zitat:

127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 www.adobeereg.com

Du hast gecrackte Adobe Software auf diesem System

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

querotudo

09.12.2016 14:14

Hallo Cosinus,

sollte sich auf meinem System gecrackte Software befinden, so definitiv unbewußt. Ich habe vor Jahren den Photoshop auf Ebay gekauft und auch Lightroom käuflich erworben. Sag mir bitte welches dieser Programme es ist, damit ich es deinstallieren kann?

Gruß,
querotudo

cosinus

09.12.2016 14:30

Im Prinzip alle Bezahlversionen von Adobe.

querotudo

09.12.2016 14:39

Wow, dann hätte ich danach keine Fotosoftware mehr. Hier muss ein Fehler vorliegen. Ich habe dafür bezahlt und dies nicht wenig. Wenn ich ohne diese zu deinstallieren nicht mit Deiner Hilfe rechnen kann, müsste ich wohl damit leben.

cosinus

09.12.2016 14:49

Diese hosts Einträge kommen da aber nicht von allein rein. Und wenn du da nicht hänisch editiert hast, dann muss ein Crack diese Einträge gemacht haben.

querotudo

09.12.2016 14:54

Ob Du mir nun glaubst oder nicht, ich kenne meine beschränkten Computerkenntnisse. Ich wüsste nicht einmal, wo ich solche Einträge machen sollte, geschweige denn, was sie bewirken.

cosinus

09.12.2016 15:13

Deswegen sag ich ja: Crack ausgeführt, der Crack hat diese Einträge für dich gemacht

querotudo

09.12.2016 15:35

Also, bewusst habe ich keinen Crack ausgeführt, doch manchmal wird man halt abgezockt. Da beide Käufe jedoch einige Jahre auseinanderlagen, glaube ich nicht, dass ich zwei Cracks habe.
Ich habe mich gerade etwas über die Hosts-Datei und deren Funktionalität eingelesen. Danach habe ich alle Hosts außer localhost aus der Datei gelöscht und danach Photoshop und Lightroom nacheinander geöffnet. Photoshop will eine neue Registrierung haben, Lightroom läuft jedoch problemlos. Kann es also sein, dass nur Photoshop vom Rechner muss?

querotudo

09.12.2016 16:17

Liste der Anhänge anzeigen (Anzahl: 2)

Hallo Cosinus,

ich habe Photoshop entfernt (siehe Attachment), den Rechner neu gestartet und FRST noch einmal laufen lassen:

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016

durchgeführt von Norman (Administrator) auf NORMAN-PC (09-12-2016 16:04:48)

Gestartet von C:\Users\Norman\Downloads

Geladene Profile: Norman (Verfügbare Profile: Norman & Admin)

Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AviraSpeedup\Avira.SystemSpeedup.SpeedupService.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

(Intel Corporation) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

() C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(Synaptics, Inc.) C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7705.42037.0_x64__8wekyb3d8bbwe\HxTsr.exe

(Microsoft Corporation) C:\Windows\SysWOW64\icacls.exe

(Sony Corporation) C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

() C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe

(Synaptics Incorporated) C:\Program Files (x86)\Synaptics\Scrybe\scrybe.exe

() C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)

HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [4146848 2012-08-16] (Dell Inc.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945672 2015-07-16] (Synaptics Incorporated)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [916072 2016-10-29] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-11-15] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\AviraSpeedup\Avira.SystemSpeedup.Core.Common.Starter.exe [25256 2016-11-23] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION)

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [Spotify Web Helper] => C:\Users\Norman\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-12-08] (Spotify Ltd)

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [Spotify] => C:\Users\Norman\AppData\Roaming\Spotify\Spotify.exe [6987376 2016-12-08] (Spotify Ltd)

HKU\S-1-5-21-143339661-846541388-530592055-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)

HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMSE.EXE [298560 2014-03-20] (SEIKO EPSON CORPORATION)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconCheck] -> {d36d0796-4913-3dde-9159-1c7b348e59d2} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconError] -> {e4f57fbd-4e00-317c-9f90-d4e427981873} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconSync] -> {f1fc1212-b289-31bc-ae4d-56f707c68259} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk [2011-04-09]

ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

Startup: C:\Users\Norman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HiDrive.lnk [2016-12-09]

ShortcutTarget: HiDrive.lnk -> C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe ()

CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{265e45c3-1e8f-4edc-a3d0-688e3ac43142}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{2e9792a9-ff47-43c3-8e9c-09fa2f58c42b}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{56280e52-12c5-47a2-b502-fc59803f99c9}: [NameServer] 0.0.0.0

Tcpip\..\Interfaces\{bfb34b69-9053-433d-8225-c2dee194a17b}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{ff8b3f00-7008-4310-a736-92ad7f7d0007}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen

HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de

SearchScopes: HKU\S-1-5-21-143339661-846541388-530592055-1002 -> DefaultScope {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-09-25] (Oracle Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-09-25] (Oracle Corporation)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

DPF: HKLM-x32 {2D20E99C-1FD7-48EC-9FDF-CF3555B273D4} hxxp://192.168.1.129/VDControl.CAB?2,0,0,89

DPF: HKLM-x32 {A4150320-98EC-4DB6-9BFB-EBF4B6FBEB16} hxxp://192.168.1.137/codebase/DVM_IPCam2.ocx
 

Edge: 

======

Edge HomeButtonPage: HKU\S-1-5-21-143339661-846541388-530592055-1002 -> hxxp://google.de/
 

FireFox:

========

FF ProfilePath: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default [2016-12-09]

FF Homepage: Mozilla\Firefox\Profiles\jy1jlaly.default -> google.de

FF Extension: (AdBlocker Ultimate) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\adblockultimate@adblockultimate.net.xpi [2016-12-08]

FF Extension: (Image Zoom) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi [2016-04-28]

FF Extension: (Adblock Plus) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24]

FF SearchPlugin: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml [2016-10-02]

FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\extensions\@greatdealz.xpi => nicht gefunden

FF HKU\S-1-5-21-143339661-846541388-530592055-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Norman\AppData\Roaming\IDM\idmmzcc3 => nicht gefunden

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-19] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2013-09-17] (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-09-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-09-25] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-19] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-02-20] ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [Keine Datei]

FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2010-03-26] (GARMIN Corp.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)

FF Plugin-x32: @t-immersion.com/DFusionHomeWebPlugIn -> C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll [2011-06-30] (Total Immersion)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
 

Chrome: 

=======

CHR DefaultProfile: Profile 1

CHR Profile: C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-12-09]

CHR Extension: (Google Drive) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-20]

CHR Extension: (Image Zoom) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bdmfgepgnaffojoiojoeadeofipcfndh [2014-11-26]

CHR Extension: (YouTube) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-30]

CHR Extension: (Amazon) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-04-01]

CHR Extension: (Adblock Plus) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-12]

CHR Extension: (Replace New Tab Page) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cnkhddihkmmiiclaipbaaelfojkmlkja [2014-11-27]

CHR Extension: (Google-Suche) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-20]

CHR Extension: (Avira Browserschutz) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-23]

CHR Extension: (Google Docs Offline) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-23]

CHR Extension: (AdBlock Plus) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kfcfceejhleedfbabanmaamfiagjhncj [2014-11-26]

CHR Extension: (Caipirinha) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lllaffajmaihmacifgegebccnnhddemj [2015-09-30]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-23]

CHR Extension: (Google Mail) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-29]

CHR Extension: (Chrome Media Router) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-12]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Admin\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-09-30]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [ngnjhfpfhadncgafgbneeljaginimmmk] - <kein Path/update_url>
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1089088 2016-10-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [475232 2016-10-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [475232 2016-10-29] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1488240 2016-10-29] (Avira Operations GmbH & Co. KG)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [350528 2016-11-24] (Avira Operations GmbH & Co. KG)

R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [283296 2014-04-07] (Intel Corporation)

R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)

S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2011-04-22] (Macrovision Europe Ltd.) [Datei ist nicht signiert]

R2 FreeStyleLibre MAS Server; C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe [285184 2016-01-19] () [Datei ist nicht signiert]

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)

R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703696 2016-08-08] (SEIKO EPSON CORPORATION)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)

R2 ScrybeUpdater; C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)

S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-05-23] (Sony Corporation) [Datei ist nicht signiert]

R2 SpeedupService; C:\Program Files (x86)\Avira\AviraSpeedup\Avira.SystemSpeedup.SpeedupService.exe [33896 2016-11-23] (Avira Operations GmbH & Co. KG)

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-16] (Synaptics Incorporated)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [151352 2016-10-29] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [153392 2016-10-08] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [78208 2016-05-15] (Avira Operations GmbH & Co. KG)

S3 btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)

S3 GigasetGenericUSB_x64; C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2016-01-12] (Siemens Home and Office Communication Devices GmbH & Co. KG)

R3 i8042HDR; C:\WINDOWS\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider)

S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_86f2ae812568c59a\nvlddmkm.sys [14242872 2016-09-20] (NVIDIA Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

S3 NvStUSB; C:\WINDOWS\system32\DRIVERS\nvstusb.sys [121960 2010-12-12] ()

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56376 2016-08-04] (NVIDIA Corporation)

U5 PROCMON23; C:\Windows\System32\Drivers\PROCMON23.sys [92344 2016-12-04] (Sysinternals - www.sysinternals.com)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )

R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-16] (Synaptics Incorporated)

S3 SRS_HDAL_Service; C:\WINDOWS\System32\drivers\SRS_HDAL_amd64.sys [533280 2010-11-15] ()

S3 tapstrong; C:\WINDOWS\system32\DRIVERS\tapstrong.sys [38760 2013-11-16] (The OpenVPN Project)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

S3 DIRECTIO; \??\C:\Program Files\PerformanceTest\DirectIo64.sys [X]

U3 idsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-09 16:04 - 2016-12-09 16:04 - 00000000 __SHD C:\Users\Norman\AppData\Roaming\wyUpdate AU

2016-12-09 10:41 - 2016-12-09 10:41 - 00000000 ____D C:\Users\Norman\Downloads\FRST-OlderVersion

2016-12-08 17:58 - 2016-12-08 17:59 - 38791360 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (3).zip

2016-12-08 17:56 - 2016-12-08 17:57 - 27175600 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (2).zip

2016-12-08 17:29 - 2016-12-08 17:29 - 32849489 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2.zip

2016-12-08 17:29 - 2016-12-08 17:29 - 16045741 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (1).zip

2016-12-05 21:34 - 2016-12-09 10:50 - 00065745 _____ C:\Users\Norman\Downloads\Addition1.txt

2016-12-05 21:31 - 2016-12-09 16:07 - 00026299 _____ C:\Users\Norman\Downloads\FRST.txt

2016-12-05 21:31 - 2016-12-09 16:04 - 00000000 ____D C:\FRST

2016-12-05 21:31 - 2016-12-09 10:50 - 00056760 _____ C:\Users\Norman\Downloads\FRST1.txt

2016-12-05 21:29 - 2016-12-09 10:41 - 02420224 _____ (Farbar) C:\Users\Norman\Downloads\FRST64.exe

2016-12-04 23:17 - 2016-12-05 20:46 - 00011172 _____ C:\Users\Norman\Desktop\focal anschliessen.xlsx

2016-12-04 20:25 - 2016-12-04 20:25 - 00000000 ____D C:\WINDOWS\LastGood.Tmp

2016-12-04 01:37 - 2016-12-04 01:37 - 00015408 _____ C:\Users\Norman\Desktop\JRT.txt

2016-12-04 01:31 - 2016-12-04 01:31 - 01631928 _____ (Malwarebytes) C:\Users\Norman\Downloads\JRT.exe

2016-12-01 23:05 - 2016-12-01 23:05 - 00001272 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk

2016-12-01 23:04 - 2016-12-09 16:03 - 00000000 ____D C:\Users\Public\Speedup Sessions

2016-11-27 22:30 - 2016-11-27 22:30 - 00014743 _____ C:\Users\Norman\Desktop\Unitymedia Retourenmarke.pdf

2016-11-17 20:08 - 2016-12-09 16:05 - 00000000 ____D C:\Users\Norman\AppData\LocalLow\Mozilla

2016-11-13 00:19 - 2016-11-13 00:19 - 04756984 _____ (Softperfect ) C:\Users\Norman\Downloads\networx_setup.exe

2016-11-12 23:40 - 2016-11-13 00:09 - 07353936 _____ (Lucom GmbH) C:\Users\Norman\Downloads\FFWFiller3.4.1_build106_Setup.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-09 16:06 - 2016-05-04 19:43 - 00000000 ____D C:\Users\Norman\AppData\Local\CrashDumps

2016-12-09 16:05 - 2016-10-28 12:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-12-09 16:00 - 2016-09-21 22:49 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-12-09 16:00 - 2016-09-21 21:52 - 00000000 ____D C:\ProgramData\NVIDIA

2016-12-09 15:59 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI

2016-12-09 15:57 - 2011-04-09 19:49 - 00000000 ____D C:\ProgramData\Adobe

2016-12-09 15:56 - 2011-04-13 17:55 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Adobe

2016-12-09 15:55 - 2011-04-09 19:49 - 00000000 ____D C:\Program Files (x86)\Adobe

2016-12-09 15:53 - 2011-04-13 22:06 - 00000000 ____D C:\Program Files\Common Files\Adobe

2016-12-09 15:53 - 2011-04-13 21:35 - 00000000 ____D C:\Users\Norman\AppData\Local\Adobe

2016-12-09 14:07 - 2016-09-21 21:48 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2016-12-09 13:42 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps

2016-12-09 13:42 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-12-08 18:19 - 2013-10-31 00:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2016-12-08 18:19 - 2013-08-10 11:39 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-08 17:13 - 2016-05-16 16:00 - 00000000 ____D C:\Users\Norman\AppData\Local\Spotify

2016-12-08 17:13 - 2016-05-16 15:59 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Spotify

2016-12-06 01:06 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF

2016-12-05 21:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat

2016-12-05 21:01 - 2016-10-31 22:26 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit

2016-12-04 23:18 - 2016-09-21 22:46 - 00000000 ___DC C:\WINDOWS\Panther

2016-12-04 22:08 - 2016-11-02 19:56 - 00092344 ____H (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCMON23.SYS

2016-12-04 01:34 - 2013-02-03 15:37 - 00000000 ____D C:\ProgramData\IObit

2016-12-04 01:08 - 2016-10-24 18:53 - 00000000 ____D C:\Program Files\Mozilla Firefox

2016-12-04 01:07 - 2016-09-21 21:59 - 00000000 ____D C:\Users\Norman

2016-12-01 23:03 - 2012-10-17 12:46 - 00000000 ____D C:\Program Files (x86)\Avira

2016-11-30 23:17 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-11-22 22:35 - 2016-09-24 09:51 - 00018915 _____ C:\WINDOWS\SysWOW64\Defrag.debuglog

2016-11-22 22:34 - 2016-09-25 19:26 - 00008026 _____ C:\WINDOWS\SysWOW64\MyDefrag.dat

2016-11-22 22:31 - 2016-09-21 21:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-11-22 22:31 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MsDtc

2016-11-22 22:31 - 2014-12-29 00:00 - 00000000 ____D C:\NVIDIA

2016-11-22 22:31 - 2014-12-28 13:17 - 00000000 ____D C:\Log

2016-11-22 22:31 - 2013-11-08 01:23 - 00000000 ____D C:\Intel

2016-11-22 22:31 - 2011-10-17 19:33 - 00000000 ____D C:\Users\Norman\AppData\Local\Rohos

2016-11-22 22:31 - 2011-04-09 21:58 - 00000000 ____D C:\dell

2016-11-22 00:39 - 2016-09-10 00:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

2016-11-20 19:30 - 2014-11-25 23:33 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2016-11-19 11:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2016-11-19 11:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed

2016-11-17 01:43 - 2016-10-28 11:41 - 01368548 _____ C:\WINDOWS\SysWOW64\winapp2_disk.csv

2016-11-13 00:11 - 2011-06-26 10:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lucom

2016-11-12 14:49 - 2011-04-17 14:51 - 00000000 ____D C:\Users\Norman\AppData\Local\Google

2016-11-12 01:29 - 2014-11-02 17:01 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-11-09 23:42 - 2016-09-21 23:25 - 00000000 ____D C:\Users\Norman\AppData\Local\ConnectedDevicesPlatform

2016-11-09 21:50 - 2016-11-01 20:18 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Acrylic Wi-Fi Home

2016-11-09 21:50 - 2016-11-01 20:18 - 00000000 ____D C:\Program Files\Acrylic Wi-Fi Home

2016-11-09 02:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache

2016-11-09 01:52 - 2013-01-27 22:59 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-11-09 01:13 - 2016-09-21 21:48 - 05003872 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-11-09 01:10 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2016-11-09 01:10 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe

2016-11-09 01:10 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\migwiz

2016-11-09 01:09 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-11-09 01:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences

2016-11-09 01:09 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr

2016-11-09 00:16 - 2016-09-21 22:49 - 00004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2011-05-01 12:25 - 2011-05-01 12:25 - 0000132 _____ () C:\Users\Norman\AppData\Roaming\Adobe BMP Format CS5 Prefs

2011-05-01 12:28 - 2011-05-01 12:28 - 0000132 _____ () C:\Users\Norman\AppData\Roaming\Adobe PNG Format CS5 Prefs

2013-05-20 16:50 - 2013-05-20 16:50 - 0000005 _____ () C:\Users\Norman\AppData\Roaming\BCT-TTL.DAT

2012-01-26 20:38 - 2012-01-26 20:38 - 0076070 _____ () C:\Users\Norman\AppData\Roaming\Photo.jpg

2013-07-27 12:51 - 2013-07-31 10:51 - 0000076 _____ () C:\Users\Norman\AppData\Roaming\WB.CFG

2013-06-16 23:51 - 2013-08-09 23:51 - 0000005 _____ () C:\Users\Norman\AppData\Roaming\WBPU-TTL.DAT

2015-03-21 11:41 - 2015-03-21 11:41 - 0000038 ___SH () C:\Users\Norman\AppData\Local\69ff07055291669bb2b218.72821112

2012-12-16 00:38 - 2012-12-16 11:07 - 0001456 _____ () C:\Users\Norman\AppData\Local\Adobe Für Web speichern 12.0 Prefs

2011-08-27 10:36 - 2011-08-27 10:36 - 0002403 _____ () C:\Users\Norman\AppData\Local\FastClean.20110827.113609.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0002403 _____ () C:\Users\Norman\AppData\Local\FastClean.20110930.213107.txt

2011-08-26 23:58 - 2011-08-26 23:59 - 0024474 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.005843.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0002220 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.113710.txt

2011-08-27 10:37 - 2011-08-27 10:38 - 0025436 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.113735.txt

2011-09-30 20:31 - 2011-09-30 20:32 - 0002408 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110930.213154.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0026418 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110930.213219.txt

2012-02-11 20:08 - 2012-02-11 20:08 - 0002532 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20120211.200800.txt

2011-04-25 15:31 - 2011-04-25 15:31 - 0001500 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163125.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001522 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163232.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001265 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163236.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001265 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163258.txt

2011-08-26 23:51 - 2011-08-26 23:51 - 0001567 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005113.txt

2011-08-26 23:57 - 2011-08-26 23:57 - 0001587 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005706.txt

2011-08-26 23:57 - 2011-08-26 23:57 - 0000631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005729.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0000673 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005804.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001565 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005806.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001283 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005814.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001229 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005831.txt

2011-08-26 23:59 - 2011-08-26 23:59 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005905.txt

2011-08-27 10:25 - 2011-08-27 10:25 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.112544.txt

2011-08-27 10:33 - 2011-08-27 10:33 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113354.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0001559 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113615.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0000844 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113630.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113657.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001556 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113701.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113707.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113709.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001227 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113728.txt

2011-08-27 10:38 - 2011-08-27 10:38 - 0001247 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113802.txt

2011-08-27 10:41 - 2011-08-27 10:41 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.114142.txt

2011-08-27 13:28 - 2011-08-27 13:28 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.142850.txt

2011-08-27 13:32 - 2011-08-27 13:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143221.txt

2011-08-27 13:33 - 2011-08-27 13:33 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143328.txt

2011-08-27 13:35 - 2011-08-27 13:35 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143504.txt

2011-08-27 13:36 - 2011-08-27 13:36 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143643.txt

2011-08-27 13:41 - 2011-08-27 13:41 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144114.txt

2011-08-27 13:41 - 2011-08-27 13:41 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144131.txt

2011-08-27 13:44 - 2011-08-27 13:44 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144447.txt

2011-08-27 13:54 - 2011-08-27 13:54 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.145439.txt

2011-08-27 21:23 - 2011-08-27 21:23 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.222325.txt

2011-08-27 21:35 - 2011-08-27 21:35 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.223514.txt

2011-08-27 21:49 - 2011-08-27 21:49 - 0001548 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.224955.txt

2011-08-28 08:25 - 2011-08-28 08:25 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110828.092549.txt

2011-08-28 22:42 - 2011-08-28 22:42 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110828.234241.txt

2011-08-30 22:28 - 2011-08-30 22:28 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110830.232851.txt

2011-08-30 22:36 - 2011-08-30 22:36 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110830.233651.txt

2011-08-31 18:45 - 2011-08-31 18:45 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110831.194523.txt

2011-09-04 19:48 - 2011-09-04 19:48 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110904.204837.txt

2011-09-04 19:51 - 2011-09-04 19:51 - 0001548 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110904.205152.txt

2011-09-04 23:45 - 2011-09-04 23:45 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110905.004523.txt

2011-09-06 20:46 - 2011-09-06 20:46 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110906.214631.txt

2011-09-06 21:02 - 2011-09-06 21:02 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110906.220235.txt

2011-09-07 18:55 - 2011-09-07 18:55 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110907.195552.txt

2011-09-08 17:57 - 2011-09-08 17:57 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110908.185702.txt

2011-09-09 19:07 - 2011-09-09 19:07 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110909.200710.txt

2011-09-09 19:11 - 2011-09-09 19:11 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110909.201118.txt

2011-09-10 18:22 - 2011-09-10 18:22 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110910.192247.txt

2011-09-12 18:38 - 2011-09-12 18:39 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.193859.txt

2011-09-12 19:33 - 2011-09-12 19:33 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.203313.txt

2011-09-12 19:36 - 2011-09-12 19:36 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.203611.txt

2011-09-12 19:42 - 2011-09-12 19:42 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.204240.txt

2011-09-12 20:00 - 2011-09-12 20:00 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.210050.txt

2011-09-12 20:10 - 2011-09-12 20:10 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.211009.txt

2011-09-13 18:41 - 2011-09-13 18:41 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110913.194154.txt

2011-09-16 13:19 - 2011-09-16 13:19 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.141913.txt

2011-09-16 13:31 - 2011-09-16 13:31 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.143126.txt

2011-09-16 18:06 - 2011-09-16 18:06 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.190621.txt

2011-09-19 19:06 - 2011-09-19 19:06 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110919.200637.txt

2011-09-19 19:08 - 2011-09-19 19:08 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110919.200812.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195304.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195316.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195347.txt

2011-09-22 19:57 - 2011-09-22 19:57 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.205748.txt

2011-09-22 19:59 - 2011-09-22 19:59 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.205918.txt

2011-09-22 20:02 - 2011-09-22 20:02 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.210246.txt

2011-09-22 22:32 - 2011-09-22 22:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.233237.txt

2011-09-23 19:30 - 2011-09-23 19:30 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110923.203026.txt

2011-09-23 19:38 - 2011-09-23 19:39 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110923.203858.txt

2011-09-25 16:30 - 2011-09-25 16:30 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110925.173029.txt

2011-09-25 16:32 - 2011-09-25 16:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110925.173257.txt

2011-09-30 20:20 - 2011-09-30 20:20 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.212009.txt

2011-09-30 20:28 - 2011-09-30 20:28 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.212829.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001691 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213116.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000775 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213137.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213144.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001663 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213146.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213149.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213154.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213211.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0001229 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213248.txt

2011-09-30 20:35 - 2011-09-30 20:35 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213545.txt

2011-09-30 20:37 - 2011-09-30 20:37 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213751.txt

2011-10-03 23:40 - 2011-10-03 23:40 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111004.004009.txt

2011-10-16 17:12 - 2011-10-16 17:12 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111016.181247.txt

2011-10-16 17:31 - 2011-10-16 17:31 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111016.183111.txt

2011-10-21 21:09 - 2011-10-21 21:09 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111021.220926.txt

2011-10-24 19:03 - 2011-10-24 19:03 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111024.200357.txt

2011-10-24 19:05 - 2011-10-24 19:05 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111024.200500.txt

2011-10-24 23:43 - 2011-10-24 23:43 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111025.004352.txt

2011-10-30 12:45 - 2011-10-30 12:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.124516.txt

2011-10-30 12:46 - 2011-10-30 12:46 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.124632.txt

2011-10-30 17:34 - 2011-10-30 17:34 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.173449.txt

2011-10-30 19:45 - 2011-10-30 19:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.194515.txt

2011-11-01 20:21 - 2011-11-01 20:22 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111101.202157.txt

2011-11-01 20:29 - 2011-11-01 20:29 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111101.202932.txt

2011-11-04 20:38 - 2011-11-04 20:38 - 0001654 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111104.203817.txt

2011-11-04 20:41 - 2011-11-04 20:41 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111104.204113.txt

2011-11-05 22:43 - 2011-11-05 22:43 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111105.224326.txt

2011-11-06 17:39 - 2011-11-06 17:39 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.173943.txt

2011-11-06 19:45 - 2011-11-06 19:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.194515.txt

2011-11-06 23:10 - 2011-11-06 23:10 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.231034.txt

2011-11-06 23:11 - 2011-11-06 23:11 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.231132.txt

2011-11-09 23:16 - 2011-11-09 23:16 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111109.231646.txt

2011-11-11 20:48 - 2011-11-11 20:48 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111111.204845.txt

2011-11-11 20:51 - 2011-11-11 20:51 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111111.205142.txt

2011-11-13 21:45 - 2011-11-13 21:45 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214545.txt

2011-11-13 21:46 - 2011-11-13 21:46 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214631.txt

2011-11-13 21:49 - 2011-11-13 21:49 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214912.txt

2011-11-13 22:09 - 2011-11-13 22:09 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.220915.txt

2011-11-15 21:44 - 2011-11-15 21:44 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111115.214441.txt

2011-11-15 22:05 - 2011-11-15 22:05 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111115.220500.txt

2011-11-20 18:14 - 2011-11-20 18:14 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111120.181429.txt

2011-11-20 18:15 - 2011-11-20 18:15 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111120.181514.txt

2011-11-26 08:35 - 2011-11-26 08:35 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111126.083554.txt

2011-11-27 17:15 - 2011-11-27 17:15 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.171555.txt

2011-11-27 17:16 - 2011-11-27 17:16 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.171657.txt

2011-11-27 17:20 - 2011-11-27 17:20 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.172036.txt

2011-11-28 20:48 - 2011-11-28 20:48 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111128.204808.txt

2011-12-04 18:39 - 2011-12-04 18:39 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111204.183910.txt

2011-12-04 18:49 - 2011-12-04 18:49 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111204.184903.txt

2011-12-06 09:46 - 2011-12-06 09:46 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.094601.txt

2011-12-06 09:47 - 2011-12-06 09:47 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.094714.txt

2011-12-06 17:00 - 2011-12-06 17:00 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.170007.txt

2011-12-06 17:00 - 2011-12-06 17:00 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.170054.txt

2011-12-07 19:43 - 2011-12-07 19:43 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111207.194355.txt

2011-12-07 19:46 - 2011-12-07 19:46 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111207.194638.txt

2011-12-18 19:24 - 2011-12-18 19:24 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111218.192455.txt

2011-12-18 19:27 - 2011-12-18 19:27 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111218.192711.txt

2011-12-23 21:02 - 2011-12-23 21:02 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111223.210230.txt

2011-12-23 21:03 - 2011-12-23 21:04 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111223.210359.txt

2011-12-26 21:48 - 2011-12-26 21:48 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.214850.txt

2011-12-26 21:52 - 2011-12-26 21:52 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215206.txt

2011-12-26 21:53 - 2011-12-26 21:53 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215304.txt

2011-12-26 21:57 - 2011-12-26 21:57 - 0001656 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215720.txt

2011-12-26 21:58 - 2011-12-26 21:58 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215853.txt

2011-12-27 10:41 - 2011-12-27 10:41 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111227.104144.txt

2011-12-27 10:42 - 2011-12-27 10:42 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111227.104218.txt

2011-12-30 21:43 - 2011-12-30 21:43 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111230.214320.txt

2011-12-30 21:45 - 2011-12-30 21:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111230.214521.txt

2012-01-01 20:51 - 2012-01-01 20:51 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120101.205109.txt

2012-01-02 22:21 - 2012-01-02 22:21 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120102.222141.txt

2012-01-07 21:55 - 2012-01-07 21:55 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215502.txt

2012-01-07 21:55 - 2012-01-07 21:55 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215551.txt

2012-01-07 21:59 - 2012-01-07 22:00 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215959.txt

2012-01-07 22:02 - 2012-01-07 22:02 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.220201.txt

2012-01-07 22:04 - 2012-01-07 22:04 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.220434.txt

2012-01-09 21:54 - 2012-01-09 21:54 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120109.215418.txt

2012-01-09 21:57 - 2012-01-09 21:58 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120109.215758.txt

2012-01-20 20:53 - 2012-01-20 20:53 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120120.205322.txt

2012-01-21 21:58 - 2012-01-21 21:58 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120121.215816.txt

2012-02-11 19:51 - 2012-02-11 19:51 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195109.txt

2012-02-11 19:53 - 2012-02-11 19:53 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195320.txt

2012-02-11 19:54 - 2012-02-11 19:54 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195456.txt

2011-08-14 14:00 - 2016-10-31 21:54 - 0007615 _____ () C:\Users\Norman\AppData\Local\Resmon.ResmonCfg

2012-09-03 19:04 - 2012-09-03 19:04 - 0000437 _____ () C:\Users\Norman\AppData\Local\WiDiLog.20120903.200455.txt

2012-02-11 20:06 - 2012-02-11 20:08 - 0035304 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120211.200659.txt

2012-07-14 19:32 - 2012-07-14 19:34 - 0036810 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120714.203253.txt

2012-08-01 20:11 - 2012-08-01 20:11 - 0004356 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120801.211142.txt

2012-08-01 20:15 - 2012-08-01 20:15 - 0004300 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120801.211509.txt

2012-08-10 19:13 - 2012-08-10 19:13 - 0004254 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120810.201324.txt

2012-09-03 19:02 - 2012-09-03 19:05 - 0068266 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120903.200248.txt

2011-07-27 23:59 - 2011-07-27 23:59 - 0000000 _____ () C:\Users\Norman\AppData\Local\{5ED86D1B-2D7E-4120-BB20-3AEC8A26F554}

2011-07-30 04:45 - 2011-07-30 04:45 - 0000000 _____ () C:\Users\Norman\AppData\Local\{60B26B5E-87FD-42A4-83DC-4530F1960E8F}

2011-05-02 18:10 - 2011-05-02 18:10 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8A1F6FEE-5E6C-4272-9022-CB830817BA15}

2011-07-23 08:52 - 2011-07-23 08:52 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8A6B9F28-8DC5-4030-ABD2-70F4FD63FFE4}

2011-07-25 18:17 - 2011-07-25 18:17 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8EFAA6EA-5166-4E13-99E4-CB1B5DF8D35F}

2011-07-29 17:46 - 2011-07-29 17:46 - 0000000 _____ () C:\Users\Norman\AppData\Local\{C8C88F15-814A-4E08-8403-ACDF6E87EDC0}

2011-08-20 10:15 - 2014-03-26 19:34 - 0000125 ___SH () C:\ProgramData\.zreglib
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\Users\Public\AlexaNSISPlugin.8636.dll
 
 

Einige mit null Byte Größe Dateien/Ordner:

==========================

C:\Windows\System32\Drivers\iqvw64e.sys
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2016-12-04 23:03
 

==================== Ende von FRST.txt ============================

--- --- ---

querotudo

09.12.2016 16:18

Code:

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016

durchgefÃ¼hrt von Norman (09-12-2016 16:09:08)

Gestartet von C:\Users\Norman\Downloads

Windows 10 Pro Version 1607 (X64) (2016-09-21 21:54:50)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Admin (S-1-5-21-143339661-846541388-530592055-1004 - Administrator - Enabled) => C:\Users\Admin

Administrator (S-1-5-21-143339661-846541388-530592055-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-143339661-846541388-530592055-503 - Limited - Disabled)

Gast (S-1-5-21-143339661-846541388-530592055-501 - Limited - Disabled)

Norman (S-1-5-21-143339661-846541388-530592055-1002 - Administrator - Enabled) => C:\Users\Norman
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)

Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)

Adobe Photoshop Lightroom 5.7 64-bit (HKLM\...\{1B77B02E-17E4-4B6D-B8A1-74B29AF3D8DD}) (Version: 5.7.0 - Adobe Systems Incorporated)

Adobe Premiere Elements 7.0 (HKLM-x32\...\PremElem70) (Version: 7.0 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.5.146 - Adobe Systems, Inc.)

Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)

Ansel (Version: 372.90 - NVIDIA Corporation) Hidden

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Application Verifier (x64) (HKLM\...\{361A49FA-59B3-49FB-8C3E-08AF3EA5791A}) (Version: 4.0.917 - Microsoft Corporation)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.23.58 - Avira Operations GmbH & Co. KG)

Avira Connect (HKLM-x32\...\{707e8edf-9482-4417-ae39-c9b5fe605e87}) (Version: 1.2.76.27124 - Avira Operations GmbH & Co. KG)

Avira Connect (x32 Version: 1.2.76.27124 - Avira Operations GmbH & Co. KG) Hidden

Avira SearchFree Toolbar (HKLM-x32\...\{41564952-412D-5637-00A7-A758B70C0A03}) (Version: 12.10.3.4489 - APN, LLC)

Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 3.0.0.3502 - Avira Operations GmbH & Co. KG)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data (HKLM-x32\...\Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data) (Version:  - )

Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data (HKLM-x32\...\Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data) (Version:  - )

Canon Easy-PhotoPrint Pro (HKLM-x32\...\Easy-PhotoPrint Pro) (Version:  - )

Canon MG6200 series On-screen Manual (HKLM-x32\...\Canon MG6200 series On-screen Manual) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Debugging Tools for Windows (x64) (HKLM\...\{7F2E5C3B-DBDF-469D-AD8D-F686D3B71176}) (Version: 6.11.1.404 - Microsoft Corporation)

Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)

Dell System Detect - 1  (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\73f463568823ebbe) (Version: 6.6.0.2 - Dell)

Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.1.1.1303 - CyberLink Corp.)

Dell VideoStage (x32 Version: 1.1.1.1303 - CyberLink Corp.) Hidden

Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.22 - DivX, LLC)

EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)

Epson Easy Photo Print 2 (HKLM-x32\...\{07AA1C7F-E8CA-4FDC-B975-BC9EBC22B6DE}) (Version: 2.7.0.0 - SEIKO EPSON CORPORATION)

EPSON ET-4550 Series Printer Uninstall (HKLM\...\EPSON ET-4550 Series) (Version:  - SEIKO EPSON Corporation)

Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)

FormsForWebÂ® Filler 3.4.1 (HKLM-x32\...\{3C4DE3A5-B120-4A36-9B61-477D59333BA7}) (Version: 3.4.1 - Lucom GmbH)

Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)

FreeStyle Libre (HKLM-x32\...\FreeStyle Libre 1.0) (Version: 1.0 - Abbott Diabetes Care)

Garmin City Navigator Europe NT 2011.10 (HKLM-x32\...\{74D21920-3B72-494F-9042-8C26E1E99FDC}) (Version: 14.10.0.0 - Garmin Ltd or its subsidiaries)

Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)

Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)

Gigaset QuickSync (HKLM\...\{aef81617-c1c0-495e-83ae-91c94ecc562b}) (Version: 8.5.0874.3 - Gigaset Communications GmbH)

GmapTool 0.8.11 (HKLM-x32\...\{1873789F-59D5-4002-8A2F-60A827B78F98}_is1) (Version:  - AP)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)

Google Chrome (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Google Chrome) (Version: 13.0.782.215 - Google Inc.)

Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden

GTS  (HKLM-x32\...\{2E6AA783-D4A9-4AD3-9994-B64D923738D7}) (Version: 1.00.17 - vwd AG)

HiDrive (HKLM-x32\...\{88D57A8B-DF01-4C4D-8EF4-289C08BD2F96}) (Version: 4.2.1.0 - STRATO AG)

Image Data Converter (HKLM-x32\...\{87998E4E-6D9C-411B-AAE9-B8523FFE357D}) (Version: 4.2.02.10112 - Sony Corporation)

Intel Driver Update Utility (HKLM-x32\...\{ca4bc3a8-b99c-4416-90d8-351a8ceab458}) (Version: 2.2.0.2 - Intel)

Intel WiDi Media Share (x32 Version: 1.1.0.0 - Intel Corporation) Hidden

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Driver Update Utility 2.2 (x32 Version: 2.2.0.1 - Intel) Hidden

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Intel(R) WiDi (HKLM\...\{83A1A885-9BE7-4B1A-A3F9-88E81890173F}) (Version: 4.3.4.0 - Intel Corporation)

IntelÂ® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)

IntelÂ® WiDi Media Share (HKLM-x32\...\{32d14b1d-18fa-48e7-867d-93b7a72c816a}) (Version: 1.1.0.0 - Intel Corporation)

IntelÂ® WiDi Remote (HKLM-x32\...\{f329f83b-c06f-48ce-99eb-f324e2f94b01}) (Version: 1.0.0.0 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)

iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)

Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)

JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.55.0 - JMicron Technology Corp.)

Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

MapTk (MapToolKit) (HKLM-x32\...\{0236FF14-34AF-4D37-BA6C-17567B7A8685}_is1) (Version:  - )

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Document Explorer 2008 (HKLM-x32\...\Microsoft Document Explorer 2008) (Version:  - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Outlook Hotmail Connector 64-Bit (HKLM\...\{95140000-007A-0407-1000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Outlook Social Connector Provider for Windows Live Messenger 64-bit (HKLM\...\{95140000-007D-0409-1000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{6F29F195-B11C-3EAD-B883-997BB29DFA17}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x64 (HKLM\...\{965DF723-5688-359E-84D2-417CAFE644B5}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86 (HKLM-x32\...\{44D9A2CB-0692-3180-B5E2-26F4E807D067}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools fÃ¼r Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)

Mozilla Firefox 50.0 (x64 de) (HKLM\...\Mozilla Firefox 50.0 (x64 de)) (Version: 50.0 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - SEIKO EPSON Corporation)

MyEpson Portal (x32 Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden

NirSoft WirelessNetView (HKLM-x32\...\NirSoft WirelessNetView) (Version:  - )

NVIDIA 3D Vision Treiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.90 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Paragon Backup and Recoveryâ„¢ 2014 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.1 - pdfforge)

Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.24 - Dell Inc.)

QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)

Reader for PC (HKLM-x32\...\{D279DFB7-97A3-439D-8BE9-95D8AFA68562}) (Version: 2.4.01.10241 - Sony Corporation)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.2.1405.1601 - LG Electronics Inc.)

Spotify (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (HKLM-x32\...\{147DFAD8-34C3-4DE1-9FCA-ACEFDE9EF810}) (Version: 1.6.5.17120 - Synaptics Inc.)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.15.2 - Synaptics Incorporated)

System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC)

Total Immersion D'Fusion @Home Web Plug-In (HKLM-x32\...\D'Fusion @Home Web Plug-In) (Version:  - Total Immersion)

TRC-Brasil 11.05 2011-05-22 (HKLM-x32\...\Tracksource RoteÃ¡vel Completo - TRC-Brasil_is1) (Version: 11.05 2011-05-22 - Projeto Tracksource Brasil)

Ãœberwachungstool fÃ¼r die IntelÂ® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {035A9A4F-B696-49DC-9565-6A36C0EBEF1D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)

Task: {0D78C388-7509-4FE6-A5FB-098175E1545E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)

Task: {11788F8E-6BA1-45C8-B13A-FA9F2681E4BA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)

Task: {133555AB-2B60-4BA9-BDAA-F01F3AE03402} - System32\Tasks\{877A3688-B368-4D99-B519-DB656244B393} => pcalua.exe -a "C:\Program Files (x86)\Canon\IJ Manual\Canon MG6200 series\uninstall.exe"

Task: {1A438826-8381-44D6-A6B9-8F489490F86D} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1BE75B25-9E44-4F82-95D6-D79F60FF3247} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1DE85612-34FA-429A-9D31-5CDBC2650323} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1F9A0589-84B5-42BA-AFDE-228B26EA0EC2} - System32\Tasks\EPSON ET-4550 Series Update {F58BC06F-9519-4B48-B3D9-392DEEA747B9} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {28AF8722-4067-428D-8BE0-E65205185B0B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {31158C7A-66C9-4F5A-93B2-4EFD47974767} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-11-08] (Microsoft Corporation)

Task: {321BC64F-22B4-4376-A69F-320A591125C3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {3517BCB2-F82F-43FF-92CD-65B00301C15E} - \PCDoctorBackgroundMonitorTask -> Keine Datei <==== ACHTUNG

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe

Task: {3D88E051-66CE-4CFC-9371-5E60E0A371C5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {3EEB8463-7733-4D40-8E4F-CBABDC0ACE94} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {4324C4A4-5416-4DA7-9F0B-FDF41833D324} - \SystemToolsDailyTest -> Keine Datei <==== ACHTUNG

Task: {4484C003-4F32-4384-8030-E4C4851E3F59} - System32\Tasks\{8AC66CE9-0E07-4269-869C-86FDAA1E2C04} => pcalua.exe -a C:\Users\Norman\AppData\Local\Apps\2.0\WPX0DM2N.492\KAANJB92.8H0\dell..tion_e30b47f5d4a30e9e_0006.0006_e3e278ac9f13d461\Uninstaller.exe -c uninstall

Task: {44E5FC0B-7C72-45E2-9C56-43CC558E11E3} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {527B5428-05E5-403D-B2D7-755ED2A1DEFB} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {5499FFD0-826B-4096-8C27-30A24297365B} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {54D09165-62A4-46D6-AB2D-84F926E6A64D} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe

Task: {56F78C49-02AC-472B-9AF3-557B49123E26} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22] (Oracle Corporation)

Task: {582170F0-FF9B-400D-AE49-75009B2E6767} - System32\Tasks\EPSON ET-4550 Series Update {8F854212-531C-4F83-90B2-997F22F7FA1F} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {5D79A697-EFF9-4FD8-B420-18AC0D375505} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)

Task: {632484DB-1288-42DB-B76E-83BEC2218227} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {70F31CE2-B841-4129-99F4-B4823E566B60} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {7C94D902-6042-4C63-9E48-BB6585BFA4E8} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {7FFB4346-F6CE-46BD-B04C-70751983D698} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {81AA9449-0338-4196-AB82-C8EB4802916D} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8E6552C0-1141-45A4-8D28-92FC52F385F1} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {97CDDA5E-013E-4420-A8E9-75A1ECA04D5C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {996AC3FA-FE8C-4877-8FDA-8528B5969542} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {9AE661AD-32D1-4A04-99D0-D58B7CDB48F3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9C3C6ACD-5255-4E03-BD26-7092C6EF74C2} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe

Task: {A85F96BF-E61D-4F05-9957-2F739826DBA2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe

Task: {B499892F-1E79-4D05-BAFD-4E7C12930048} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe [2014-03-13] (LG Electronics Inc.)

Task: {B98F5A2E-3D00-42ED-A557-E79AF9B0BF6C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {BD585239-8EB9-4933-A8E8-B0FA3A35010E} - \PCDEventLauncherTask -> Keine Datei <==== ACHTUNG

Task: {BEE9CE76-88FB-41FB-B94E-36A4B7A35958} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {D2E516C1-237E-465F-8481-60E17010A5DD} - System32\Tasks\{0EE9F46A-89CF-4603-BE10-7B3B15B52B1F} => pcalua.exe -a "C:\Program Files (x86)\test und FINANZtest Archiv CD-Rom 2012\Uninst.exe"

Task: {D5EAEB49-5195-4869-99F4-B092EA0AA9C9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {D7213CF8-8470-44E2-91BF-02A9FF5BFF4C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-19] (Adobe Systems Incorporated)

Task: {DE52E1A7-88F9-4E76-9F05-434F048511DD} - System32\Tasks\EPSON ET-4550 Series Update {9FB6518E-86D9-4A7F-A4EC-B9E4721EE623} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {E518C07C-FA41-4267-BD27-7BCE1EE2293D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {EFBE991D-2AB8-42F8-BA1D-C936AD834C64} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F6520BE3-B270-482E-B856-0538FBB0FCFC} - System32\Tasks\Moo0 System Monitor 1.76 => C:\Program Files (x86)\Moo0\SystemMonitor 1.76\SystemMonitor.exe

Task: {F6AEB890-1D27-4C31-8B90-99C7563D5E1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {FABBEB4E-6065-4957-8BFD-1BA469C1CCA8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {8F854212-531C-4F83-90B2-997F22F7FA1F}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{8F854212-531C-4F83-90B2-997F22F7FA1F} /F:UpdateWORKGROUP\NORMAN-PC$

Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {9FB6518E-86D9-4A7F-A4EC-B9E4721EE623}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{9FB6518E-86D9-4A7F-A4EC-B9E4721EE623} /F:Update WORKGROUP\NORMAN-PC$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {F58BC06F-9519-4B48-B3D9-392DEEA747B9}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{F58BC06F-9519-4B48-B3D9-392DEEA747B9} /F:Update WORKGROUP\NORMAN-PC$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== VerknÃ¼pfungen =============================
 

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-09-29 21:55 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-09-21 21:52 - 2016-09-16 23:54 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2006-12-04 00:26 - 2006-12-04 00:26 - 00022016 _____ () C:\WINDOWS\System32\sugo3l6.dll

2016-09-29 21:55 - 2016-09-15 18:25 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll

2016-09-21 23:30 - 2016-09-21 23:30 - 00959168 _____ () C:\Users\Norman\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64\ClientTelemetry.dll

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2016-09-21 22:41 - 2016-09-21 22:41 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2016-11-08 22:59 - 2016-11-02 11:30 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2016-11-08 22:58 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-08 22:59 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-08 22:58 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2016-11-08 22:58 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll

2016-11-08 22:58 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-08 22:58 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-11-17 20:12 - 2016-11-17 20:12 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2016-11-17 20:12 - 2016-11-17 20:12 - 00178688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2016-11-17 20:12 - 2016-11-17 20:12 - 41609728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2016-11-08 22:58 - 2016-11-02 11:13 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll

2016-11-08 22:58 - 2016-11-02 11:16 - 04046848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Signals.dll

2016-11-08 22:58 - 2016-11-02 11:13 - 01475584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.IntentExtraction.dll

2016-02-28 13:56 - 2016-01-19 08:16 - 00285184 _____ () C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe

2016-10-05 22:21 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-12-08 17:03 - 2016-12-08 17:03 - 02561536 _____ () C:\Program Files\WindowsApps\Microsoft.People_10.1.3160.0_x64__8wekyb3d8bbwe\People.BackgroundTasks.dll

2016-12-08 17:03 - 2016-12-08 17:03 - 00139264 _____ () C:\Program Files\WindowsApps\Microsoft.People_10.1.3160.0_x64__8wekyb3d8bbwe\PeopleUtilRT.Windows.dll

2016-07-16 12:42 - 2016-07-16 12:42 - 01872384 _____ () C:\Windows\System32\speech_onecore\engines\tts\MSTTSEngine_OneCore.dll

2016-07-16 12:42 - 2016-07-16 12:42 - 00638976 _____ () C:\Windows\System32\speech_onecore\engines\tts\MSTTSLoc_OneCore.DLL

2016-11-17 20:11 - 2016-11-17 20:11 - 01084928 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1611.3132.0_x64__8wekyb3d8bbwe\TimeBackground.dll

2016-11-04 21:19 - 2016-11-04 21:19 - 00055808 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.10.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll

2016-11-08 22:59 - 2016-11-02 11:13 - 00115712 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\DeviceSideServicesActionUriHandler.dll

2016-11-08 22:58 - 2016-11-02 11:13 - 00522752 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.NodeWinrtWrap.dll

2016-07-16 12:43 - 2016-07-16 23:56 - 00040448 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\winrt-projections\bin\Winrt_Projections.node

2016-07-16 12:43 - 2016-07-16 23:56 - 00813056 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http\bin\NodeRT_Windows_Web_Http.node

2016-07-16 12:43 - 2016-07-16 23:56 - 00963584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.headers\bin\NodeRT_Windows_Web_Http_Headers.node

2016-07-16 12:43 - 2016-07-16 23:56 - 00249344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.web.http.filters\bin\NodeRT_Windows_Web_Http_Filters.node

2016-07-16 12:43 - 2016-07-16 23:56 - 00572416 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.storage.streams\bin\NodeRT_Windows_Storage_Streams.node

2016-07-16 12:43 - 2016-07-16 23:56 - 00403968 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.foundation\bin\NodeRT_Windows_Foundation.node

2016-07-16 12:43 - 2016-07-16 23:56 - 00183296 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\nodert-buffer-utils\bin\NodeRT_Buffer_Utils.node

2016-07-16 12:43 - 2016-07-16 23:56 - 00288256 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\dss_service\node_modules\windows.cortana.pal\bin\NodeRT_Windows_Cortana_PAL.node

2016-02-28 13:56 - 2016-01-19 08:16 - 00081408 _____ () C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe

2015-06-01 20:00 - 2015-06-01 20:00 - 00102912 _____ () C:\WINDOWS\system32\IccLibDll_x64.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 06673568 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe

2016-05-04 19:34 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2013-06-25 17:23 - 2013-06-25 17:23 - 00880640 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\fsk.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00040264 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskMediaPlayers.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00239944 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\Fskin.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00026952 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskinLocalize.dll

2013-05-23 18:54 - 2013-05-23 18:54 - 00798720 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskSecurity.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00125256 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskDocumentViewer.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00016200 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskPower.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00024904 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskNetInterface.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00017224 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskMobileMediaDevice.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00015176 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\FskTimeHardware.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00034632 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ticket.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00018760 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ebookDeviceNotifier.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00092488 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ebookUsb.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00149832 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\readerAppHelper.dll

2013-06-25 17:24 - 2013-06-25 17:24 - 00178504 _____ () C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\USBDetector.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 01035936 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\CefSharp.Core.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 48943768 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\libcef.dll

2015-03-19 19:47 - 2013-12-06 22:06 - 00642016 _____ () C:\Program Files (x86)\LG Software\LG Smart Share\DMS\sqlite3.dll

2016-09-21 23:29 - 2016-09-21 23:29 - 00679624 _____ () C:\Users\Norman\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\ClientTelemetry.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1 [104]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)
 
 

==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-143339661-846541388-530592055-1002\...\localhost -> localhost
 

==================== Hosts Inhalt: ===============================
 

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)
 

2016-12-09 15:17 - 2016-12-09 15:19 - 00000820 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

127.0.0.1       localhost
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKU\S-1-5-21-143339661-846541388-530592055-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Norman\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\irfanview_wallpaper.bmp

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AERTFilters => 2

MSCONFIG\Services: chip1click => 2

MSCONFIG\Services: SDScannerService => 2

MSCONFIG\Services: SDUpdateService => 2

MSCONFIG\Services: SDWSCService => 2

MSCONFIG\startupreg: "C: => 

MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe

HKLM\...\StartupApproved\StartupFolder: => "Scrybe.lnk"

HKLM\...\StartupApproved\Run: => "CanonMyPrinter"

HKLM\...\StartupApproved\Run: => "HotKeysCmds"

HKLM\...\StartupApproved\Run: => "BCSSync"

HKLM\...\StartupApproved\Run: => "BrowserChoice"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher"

HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "Reader Application Helper"

HKLM\...\StartupApproved\Run32: => "DivXMediaServer"

HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "IDMan"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Nero MediaHome 4"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "SandboxieControl"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "AnyDVD"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Amazon Cloud Player"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "DellSystemDetect"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [UDP Query User{DF082938-94F6-47D7-8944-92EE30ACBA5E}C:\program files\microsoft office\office14\groove.exe] => C:\program files\microsoft office\office14\groove.exe

FirewallRules: [TCP Query User{9AEFE5FF-34BA-4323-B353-0E5B75FEC22F}C:\program files\microsoft office\office14\groove.exe] => C:\program files\microsoft office\office14\groove.exe

FirewallRules: [{8F3E64EF-0E2B-4316-8E1B-F4EFAA1F95ED}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

FirewallRules: [{16EC4BD1-ECC9-410D-BE22-D6157E21151C}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

FirewallRules: [UDP Query User{AF4C3C75-E7AA-4848-B62B-7B4E6F72E80D}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{BD5F3226-231D-47F8-AD8B-E2C7084BAE5D}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{6C97E9F9-0FF6-4A0E-8F23-6BF57E6443FE}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{F71890F2-2919-40C3-9B58-A07A12032A60}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [{672399EC-8C2A-49C0-AAEA-4514CB17CFE8}] => C:\Users\Norman\AppData\Roaming\Andy\Setup.exe

FirewallRules: [{2487166A-C3D3-4F08-ABA6-C40A238041A3}] => C:\Users\Norman\AppData\Roaming\Andy\Setup.exe

FirewallRules: [{88711F82-1A87-41EE-894E-F029647E8C2E}] => C:\Program Files\Andy\HandyAndy.exe

FirewallRules: [{079B6616-12F1-42B0-8E3E-8AE9E1B20D57}] => C:\Program Files\Andy\HandyAndy.exe

FirewallRules: [{3F5EC342-383C-41BB-B930-81473B993008}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{C8B259E6-A396-4F3B-B90B-EB77D296FB1E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{F9B30D0D-9CEB-415B-A06F-00250C2EE94B}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{1A89FDA3-7922-4BCF-90A9-D54022FF612D}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{FF0815FF-32AB-4992-B9D3-32C511DE8361}] => C:\Program Files\Andy\andy.exe

FirewallRules: [{625FE1AB-FC14-44E8-BEFD-A77EE0F2E25B}] => C:\Program Files\Andy\andy.exe

FirewallRules: [{714C8173-6057-424A-BA3C-58170EE21B1D}] => C:\Users\Norman\Downloads\DCS-5222L_REVB_SETUPWIZARD_1.04.10_WIN\wizard\autorun.exe

FirewallRules: [{FF9AD526-0C85-4EAE-AFE1-245EEDFBF129}] => C:\Users\Norman\Downloads\dlink\wizard\autorun.exe

FirewallRules: [UDP Query User{4841AF52-F27F-45C4-A420-522FC883F89C}C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe] => C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe

FirewallRules: [TCP Query User{A4E6880C-6074-45B3-84B2-16A98A2B5FC2}C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe] => C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe

FirewallRules: [UDP Query User{BE4021CE-4781-4EF4-A5EC-1A4AC9456762}C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe] => C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe

FirewallRules: [TCP Query User{B7E1B6E7-D51D-4F43-A603-2D026566B640}C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe] => C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe

FirewallRules: [{AD697AB1-1F75-4C42-BA0B-CFFC7E9272B9}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe

FirewallRules: [{1398A097-CCAD-43B2-947F-C8909095796B}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe

FirewallRules: [UDP Query User{F40E9912-4765-460F-BF5B-CFA167C4EB6A}C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe] => C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe

FirewallRules: [TCP Query User{42A1759D-B976-4DAC-88AA-191EF1837A48}C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe] => C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe

FirewallRules: [UDP Query User{DF8247B3-6D53-48B8-A220-7EB20C63FA82}C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe] => C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe

FirewallRules: [TCP Query User{0DE45B44-2632-4D4F-961B-C49D9D41EC2E}C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe] => C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe

FirewallRules: [UDP Query User{2608149C-6A8F-4DE1-96B1-1C3EB0AF0BE1}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{4C849D8A-2F79-461C-8969-936DA8E94B50}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{E38E860E-9E63-43F9-8E58-E8F16F540C55}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{BCBC1985-1AD8-48DE-A39E-1BC56B26ABF1}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{0A3B5422-5970-4320-AC7D-029CF7018AA8}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{65E8BFFF-D4F0-4C38-9BEB-CC718C1D23A4}] => C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{43F34969-359C-43DF-8298-279FC511286B}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [TCP Query User{BFE8205E-BD23-433A-830A-9ACFD6F9D1EA}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [{D58390AF-C6F3-479A-94CF-CBB13E74CF65}] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [{4DAFCAE7-B2DE-4F1D-B3A3-4559A83C27BC}] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{7163A2CA-DC51-4C73-83DD-9884AEE20CBE}C:\program files (x86)\mozilla firefox\plugin-container.exe] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [TCP Query User{321CD3A1-A232-4126-A715-538AB644DC13}C:\program files (x86)\mozilla firefox\plugin-container.exe] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{3149A794-517A-4F57-9CF2-723164FDDAB2}C:\program files (x86)\gts\gts.exe] => C:\program files (x86)\gts\gts.exe

FirewallRules: [TCP Query User{FF94542E-68A5-4DAE-8011-0259C4D61344}C:\program files (x86)\gts\gts.exe] => C:\program files (x86)\gts\gts.exe

FirewallRules: [UDP Query User{E5746F8B-D5C0-4354-B434-F34C8A6C2F9C}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [TCP Query User{1D3940C3-1304-49F7-AE14-74D4DE38ED2C}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [{7B47768D-0201-4978-813C-55CE7CCD2DE5}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{4EB9D924-2B5C-4515-8DCB-73093E3969FB}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{430199CD-23D4-4060-A869-234507B433C9}] => c:\Program Files (x86)\Dell\VideoStage\VideoStage.exe

FirewallRules: [{2A5E8176-D9F5-406B-83AA-17B3FB8B0A78}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{467F2E48-9B8A-441E-B34F-8354E20470B7}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{8C8135CF-40B2-488E-B1CC-BB13C0155914}] => C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [{6CDD6428-3209-4BC2-8441-00DFE1ED5F18}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{6D96BFEA-C893-4A9D-A409-BC6148B5FA11}] => LPort=2869

FirewallRules: [{F38F5CFF-F70D-4E99-BA64-06BC83E4228B}] => LPort=1900

FirewallRules: [{62B4C63A-7436-45C5-8F81-D436A3FC4DFF}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{85F03B60-5720-41F5-A23D-79C856C4A2F3}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

FirewallRules: [{B504C53B-4CE5-4F3E-BBC4-B03E3C573E67}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

FirewallRules: [{0F1E28A3-8336-4271-9449-38A6442CC981}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{57747E09-46BC-4DED-82ED-012BAA3E51BA}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{9C905D26-63DC-4FE2-A8E2-D34B36830001}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{CBFE21B9-D98C-470E-B0E6-6C553A237F05}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{919D4C7B-FCDE-4EA2-A840-08A223618767}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{5CBAE31B-A73A-4BD4-8689-DC805E449A3F}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{69976F95-3638-43EB-BF63-CEFFDDE14669}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{E099848A-6CB2-4C3D-9AA0-6D2B0BA3EE11}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{29940111-2D72-455D-ABE5-B85F083DCC9D}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{633FE991-A1C7-4938-B071-CB2B9919CFBD}] => C:\Program Files\Acrylic Wi-Fi Home\Acrylic.exe

FirewallRules: [{EEA2650F-77E9-4C7B-90E1-0EE2B5967E4E}] => C:\Program Files\Acrylic Wi-Fi Home\Acrylic.exe

FirewallRules: [{5ED2F3A2-25F3-4811-A0DB-1BAA639F652B}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Wiederherstellungspunkte =========================
 

30-11-2016 00:07:54 Geplanter PrÃ¼fpunkt

04-12-2016 01:32:16 JRT Pre-Junkware Removal

05-12-2016 21:46:47 chip 1-click download service wurde entfernt.
 

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/09/2016 04:06:14 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.321, Zeitstempel: 0x57f4c291

Ausnahmecode: 0xc000041d

Fehleroffset: 0x000da6f2

ID des fehlerhaften Prozesses: 0x2b1c

Startzeit der fehlerhaften Anwendung: 0x01d2522dc3da8c0e

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: 98390a81-bff4-4c8e-bb01-6304f212cc17

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/08/2016 09:11:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)

Description: Bei der Aktivierung der App â€žMicrosoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideoâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (12/08/2016 06:18:08 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
 

Error: (12/08/2016 06:17:48 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur fÃ¼r den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten fÃ¼r diesen Dienst sind nicht verfÃ¼gbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 

Error: (12/08/2016 06:14:41 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm MicrosoftEdge.exe, Version 11.0.14393.447 kann nicht mehr unter Windows ausgefÃ¼hrt werden und wurde beendet. ÃœberprÃ¼fen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: c638
 

Startzeit: 01d251721014c28c
 

Beendigungszeit: 4294967295
 

Anwendungspfad: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
 

Berichts-ID: c713be12-bd69-11e6-8027-88532e0c320c
 

VollstÃ¤ndiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID: MicrosoftEdge
 

Error: (12/07/2016 10:04:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)

Description: Bei der Aktivierung der App â€žMicrosoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIâ€œ ist folgender Fehler aufgetreten: -2147024891. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (12/07/2016 08:15:12 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)

Description: Bei der Aktivierung der App â€žMicrosoft.ZuneMusic_8wekyb3d8bbwe!Microsoft.ZuneMusicâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (12/07/2016 05:29:59 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.321, Zeitstempel: 0x57f4c291

Ausnahmecode: 0xc000041d

Fehleroffset: 0x000da6f2

ID des fehlerhaften Prozesses: 0x2670

Startzeit der fehlerhaften Anwendung: 0x01d250a71f7c6cc4

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: 584df13e-5a27-4b57-9245-0da14fd6253b

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/07/2016 05:26:45 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
 

Error: (12/07/2016 05:26:43 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur fÃ¼r den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten fÃ¼r diesen Dienst sind nicht verfÃ¼gbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 
 

Systemfehler:

=============

Error: (12/09/2016 04:02:05 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/09/2016 04:01:50 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 und der APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/09/2016 04:01:50 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 und der APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/09/2016 03:59:15 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{9AA46009-3CE0-458A-A354-715610A075E6}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/09/2016 03:59:13 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/09/2016 03:59:13 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/09/2016 03:59:13 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/09/2016 03:59:13 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/09/2016 03:52:14 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{DABF28BE-F6B4-4E40-8F40-C4FB26F3116C}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/09/2016 03:21:17 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{DABF28BE-F6B4-4E40-8F40-C4FB26F3116C}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 
 

CodeIntegrity:

===================================

  Date: 2016-10-03 20:02:58.109

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-s..-credentialprovider_31bf3856ad364e35_10.0.10586.0_none_79f13fc599eae8eb\BioCredProv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:02:58.105

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-s..-credentialprovider_31bf3856ad364e35_10.0.10586.0_none_79f13fc599eae8eb\BioCredProv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:02:58.101

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-s..-credentialprovider_31bf3856ad364e35_10.0.10586.0_none_79f13fc599eae8eb\BioCredProv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:02:58.086

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-s..-credentialprovider_31bf3856ad364e35_10.0.10586.0_none_79f13fc599eae8eb\BioCredProv.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:59.822

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-edp-audit_31bf3856ad364e35_10.0.10586.0_none_fbfd18fdbfe77d1b\edpauditapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:59.819

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-edp-audit_31bf3856ad364e35_10.0.10586.0_none_fbfd18fdbfe77d1b\edpauditapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:59.816

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-edp-audit_31bf3856ad364e35_10.0.10586.0_none_fbfd18fdbfe77d1b\edpauditapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:59.789

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-windows-edp-audit_31bf3856ad364e35_10.0.10586.0_none_fbfd18fdbfe77d1b\edpauditapi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:38.338

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.10586.589_none_b5eef605bad2c432\GamePanel.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 

  Date: 2016-10-03 20:01:38.332

  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows.old\WINDOWS\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.10586.589_none_b5eef605bad2c432\GamePanel.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-2720QM CPU @ 2.20GHz

Prozentuale Nutzung des RAM: 38%

Installierter physikalischer RAM: 8086.16 MB

Verfügbarer physikalischer RAM: 4963.13 MB

Summe virtueller Speicher: 9366.16 MB

Verfügbarer virtueller Speicher: 6029.59 MB
 

==================== Laufwerke ================================
 

Drive c: (OS) (Fixed) (Total:402.19 GB) (Free:279.35 GB) NTFS

Drive d: (Data) (Fixed) (Total:1862.89 GB) (Free:1495.17 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 07F2837E)

Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)

Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=402.2 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=48.8 GB) - (Type=05)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

cosinus

09.12.2016 16:22

Sehr löblich! :daumenhoc

Bitte Avira deinstallieren. Das Teil empfehlen wir schon seit Jahren aus mehreren Gründen nicht mehr. Ein Grund ist ne rel. hohe Fehlalarmquote, der zweite Hauptgrund ist, dass die immer noch mit ASK zusammenarbeiten (Avira Suchfunktion geht über ASK). Auch andere Freewareanbieter wie AVG, Avast oder Panda sprangen auf diesen Zug auf; so was ist bei Sicherheitssoftware einfach inakzeptabel. Vgl. Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Gib Bescheid wenn Avira weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

querotudo

09.12.2016 16:49

Avira und alle Bestandteile davon sind jetzt deinstalliert. Ich habe den Windows Defender danach aktiviert.

cosinus

09.12.2016 17:03

Sehr gut!

1. Schritt: Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

2. Schritt: Kaspersky TDSS-Killer

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

querotudo

09.12.2016 18:02

Ich habe alles gemäß der Instruktionen durchgeführt. Weder MBAR noch TDSSKILLER scheinen etwas gefunden zu haben. TDSSKILLER hat kein Log erzeugt.

Hier das MBAR-Log

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2016.12.09.14

  rootkit: v2016.11.20.01
 

Windows 10 x64 NTFS

Internet Explorer 11.447.14393.0

Norman :: NORMAN-PC [administrator]
 

09.12.2016 17:08:41

mbar-log-2016-12-09 (17-08-41).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 398040

Time elapsed: 36 minute(s), 20 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

cosinus

10.12.2016 13:56

Bitte richtig lesen, tdsskiller erzeugt immer ein Logfile

querotudo

10.12.2016 16:41

Hi Cosinus,

natürlich hattest Du wieder Recht. Ich hatte beim ersten Versuch auch die additional Options nicht gesetzt. Der gefundene Threat gehört zu einem medizinischen Blutzuckermessgerät der Firma Abbott mit dem Namen Freestyle Libre.

Hier das Log:

Code:

16:28:09.0921 0x13b14  TDSS rootkit removing tool 3.1.0.12 Nov  7 2016 07:10:01

16:28:20.0738 0x13b14  ============================================================

16:28:20.0738 0x13b14  Current date / time: 2016/12/10 16:28:20.0738

16:28:20.0738 0x13b14  SystemInfo:

16:28:20.0739 0x13b14  

16:28:20.0739 0x13b14  OS Version: 10.0.14393 ServicePack: 0.0

16:28:20.0739 0x13b14  Product type: Workstation

16:28:20.0739 0x13b14  ComputerName: NORMAN-PC

16:28:20.0739 0x13b14  UserName: Norman

16:28:20.0739 0x13b14  Windows directory: C:\WINDOWS

16:28:20.0739 0x13b14  System windows directory: C:\WINDOWS

16:28:20.0739 0x13b14  Running under WOW64

16:28:20.0739 0x13b14  Processor architecture: Intel x64

16:28:20.0739 0x13b14  Number of processors: 8

16:28:20.0739 0x13b14  Page size: 0x1000

16:28:20.0739 0x13b14  Boot type: Normal boot

16:28:20.0739 0x13b14  CodeIntegrityOptions = 0x00000001

16:28:20.0739 0x13b14  ============================================================

16:28:21.0313 0x13b14  KLMD registered as C:\WINDOWS\system32\drivers\63854804.sys

16:28:21.0313 0x13b14  KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.447, osProperties = 0x19

16:28:23.0345 0x13b14  System UUID: {06DBFE8A-9413-C582-4869-9E8D551D7782}

16:28:23.0978 0x13b14  Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

16:28:24.0216 0x13b14  Drive \Device\Harddisk1\DR1 - Size: 0x1D1C1116000 ( 1863.02 Gb ), SectorSize: 0x200, Cylinders: 0x3B601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

16:28:25.0406 0x13b14  ============================================================

16:28:25.0406 0x13b14  \Device\Harddisk0\DR0:

16:28:25.0415 0x13b14  MBR partitions:

16:28:25.0416 0x13b14  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32FCD, BlocksNum 0x1D4C000

16:28:25.0416 0x13b14  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1D7EFCD, BlocksNum 0x3245F536

16:28:25.0458 0x13b14  \Device\Harddisk1\DR1:

16:28:25.0458 0x13b14  GPT partitions:

16:28:25.0458 0x13b14  \Device\Harddisk1\DR1\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {57312DE8-56A7-4CAD-B465-E359A89236E2}, Name: Microsoft reserved partition, StartLBA 0x22, BlocksNum 0x40000

16:28:25.0458 0x13b14  \Device\Harddisk1\DR1\Partition2: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {CF4B67B6-8BB9-44C4-982B-81375847DC13}, Name: Basic data partition, StartLBA 0x40800, BlocksNum 0xE8DC8000

16:28:25.0458 0x13b14  MBR partitions:

16:28:25.0458 0x13b14  ============================================================

16:28:25.0525 0x13b14  C: <-> \Device\Harddisk0\DR0\Partition2

16:28:25.0558 0x13b14  D: <-> \Device\Harddisk1\DR1\Partition2

16:28:25.0558 0x13b14  ============================================================

16:28:25.0558 0x13b14  Initialize success

16:28:25.0558 0x13b14  ============================================================

16:29:39.0302 0x13b20  ============================================================

16:29:39.0302 0x13b20  Scan started

16:29:39.0302 0x13b20  Mode: Manual; SigCheck; TDLFS; 

16:29:39.0302 0x13b20  ============================================================

16:29:39.0302 0x13b20  KSN ping started

16:29:39.0355 0x13b20  KSN ping finished: true

16:29:42.0104 0x13b20  ================ Scan system memory ========================

16:29:42.0104 0x13b20  System memory - ok

16:29:42.0104 0x13b20  ================ Scan services =============================

16:29:42.0356 0x13b20  1394ohci - ok

16:29:42.0356 0x13b20  3ware - ok

16:29:42.0387 0x13b20  ACPI - ok

16:29:42.0403 0x13b20  AcpiDev - ok

16:29:42.0403 0x13b20  acpiex - ok

16:29:42.0403 0x13b20  acpipagr - ok

16:29:42.0425 0x13b20  AcpiPmi - ok

16:29:42.0441 0x13b20  acpitime - ok

16:29:42.0591 0x13b20  [ C92B0A0957ACAD3CEEF502A2CA10ACB8, 78BF46318B69D9479ECDC83446DD8D454AA2A9A9D94B33C5FC68933DB18AFA3B ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

16:29:42.0678 0x13b20  AdobeARMservice - ok

16:29:42.0858 0x13b20  [ 9BAF21BA600EC4E5FD9A66AD3E4FF5A6, 5E02E5E80557F6EC870EB7CC2DE95169D4225B87A2FE7E796736205F51C15816 ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

16:29:42.0890 0x13b20  AdobeFlashPlayerUpdateSvc - ok

16:29:42.0905 0x13b20  ADP80XX - ok

16:29:42.0963 0x13b20  [ 8621B8CDE2A07112CD723F37D669C0BF, 36FC0B125A0576296FA1F99EEB64D87C8D77FA54CF7D92907A6F6B48E0859FD5 ] AERTFilters     C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

16:29:43.0009 0x13b20  AERTFilters - ok

16:29:43.0009 0x13b20  AFD - ok

16:29:43.0032 0x13b20  ahcache - ok

16:29:43.0063 0x13b20  AJRouter - ok

16:29:43.0063 0x13b20  ALG - ok

16:29:43.0078 0x13b20  AmdK8 - ok

16:29:43.0078 0x13b20  AmdPPM - ok

16:29:43.0078 0x13b20  amdsata - ok

16:29:43.0078 0x13b20  amdsbs - ok

16:29:43.0078 0x13b20  amdxata - ok

16:29:43.0110 0x13b20  [ 4DE4BE679205B3A712562507AEE75227, 1C40F14A2BFFFB8E9646B57419D9F810A86D0DCD94F9DE9D9851D498F86F343E ] AMPPAL          C:\WINDOWS\System32\drivers\AMPPAL.sys

16:29:43.0163 0x13b20  AMPPAL - ok

16:29:43.0179 0x13b20  AppID - ok

16:29:43.0179 0x13b20  AppIDSvc - ok

16:29:43.0210 0x13b20  Appinfo - ok

16:29:43.0229 0x13b20  applockerfltr - ok

16:29:43.0232 0x13b20  AppMgmt - ok

16:29:43.0248 0x13b20  AppReadiness - ok

16:29:43.0263 0x13b20  AppVClient - ok

16:29:43.0279 0x13b20  AppvStrm - ok

16:29:43.0310 0x13b20  AppvVemgr - ok

16:29:43.0332 0x13b20  AppvVfs - ok

16:29:43.0364 0x13b20  AppXSvc - ok

16:29:43.0379 0x13b20  arcsas - ok

16:29:43.0379 0x13b20  AsyncMac - ok

16:29:43.0395 0x13b20  atapi - ok

16:29:43.0411 0x13b20  AudioEndpointBuilder - ok

16:29:43.0433 0x13b20  Audiosrv - ok

16:29:43.0465 0x13b20  Avira.ServiceHost - ok

16:29:43.0497 0x13b20  AxInstSV - ok

16:29:43.0514 0x13b20  b06bdrv - ok

16:29:43.0537 0x13b20  BasicDisplay - ok

16:29:43.0540 0x13b20  BasicRender - ok

16:29:43.0545 0x13b20  bcmfn - ok

16:29:43.0549 0x13b20  bcmfn2 - ok

16:29:43.0563 0x13b20  BDESVC - ok

16:29:43.0566 0x13b20  Beep - ok

16:29:43.0581 0x13b20  BFE - ok

16:29:43.0594 0x13b20  BITS - ok

16:29:43.0607 0x13b20  bowser - ok

16:29:43.0697 0x13b20  [ 91A907624140CB092E95F157540A74C2, A8562D1C065EEF114E8D2736AB4E6A02D3EB76C9F75A7ACD75AC196A75752AAE ] BrcmSetSecurity C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe

16:29:43.0722 0x13b20  BrcmSetSecurity - ok

16:29:43.0742 0x13b20  BrokerInfrastructure - ok

16:29:43.0745 0x13b20  Browser - ok

16:29:43.0751 0x13b20  BthA2DP - ok

16:29:43.0766 0x13b20  BthAvrcpTg - ok

16:29:43.0798 0x13b20  BthEnum - ok

16:29:43.0833 0x13b20  BthHFAud - ok

16:29:43.0849 0x13b20  BthHFEnum - ok

16:29:43.0864 0x13b20  bthhfhid - ok

16:29:43.0880 0x13b20  BthHFSrv - ok

16:29:43.0880 0x13b20  BTHMODEM - ok

16:29:43.0911 0x13b20  BthPan - ok

16:29:43.0932 0x13b20  BTHPORT - ok

16:29:43.0932 0x13b20  bthserv - ok

16:29:43.0964 0x13b20  BTHUSB - ok

16:29:44.0049 0x13b20  [ 7B31A8A9DC95B3634D896FD0F2814F19, 8FD5FBC61968F4BB8C2BAD0D432D5B86DCFED38CCF6F559F9EFB71AADD25474F ] btmhsf          C:\WINDOWS\system32\DRIVERS\btmhsf.sys

16:29:44.0080 0x13b20  btmhsf - ok

16:29:44.0095 0x13b20  buttonconverter - ok

16:29:44.0111 0x13b20  CapImg - ok

16:29:44.0111 0x13b20  cdfs - ok

16:29:44.0133 0x13b20  CDPSvc - ok

16:29:44.0133 0x13b20  CDPUserSvc - ok

16:29:44.0211 0x13b20  cdrom - ok

16:29:44.0229 0x13b20  CertPropSvc - ok

16:29:44.0233 0x13b20  cht4iscsi - ok

16:29:44.0233 0x13b20  cht4vbd - ok

16:29:44.0249 0x13b20  circlass - ok

16:29:44.0249 0x13b20  CLFS - ok

16:29:44.0249 0x13b20  ClipSVC - ok

16:29:44.0265 0x13b20  clreg - ok

16:29:44.0265 0x13b20  CmBatt - ok

16:29:44.0265 0x13b20  CNG - ok

16:29:44.0280 0x13b20  cnghwassist - ok

16:29:44.0333 0x13b20  CompositeBus - ok

16:29:44.0348 0x13b20  COMSysApp - ok

16:29:44.0348 0x13b20  condrv - ok

16:29:44.0380 0x13b20  CoreMessagingRegistrar - ok

16:29:44.0519 0x13b20  [ B18D590BC5220FDB4A747BC16D78ABC7, D46F8B43BAC22E55DE9AFC19CF371B1C4E8D3707163598B2F9884BB31D730C09 ] cphs            C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe

16:29:44.0656 0x13b20  cphs - ok

16:29:44.0678 0x13b20  CryptSvc - ok

16:29:44.0682 0x13b20  CSC - ok

16:29:44.0685 0x13b20  CscService - ok

16:29:44.0722 0x13b20  [ FBE228ABEAB2BE13B9C3A3A112D4D8DC, A9FF2DC38CBE00AAD904BB7EC74480953D513E46FDE607A7773FF5A2A25B8C15 ] CtClsFlt        C:\WINDOWS\system32\DRIVERS\CtClsFlt.sys

16:29:44.0813 0x13b20  CtClsFlt - ok

16:29:44.0835 0x13b20  dam - ok

16:29:44.0835 0x13b20  DcomLaunch - ok

16:29:44.0835 0x13b20  DcpSvc - ok

16:29:44.0850 0x13b20  defragsvc - ok

16:29:44.0866 0x13b20  DeviceAssociationService - ok

16:29:44.0882 0x13b20  DeviceInstall - ok

16:29:44.0897 0x13b20  DevQueryBroker - ok

16:29:44.0913 0x13b20  Dfsc - ok

16:29:44.0950 0x13b20  [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys

16:29:44.0982 0x13b20  dg_ssudbus - ok

16:29:45.0050 0x13b20  Dhcp - ok

16:29:45.0130 0x13b20  diagnosticshub.standardcollector.service - ok

16:29:45.0150 0x13b20  DiagTrack - ok

16:29:45.0181 0x13b20  DIRECTIO - ok

16:29:45.0213 0x13b20  disk - ok

16:29:45.0235 0x13b20  DmEnrollmentSvc - ok

16:29:45.0235 0x13b20  dmvsc - ok

16:29:45.0250 0x13b20  dmwappushservice - ok

16:29:45.0266 0x13b20  Dnscache - ok

16:29:45.0266 0x13b20  dot3svc - ok

16:29:45.0282 0x13b20  DPS - ok

16:29:45.0297 0x13b20  drmkaud - ok

16:29:45.0350 0x13b20  [ 1ED08A6264C5C92099D6D1DAE5E8F530, 4045AE77859B1DBF13972451972EAAF6F3C97BEA423E9E78F1C2F14330CD47CA ] DrvAgent64      C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS

16:29:45.0413 0x13b20  DrvAgent64 - ok

16:29:45.0429 0x13b20  DsmSvc - ok

16:29:45.0433 0x13b20  DsSvc - ok

16:29:45.0435 0x13b20  DXGKrnl - ok

16:29:45.0435 0x13b20  EapHost - ok

16:29:45.0451 0x13b20  ebdrv - ok

16:29:45.0451 0x13b20  EFS - ok

16:29:45.0451 0x13b20  EhStorClass - ok

16:29:45.0467 0x13b20  EhStorTcgDrv - ok

16:29:45.0482 0x13b20  [ BE2902E13CA69383F449B6BF927844FB, F092785E305D8E1FE795AF98A7A7B7B4548A0D6687060568C9E078FFA8D65C1C ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys

16:29:45.0499 0x13b20  ElbyCDIO - ok

16:29:45.0505 0x13b20  embeddedmode - ok

16:29:45.0523 0x13b20  EntAppSvc - ok

16:29:45.0573 0x13b20  [ D315FF43E23DF424ECEC2F6C930203E4, 68940EDA34DC4945CDD0D8018D96A0DA8F99F16A930946D14E4FECEE033FCB80 ] EpsonScanSvc    C:\WINDOWS\system32\EscSvc64.exe

16:29:45.0587 0x13b20  EpsonScanSvc - ok

16:29:45.0590 0x13b20  ErrDev - ok

16:29:45.0602 0x13b20  EventSystem - ok

16:29:45.0605 0x13b20  exfat - ok

16:29:45.0607 0x13b20  fastfat - ok

16:29:45.0625 0x13b20  Fax - ok

16:29:45.0629 0x13b20  fdc - ok

16:29:45.0633 0x13b20  fdPHost - ok

16:29:45.0636 0x13b20  FDResPub - ok

16:29:45.0647 0x13b20  fhsvc - ok

16:29:45.0664 0x13b20  FileCrypt - ok

16:29:45.0667 0x13b20  FileInfo - ok

16:29:45.0671 0x13b20  Filetrace - ok

16:29:45.0788 0x13b20  [ F76D04F7413B07DAA029F6520B64B4E8, 3EB13C0EFE737880853FB8952381E7A57723F9472E0E4ED7CDA8A0D7DE8DC90D ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

16:29:45.0836 0x13b20  FLEXnet Licensing Service - detected UnsignedFile.Multi.Generic ( 1 )

16:29:45.0899 0x13b20  Detect skipped due to KSN trusted

16:29:45.0915 0x13b20  FLEXnet Licensing Service - ok

16:29:45.0915 0x13b20  flpydisk - ok

16:29:45.0937 0x13b20  FltMgr - ok

16:29:45.0952 0x13b20  FontCache - ok

16:29:46.0052 0x13b20  FontCache3.0.0.0 - ok

16:29:46.0084 0x13b20  FrameServer - ok

16:29:46.0168 0x13b20  [ 566677EC7238F505557F310691CCEDED, 346E01BC92D9B09560CA4FB769E325A33EA549649FD18D639E7C42F225B37235 ] FreeStyleLibre MAS Server C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe

16:29:46.0268 0x13b20  FreeStyleLibre MAS Server - detected UnsignedFile.Multi.Generic ( 1 )

16:29:46.0415 0x13b20  FreeStyleLibre MAS Server ( UnsignedFile.Multi.Generic ) - warning

16:29:46.0537 0x13b20  FsDepends - ok

16:29:46.0537 0x13b20  Fs_Rec - ok

16:29:46.0537 0x13b20  fvevol - ok

16:29:46.0576 0x13b20  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys

16:29:46.0584 0x13b20  GEARAspiWDM - ok

16:29:46.0606 0x13b20  gencounter - ok

16:29:46.0623 0x13b20  genericusbfn - ok

16:29:46.0745 0x13b20  [ F78BC07DCED5EDDD6D477E923620F8EA, ABE28155100A38A5E1B58FFC8099EF416145278B440A67B8DAFD7715FE412624 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

16:29:46.0790 0x13b20  GfExperienceService - ok

16:29:46.0820 0x13b20  [ B93252C4C5A3733ECD5522CAF88DE02D, 382450F0FF238B6077A78F75AC5D4E53AD7D884706B90E7AC4D4DF467C9A2162 ] GigasetGenericUSB_x64 C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys

16:29:46.0900 0x13b20  GigasetGenericUSB_x64 - ok

16:29:46.0938 0x13b20  GPIOClx0101 - ok

16:29:46.0953 0x13b20  gpsvc - ok

16:29:46.0953 0x13b20  GpuEnergyDrv - ok

16:29:47.0038 0x13b20  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

16:29:47.0069 0x13b20  gupdate - ok

16:29:47.0101 0x13b20  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

16:29:47.0137 0x13b20  gupdatem - ok

16:29:47.0200 0x13b20  HDAudBus - ok

16:29:47.0200 0x13b20  HidBatt - ok

16:29:47.0238 0x13b20  HidBth - ok

16:29:47.0254 0x13b20  hidi2c - ok

16:29:47.0254 0x13b20  hidinterrupt - ok

16:29:47.0254 0x13b20  HidIr - ok

16:29:47.0285 0x13b20  hidserv - ok

16:29:47.0300 0x13b20  HidUsb - ok

16:29:47.0334 0x13b20  HomeGroupListener - ok

16:29:47.0338 0x13b20  HomeGroupProvider - ok

16:29:47.0353 0x13b20  HpSAMD - ok

16:29:47.0353 0x13b20  HTTP - ok

16:29:47.0385 0x13b20  HvHost - ok

16:29:47.0400 0x13b20  hvservice - ok

16:29:47.0416 0x13b20  hwpolicy - ok

16:29:47.0416 0x13b20  hyperkbd - ok

16:29:47.0453 0x13b20  [ 45E0F744B0887E2701B1C59DC86147EC, 04EB75A07B2949AB994F355BBEE33DE2069F94504D738DC7E66ABB1C9F1C31C8 ] i8042HDR        C:\WINDOWS\system32\DRIVERS\i8042HDR.sys

16:29:47.0485 0x13b20  i8042HDR - ok

16:29:47.0500 0x13b20  i8042prt - ok

16:29:47.0500 0x13b20  iagpio - ok

16:29:47.0500 0x13b20  iai2c - ok

16:29:47.0516 0x13b20  iaLPSS2i_GPIO2 - ok

16:29:47.0516 0x13b20  iaLPSS2i_I2C - ok

16:29:47.0516 0x13b20  iaLPSSi_GPIO - ok

16:29:47.0516 0x13b20  iaLPSSi_I2C - ok

16:29:47.0516 0x13b20  iaStorAV - ok

16:29:47.0534 0x13b20  iaStorV - ok

16:29:47.0537 0x13b20  ibbus - ok

16:29:47.0538 0x13b20  [ 33120C561E918A18DD48DEFEEEC0885D, F9F7E4610717532E25A2FFBFA507E3B7B0608BEC026FEA2EE0B530560F12F538 ] ibtfltcoex      C:\WINDOWS\system32\DRIVERS\ibtfltcoex.sys

16:29:47.0556 0x13b20  ibtfltcoex - ok

16:29:47.0629 0x13b20  [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS            C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

16:29:47.0650 0x13b20  ICCS - ok

16:29:47.0673 0x13b20  icssvc - ok

16:29:47.0860 0x13b20  [ 79AE3CC82CA1563A4B392207997ACE7C, A1E4A1DA95CA2FA197EF5975657822F0F813F6C33DA38E1FA5A840194034D071 ] igfx            C:\WINDOWS\system32\DRIVERS\igdkmd64.sys

16:29:48.0101 0x13b20  igfx - ok

16:29:48.0138 0x13b20  IKEEXT - ok

16:29:48.0170 0x13b20  [ DD587A55390ED2295BCE6D36AD567DA9, AEB7DCB8EF89BEE8D9649A05FC482B1E4E3F44243D57A2577C862EB69166C48E ] Impcd           C:\WINDOWS\system32\DRIVERS\Impcd.sys

16:29:48.0239 0x13b20  Impcd - ok

16:29:48.0254 0x13b20  IndirectKmd - ok

16:29:48.0301 0x13b20  [ FD2032D2EAE8D7F3381EBA5FA3E7FEEA, 46D1DC6A44E20339AD9195EE7CC719DC9BC99C78F8C74E730B671F0D78B9C683 ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys

16:29:48.0301 0x13b20  intaud_WaveExtensible - ok

16:29:48.0454 0x13b20  [ 622868E4BAE8FBCD22CB1A5901A2C824, C1A2264C0984DD16C83B663C9CE43E049E1356E32C5771C3ACE225F285699138 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys

16:29:48.0636 0x13b20  IntcAzAudAddService - ok

16:29:48.0700 0x13b20  [ F5495B38BFB9149925F54F65AB40EFBF, 7CBB72C41E2343DACBFB967A39CA04788561EDECB289C41BC2D6A06B80882AC4 ] IntcDAud        C:\WINDOWS\system32\DRIVERS\IntcDAud.sys

16:29:48.0765 0x13b20  IntcDAud - ok

16:29:48.0815 0x13b20  [ 441D5FAF24CC2EC115B654A55C52F0AF, 5BF5299DAD9A7076C43D68C70E02AEC8DBFD89C1AFDF7CD6AB95550EE25EEB36 ] Intel(R) Wireless Bluetooth(R) 4.0 Radio Management C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

16:29:48.0828 0x13b20  Intel(R) Wireless Bluetooth(R) 4.0 Radio Management - ok

16:29:48.0837 0x13b20  intelide - ok

16:29:48.0858 0x13b20  intelpep - ok

16:29:48.0875 0x13b20  intelppm - ok

16:29:48.0875 0x13b20  iorate - ok

16:29:48.0875 0x13b20  IpFilterDriver - ok

16:29:48.0891 0x13b20  iphlpsvc - ok

16:29:48.0907 0x13b20  IPMIDRV - ok

16:29:48.0907 0x13b20  IPNAT - ok

16:29:49.0002 0x13b20  [ 4EFFC8FF6D349E971E94B1C670C0C66A, E92DA19CE9725BB4CC34DF94873C6B441AE61679A8C615780E1A1E9404C8FA26 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe

16:29:49.0039 0x13b20  iPod Service - ok

16:29:49.0039 0x13b20  irda - ok

16:29:49.0039 0x13b20  IRENUM - ok

16:29:49.0055 0x13b20  irmon - ok

16:29:49.0055 0x13b20  isapnp - ok

16:29:49.0071 0x13b20  iScsiPrt - ok

16:29:49.0102 0x13b20  [ E56417C56B6A7316B6F527C890A1860D, 906F361967E56D8254A264E5005FA9F9251510311C88BD305BF92E66CA2E33B2 ] JMCR            C:\WINDOWS\system32\DRIVERS\jmcr.sys

16:29:49.0155 0x13b20  JMCR - ok

16:29:49.0202 0x13b20  kbdclass - ok

16:29:49.0217 0x13b20  kbdhid - ok

16:29:49.0239 0x13b20  kdnic - ok

16:29:49.0239 0x13b20  KeyIso - ok

16:29:49.0239 0x13b20  KSecDD - ok

16:29:49.0255 0x13b20  KSecPkg - ok

16:29:49.0255 0x13b20  ksthunk - ok

16:29:49.0270 0x13b20  KtmRm - ok

16:29:49.0270 0x13b20  LanmanServer - ok

16:29:49.0286 0x13b20  LanmanWorkstation - ok

16:29:49.0286 0x13b20  lfsvc - ok

16:29:49.0286 0x13b20  LicenseManager - ok

16:29:49.0286 0x13b20  lltdio - ok

16:29:49.0302 0x13b20  lltdsvc - ok

16:29:49.0302 0x13b20  lmhosts - ok

16:29:49.0355 0x13b20  [ 7F32D4C47A50E7223491E8FB9359907D, 6D3F59A8D006BED3234697933D09C8EE8F7A9F4A4196CFA878F8E8A929B24CE5 ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

16:29:49.0370 0x13b20  LMS - ok

16:29:49.0386 0x13b20  LSI_SAS - ok

16:29:49.0386 0x13b20  LSI_SAS2i - ok

16:29:49.0386 0x13b20  LSI_SAS3i - ok

16:29:49.0386 0x13b20  LSI_SSS - ok

16:29:49.0401 0x13b20  LSM - ok

16:29:49.0437 0x13b20  luafv - ok

16:29:49.0439 0x13b20  MapsBroker - ok

16:29:49.0455 0x13b20  megasas - ok

16:29:49.0471 0x13b20  megasas2i - ok

16:29:49.0471 0x13b20  megasr - ok

16:29:49.0502 0x13b20  [ E7C9F74D8CAAB1FF7964C27C070FB16C, 76CCD9109E1031A336B7E275368520FFB60D500E24444B04066F205D1ED5BA2B ] MEIx64          C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys

16:29:49.0539 0x13b20  MEIx64 - ok

16:29:49.0570 0x13b20  MessagingService - ok

16:29:49.0667 0x13b20  Microsoft SharePoint Workspace Audit Service - ok

16:29:49.0677 0x13b20  mlx4_bus - ok

16:29:49.0688 0x13b20  MMCSS - ok

16:29:49.0698 0x13b20  Modem - ok

16:29:49.0732 0x13b20  monitor - ok

16:29:49.0746 0x13b20  mouclass - ok

16:29:49.0749 0x13b20  mouhid - ok

16:29:49.0753 0x13b20  mountmgr - ok

16:29:49.0755 0x13b20  mpsdrv - ok

16:29:49.0766 0x13b20  MpsSvc - ok

16:29:49.0808 0x13b20  MRxDAV - ok

16:29:49.0853 0x13b20  mrxsmb - ok

16:29:49.0866 0x13b20  mrxsmb10 - ok

16:29:49.0873 0x13b20  mrxsmb20 - ok

16:29:49.0882 0x13b20  MsBridge - ok

16:29:49.0893 0x13b20  MSDTC - ok

16:29:49.0898 0x13b20  Msfs - ok

16:29:49.0902 0x13b20  msgpiowin32 - ok

16:29:49.0906 0x13b20  mshidkmdf - ok

16:29:49.0908 0x13b20  mshidumdf - ok

16:29:49.0908 0x13b20  msisadrv - ok

16:29:49.0956 0x13b20  MSiSCSI - ok

16:29:49.0956 0x13b20  msiserver - ok

16:29:49.0972 0x13b20  MSKSSRV - ok

16:29:49.0987 0x13b20  MsLldp - ok

16:29:49.0987 0x13b20  MSPCLOCK - ok

16:29:49.0987 0x13b20  MSPQM - ok

16:29:49.0987 0x13b20  MsRPC - ok

16:29:50.0003 0x13b20  MsSecFlt - ok

16:29:50.0003 0x13b20  mssmbios - ok

16:29:50.0003 0x13b20  MSTEE - ok

16:29:50.0003 0x13b20  MTConfig - ok

16:29:50.0019 0x13b20  Mup - ok

16:29:50.0019 0x13b20  mvumis - ok

16:29:50.0118 0x13b20  [ A25648600888D412CCD2637071B08A04, 78FFF7F7F877EC5E4DC84C597E7639EBBCA9AE9F5B2F8C328022CD3E05E5F838 ] MyEpson Portal Service C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe

16:29:50.0203 0x13b20  MyEpson Portal Service - ok

16:29:50.0240 0x13b20  NativeWifiP - ok

16:29:50.0256 0x13b20  NcaSvc - ok

16:29:50.0256 0x13b20  NcbService - ok

16:29:50.0287 0x13b20  NcdAutoSetup - ok

16:29:50.0287 0x13b20  ndfltr - ok

16:29:50.0318 0x13b20  NDIS - ok

16:29:50.0334 0x13b20  NdisCap - ok

16:29:50.0356 0x13b20  NdisImPlatform - ok

16:29:50.0356 0x13b20  NdisTapi - ok

16:29:50.0356 0x13b20  Ndisuio - ok

16:29:50.0356 0x13b20  NdisVirtualBus - ok

16:29:50.0372 0x13b20  NdisWan - ok

16:29:50.0372 0x13b20  ndiswanlegacy - ok

16:29:50.0372 0x13b20  ndproxy - ok

16:29:50.0372 0x13b20  Ndu - ok

16:29:50.0387 0x13b20  NetAdapterCx - ok

16:29:50.0387 0x13b20  NetBIOS - ok

16:29:50.0387 0x13b20  NetBT - ok

16:29:50.0403 0x13b20  Netlogon - ok

16:29:50.0440 0x13b20  Netman - ok

16:29:50.0456 0x13b20  netprofm - ok

16:29:50.0519 0x13b20  NetSetupSvc - ok

16:29:50.0623 0x13b20  NetTcpPortSharing - ok

16:29:51.0004 0x13b20  [ DB8B323B4F2B46B32ECD2BAE7955E4AA, 89BC9F951B08A8566837DF442C95842061B921B79102A8AD2245783717355B34 ] NETwNs64        C:\WINDOWS\System32\drivers\NETwsw00.sys

16:29:51.0542 0x13b20  NETwNs64 - ok

16:29:51.0542 0x13b20  NgcCtnrSvc - ok

16:29:51.0558 0x13b20  NgcSvc - ok

16:29:51.0574 0x13b20  NlaSvc - ok

16:29:51.0574 0x13b20  Npfs - ok

16:29:51.0574 0x13b20  npsvctrig - ok

16:29:51.0589 0x13b20  nsi - ok

16:29:51.0589 0x13b20  nsiproxy - ok

16:29:51.0620 0x13b20  NTFS - ok

16:29:51.0620 0x13b20  Null - ok

16:29:51.0667 0x13b20  [ 708EDBC756B28B77D1F9C8844148125A, BA730BC3A70122CC3AD6CC4B398B747591F34E00ACEC06545C37A3F10FB56F5F ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys

16:29:51.0683 0x13b20  NVHDA - ok

16:29:52.0206 0x13b20  [ 0CD412D41220FEE9DD1166F7CE7B1DAB, 23CAB64C3DB3C90CAF2DE4100E192295B8F603B8347F8AC6FDC36C2C6D2520D2 ] nvlddmkm        C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_86f2ae812568c59a\nvlddmkm.sys

16:29:52.0661 0x13b20  nvlddmkm - ok

16:29:52.0854 0x13b20  [ 020F45E362D3B57CCC5735582BB1A6EC, E2D953CEF208528382153D06FED8394BEB52657C547E4D2D2954E537C9A382DC ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

16:29:52.0928 0x13b20  NvNetworkService - ok

16:29:52.0944 0x13b20  [ 14632E55F8E76E3CEFFD058EC0A545E6, 563E4EFC171D5BFEC77BA43E0426A38759B13A8BCA9C6E135E9E0356BBE6D897 ] nvpciflt        C:\WINDOWS\system32\DRIVERS\nvpciflt.sys

16:29:52.0953 0x13b20  nvpciflt - ok

16:29:52.0969 0x13b20  nvraid - ok

16:29:52.0969 0x13b20  nvstor - ok

16:29:53.0047 0x13b20  [ F82BCEB9F57B2959F6AAE2A3DDA892A8, 5B02C74BAF0E12B84F239B1449DAA955B28BD5BA7D35D315DB57F45E042E0DB3 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys

16:29:53.0062 0x13b20  NvStreamKms - ok

16:29:53.0178 0x13b20  [ 9209D57C1AA24841EF8D5DE6A5B2AAEB, C1A53621F5361DCE9C962A9B9B586D1904901C9EC20EFCA76C40ADCD98BEDF3C ] NvStreamNetworkSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

16:29:53.0325 0x13b20  NvStreamNetworkSvc - ok

16:29:53.0447 0x13b20  [ 0EDF9504CA5174075BA5902AFC1F57C8, 8E210E71BA91813D3BB6B59E5F6AD0889711336AD12B1B1C67CCC882A6ED3E53 ] NvStreamSvc     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

16:29:53.0547 0x13b20  NvStreamSvc - ok

16:29:53.0594 0x13b20  [ 9E01B716C8085F7ADB1CDC10103CEEF8, A8ED454B5AEA0D412F561B99D630C16171D99AC1EC67D79CC4126FE8FC97E144 ] NvStUSB         C:\WINDOWS\system32\DRIVERS\nvstusb.sys

16:29:53.0626 0x13b20  NvStUSB - ok

16:29:53.0720 0x13b20  [ BF83A0A7BF998693691349175CF8AC7D, 743DB4DED1372DEB48ACD741CCC4DC01A9755A6D3CDF4F3CB8F68AB1F69D2BFF ] nvsvc           C:\WINDOWS\system32\nvvsvc.exe

16:29:53.0781 0x13b20  nvsvc - ok

16:29:53.0816 0x13b20  [ 38175904276F86EA4704EC13B77FB4B0, 4965BCF17E3D9EE4CE2E4DC158C5E7179C3ABBAE9D640FBCFFBCA973F21DDDF6 ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys

16:29:53.0834 0x13b20  nvvad_WaveExtensible - ok

16:29:53.0864 0x13b20  OneSyncSvc - ok

16:29:53.0943 0x13b20  [ 4965B005492CBA7719E82B71E3245495, 52AD72C05FACC1E0E416A1FA25F34FDD3CB274FAB973BEAAE911A2FACA42B650 ] ose64           C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

16:29:53.0986 0x13b20  ose64 - ok

16:29:54.0179 0x13b20  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE

16:29:54.0364 0x13b20  osppsvc - ok

16:29:54.0395 0x13b20  p2pimsvc - ok

16:29:54.0395 0x13b20  p2psvc - ok

16:29:54.0426 0x13b20  Parport - ok

16:29:54.0445 0x13b20  partmgr - ok

16:29:54.0448 0x13b20  PcaSvc - ok

16:29:54.0464 0x13b20  pci - ok

16:29:54.0495 0x13b20  pciide - ok

16:29:54.0495 0x13b20  pcmcia - ok

16:29:54.0511 0x13b20  pcw - ok

16:29:54.0543 0x13b20  pdc - ok

16:29:54.0549 0x13b20  PEAUTH - ok

16:29:54.0549 0x13b20  PeerDistSvc - ok

16:29:54.0564 0x13b20  percsas2i - ok

16:29:54.0580 0x13b20  percsas3i - ok

16:29:54.0649 0x13b20  PerfHost - ok

16:29:54.0703 0x13b20  PhoneSvc - ok

16:29:54.0727 0x13b20  PimIndexMaintenanceSvc - ok

16:29:54.0732 0x13b20  pla - ok

16:29:54.0740 0x13b20  PlugPlay - ok

16:29:54.0743 0x13b20  PNRPAutoReg - ok

16:29:54.0746 0x13b20  PNRPsvc - ok

16:29:54.0755 0x13b20  PolicyAgent - ok

16:29:54.0759 0x13b20  Power - ok

16:29:54.0763 0x13b20  PptpMiniport - ok

16:29:54.0940 0x13b20  [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll

16:29:55.0266 0x13b20  PrintNotify - ok

16:29:55.0281 0x13b20  Processor - ok

16:29:55.0297 0x13b20  ProfSvc - ok

16:29:55.0297 0x13b20  Psched - ok

16:29:55.0313 0x13b20  [ 87B04878A6D59D6C79251DC960C674C1, 3EB8DB0624E646F0A65D0381408D35CF9FDC5ABFC30DF6431F4070A8EB68447C ] PxHlpa64        C:\WINDOWS\system32\Drivers\PxHlpa64.sys

16:29:55.0328 0x13b20  PxHlpa64 - ok

16:29:55.0350 0x13b20  [ 0928BD20273625622722FE1DE5BBDE57, 5313C222F8810D3A62CCE64482B5E50E58BBE2A2C298A23C84A454C34324AC52 ] qicflt          C:\WINDOWS\system32\DRIVERS\qicflt.sys

16:29:55.0382 0x13b20  qicflt - ok

16:29:55.0397 0x13b20  QWAVE - ok

16:29:55.0397 0x13b20  QWAVEdrv - ok

16:29:55.0413 0x13b20  RasAcd - ok

16:29:55.0429 0x13b20  RasAgileVpn - ok

16:29:55.0450 0x13b20  RasAuto - ok

16:29:55.0450 0x13b20  Rasl2tp - ok

16:29:55.0466 0x13b20  RasMan - ok

16:29:55.0466 0x13b20  RasPppoe - ok

16:29:55.0466 0x13b20  RasSstp - ok

16:29:55.0482 0x13b20  rdbss - ok

16:29:55.0497 0x13b20  rdpbus - ok

16:29:55.0497 0x13b20  RDPDR - ok

16:29:55.0529 0x13b20  RdpVideoMiniport - ok

16:29:55.0529 0x13b20  rdyboost - ok

16:29:55.0550 0x13b20  ReFSv1 - ok

16:29:55.0582 0x13b20  RemoteAccess - ok

16:29:55.0582 0x13b20  RemoteRegistry - ok

16:29:55.0613 0x13b20  RetailDemo - ok

16:29:55.0613 0x13b20  RFCOMM - ok

16:29:55.0629 0x13b20  RmSvc - ok

16:29:55.0645 0x13b20  RpcEptMapper - ok

16:29:55.0666 0x13b20  RpcLocator - ok

16:29:55.0682 0x13b20  RpcSs - ok

16:29:55.0698 0x13b20  rspndr - ok

16:29:55.0716 0x13b20  rt640x64 - ok

16:29:55.0806 0x13b20  [ 347E3CE270009E4C71B26E71ACF98106, E20ACC50C2B4B3FDB28A8FA144EBA02E835873123315FDB5A2C87CBAD95218F6 ] RtkAudioService C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

16:29:55.0833 0x13b20  RtkAudioService - ok

16:29:55.0856 0x13b20  s3cap - ok

16:29:55.0870 0x13b20  SamSs - ok

16:29:55.0883 0x13b20  sbp2port - ok

16:29:55.0895 0x13b20  SCardSvr - ok

16:29:55.0907 0x13b20  ScDeviceEnum - ok

16:29:55.0909 0x13b20  scfilter - ok

16:29:55.0913 0x13b20  Schedule - ok

16:29:55.0917 0x13b20  scmbus - ok

16:29:55.0921 0x13b20  scmdisk0101 - ok

16:29:55.0928 0x13b20  SCPolicySvc - ok

16:29:56.0014 0x13b20  [ B60E9769655DDEE8368E3ABB6668E076, EECA05B36C6F837FA6DB2EDD78E17E9EA5F0D793B869CB99A08C61AB485A1E67 ] ScrybeUpdater   C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe

16:29:56.0098 0x13b20  ScrybeUpdater - ok

16:29:56.0114 0x13b20  sdbus - ok

16:29:56.0114 0x13b20  SDRSVC - ok

16:29:56.0114 0x13b20  sdstor - ok

16:29:56.0129 0x13b20  seclogon - ok

16:29:56.0145 0x13b20  SENS - ok

16:29:56.0148 0x13b20  Sense - ok

16:29:56.0151 0x13b20  SensorDataService - ok

16:29:56.0151 0x13b20  SensorService - ok

16:29:56.0151 0x13b20  SensrSvc - ok

16:29:56.0167 0x13b20  SerCx - ok

16:29:56.0167 0x13b20  SerCx2 - ok

16:29:56.0167 0x13b20  Serenum - ok

16:29:56.0167 0x13b20  Serial - ok

16:29:56.0167 0x13b20  sermouse - ok

16:29:56.0182 0x13b20  SessionEnv - ok

16:29:56.0182 0x13b20  sfloppy - ok

16:29:56.0229 0x13b20  SharedAccess - ok

16:29:56.0267 0x13b20  ShellHWDetection - ok

16:29:56.0282 0x13b20  shpamsvc - ok

16:29:56.0298 0x13b20  SiSRaid2 - ok

16:29:56.0298 0x13b20  SiSRaid4 - ok

16:29:56.0329 0x13b20  [ FB9F964FFD265262EE8E98E0ED1FB44E, B02B8BCDF91B9FFCA7E2F8F6CAC310E6EEC4BCF8F8C848DCF9EDE33D8940056D ] SmbDrvI         C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys

16:29:56.0349 0x13b20  SmbDrvI - ok

16:29:56.0367 0x13b20  smphost - ok

16:29:56.0398 0x13b20  SmsRouter - ok

16:29:56.0414 0x13b20  SNMPTRAP - ok

16:29:56.0482 0x13b20  [ 3BB48F7E33C2B76184DDF233000C09CD, D1AAE5B0425047CA0C2D376D3E59324D35A90DF9074CD442DFD0ED6E434D3C84 ] Sony SCSI Helper Service C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe

16:29:56.0548 0x13b20  Sony SCSI Helper Service - detected UnsignedFile.Multi.Generic ( 1 )

16:29:56.0651 0x13b20  Detect skipped due to KSN trusted

16:29:56.0651 0x13b20  Sony SCSI Helper Service - ok

16:29:56.0698 0x13b20  spaceport - ok

16:29:56.0698 0x13b20  SpbCx - ok

16:29:56.0729 0x13b20  Spooler - ok

16:29:56.0747 0x13b20  sppsvc - ok

16:29:56.0799 0x13b20  [ 893C6AEC077665F438C1B570E82655EC, 0417BF6045FCD548003CC227FA176348277386132FC7CED02C0A0E6DBBC26803 ] SRS_HDAL_Service C:\WINDOWS\system32\drivers\SRS_HDAL_amd64.sys

16:29:56.0829 0x13b20  SRS_HDAL_Service - ok

16:29:56.0845 0x13b20  srv - ok

16:29:56.0859 0x13b20  srv2 - ok

16:29:56.0875 0x13b20  srvnet - ok

16:29:56.0890 0x13b20  SSDPSRV - ok

16:29:56.0901 0x13b20  SstpSvc - ok

16:29:56.0932 0x13b20  [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm         C:\WINDOWS\system32\DRIVERS\ssudmdm.sys

16:29:56.0945 0x13b20  ssudmdm - ok

16:29:56.0969 0x13b20  StateRepository - ok

16:29:56.0990 0x13b20  [ 92E7F6666633D2DD91D527503DAA7BE0, E97C7FFCAF2C7A83B270B6C797A91C2731FEA26874FE1E59B4CB55D5D98744BB ] stdcfltn        C:\WINDOWS\system32\DRIVERS\stdcfltn.sys

16:29:57.0008 0x13b20  stdcfltn - ok

16:29:57.0114 0x13b20  [ 1C11C1E4578CDC4363CB2E911D53E7E2, BD7D453B8F981A717F56D26DFCB54CA1B666672E03B0AAAF1A39D8330BB1638C ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

16:29:57.0152 0x13b20  Stereo Service - ok

16:29:57.0183 0x13b20  stexstor - ok

16:29:57.0214 0x13b20  stisvc - ok

16:29:57.0214 0x13b20  storahci - ok

16:29:57.0230 0x13b20  storflt - ok

16:29:57.0230 0x13b20  stornvme - ok

16:29:57.0230 0x13b20  storqosflt - ok

16:29:57.0250 0x13b20  StorSvc - ok

16:29:57.0252 0x13b20  storufs - ok

16:29:57.0252 0x13b20  storvsc - ok

16:29:57.0252 0x13b20  svsvc - ok

16:29:57.0252 0x13b20  swenum - ok

16:29:57.0252 0x13b20  swprv - ok

16:29:57.0267 0x13b20  Synth3dVsc - ok

16:29:57.0299 0x13b20  [ 8607DA59550BCEC0CEBC7260AF7359C4, E5FBB4E47586426B24B1706E08D9553598A744463A1EAD5122AF08291412C896 ] SynTP           C:\WINDOWS\system32\DRIVERS\SynTP.sys

16:29:57.0352 0x13b20  SynTP - ok

16:29:57.0414 0x13b20  [ DFAF068A21F415187F6096DD005A4ECC, 3BE1249166889684534F8C9F230E8456E0A09AF81A9F568AC04D52D3E5A2D797 ] SynTPEnhService C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

16:29:57.0448 0x13b20  SynTPEnhService - ok

16:29:57.0468 0x13b20  SysMain - ok

16:29:57.0468 0x13b20  SystemEventsBroker - ok

16:29:57.0484 0x13b20  TabletInputService - ok

16:29:57.0484 0x13b20  TapiSrv - ok

16:29:57.0515 0x13b20  [ D877BA7EAEC246FD5AFCF912A46B2B2D, CCA0E0C6E4FDFE5A707B71CD08C93B84002F5E15B2C4654AE9D90949D8DE35B0 ] tapstrong       C:\WINDOWS\system32\DRIVERS\tapstrong.sys

16:29:57.0531 0x13b20  tapstrong - ok

16:29:57.0552 0x13b20  Tcpip - ok

16:29:57.0568 0x13b20  Tcpip6 - ok

16:29:57.0568 0x13b20  tcpipreg - ok

16:29:57.0568 0x13b20  tdx - ok

16:29:57.0584 0x13b20  terminpt - ok

16:29:57.0599 0x13b20  TermService - ok

16:29:57.0631 0x13b20  Themes - ok

16:29:57.0647 0x13b20  TieringEngineService - ok

16:29:57.0653 0x13b20  tiledatamodelsvc - ok

16:29:57.0668 0x13b20  TimeBrokerSvc - ok

16:29:57.0668 0x13b20  TPM - ok

16:29:57.0668 0x13b20  TrkWks - ok

16:29:57.0715 0x13b20  TrustedInstaller - ok

16:29:57.0731 0x13b20  tsusbflt - ok

16:29:57.0753 0x13b20  TsUsbGD - ok

16:29:57.0753 0x13b20  tsusbhub - ok

16:29:57.0772 0x13b20  tunnel - ok

16:29:57.0799 0x13b20  [ FD24F98D2898BE093FE926604BE7DB99, F9851C57A2ED838AC76BB19FE2F62BB81C57DBBE2A2555F738B5D6725D39AD61 ] TurboB          C:\WINDOWS\system32\DRIVERS\TurboB.sys

16:29:57.0826 0x13b20  TurboB - ok

16:29:57.0886 0x13b20  [ 600B406A04D90F577FEA8A88D7379F08, 77CC8E8AFB6F571A42D916C0B2FEFFD3A7A32A455C78228B407C6C9B6DED8CAD ] TurboBoost      C:\Program Files\Intel\TurboBoost\TurboBoost.exe

16:29:57.0911 0x13b20  TurboBoost - ok

16:29:57.0928 0x13b20  tzautoupdate - ok

16:29:57.0938 0x13b20  UASPStor - ok

16:29:57.0941 0x13b20  UcmCx0101 - ok

16:29:57.0945 0x13b20  UcmTcpciCx0101 - ok

16:29:57.0948 0x13b20  UcmUcsi - ok

16:29:57.0952 0x13b20  Ucx01000 - ok

16:29:57.0955 0x13b20  UdeCx - ok

16:29:57.0958 0x13b20  udfs - ok

16:29:57.0963 0x13b20  UEFI - ok

16:29:57.0966 0x13b20  UevAgentDriver - ok

16:29:57.0978 0x13b20  UevAgentService - ok

16:29:57.0982 0x13b20  Ufx01000 - ok

16:29:57.0998 0x13b20  UfxChipidea - ok

16:29:58.0002 0x13b20  ufxsynopsys - ok

16:29:58.0009 0x13b20  UI0Detect - ok

16:29:58.0013 0x13b20  umbus - ok

16:29:58.0016 0x13b20  UmPass - ok

16:29:58.0020 0x13b20  UmRdpService - ok

16:29:58.0023 0x13b20  UnistoreSvc - ok

16:29:58.0169 0x13b20  [ 2C16648A12999AE69A9EBF41974B0BA2, 06008F61B6EC36CD34CB8C4BA983371DB7A9F4BEE15E5329F5E90FEEE300D258 ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

16:29:58.0285 0x13b20  UNS - ok

16:29:58.0285 0x13b20  upnphost - ok

16:29:58.0285 0x13b20  UrsChipidea - ok

16:29:58.0285 0x13b20  UrsCx01000 - ok

16:29:58.0301 0x13b20  UrsSynopsys - ok

16:29:58.0317 0x13b20  usbaudio - ok

16:29:58.0317 0x13b20  usbccgp - ok

16:29:58.0317 0x13b20  usbcir - ok

16:29:58.0317 0x13b20  usbehci - ok

16:29:58.0317 0x13b20  usbhub - ok

16:29:58.0332 0x13b20  USBHUB3 - ok

16:29:58.0332 0x13b20  usbohci - ok

16:29:58.0332 0x13b20  usbprint - ok

16:29:58.0332 0x13b20  usbser - ok

16:29:58.0351 0x13b20  USBSTOR - ok

16:29:58.0354 0x13b20  usbuhci - ok

16:29:58.0354 0x13b20  usbvideo - ok

16:29:58.0354 0x13b20  USBXHCI - ok

16:29:58.0370 0x13b20  UserDataSvc - ok

16:29:58.0385 0x13b20  UserManager - ok

16:29:58.0385 0x13b20  UsoSvc - ok

16:29:58.0401 0x13b20  VaultSvc - ok

16:29:58.0401 0x13b20  vdrvroot - ok

16:29:58.0417 0x13b20  vds - ok

16:29:58.0417 0x13b20  VerifierExt - ok

16:29:58.0454 0x13b20  vhdmp - ok

16:29:58.0454 0x13b20  vhf - ok

16:29:58.0470 0x13b20  vmbus - ok

16:29:58.0470 0x13b20  VMBusHID - ok

16:29:58.0470 0x13b20  vmgid - ok

16:29:58.0486 0x13b20  vmicguestinterface - ok

16:29:58.0486 0x13b20  vmicheartbeat - ok

16:29:58.0486 0x13b20  vmickvpexchange - ok

16:29:58.0517 0x13b20  vmicrdv - ok

16:29:58.0533 0x13b20  vmicshutdown - ok

16:29:58.0533 0x13b20  vmictimesync - ok

16:29:58.0552 0x13b20  vmicvmsession - ok

16:29:58.0554 0x13b20  vmicvss - ok

16:29:58.0554 0x13b20  volmgr - ok

16:29:58.0554 0x13b20  volmgrx - ok

16:29:58.0554 0x13b20  volsnap - ok

16:29:58.0570 0x13b20  volume - ok

16:29:58.0570 0x13b20  vpci - ok

16:29:58.0586 0x13b20  vsmraid - ok

16:29:58.0586 0x13b20  VSS - ok

16:29:58.0586 0x13b20  VSTXRAID - ok

16:29:58.0586 0x13b20  vwifibus - ok

16:29:58.0586 0x13b20  vwififlt - ok

16:29:58.0601 0x13b20  vwifimp - ok

16:29:58.0601 0x13b20  W32Time - ok

16:29:58.0601 0x13b20  WacomPen - ok

16:29:58.0617 0x13b20  WalletService - ok

16:29:58.0617 0x13b20  wanarp - ok

16:29:58.0617 0x13b20  wanarpv6 - ok

16:29:58.0617 0x13b20  wbengine - ok

16:29:58.0651 0x13b20  WbioSrvc - ok

16:29:58.0655 0x13b20  wcifs - ok

16:29:58.0655 0x13b20  Wcmsvc - ok

16:29:58.0670 0x13b20  wcncsvc - ok

16:29:58.0686 0x13b20  wcnfs - ok

16:29:58.0686 0x13b20  WdBoot - ok

16:29:58.0686 0x13b20  Wdf01000 - ok

16:29:58.0686 0x13b20  WdFilter - ok

16:29:58.0701 0x13b20  WdiServiceHost - ok

16:29:58.0701 0x13b20  WdiSystemHost - ok

16:29:58.0701 0x13b20  wdiwifi - ok

16:29:58.0701 0x13b20  WdNisDrv - ok

16:29:58.0733 0x13b20  WdNisSvc - ok

16:29:58.0733 0x13b20  WebClient - ok

16:29:58.0755 0x13b20  Wecsvc - ok

16:29:58.0782 0x13b20  WEPHOSTSVC - ok

16:29:58.0783 0x13b20  wercplsupport - ok

16:29:58.0783 0x13b20  WerSvc - ok

16:29:58.0801 0x13b20  WFPLWFS - ok

16:29:58.0808 0x13b20  WiaRpc - ok

16:29:58.0837 0x13b20  [ B14EF15BD757FA488F9C970EEE9C0D35, F27DF2D47E7076786AE7C396583D7A1C56B93E766711066C900964FC7313E794 ] WimFltr         C:\WINDOWS\system32\DRIVERS\wimfltr.sys

16:29:58.0851 0x13b20  WimFltr - ok

16:29:58.0855 0x13b20  WIMMount - ok

16:29:58.0857 0x13b20  WinDefend - ok

16:29:58.0884 0x13b20  WindowsTrustedRT - ok

16:29:58.0887 0x13b20  WindowsTrustedRTProxy - ok

16:29:58.0896 0x13b20  WinHttpAutoProxySvc - ok

16:29:58.0904 0x13b20  WinMad - ok

16:29:58.0950 0x13b20  Winmgmt - ok

16:29:58.0982 0x13b20  WinRM - ok

16:29:59.0008 0x13b20  WINUSB - ok

16:29:59.0013 0x13b20  WinVerbs - ok

16:29:59.0041 0x13b20  wisvc - ok

16:29:59.0074 0x13b20  WlanSvc - ok

16:29:59.0098 0x13b20  wlidsvc - ok

16:29:59.0114 0x13b20  WmiAcpi - ok

16:29:59.0114 0x13b20  wmiApSrv - ok

16:29:59.0151 0x13b20  WMPNetworkSvc - ok

16:29:59.0171 0x13b20  Wof - ok

16:29:59.0186 0x13b20  workfolderssvc - ok

16:29:59.0202 0x13b20  WPDBusEnum - ok

16:29:59.0218 0x13b20  WpdUpFltr - ok

16:29:59.0233 0x13b20  WpnService - ok

16:29:59.0233 0x13b20  WpnUserService - ok

16:29:59.0271 0x13b20  ws2ifsl - ok

16:29:59.0287 0x13b20  wscsvc - ok

16:29:59.0302 0x13b20  WSDPrintDevice - ok

16:29:59.0318 0x13b20  WSDScan - ok

16:29:59.0318 0x13b20  WSearch - ok

16:29:59.0334 0x13b20  wuauserv - ok

16:29:59.0350 0x13b20  WudfPf - ok

16:29:59.0354 0x13b20  WUDFRd - ok

16:29:59.0355 0x13b20  wudfsvc - ok

16:29:59.0355 0x13b20  WUDFWpdFs - ok

16:29:59.0371 0x13b20  WwanSvc - ok

16:29:59.0387 0x13b20  XblAuthManager - ok

16:29:59.0402 0x13b20  XblGameSave - ok

16:29:59.0402 0x13b20  xboxgip - ok

16:29:59.0418 0x13b20  XboxNetApiSvc - ok

16:29:59.0434 0x13b20  xinputhid - ok

16:29:59.0434 0x13b20  ================ Scan global ===============================

16:29:59.0550 0x13b20  [ Global ] - ok

16:29:59.0553 0x13b20  ================ Scan MBR ==================================

16:29:59.0572 0x13b20  [ 5C616939100B85E558DA92B899A0FC36 ] \Device\Harddisk0\DR0

16:30:00.0224 0x13b20  \Device\Harddisk0\DR0 - ok

16:30:00.0239 0x13b20  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1

16:30:00.0524 0x13b20  \Device\Harddisk1\DR1 - ok

16:30:00.0524 0x13b20  ================ Scan VBR ==================================

16:30:00.0524 0x13b20  [ 7E69289E67491D6266DF173447C3A02E ] \Device\Harddisk0\DR0\Partition1

16:30:00.0524 0x13b20  \Device\Harddisk0\DR0\Partition1 - ok

16:30:00.0540 0x13b20  [ C1C24B9A439B870F18A02948E0F18B68 ] \Device\Harddisk0\DR0\Partition2

16:30:00.0540 0x13b20  \Device\Harddisk0\DR0\Partition2 - ok

16:30:00.0540 0x13b20  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk1\DR1\Partition1

16:30:00.0540 0x13b20  \Device\Harddisk1\DR1\Partition1 - ok

16:30:00.0559 0x13b20  [ EACD3E72CEF5E2A4F545E98520155EC6 ] \Device\Harddisk1\DR1\Partition2

16:30:00.0560 0x13b20  \Device\Harddisk1\DR1\Partition2 - ok

16:30:00.0560 0x13b20  ================ Scan generic autorun ======================

16:30:00.0593 0x13b20  [ 0C3154D0620F974AD5C4E8D87626C8CF, 4E6B751F9C0D5D4833A12166BC5142E0A7402E98D00F570926ED9CA0936A8007 ] C:\WINDOWS\system32\igfxtray.exe

16:30:00.0662 0x13b20  IgfxTray - ok

16:30:00.0938 0x13b20  [ 22EBD5AE3B3220D713E544D1D3AB3FEE, 9EF058B096DAA5C6242FBEB3DF509108180B1EB1EA252E63C437CF6C1B743BE0 ] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

16:30:01.0105 0x13b20  RTHDVCPL - ok

16:30:01.0162 0x13b20  [ 31821EC63BDEDE18E64C11F7248B32AB, 6982AE866F8EC7943FDB3E4B77B03542A2E3E07F080B8D806C4ED903DE3368CE ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

16:30:01.0194 0x13b20  RtHDVBg - ok

16:30:01.0263 0x13b20  [ 39CF316EB5842AE27CC0D3CC4E2840DE, BC4D4ED926F988B7B70CC87B7EC92D148DA6BC39C5C514751F1B0CA69D0F9081 ] C:\Program Files\Microsoft Office\Office14\BCSSync.exe

16:30:01.0263 0x13b20  BCSSync - ok

16:30:01.0441 0x13b20  [ E7B32C61E8AA6CD40DF6557FEDD2EB77, A062E7C30CE435A47615D8DB6612AAB45DD6DDDCBC0665BBB52FFC9D8670B218 ] C:\Program Files\Dell\QuickSet\QuickSet.exe

16:30:01.0642 0x13b20  QuickSet - detected UnsignedFile.Multi.Generic ( 1 )

16:30:01.0711 0x13b20  Detect skipped due to KSN trusted

16:30:01.0711 0x13b20  QuickSet - ok

16:30:01.0711 0x13b20  SynTPEnh - ok

16:30:01.0711 0x13b20  WindowsDefender - ok

16:30:01.0727 0x13b20  Avira SystrayStartTrigger - ok

16:30:01.0812 0x13b20  [ F17FFAF69E1AF3D0A010FD4749148981, 7486A1EFE378BFCEE30D169BD0189CABD6935EBEE556BF0328330B120975EA03 ] C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

16:30:01.0896 0x13b20  EEventManager - ok

16:30:02.0034 0x13b20  [ 8F9B9F6623F888AF8A9FD922985FECE0, C9C9E6DD0525F176D0EAF5D855C724586E2718D9F90EB4AFF8AD1D0A7109D63F ] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

16:30:02.0062 0x13b20  Reader Application Helper - ok

16:30:02.0136 0x13b20  [ B7A00AB53A21C92E61191AF026944D52, 3C09EC115C32ABC75F8CFA5DAFB5511161D61B399686D15027E20C9ED09BEAAB ] C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

16:30:02.0165 0x13b20  SunJavaUpdateSched - ok

16:30:02.0228 0x13b20  [ 138FA0EBAA0204749C496FA92A39D4D5, D57D3465C2ABE6F82FA8E644F3550D21168D01BEDA9F48B589175BBE35A1D31C ] C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe

16:30:02.0312 0x13b20  FreeStyleLibreautorunexe - detected UnsignedFile.Multi.Generic ( 1 )

16:30:02.0365 0x13b20  FreeStyleLibreautorunexe ( UnsignedFile.Multi.Generic ) - warning

16:30:02.0565 0x13b20  OneDriveSetup - ok

16:30:02.0565 0x13b20  OneDriveSetup - ok

16:30:02.0761 0x13b20  [ 11B4662A4DD118132E2648837920AF86, 7643E9CF00C0393ED4A1D294DABA84DCEB6BE696E5B520D413284BAB16CE1CD5 ] C:\Users\Norman\AppData\Roaming\Spotify\SpotifyWebHelper.exe

16:30:03.0168 0x13b20  Spotify Web Helper - ok

16:30:03.0400 0x13b20  [ 6F8EDF5A5D23AD1F4FC168047C80ECE4, CAA605301395B70E724688515936A6C84F90D18EFFBF21CEDD336268AACA8D02 ] C:\Users\Norman\AppData\Roaming\Spotify\Spotify.exe

16:30:03.0616 0x13b20  Spotify - ok

16:30:03.0701 0x13b20  [ 527CF721F78B2DF6A1570F93899A0AA8, 1F08074DA90593E7EDC63C072B784BE438C5EC94FE992433053D6B75CDEE78EB ] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE

16:30:03.0716 0x13b20  OfficeSyncProcess - ok

16:30:03.0938 0x13b20  [ 5451E20D9EFBDC89991C1B86A6306894, E41CD89C1313C8729F53C91250AAD9C5E7A3F612D75F53751F31F790FF991879 ] C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMSE.EXE

16:30:03.0953 0x13b20  EPLTarget\P0000000000000000 - ok

16:30:03.0956 0x13b20  OneDriveSetup - ok

16:30:04.0017 0x13b20  WAB Migrate - ok

16:30:04.0019 0x13b20  Waiting for KSN requests completion. In queue: 72

16:30:05.0051 0x13b20  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x61100 ( enabled : updated )

16:30:05.0054 0x13b20  Win FW state via NFP2: enabled ( trusted )

16:30:05.0125 0x13b20  ============================================================

16:30:05.0125 0x13b20  Scan finished

16:30:05.0125 0x13b20  ============================================================

16:30:05.0152 0x13b1c  Detected object count: 2

16:30:05.0152 0x13b1c  Actual detected object count: 2

16:32:31.0802 0x13b1c  FreeStyleLibre MAS Server ( UnsignedFile.Multi.Generic ) - skipped by user

16:32:31.0802 0x13b1c  FreeStyleLibre MAS Server ( UnsignedFile.Multi.Generic ) - User select action: Skip 

16:32:31.0802 0x13b1c  FreeStyleLibreautorunexe ( UnsignedFile.Multi.Generic ) - skipped by user

16:32:31.0802 0x13b1c  FreeStyleLibreautorunexe ( UnsignedFile.Multi.Generic ) - User select action: Skip

cosinus

10.12.2016 17:52

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

querotudo

10.12.2016 21:46

AdwCleaner Log:

AdwCleaner Logfile:

Code:

# AdwCleaner v6.040 - Bericht erstellt am 10/12/2016 um 21:20:55

# Aktualisiert am 02/12/2016 von Malwarebytes

# Datenbank : 2016-12-09.3 [Server]

# Betriebssystem : Windows 10 Pro  (X64)

# Benutzername : Norman - NORMAN-PC

# Gestartet von : C:\Users\Norman\Desktop\AdwCleaner_6.040.exe

# Modus: Löschen

# Unterstützung : https://www.malwarebytes.com/support
 
 
 

***** [ Dienste ] *****
 
 
 

***** [ Ordner ] *****
 

[-] Ordner gelöscht: C:\Users\Admin\AppData\Roaming\EuroTrade A.L. Ltd

[-] Ordner gelöscht: C:\Program Files (x86)\AskPartnerNetwork
 
 

***** [ Dateien ] *****
 
 
 

***** [ DLL ] *****
 
 
 

***** [ WMI ] *****
 
 
 

***** [ Verknüpfungen ] *****
 
 
 

***** [ Aufgabenplanung ] *****
 
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}

[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{41564952-412D-5637-00A7-7A786E7484D7}]

[-] Schlüssel gelöscht: HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Reimage

[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Reimage

[-] Schlüssel gelöscht: HKLM\SOFTWARE\AskPartnerNetwork

[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Reimage

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\AskPartnerNetwork

[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com

[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com

[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com

[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaacalgebmfelllfiaoknifldpngjh
 
 

***** [ Browser ] *****
 

[-] Firefox Einstellungen bereinigt: "browser.newtab.url" -  "hxxp://istart.webssearches.com/newtab/?type=nt&ts=1412099607&from=cov&uid=ST9500420AS_5VJB93R1XXXX5VJB93R1"
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Winsock Einstellungen zurückgesetzt

:: Proxy Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C0].txt - [19993 Bytes] - [31/10/2016 22:36:17]

C:\AdwCleaner\AdwCleaner[C2].txt - [1186 Bytes] - [31/10/2016 22:54:30]

C:\AdwCleaner\AdwCleaner[C3].txt - [3361 Bytes] - [10/12/2016 21:20:55]

C:\AdwCleaner\AdwCleaner[S0].txt - [20526 Bytes] - [31/10/2016 22:31:58]

C:\AdwCleaner\AdwCleaner[S1].txt - [1494 Bytes] - [31/10/2016 22:52:23]

C:\AdwCleaner\AdwCleaner[S2].txt - [1640 Bytes] - [31/10/2016 23:00:42]

C:\AdwCleaner\AdwCleaner[S3].txt - [3722 Bytes] - [10/12/2016 21:16:29]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C3].txt - [3727 Bytes] ##########

--- --- ---

[/CODE]

JRT Log:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.9 (09.30.2016)

Operating System: Windows 10 Pro x64 

Ran by Norman (Administrator) on 10.12.2016 at 21:41:25,31

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 1 
 

Successfully deleted: C:\Users\Norman\AppData\Roaming\wyupdate au (Folder) 
 
 
 

Registry: 0 
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 10.12.2016 at 21:43:06,32

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus

10.12.2016 21:48

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

querotudo

10.12.2016 22:18

FRST Log:

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016

durchgeführt von Norman (Administrator) auf NORMAN-PC (10-12-2016 22:10:12)

Gestartet von C:\Users\Norman\Downloads

Geladene Profile: Norman (Verfügbare Profile: Norman & Admin)

Platform: Windows 10 Pro Version 1607 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Synaptics, Inc.) C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(Intel Corporation) C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Windows\splwow64.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

() C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe

(Intel® Corporation) C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

() C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe

(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe

() C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMC\Aggregation.exe

(LG Electronics Inc.) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)

HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)

HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [4146848 2012-08-16] (Dell Inc.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3945672 2015-07-16] (Synaptics Incorporated)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-21] (Microsoft Corporation)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [Reader Application Helper] => C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2013-06-25] (Sony Corporation)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598040 2016-06-22] (Oracle Corporation)

HKLM-x32\...\Run: [FreeStyleLibreautorunexe] => C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe [81408 2016-01-19] ()

Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [Spotify Web Helper] => C:\Users\Norman\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2016-12-08] (Spotify Ltd)

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [Spotify] => C:\Users\Norman\AppData\Roaming\Spotify\Spotify.exe [6987376 2016-12-08] (Spotify Ltd)

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [912480 2015-09-02] (Microsoft Corporation)

HKU\S-1-5-21-143339661-846541388-530592055-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [37376 2016-07-16] (Microsoft Corporation)

HKU\S-1-5-18\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIMSE.EXE [298560 2014-03-20] (SEIKO EPSON CORPORATION)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconCheck] -> {d36d0796-4913-3dde-9159-1c7b348e59d2} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconError] -> {e4f57fbd-4e00-317c-9f90-d4e427981873} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [     HiDriveOverlayIconSync] -> {f1fc1212-b289-31bc-ae4d-56f707c68259} => C:\Windows\system32\mscoree.dll [2016-07-16] (Microsoft Corporation)

Startup: C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk [2011-04-09]

ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Scrybe.lnk [2012-10-04]

ShortcutTarget: Scrybe.lnk -> C:\Windows\Installer\{147DFAD8-34C3-4DE1-9FCA-ACEFDE9EF810}\NewShortcut11_8ACB210B42E44145A8C31F8E3DD765A3.exe (Acresso Software Inc.)

Startup: C:\Users\Norman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HiDrive.lnk [2016-12-09]

ShortcutTarget: HiDrive.lnk -> C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe ()

Startup: C:\Users\Norman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk [2011-04-09]

ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{265e45c3-1e8f-4edc-a3d0-688e3ac43142}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{2e9792a9-ff47-43c3-8e9c-09fa2f58c42b}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{56280e52-12c5-47a2-b502-fc59803f99c9}: [NameServer] 0.0.0.0

Tcpip\..\Interfaces\{bfb34b69-9053-433d-8225-c2dee194a17b}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{ff8b3f00-7008-4310-a736-92ad7f7d0007}: [DhcpNameServer] 192.168.178.1
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen

HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de

SearchScopes: HKU\S-1-5-21-143339661-846541388-530592055-1002 -> DefaultScope {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 

BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" => Keine Datei

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_102\bin\ssv.dll [2016-09-25] (Oracle Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_102\bin\jp2ssv.dll [2016-09-25] (Oracle Corporation)

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" Keine Datei

DPF: HKLM-x32 {2D20E99C-1FD7-48EC-9FDF-CF3555B273D4} hxxp://192.168.1.129/VDControl.CAB?2,0,0,89

DPF: HKLM-x32 {A4150320-98EC-4DB6-9BFB-EBF4B6FBEB16} hxxp://192.168.1.137/codebase/DVM_IPCam2.ocx
 

Edge: 

======

Edge HomeButtonPage: HKU\S-1-5-21-143339661-846541388-530592055-1002 -> hxxp://google.de/
 

FireFox:

========

FF ProfilePath: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default [2016-12-10]

FF Homepage: Mozilla\Firefox\Profiles\jy1jlaly.default -> google.de

FF Extension: (AdBlocker Ultimate) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\adblockultimate@adblockultimate.net.xpi [2016-12-08]

FF Extension: (Image Zoom) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi [2016-04-28]

FF Extension: (Adblock Plus) - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24]

FF SearchPlugin: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml [2016-10-02]

FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\extensions\@greatdealz.xpi => nicht gefunden

FF HKU\S-1-5-21-143339661-846541388-530592055-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Norman\AppData\Roaming\IDM\idmmzcc3 => nicht gefunden

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-19] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2013-09-17] (DivX, LLC.)

FF Plugin: @java.com/DTPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\dtplugin\npDeployJava1.dll [2016-09-25] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.102.2 -> C:\Program Files\Java\jre1.8.0_102\bin\plugin2\npjp2.dll [2016-09-25] (Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-19] ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2013-02-20] ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [Keine Datei]

FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2010-03-26] (GARMIN Corp.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)

FF Plugin-x32: @t-immersion.com/DFusionHomeWebPlugIn -> C:\Program Files (x86)\Total Immersion\DFusionHomeWebPlugIn\NPDFusionWebFirefox.dll [2011-06-30] (Total Immersion)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=1.1.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
 

Chrome: 

=======

CHR DefaultProfile: Profile 1

CHR Profile: C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1 [2016-12-09]

CHR Extension: (Google Drive) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-20]

CHR Extension: (Image Zoom) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bdmfgepgnaffojoiojoeadeofipcfndh [2014-11-26]

CHR Extension: (YouTube) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-30]

CHR Extension: (Amazon) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\caeaobpemokdfnidgaebncaooofnbfha [2015-04-01]

CHR Extension: (Adblock Plus) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-12]

CHR Extension: (Replace New Tab Page) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cnkhddihkmmiiclaipbaaelfojkmlkja [2014-11-27]

CHR Extension: (Google-Suche) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-20]

CHR Extension: (Avira Browserschutz) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-23]

CHR Extension: (Google Docs Offline) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-09-23]

CHR Extension: (AdBlock Plus) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kfcfceejhleedfbabanmaamfiagjhncj [2014-11-26]

CHR Extension: (Caipirinha) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lllaffajmaihmacifgegebccnnhddemj [2015-09-30]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-23]

CHR Extension: (Google Mail) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-29]

CHR Extension: (Chrome Media Router) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-12]

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [caeaobpemokdfnidgaebncaooofnbfha] - C:\Users\Admin\ChromeExtensions\caeaobpemokdfnidgaebncaooofnbfha\amazon-icon-fwde.crx [2014-09-30]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [ngnjhfpfhadncgafgbneeljaginimmmk] - <kein Path/update_url>
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 BrcmSetSecurity; C:\Program Files\Intel Corporation\Intel WiDi\BrcmSetSecurity.exe [283296 2014-04-07] (Intel Corporation)

R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [144560 2012-05-16] (Seiko Epson Corporation)

S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2011-04-22] (Macrovision Europe Ltd.) [Datei ist nicht signiert]

R2 FreeStyleLibre MAS Server; C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe [285184 2016-01-19] () [Datei ist nicht signiert]

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

R2 Intel(R) Wireless Bluetooth(R) 4.0 Radio Management; C:\Program Files (x86)\Intel\Bluetooth\ibtrksrv.exe [157128 2013-09-18] (Intel Corporation)

R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703696 2016-08-08] (SEIKO EPSON CORPORATION)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [303360 2015-06-24] (Realtek Semiconductor)

R2 ScrybeUpdater; C:\Program Files (x86)\Synaptics\Scrybe\Service\ScrybeUpdater.exe [1300264 2011-05-27] (Synaptics, Inc.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)

S3 Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [73728 2013-05-23] (Sony Corporation) [Datei ist nicht signiert]

R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-07-16] (Synaptics Incorporated)

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

S2 Avira.ServiceHost; "C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 btmhsf; C:\WINDOWS\system32\DRIVERS\btmhsf.sys [1390904 2013-10-15] (Motorola Solutions, Inc.)

S3 GigasetGenericUSB_x64; C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2016-01-12] (Siemens Home and Office Communication Devices GmbH & Co. KG)

R3 i8042HDR; C:\WINDOWS\system32\DRIVERS\i8042HDR.sys [15920 2009-08-14] (Windows (R) Codename Longhorn DDK provider)

S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_86f2ae812568c59a\nvlddmkm.sys [14242872 2016-09-20] (NVIDIA Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

S3 NvStUSB; C:\WINDOWS\system32\DRIVERS\nvstusb.sys [121960 2010-12-12] ()

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56376 2016-08-04] (NVIDIA Corporation)

U5 PROCMON23; C:\Windows\System32\Drivers\PROCMON23.sys [92344 2016-12-04] (Sysinternals - www.sysinternals.com)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )

R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-07-16] (Synaptics Incorporated)

S3 SRS_HDAL_Service; C:\WINDOWS\System32\drivers\SRS_HDAL_amd64.sys [533280 2010-11-15] ()

S3 tapstrong; C:\WINDOWS\system32\DRIVERS\tapstrong.sys [38760 2013-11-16] (The OpenVPN Project)

S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

S3 DIRECTIO; \??\C:\Program Files\PerformanceTest\DirectIo64.sys [X]

U3 idsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-10 22:10 - 2016-12-10 22:11 - 00025638 _____ C:\Users\Norman\Downloads\FRST.txt

2016-12-10 21:51 - 2016-12-10 21:51 - 00000000 __SHD C:\Users\Norman\AppData\Roaming\wyUpdate AU

2016-12-10 21:38 - 2016-12-10 21:41 - 01631928 _____ (Malwarebytes) C:\Users\Norman\Desktop\JRT.exe

2016-12-10 20:53 - 2016-12-10 20:53 - 00016962 _____ C:\Users\Norman\Documents\20161210 TV Programme.xlsx

2016-12-10 20:29 - 2016-12-10 21:11 - 03968464 _____ C:\Users\Norman\Desktop\AdwCleaner_6.040.exe

2016-12-10 16:28 - 2016-12-10 16:34 - 00091546 _____ C:\TDSSKiller.3.1.0.12_10.12.2016_16.28.09_log.txt

2016-12-09 18:02 - 2016-11-11 11:22 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2016-12-09 18:02 - 2016-11-11 11:14 - 00603488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll

2016-12-09 18:02 - 2016-11-11 11:13 - 01886344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2016-12-09 18:02 - 2016-11-11 11:01 - 01859264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll

2016-12-09 18:02 - 2016-11-11 11:01 - 01293152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll

2016-12-09 18:02 - 2016-11-11 10:56 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2016-12-09 18:02 - 2016-11-11 10:29 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll

2016-12-09 18:02 - 2016-11-11 10:24 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2016-12-09 18:02 - 2016-11-11 10:22 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe

2016-12-09 18:02 - 2016-11-11 10:21 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll

2016-12-09 18:02 - 2016-11-11 10:20 - 00407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2016-12-09 18:02 - 2016-11-11 10:20 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe

2016-12-09 18:02 - 2016-11-11 10:18 - 00967168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys

2016-12-09 18:02 - 2016-11-11 10:17 - 01004032 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2016-12-09 18:02 - 2016-11-11 10:14 - 00615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll

2016-12-09 18:02 - 2016-11-11 10:11 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2016-12-09 18:02 - 2016-11-11 10:11 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2016-12-09 18:02 - 2016-11-11 10:08 - 00539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll

2016-12-09 18:02 - 2016-11-11 10:07 - 00347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2016-12-09 18:02 - 2016-11-11 10:06 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2016-12-09 18:02 - 2016-11-11 10:04 - 02800128 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll

2016-12-09 18:02 - 2016-11-11 10:04 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll

2016-12-09 18:02 - 2016-11-11 10:03 - 00842240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll

2016-12-09 18:02 - 2016-11-11 08:04 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll

2016-12-09 18:01 - 2016-11-11 11:15 - 00198856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll

2016-12-09 18:01 - 2016-11-11 11:15 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll

2016-12-09 18:01 - 2016-11-11 11:14 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2016-12-09 18:01 - 2016-11-11 11:14 - 02186896 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll

2016-12-09 18:01 - 2016-11-11 11:13 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2016-12-09 18:01 - 2016-11-11 11:13 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2016-12-09 18:01 - 2016-11-11 11:13 - 00352096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys

2016-12-09 18:01 - 2016-11-11 11:12 - 00128352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2016-12-09 18:01 - 2016-11-11 11:10 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll

2016-12-09 18:01 - 2016-11-11 11:09 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2016-12-09 18:01 - 2016-11-11 11:03 - 01069720 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2016-12-09 18:01 - 2016-11-11 11:03 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll

2016-12-09 18:01 - 2016-11-11 11:03 - 00266544 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2016-12-09 18:01 - 2016-11-11 11:02 - 02828376 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll

2016-12-09 18:01 - 2016-11-11 11:02 - 00360040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe

2016-12-09 18:01 - 2016-11-11 11:01 - 07219672 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2016-12-09 18:01 - 2016-11-11 11:01 - 00637400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2016-12-09 18:01 - 2016-11-11 11:00 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2016-12-09 18:01 - 2016-11-11 11:00 - 00219488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys

2016-12-09 18:01 - 2016-11-11 10:59 - 02913136 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2016-12-09 18:01 - 2016-11-11 10:59 - 01267512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll

2016-12-09 18:01 - 2016-11-11 10:57 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2016-12-09 18:01 - 2016-11-11 10:57 - 08170048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2016-12-09 18:01 - 2016-11-11 10:57 - 04130432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2016-12-09 18:01 - 2016-11-11 10:57 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll

2016-12-09 18:01 - 2016-11-11 10:57 - 01473048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll

2016-12-09 18:01 - 2016-11-11 10:56 - 01274712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll

2016-12-09 18:01 - 2016-11-11 10:56 - 01062480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll

2016-12-09 18:01 - 2016-11-11 10:56 - 00424616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll

2016-12-09 18:01 - 2016-11-11 10:56 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2016-12-09 18:01 - 2016-11-11 10:56 - 00241496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll

2016-12-09 18:01 - 2016-11-11 10:56 - 00163752 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTWorkQ.dll

2016-12-09 18:01 - 2016-11-11 10:55 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2016-12-09 18:01 - 2016-11-11 10:55 - 00882680 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll

2016-12-09 18:01 - 2016-11-11 10:55 - 00743224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2016-12-09 18:01 - 2016-11-11 10:54 - 01418312 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2016-12-09 18:01 - 2016-11-11 10:51 - 00454592 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe

2016-12-09 18:01 - 2016-11-11 10:31 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll

2016-12-09 18:01 - 2016-11-11 10:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2016-12-09 18:01 - 2016-11-11 10:27 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe

2016-12-09 18:01 - 2016-11-11 10:26 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys

2016-12-09 18:01 - 2016-11-11 10:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll

2016-12-09 18:01 - 2016-11-11 10:26 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReportingCSP.dll

2016-12-09 18:01 - 2016-11-11 10:26 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\modem.sys

2016-12-09 18:01 - 2016-11-11 10:25 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BcastDVRHelper.dll

2016-12-09 18:01 - 2016-11-11 10:25 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll

2016-12-09 18:01 - 2016-11-11 10:25 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe

2016-12-09 18:01 - 2016-11-11 10:25 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll

2016-12-09 18:01 - 2016-11-11 10:25 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll

2016-12-09 18:01 - 2016-11-11 10:24 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll

2016-12-09 18:01 - 2016-11-11 10:24 - 00159744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll

2016-12-09 18:01 - 2016-11-11 10:24 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll

2016-12-09 18:01 - 2016-11-11 10:24 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll

2016-12-09 18:01 - 2016-11-11 10:24 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-12-09 18:01 - 2016-11-11 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll

2016-12-09 18:01 - 2016-11-11 10:23 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll

2016-12-09 18:01 - 2016-11-11 10:23 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.Search.UriHandler.dll

2016-12-09 18:01 - 2016-11-11 10:23 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\EAMProgressHandler.dll

2016-12-09 18:01 - 2016-11-11 10:22 - 00143360 _____ (Microsoft Corporation) C:\WINDOWS\system32\EDPCleanup.exe

2016-12-09 18:01 - 2016-11-11 10:21 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll

2016-12-09 18:01 - 2016-11-11 10:21 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll

2016-12-09 18:01 - 2016-11-11 10:20 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2016-12-09 18:01 - 2016-11-11 10:20 - 00574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll

2016-12-09 18:01 - 2016-11-11 10:20 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll

2016-12-09 18:01 - 2016-11-11 10:20 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll

2016-12-09 18:01 - 2016-11-11 10:20 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll

2016-12-09 18:01 - 2016-11-11 10:19 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe

2016-12-09 18:01 - 2016-11-11 10:19 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll

2016-12-09 18:01 - 2016-11-11 10:19 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2016-12-09 18:01 - 2016-11-11 10:19 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll

2016-12-09 18:01 - 2016-11-11 10:19 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll

2016-12-09 18:01 - 2016-11-11 10:19 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll

2016-12-09 18:01 - 2016-11-11 10:18 - 17188352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2016-12-09 18:01 - 2016-11-11 10:18 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll

2016-12-09 18:01 - 2016-11-11 10:18 - 02084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceFlows.DataModel.dll

2016-12-09 18:01 - 2016-11-11 10:18 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2016-12-09 18:01 - 2016-11-11 10:18 - 00278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll

2016-12-09 18:01 - 2016-11-11 10:17 - 01220096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl

2016-12-09 18:01 - 2016-11-11 10:17 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2016-12-09 18:01 - 2016-11-11 10:17 - 00956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2016-12-09 18:01 - 2016-11-11 10:17 - 00410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2016-12-09 18:01 - 2016-11-11 10:16 - 01477632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll

2016-12-09 18:01 - 2016-11-11 10:16 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll

2016-12-09 18:01 - 2016-11-11 10:16 - 00184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll

2016-12-09 18:01 - 2016-11-11 10:16 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll

2016-12-09 18:01 - 2016-11-11 10:15 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll

2016-12-09 18:01 - 2016-11-11 10:14 - 03777536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll

2016-12-09 18:01 - 2016-11-11 10:14 - 02104320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2016-12-09 18:01 - 2016-11-11 10:14 - 01589760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll

2016-12-09 18:01 - 2016-11-11 10:14 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys

2016-12-09 18:01 - 2016-11-11 10:13 - 00396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll

2016-12-09 18:01 - 2016-11-11 10:13 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcuiu.dll

2016-12-09 18:01 - 2016-11-11 10:10 - 13084160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2016-12-09 18:01 - 2016-11-11 10:09 - 05111296 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll

2016-12-09 18:01 - 2016-11-11 10:09 - 01366016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2016-12-09 18:01 - 2016-11-11 10:08 - 00981504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll

2016-12-09 18:01 - 2016-11-11 10:07 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2016-12-09 18:01 - 2016-11-11 10:07 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll

2016-12-09 18:01 - 2016-11-11 10:07 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2016-12-09 18:01 - 2016-11-11 10:07 - 00991232 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll

2016-12-09 18:01 - 2016-11-11 10:06 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2016-12-09 18:01 - 2016-11-11 10:06 - 00960000 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2016-12-09 18:01 - 2016-11-11 10:05 - 04136448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll

2016-12-09 18:01 - 2016-11-11 10:05 - 02852864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll

2016-12-09 18:01 - 2016-11-11 10:05 - 01490944 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2016-12-09 18:01 - 2016-11-11 10:05 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2016-12-09 18:01 - 2016-11-11 10:04 - 02688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll

2016-12-09 18:01 - 2016-11-11 10:04 - 01359360 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll

2016-12-09 18:01 - 2016-11-11 10:04 - 00909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll

2016-12-09 18:01 - 2016-11-11 10:04 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll

2016-12-09 18:01 - 2016-11-11 10:04 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2016-12-09 18:01 - 2016-11-11 10:04 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2016-12-09 18:01 - 2016-11-11 10:03 - 04708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2016-12-09 18:01 - 2016-11-11 10:03 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2016-12-09 18:01 - 2016-11-11 10:03 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2016-12-09 18:01 - 2016-11-11 10:03 - 00717824 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2016-12-09 18:01 - 2016-11-11 10:03 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll

2016-12-09 18:01 - 2016-11-11 10:03 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2016-12-09 18:01 - 2016-11-11 10:03 - 00283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll

2016-12-09 18:01 - 2016-11-11 10:03 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2016-12-09 18:01 - 2016-11-11 10:02 - 03542016 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll

2016-12-09 18:01 - 2016-11-11 10:02 - 01726976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll

2016-12-09 18:01 - 2016-11-11 10:01 - 01107456 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2016-12-09 18:01 - 2016-11-11 09:39 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2016-12-09 18:01 - 2016-11-11 09:00 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2016-12-09 18:01 - 2016-11-11 08:59 - 01572768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2016-12-09 18:01 - 2016-11-11 08:56 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2016-12-09 18:01 - 2016-11-11 08:49 - 00869848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll

2016-12-09 18:01 - 2016-11-11 08:49 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll

2016-12-09 18:01 - 2016-11-11 08:49 - 00248480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2016-12-09 18:01 - 2016-11-11 08:48 - 02277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll

2016-12-09 18:01 - 2016-11-11 08:47 - 05722832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2016-12-09 18:01 - 2016-11-11 08:47 - 01503032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll

2016-12-09 18:01 - 2016-11-11 08:47 - 00527880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2016-12-09 18:01 - 2016-11-11 08:45 - 02166752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2016-12-09 18:01 - 2016-11-11 08:45 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll

2016-12-09 18:01 - 2016-11-11 08:42 - 06668032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2016-12-09 18:01 - 2016-11-11 08:42 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2016-12-09 18:01 - 2016-11-11 08:42 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll

2016-12-09 18:01 - 2016-11-11 08:42 - 01123912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll

2016-12-09 18:01 - 2016-11-11 08:42 - 00952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll

2016-12-09 18:01 - 2016-11-11 08:42 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll

2016-12-09 18:01 - 2016-11-11 08:42 - 00152416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTWorkQ.dll

2016-12-09 18:01 - 2016-11-11 08:42 - 00091936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfaudiocnv.dll

2016-12-09 18:01 - 2016-11-11 08:41 - 04311736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2016-12-09 18:01 - 2016-11-11 08:41 - 00157536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudStorageWizard.exe

2016-12-09 18:01 - 2016-11-11 08:38 - 01263856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2016-12-09 18:01 - 2016-11-11 08:28 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll

2016-12-09 18:01 - 2016-11-11 08:27 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe

2016-12-09 18:01 - 2016-11-11 08:26 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2016-12-09 18:01 - 2016-11-11 08:25 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll

2016-12-09 18:01 - 2016-11-11 08:25 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll

2016-12-09 18:01 - 2016-11-11 08:24 - 00519168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll

2016-12-09 18:01 - 2016-11-11 08:24 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BcastDVRHelper.dll

2016-12-09 18:01 - 2016-11-11 08:24 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll

2016-12-09 18:01 - 2016-11-11 08:24 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Shell.Search.UriHandler.dll

2016-12-09 18:01 - 2016-11-11 08:23 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll

2016-12-09 18:01 - 2016-11-11 08:23 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll

2016-12-09 18:01 - 2016-11-11 08:22 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe

2016-12-09 18:01 - 2016-11-11 08:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll

2016-12-09 18:01 - 2016-11-11 08:21 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll

2016-12-09 18:01 - 2016-11-11 08:21 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.BackgroundManagerPolicy.dll

2016-12-09 18:01 - 2016-11-11 08:19 - 13868544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2016-12-09 18:01 - 2016-11-11 08:19 - 01755136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceFlows.DataModel.dll

2016-12-09 18:01 - 2016-11-11 08:19 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll

2016-12-09 18:01 - 2016-11-11 08:19 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2016-12-09 18:01 - 2016-11-11 08:19 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2016-12-09 18:01 - 2016-11-11 08:19 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll

2016-12-09 18:01 - 2016-11-11 08:19 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll

2016-12-09 18:01 - 2016-11-11 08:18 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll

2016-12-09 18:01 - 2016-11-11 08:18 - 01336320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll

2016-12-09 18:01 - 2016-11-11 08:18 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll

2016-12-09 18:01 - 2016-11-11 08:18 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll

2016-12-09 18:01 - 2016-11-11 08:17 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2016-12-09 18:01 - 2016-11-11 08:17 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe

2016-12-09 18:01 - 2016-11-11 08:15 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2016-12-09 18:01 - 2016-11-11 08:15 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll

2016-12-09 18:01 - 2016-11-11 08:15 - 01357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll

2016-12-09 18:01 - 2016-11-11 08:15 - 00838144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll

2016-12-09 18:01 - 2016-11-11 08:15 - 00348672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll

2016-12-09 18:01 - 2016-11-11 08:15 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll

2016-12-09 18:01 - 2016-11-11 08:14 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll

2016-12-09 18:01 - 2016-11-11 08:13 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll

2016-12-09 18:01 - 2016-11-11 08:13 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2016-12-09 18:01 - 2016-11-11 08:11 - 03306496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll

2016-12-09 18:01 - 2016-11-11 08:10 - 12177920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2016-12-09 18:01 - 2016-11-11 08:10 - 06109184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll

2016-12-09 18:01 - 2016-11-11 08:10 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll

2016-12-09 18:01 - 2016-11-11 08:09 - 05380608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll

2016-12-09 18:01 - 2016-11-11 08:09 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll

2016-12-09 18:01 - 2016-11-11 08:08 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll

2016-12-09 18:01 - 2016-11-11 08:06 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe

2016-12-09 18:01 - 2016-11-11 08:06 - 02362880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll

2016-12-09 18:01 - 2016-11-11 08:06 - 02109952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll

2016-12-09 18:01 - 2016-11-11 08:06 - 01228288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll

2016-12-09 18:01 - 2016-11-11 08:06 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll

2016-12-09 18:01 - 2016-11-11 08:06 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxclu.dll

2016-12-09 18:01 - 2016-11-11 08:05 - 04423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2016-12-09 18:01 - 2016-11-11 08:05 - 03370496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll

2016-12-09 18:01 - 2016-11-11 08:04 - 01992704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll

2016-12-09 18:01 - 2016-11-11 08:04 - 01880576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll

2016-12-09 18:01 - 2016-11-11 08:04 - 01595392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2016-12-09 18:01 - 2016-11-11 08:04 - 00912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll

2016-12-09 18:01 - 2016-11-11 08:04 - 00715264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll

2016-12-09 18:01 - 2016-11-11 08:04 - 00358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll

2016-12-09 18:01 - 2016-11-11 08:03 - 02484736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll

2016-12-09 18:01 - 2016-11-11 08:03 - 02256384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2016-12-09 18:01 - 2016-11-11 08:03 - 01576448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll

2016-12-09 18:01 - 2016-11-11 08:03 - 01556480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll

2016-12-09 18:01 - 2016-11-11 08:03 - 00760832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll

2016-12-09 18:01 - 2016-11-11 08:03 - 00565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2016-12-09 18:01 - 2016-11-11 08:02 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll

2016-12-09 18:01 - 2016-11-11 08:01 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2016-12-09 18:01 - 2016-11-11 07:40 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2016-12-09 18:00 - 2016-11-11 11:08 - 00142176 _____ (Microsoft Corporation) C:\WINDOWS\system32\migisol.dll

2016-12-09 18:00 - 2016-11-11 11:01 - 02189152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2016-12-09 18:00 - 2016-11-11 11:01 - 01738048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll

2016-12-09 18:00 - 2016-11-11 11:01 - 00658264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2016-12-09 18:00 - 2016-11-11 11:01 - 00401760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2016-12-09 18:00 - 2016-11-11 11:00 - 00223584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2016-12-09 18:00 - 2016-11-11 10:59 - 00433504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2016-12-09 18:00 - 2016-11-11 10:56 - 04673304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2016-12-09 18:00 - 2016-11-11 10:56 - 00187520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudStorageWizard.exe

2016-12-09 18:00 - 2016-11-11 10:56 - 00126568 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfaudiocnv.dll

2016-12-09 18:00 - 2016-11-11 10:51 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2016-12-09 18:00 - 2016-11-11 10:31 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2016-12-09 18:00 - 2016-11-11 10:28 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe

2016-12-09 18:00 - 2016-11-11 10:28 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CbtBackgroundManagerPolicy.dll

2016-12-09 18:00 - 2016-11-11 10:27 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe

2016-12-09 18:00 - 2016-11-11 10:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe

2016-12-09 18:00 - 2016-11-11 10:25 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll

2016-12-09 18:00 - 2016-11-11 10:25 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll

2016-12-09 18:00 - 2016-11-11 10:24 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2016-12-09 18:00 - 2016-11-11 10:24 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sendmail.dll

2016-12-09 18:00 - 2016-11-11 10:23 - 00567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll

2016-12-09 18:00 - 2016-11-11 10:23 - 00380928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll

2016-12-09 18:00 - 2016-11-11 10:22 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll

2016-12-09 18:00 - 2016-11-11 10:22 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll

2016-12-09 18:00 - 2016-11-11 10:21 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2016-12-09 18:00 - 2016-11-11 10:21 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll

2016-12-09 18:00 - 2016-11-11 10:21 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll

2016-12-09 18:00 - 2016-11-11 10:20 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2016-12-09 18:00 - 2016-11-11 10:20 - 00590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll

2016-12-09 18:00 - 2016-11-11 10:20 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll

2016-12-09 18:00 - 2016-11-11 10:20 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll

2016-12-09 18:00 - 2016-11-11 10:20 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll

2016-12-09 18:00 - 2016-11-11 10:20 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupugc.exe

2016-12-09 18:00 - 2016-11-11 10:20 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll

2016-12-09 18:00 - 2016-11-11 10:19 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2016-12-09 18:00 - 2016-11-11 10:19 - 00495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataSenseHandlers.dll

2016-12-09 18:00 - 2016-11-11 10:19 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll

2016-12-09 18:00 - 2016-11-11 10:19 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2016-12-09 18:00 - 2016-11-11 10:19 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll

2016-12-09 18:00 - 2016-11-11 10:18 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll

2016-12-09 18:00 - 2016-11-11 10:17 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll

2016-12-09 18:00 - 2016-11-11 10:16 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll

2016-12-09 18:00 - 2016-11-11 10:16 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll

2016-12-09 18:00 - 2016-11-11 10:15 - 00282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys

2016-12-09 18:00 - 2016-11-11 10:15 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe

2016-12-09 18:00 - 2016-11-11 10:14 - 07654400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll

2016-12-09 18:00 - 2016-11-11 10:14 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppnp.dll

2016-12-09 18:00 - 2016-11-11 10:13 - 07812096 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll

2016-12-09 18:00 - 2016-11-11 10:12 - 00870912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll

2016-12-09 18:00 - 2016-11-11 10:11 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2016-12-09 18:00 - 2016-11-11 10:11 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll

2016-12-09 18:00 - 2016-11-11 10:11 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpoext.dll

2016-12-09 18:00 - 2016-11-11 10:10 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll

2016-12-09 18:00 - 2016-11-11 10:09 - 00164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll

2016-12-09 18:00 - 2016-11-11 10:08 - 08127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2016-12-09 18:00 - 2016-11-11 10:07 - 03441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll

2016-12-09 18:00 - 2016-11-11 10:07 - 02953216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll

2016-12-09 18:00 - 2016-11-11 10:07 - 01691136 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe

2016-12-09 18:00 - 2016-11-11 10:07 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll

2016-12-09 18:00 - 2016-11-11 10:07 - 00779776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscui.dll

2016-12-09 18:00 - 2016-11-11 10:06 - 03400192 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll

2016-12-09 18:00 - 2016-11-11 10:05 - 01779712 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2016-12-09 18:00 - 2016-11-11 10:05 - 01031680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll

2016-12-09 18:00 - 2016-11-11 10:04 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe

2016-12-09 18:00 - 2016-11-11 10:04 - 04746752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2016-12-09 18:00 - 2016-11-11 10:04 - 02611200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll

2016-12-09 18:00 - 2016-11-11 10:04 - 02317312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2016-12-09 18:00 - 2016-11-11 10:04 - 01709056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll

2016-12-09 18:00 - 2016-11-11 10:04 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll

2016-12-09 18:00 - 2016-11-11 10:03 - 02669056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2016-12-09 18:00 - 2016-11-11 10:03 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2016-12-09 18:00 - 2016-11-11 10:03 - 00905216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll

2016-12-09 18:00 - 2016-11-11 10:03 - 00632320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2016-12-09 18:00 - 2016-11-11 10:02 - 00936448 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll

2016-12-09 18:00 - 2016-11-11 10:02 - 00730112 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2016-12-09 18:00 - 2016-11-11 09:01 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2016-12-09 18:00 - 2016-11-11 09:01 - 01969912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll

2016-12-09 18:00 - 2016-11-11 09:01 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll

2016-12-09 18:00 - 2016-11-11 08:54 - 00122208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll

2016-12-09 18:00 - 2016-11-11 08:47 - 01430720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll

2016-12-09 18:00 - 2016-11-11 08:47 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll

2016-12-09 18:00 - 2016-11-11 08:42 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2016-12-09 18:00 - 2016-11-11 08:42 - 00959112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll

2016-12-09 18:00 - 2016-11-11 08:42 - 00374448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll

2016-12-09 18:00 - 2016-11-11 08:27 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetCfgNotifyObjectHost.exe

2016-12-09 18:00 - 2016-11-11 08:26 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe

2016-12-09 18:00 - 2016-11-11 08:21 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe

2016-12-09 18:00 - 2016-11-11 08:20 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2016-12-09 18:00 - 2016-11-11 08:20 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll

2016-12-09 18:00 - 2016-11-11 08:20 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2016-12-09 18:00 - 2016-11-11 08:20 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll

2016-12-09 18:00 - 2016-11-11 08:20 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe

2016-12-09 18:00 - 2016-11-11 08:19 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll

2016-12-09 18:00 - 2016-11-11 08:19 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupugc.exe

2016-12-09 18:00 - 2016-11-11 08:18 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl

2016-12-09 18:00 - 2016-11-11 08:18 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll

2016-12-09 18:00 - 2016-11-11 08:17 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll

2016-12-09 18:00 - 2016-11-11 08:16 - 19415552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2016-12-09 18:00 - 2016-11-11 08:16 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll

2016-12-09 18:00 - 2016-11-11 08:16 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll

2016-12-09 18:00 - 2016-11-11 08:14 - 19415552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2016-12-09 18:00 - 2016-11-11 08:12 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcuiu.dll

2016-12-09 18:00 - 2016-11-11 08:09 - 03196416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll

2016-12-09 18:00 - 2016-11-11 08:06 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2016-12-09 18:00 - 2016-11-11 08:06 - 00807424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll

2016-12-09 18:00 - 2016-11-11 08:05 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2016-12-09 18:00 - 2016-11-11 08:04 - 00873472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2016-12-09 18:00 - 2016-11-11 08:03 - 00772608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll

2016-12-09 18:00 - 2016-11-11 08:03 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll

2016-12-09 17:51 - 2016-12-09 17:55 - 00087750 _____ C:\TDSSKiller.3.1.0.12_09.12.2016_17.51.29_log.txt

2016-12-09 17:47 - 2016-12-09 17:51 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Norman\Desktop\tdsskiller.exe

2016-12-09 17:08 - 2016-12-09 17:46 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2016-12-09 17:08 - 2016-12-09 17:08 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2016-12-09 17:06 - 2016-12-09 17:49 - 00000000 ____D C:\Users\Norman\Desktop\mbar

2016-12-09 17:06 - 2016-12-09 17:06 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2016-12-09 17:04 - 2016-12-09 17:05 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Norman\Desktop\mbar-1.09.3.1001.exe

2016-12-09 16:09 - 2016-12-09 16:15 - 00067912 _____ C:\Users\Norman\Downloads\Addition2.txt

2016-12-09 10:41 - 2016-12-09 10:41 - 00000000 ____D C:\Users\Norman\Downloads\FRST-OlderVersion

2016-12-08 17:58 - 2016-12-08 17:59 - 38791360 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (3).zip

2016-12-08 17:56 - 2016-12-08 17:57 - 27175600 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (2).zip

2016-12-08 17:29 - 2016-12-08 17:29 - 32849489 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2.zip

2016-12-08 17:29 - 2016-12-08 17:29 - 16045741 _____ C:\Users\Norman\Downloads\dimension_programmer_2.2 (1).zip

2016-12-05 21:34 - 2016-12-09 10:50 - 00065745 _____ C:\Users\Norman\Downloads\Addition1.txt

2016-12-05 21:31 - 2016-12-10 22:10 - 00000000 ____D C:\FRST

2016-12-05 21:31 - 2016-12-09 16:15 - 00056734 _____ C:\Users\Norman\Downloads\FRST2.txt

2016-12-05 21:31 - 2016-12-09 10:50 - 00056760 _____ C:\Users\Norman\Downloads\FRST1.txt

2016-12-05 21:29 - 2016-12-09 10:41 - 02420224 _____ (Farbar) C:\Users\Norman\Downloads\FRST64.exe

2016-12-04 23:17 - 2016-12-05 20:46 - 00011172 _____ C:\Users\Norman\Desktop\focal anschliessen.xlsx

2016-12-04 01:37 - 2016-12-10 21:43 - 00000624 _____ C:\Users\Norman\Desktop\JRT.txt

2016-12-04 01:31 - 2016-12-04 01:31 - 01631928 _____ (Malwarebytes) C:\Users\Norman\Downloads\JRT.exe

2016-11-27 22:30 - 2016-11-27 22:30 - 00014743 _____ C:\Users\Norman\Desktop\Unitymedia Retourenmarke.pdf

2016-11-17 20:08 - 2016-12-10 22:07 - 00000000 ____D C:\Users\Norman\AppData\LocalLow\Mozilla

2016-11-13 00:19 - 2016-11-13 00:19 - 04756984 _____ (Softperfect ) C:\Users\Norman\Downloads\networx_setup.exe

2016-11-12 23:40 - 2016-11-13 00:09 - 07353936 _____ (Lucom GmbH) C:\Users\Norman\Downloads\FFWFiller3.4.1_build106_Setup.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-12-10 22:00 - 2016-09-21 21:48 - 00000000 ____D C:\WINDOWS\system32\SleepStudy

2016-12-10 21:54 - 2016-05-04 19:43 - 00000000 ____D C:\Users\Norman\AppData\Local\CrashDumps

2016-12-10 21:49 - 2016-09-21 22:49 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2016-12-10 21:49 - 2016-09-21 21:59 - 00000000 ____D C:\Users\Norman

2016-12-10 21:49 - 2016-09-21 21:52 - 00000000 ____D C:\ProgramData\NVIDIA

2016-12-10 21:48 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI

2016-12-10 21:32 - 2016-07-16 23:51 - 00754454 _____ C:\WINDOWS\system32\perfh007.dat

2016-12-10 21:32 - 2016-07-16 23:51 - 00160218 _____ C:\WINDOWS\system32\perfc007.dat

2016-12-10 21:32 - 2015-07-30 21:49 - 01939258 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2016-12-10 21:27 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF

2016-12-10 21:27 - 2013-01-27 22:59 - 00000000 __RHD C:\Users\Public\AccountPictures

2016-12-10 21:25 - 2016-09-21 21:48 - 05003872 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe

2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe

2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences

2016-12-10 21:23 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\bcastdvr

2016-12-10 21:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism

2016-12-10 21:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Sysprep

2016-12-10 21:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\system32\Dism

2016-12-10 21:23 - 2016-07-16 07:04 - 00000000 ____D C:\WINDOWS\servicing

2016-12-10 21:20 - 2016-10-31 22:30 - 00000000 ____D C:\AdwCleaner

2016-12-10 21:20 - 2015-07-31 02:00 - 00000008 __RSH C:\ProgramData\ntuser.pol

2016-12-10 16:27 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness

2016-12-09 18:15 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp

2016-12-09 16:55 - 2013-08-10 11:39 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-09 16:50 - 2012-10-17 12:46 - 00000000 ____D C:\ProgramData\Avira

2016-12-09 16:47 - 2011-09-22 22:25 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2016-12-09 16:35 - 2012-10-17 12:53 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Avira

2016-12-09 16:24 - 2016-07-16 12:42 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2016-12-09 16:05 - 2016-10-28 12:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2016-12-09 15:57 - 2011-04-09 19:49 - 00000000 ____D C:\ProgramData\Adobe

2016-12-09 15:56 - 2011-04-13 17:55 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Adobe

2016-12-09 15:55 - 2011-04-09 19:49 - 00000000 ____D C:\Program Files (x86)\Adobe

2016-12-09 15:53 - 2011-04-13 22:06 - 00000000 ____D C:\Program Files\Common Files\Adobe

2016-12-09 15:53 - 2011-04-13 21:35 - 00000000 ____D C:\Users\Norman\AppData\Local\Adobe

2016-12-09 13:42 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps

2016-12-08 17:13 - 2016-05-16 16:00 - 00000000 ____D C:\Users\Norman\AppData\Local\Spotify

2016-12-08 17:13 - 2016-05-16 15:59 - 00000000 ____D C:\Users\Norman\AppData\Roaming\Spotify

2016-12-05 21:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\appcompat

2016-12-05 21:01 - 2016-10-31 22:26 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit

2016-12-04 23:18 - 2016-09-21 22:46 - 00000000 ___DC C:\WINDOWS\Panther

2016-12-04 22:08 - 2016-11-02 19:56 - 00092344 ____H (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCMON23.SYS

2016-12-04 01:34 - 2013-02-03 15:37 - 00000000 ____D C:\ProgramData\IObit

2016-12-04 01:08 - 2016-10-24 18:53 - 00000000 ____D C:\Program Files\Mozilla Firefox

2016-11-30 23:17 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF

2016-11-22 22:35 - 2016-09-24 09:51 - 00018915 _____ C:\WINDOWS\SysWOW64\Defrag.debuglog

2016-11-22 22:34 - 2016-09-25 19:26 - 00008026 _____ C:\WINDOWS\SysWOW64\MyDefrag.dat

2016-11-22 22:31 - 2016-09-21 21:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation

2016-11-22 22:31 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\MsDtc

2016-11-22 22:31 - 2014-12-29 00:00 - 00000000 ____D C:\NVIDIA

2016-11-22 22:31 - 2014-12-28 13:17 - 00000000 ____D C:\Log

2016-11-22 22:31 - 2013-11-08 01:23 - 00000000 ____D C:\Intel

2016-11-22 22:31 - 2011-10-17 19:33 - 00000000 ____D C:\Users\Norman\AppData\Local\Rohos

2016-11-22 22:31 - 2011-04-09 21:58 - 00000000 ____D C:\dell

2016-11-22 00:39 - 2016-09-10 00:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software

2016-11-20 19:30 - 2014-11-25 23:33 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2016-11-19 11:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed

2016-11-19 11:29 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed

2016-11-17 01:43 - 2016-10-28 11:41 - 01368548 _____ C:\WINDOWS\SysWOW64\winapp2_disk.csv

2016-11-13 00:11 - 2011-06-26 10:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lucom

2016-11-12 14:49 - 2011-04-17 14:51 - 00000000 ____D C:\Users\Norman\AppData\Local\Google

2016-11-12 01:29 - 2014-11-02 17:01 - 00002266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2011-05-01 12:25 - 2011-05-01 12:25 - 0000132 _____ () C:\Users\Norman\AppData\Roaming\Adobe BMP Format CS5 Prefs

2011-05-01 12:28 - 2011-05-01 12:28 - 0000132 _____ () C:\Users\Norman\AppData\Roaming\Adobe PNG Format CS5 Prefs

2013-05-20 16:50 - 2013-05-20 16:50 - 0000005 _____ () C:\Users\Norman\AppData\Roaming\BCT-TTL.DAT

2012-01-26 20:38 - 2012-01-26 20:38 - 0076070 _____ () C:\Users\Norman\AppData\Roaming\Photo.jpg

2013-07-27 12:51 - 2013-07-31 10:51 - 0000076 _____ () C:\Users\Norman\AppData\Roaming\WB.CFG

2013-06-16 23:51 - 2013-08-09 23:51 - 0000005 _____ () C:\Users\Norman\AppData\Roaming\WBPU-TTL.DAT

2015-03-21 11:41 - 2015-03-21 11:41 - 0000038 ___SH () C:\Users\Norman\AppData\Local\69ff07055291669bb2b218.72821112

2012-12-16 00:38 - 2012-12-16 11:07 - 0001456 _____ () C:\Users\Norman\AppData\Local\Adobe Für Web speichern 12.0 Prefs

2011-08-27 10:36 - 2011-08-27 10:36 - 0002403 _____ () C:\Users\Norman\AppData\Local\FastClean.20110827.113609.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0002403 _____ () C:\Users\Norman\AppData\Local\FastClean.20110930.213107.txt

2011-08-26 23:58 - 2011-08-26 23:59 - 0024474 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.005843.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0002220 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.113710.txt

2011-08-27 10:37 - 2011-08-27 10:38 - 0025436 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110827.113735.txt

2011-09-30 20:31 - 2011-09-30 20:32 - 0002408 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110930.213154.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0026418 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20110930.213219.txt

2012-02-11 20:08 - 2012-02-11 20:08 - 0002532 _____ () C:\Users\Norman\AppData\Local\IWDAudHelper.20120211.200800.txt

2011-04-25 15:31 - 2011-04-25 15:31 - 0001500 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163125.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001522 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163232.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001265 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163236.txt

2011-04-25 15:32 - 2011-04-25 15:32 - 0001265 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110425.163258.txt

2011-08-26 23:51 - 2011-08-26 23:51 - 0001567 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005113.txt

2011-08-26 23:57 - 2011-08-26 23:57 - 0001587 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005706.txt

2011-08-26 23:57 - 2011-08-26 23:57 - 0000631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005729.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0000673 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005804.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001565 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005806.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001283 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005814.txt

2011-08-26 23:58 - 2011-08-26 23:58 - 0001229 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005831.txt

2011-08-26 23:59 - 2011-08-26 23:59 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.005905.txt

2011-08-27 10:25 - 2011-08-27 10:25 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.112544.txt

2011-08-27 10:33 - 2011-08-27 10:33 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113354.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0001559 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113615.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0000844 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113630.txt

2011-08-27 10:36 - 2011-08-27 10:36 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113657.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001556 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113701.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113707.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113709.txt

2011-08-27 10:37 - 2011-08-27 10:37 - 0001227 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113728.txt

2011-08-27 10:38 - 2011-08-27 10:38 - 0001247 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.113802.txt

2011-08-27 10:41 - 2011-08-27 10:41 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.114142.txt

2011-08-27 13:28 - 2011-08-27 13:28 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.142850.txt

2011-08-27 13:32 - 2011-08-27 13:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143221.txt

2011-08-27 13:33 - 2011-08-27 13:33 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143328.txt

2011-08-27 13:35 - 2011-08-27 13:35 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143504.txt

2011-08-27 13:36 - 2011-08-27 13:36 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.143643.txt

2011-08-27 13:41 - 2011-08-27 13:41 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144114.txt

2011-08-27 13:41 - 2011-08-27 13:41 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144131.txt

2011-08-27 13:44 - 2011-08-27 13:44 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.144447.txt

2011-08-27 13:54 - 2011-08-27 13:54 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.145439.txt

2011-08-27 21:23 - 2011-08-27 21:23 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.222325.txt

2011-08-27 21:35 - 2011-08-27 21:35 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.223514.txt

2011-08-27 21:49 - 2011-08-27 21:49 - 0001548 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110827.224955.txt

2011-08-28 08:25 - 2011-08-28 08:25 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110828.092549.txt

2011-08-28 22:42 - 2011-08-28 22:42 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110828.234241.txt

2011-08-30 22:28 - 2011-08-30 22:28 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110830.232851.txt

2011-08-30 22:36 - 2011-08-30 22:36 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110830.233651.txt

2011-08-31 18:45 - 2011-08-31 18:45 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110831.194523.txt

2011-09-04 19:48 - 2011-09-04 19:48 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110904.204837.txt

2011-09-04 19:51 - 2011-09-04 19:51 - 0001548 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110904.205152.txt

2011-09-04 23:45 - 2011-09-04 23:45 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110905.004523.txt

2011-09-06 20:46 - 2011-09-06 20:46 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110906.214631.txt

2011-09-06 21:02 - 2011-09-06 21:02 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110906.220235.txt

2011-09-07 18:55 - 2011-09-07 18:55 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110907.195552.txt

2011-09-08 17:57 - 2011-09-08 17:57 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110908.185702.txt

2011-09-09 19:07 - 2011-09-09 19:07 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110909.200710.txt

2011-09-09 19:11 - 2011-09-09 19:11 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110909.201118.txt

2011-09-10 18:22 - 2011-09-10 18:22 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110910.192247.txt

2011-09-12 18:38 - 2011-09-12 18:39 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.193859.txt

2011-09-12 19:33 - 2011-09-12 19:33 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.203313.txt

2011-09-12 19:36 - 2011-09-12 19:36 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.203611.txt

2011-09-12 19:42 - 2011-09-12 19:42 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.204240.txt

2011-09-12 20:00 - 2011-09-12 20:00 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.210050.txt

2011-09-12 20:10 - 2011-09-12 20:10 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110912.211009.txt

2011-09-13 18:41 - 2011-09-13 18:41 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110913.194154.txt

2011-09-16 13:19 - 2011-09-16 13:19 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.141913.txt

2011-09-16 13:31 - 2011-09-16 13:31 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.143126.txt

2011-09-16 18:06 - 2011-09-16 18:06 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110916.190621.txt

2011-09-19 19:06 - 2011-09-19 19:06 - 0001526 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110919.200637.txt

2011-09-19 19:08 - 2011-09-19 19:08 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110919.200812.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195304.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195316.txt

2011-09-20 18:53 - 2011-09-20 18:53 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110920.195347.txt

2011-09-22 19:57 - 2011-09-22 19:57 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.205748.txt

2011-09-22 19:59 - 2011-09-22 19:59 - 0001547 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.205918.txt

2011-09-22 20:02 - 2011-09-22 20:02 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.210246.txt

2011-09-22 22:32 - 2011-09-22 22:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110922.233237.txt

2011-09-23 19:30 - 2011-09-23 19:30 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110923.203026.txt

2011-09-23 19:38 - 2011-09-23 19:39 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110923.203858.txt

2011-09-25 16:30 - 2011-09-25 16:30 - 0001524 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110925.173029.txt

2011-09-25 16:32 - 2011-09-25 16:32 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110925.173257.txt

2011-09-30 20:20 - 2011-09-30 20:20 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.212009.txt

2011-09-30 20:28 - 2011-09-30 20:28 - 0001549 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.212829.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001691 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213116.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000775 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213137.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213144.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001663 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213146.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0000671 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213149.txt

2011-09-30 20:31 - 2011-09-30 20:31 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213154.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0001245 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213211.txt

2011-09-30 20:32 - 2011-09-30 20:32 - 0001229 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213248.txt

2011-09-30 20:35 - 2011-09-30 20:35 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213545.txt

2011-09-30 20:37 - 2011-09-30 20:37 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20110930.213751.txt

2011-10-03 23:40 - 2011-10-03 23:40 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111004.004009.txt

2011-10-16 17:12 - 2011-10-16 17:12 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111016.181247.txt

2011-10-16 17:31 - 2011-10-16 17:31 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111016.183111.txt

2011-10-21 21:09 - 2011-10-21 21:09 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111021.220926.txt

2011-10-24 19:03 - 2011-10-24 19:03 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111024.200357.txt

2011-10-24 19:05 - 2011-10-24 19:05 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111024.200500.txt

2011-10-24 23:43 - 2011-10-24 23:43 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111025.004352.txt

2011-10-30 12:45 - 2011-10-30 12:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.124516.txt

2011-10-30 12:46 - 2011-10-30 12:46 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.124632.txt

2011-10-30 17:34 - 2011-10-30 17:34 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.173449.txt

2011-10-30 19:45 - 2011-10-30 19:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111030.194515.txt

2011-11-01 20:21 - 2011-11-01 20:22 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111101.202157.txt

2011-11-01 20:29 - 2011-11-01 20:29 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111101.202932.txt

2011-11-04 20:38 - 2011-11-04 20:38 - 0001654 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111104.203817.txt

2011-11-04 20:41 - 2011-11-04 20:41 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111104.204113.txt

2011-11-05 22:43 - 2011-11-05 22:43 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111105.224326.txt

2011-11-06 17:39 - 2011-11-06 17:39 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.173943.txt

2011-11-06 19:45 - 2011-11-06 19:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.194515.txt

2011-11-06 23:10 - 2011-11-06 23:10 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.231034.txt

2011-11-06 23:11 - 2011-11-06 23:11 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111106.231132.txt

2011-11-09 23:16 - 2011-11-09 23:16 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111109.231646.txt

2011-11-11 20:48 - 2011-11-11 20:48 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111111.204845.txt

2011-11-11 20:51 - 2011-11-11 20:51 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111111.205142.txt

2011-11-13 21:45 - 2011-11-13 21:45 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214545.txt

2011-11-13 21:46 - 2011-11-13 21:46 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214631.txt

2011-11-13 21:49 - 2011-11-13 21:49 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.214912.txt

2011-11-13 22:09 - 2011-11-13 22:09 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111113.220915.txt

2011-11-15 21:44 - 2011-11-15 21:44 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111115.214441.txt

2011-11-15 22:05 - 2011-11-15 22:05 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111115.220500.txt

2011-11-20 18:14 - 2011-11-20 18:14 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111120.181429.txt

2011-11-20 18:15 - 2011-11-20 18:15 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111120.181514.txt

2011-11-26 08:35 - 2011-11-26 08:35 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111126.083554.txt

2011-11-27 17:15 - 2011-11-27 17:15 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.171555.txt

2011-11-27 17:16 - 2011-11-27 17:16 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.171657.txt

2011-11-27 17:20 - 2011-11-27 17:20 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111127.172036.txt

2011-11-28 20:48 - 2011-11-28 20:48 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111128.204808.txt

2011-12-04 18:39 - 2011-12-04 18:39 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111204.183910.txt

2011-12-04 18:49 - 2011-12-04 18:49 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111204.184903.txt

2011-12-06 09:46 - 2011-12-06 09:46 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.094601.txt

2011-12-06 09:47 - 2011-12-06 09:47 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.094714.txt

2011-12-06 17:00 - 2011-12-06 17:00 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.170007.txt

2011-12-06 17:00 - 2011-12-06 17:00 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111206.170054.txt

2011-12-07 19:43 - 2011-12-07 19:43 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111207.194355.txt

2011-12-07 19:46 - 2011-12-07 19:46 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111207.194638.txt

2011-12-18 19:24 - 2011-12-18 19:24 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111218.192455.txt

2011-12-18 19:27 - 2011-12-18 19:27 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111218.192711.txt

2011-12-23 21:02 - 2011-12-23 21:02 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111223.210230.txt

2011-12-23 21:03 - 2011-12-23 21:04 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111223.210359.txt

2011-12-26 21:48 - 2011-12-26 21:48 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.214850.txt

2011-12-26 21:52 - 2011-12-26 21:52 - 0001631 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215206.txt

2011-12-26 21:53 - 2011-12-26 21:53 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215304.txt

2011-12-26 21:57 - 2011-12-26 21:57 - 0001656 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215720.txt

2011-12-26 21:58 - 2011-12-26 21:58 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111226.215853.txt

2011-12-27 10:41 - 2011-12-27 10:41 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111227.104144.txt

2011-12-27 10:42 - 2011-12-27 10:42 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111227.104218.txt

2011-12-30 21:43 - 2011-12-30 21:43 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111230.214320.txt

2011-12-30 21:45 - 2011-12-30 21:45 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20111230.214521.txt

2012-01-01 20:51 - 2012-01-01 20:51 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120101.205109.txt

2012-01-02 22:21 - 2012-01-02 22:21 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120102.222141.txt

2012-01-07 21:55 - 2012-01-07 21:55 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215502.txt

2012-01-07 21:55 - 2012-01-07 21:55 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215551.txt

2012-01-07 21:59 - 2012-01-07 22:00 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.215959.txt

2012-01-07 22:02 - 2012-01-07 22:02 - 0001633 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.220201.txt

2012-01-07 22:04 - 2012-01-07 22:04 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120107.220434.txt

2012-01-09 21:54 - 2012-01-09 21:54 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120109.215418.txt

2012-01-09 21:57 - 2012-01-09 21:58 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120109.215758.txt

2012-01-20 20:53 - 2012-01-20 20:53 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120120.205322.txt

2012-01-21 21:58 - 2012-01-21 21:58 - 0001655 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120121.215816.txt

2012-02-11 19:51 - 2012-02-11 19:51 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195109.txt

2012-02-11 19:53 - 2012-02-11 19:53 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195320.txt

2012-02-11 19:54 - 2012-02-11 19:54 - 0001657 _____ () C:\Users\Norman\AppData\Local\PDLSetup.20120211.195456.txt

2011-08-14 14:00 - 2016-10-31 21:54 - 0007615 _____ () C:\Users\Norman\AppData\Local\Resmon.ResmonCfg

2012-09-03 19:04 - 2012-09-03 19:04 - 0000437 _____ () C:\Users\Norman\AppData\Local\WiDiLog.20120903.200455.txt

2012-02-11 20:06 - 2012-02-11 20:08 - 0035304 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120211.200659.txt

2012-07-14 19:32 - 2012-07-14 19:34 - 0036810 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120714.203253.txt

2012-08-01 20:11 - 2012-08-01 20:11 - 0004356 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120801.211142.txt

2012-08-01 20:15 - 2012-08-01 20:15 - 0004300 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120801.211509.txt

2012-08-10 19:13 - 2012-08-10 19:13 - 0004254 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120810.201324.txt

2012-09-03 19:02 - 2012-09-03 19:05 - 0068266 _____ () C:\Users\Norman\AppData\Local\WiDiSetupLog.20120903.200248.txt

2011-07-27 23:59 - 2011-07-27 23:59 - 0000000 _____ () C:\Users\Norman\AppData\Local\{5ED86D1B-2D7E-4120-BB20-3AEC8A26F554}

2011-07-30 04:45 - 2011-07-30 04:45 - 0000000 _____ () C:\Users\Norman\AppData\Local\{60B26B5E-87FD-42A4-83DC-4530F1960E8F}

2011-05-02 18:10 - 2011-05-02 18:10 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8A1F6FEE-5E6C-4272-9022-CB830817BA15}

2011-07-23 08:52 - 2011-07-23 08:52 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8A6B9F28-8DC5-4030-ABD2-70F4FD63FFE4}

2011-07-25 18:17 - 2011-07-25 18:17 - 0000000 _____ () C:\Users\Norman\AppData\Local\{8EFAA6EA-5166-4E13-99E4-CB1B5DF8D35F}

2011-07-29 17:46 - 2011-07-29 17:46 - 0000000 _____ () C:\Users\Norman\AppData\Local\{C8C88F15-814A-4E08-8403-ACDF6E87EDC0}

2011-08-20 10:15 - 2014-03-26 19:34 - 0000125 ___SH () C:\ProgramData\.zreglib
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\Users\Public\AlexaNSISPlugin.8636.dll
 
 

Einige Dateien in TEMP:

====================

C:\Users\Norman\AppData\Local\Temp\libeay32.dll

C:\Users\Norman\AppData\Local\Temp\msvcr120.dll

C:\Users\Norman\AppData\Local\Temp\sqlite3.dll
 
 

Einige mit null Byte Größe Dateien/Ordner:

==========================

C:\Windows\System32\Drivers\iqvw64e.sys
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2016-12-04 23:03
 

==================== Ende von FRST.txt ============================

--- --- ---

querotudo

10.12.2016 22:19

Addition.txt

Code:

ZusÃ¤tzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016

durchgefÃ¼hrt von Norman (10-12-2016 22:12:20)

Gestartet von C:\Users\Norman\Downloads

Windows 10 Pro Version 1607 (X64) (2016-09-21 21:54:50)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Admin (S-1-5-21-143339661-846541388-530592055-1004 - Administrator - Enabled) => C:\Users\Admin

Administrator (S-1-5-21-143339661-846541388-530592055-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-143339661-846541388-530592055-503 - Limited - Disabled)

Gast (S-1-5-21-143339661-846541388-530592055-501 - Limited - Disabled)

Norman (S-1-5-21-143339661-846541388-530592055-1002 - Administrator - Enabled) => C:\Users\Norman
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" kÃ¶nnen in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)

Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)

Adobe Photoshop Lightroom 5.7 64-bit (HKLM\...\{1B77B02E-17E4-4B6D-B8A1-74B29AF3D8DD}) (Version: 5.7.0 - Adobe Systems Incorporated)

Adobe Premiere Elements 7.0 (HKLM-x32\...\PremElem70) (Version: 7.0 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.5.146 - Adobe Systems, Inc.)

Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)

Ansel (Version: 372.90 - NVIDIA Corporation) Hidden

Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)

Application Verifier (x64) (HKLM\...\{361A49FA-59B3-49FB-8C3E-08AF3EA5791A}) (Version: 4.0.917 - Microsoft Corporation)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data (HKLM-x32\...\Canon Easy-PhotoPrint Pro - Pro9000 series Extention Data) (Version:  - )

Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data (HKLM-x32\...\Canon Easy-PhotoPrint Pro - Pro9500 series Extention Data) (Version:  - )

Canon Easy-PhotoPrint Pro (HKLM-x32\...\Easy-PhotoPrint Pro) (Version:  - )

Canon MG6200 series On-screen Manual (HKLM-x32\...\Canon MG6200 series On-screen Manual) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

CloneDVD2 (HKLM-x32\...\CloneDVD2) (Version: 2.9.3.0 - Elaborate Bytes)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

Debugging Tools for Windows (x64) (HKLM\...\{7F2E5C3B-DBDF-469D-AD8D-F686D3B71176}) (Version: 6.11.1.404 - Microsoft Corporation)

Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)

Dell System Detect - 1  (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\73f463568823ebbe) (Version: 6.6.0.2 - Dell)

Dell VideoStage (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.1.1.1303 - CyberLink Corp.)

Dell VideoStage (x32 Version: 1.1.1.1303 - CyberLink Corp.) Hidden

Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.35 - Creative Technology Ltd)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.22 - DivX, LLC)

EasyBCD 2.2 (HKLM-x32\...\EasyBCD) (Version: 2.2 - NeoSmart Technologies)

Epson Easy Photo Print 2 (HKLM-x32\...\{07AA1C7F-E8CA-4FDC-B975-BC9EBC22B6DE}) (Version: 2.7.0.0 - SEIKO EPSON CORPORATION)

EPSON ET-4550 Series Printer Uninstall (HKLM\...\EPSON ET-4550 Series) (Version:  - SEIKO EPSON Corporation)

Epson Event Manager (HKLM-x32\...\{9F205E94-9E42-4486-A92A-DF3F6CB85444}) (Version: 3.10.0061 - Seiko Epson Corporation)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)

FormsForWebÂ® Filler 3.4.1 (HKLM-x32\...\{3C4DE3A5-B120-4A36-9B61-477D59333BA7}) (Version: 3.4.1 - Lucom GmbH)

Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)

FreeStyle Libre (HKLM-x32\...\FreeStyle Libre 1.0) (Version: 1.0 - Abbott Diabetes Care)

Garmin City Navigator Europe NT 2011.10 (HKLM-x32\...\{74D21920-3B72-494F-9042-8C26E1E99FDC}) (Version: 14.10.0.0 - Garmin Ltd or its subsidiaries)

Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)

Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)

Gigaset QuickSync (HKLM\...\{aef81617-c1c0-495e-83ae-91c94ecc562b}) (Version: 8.5.0874.3 - Gigaset Communications GmbH)

GmapTool 0.8.11 (HKLM-x32\...\{1873789F-59D5-4002-8A2F-60A827B78F98}_is1) (Version:  - AP)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)

Google Chrome (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Google Chrome) (Version: 13.0.782.215 - Google Inc.)

Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden

GTS  (HKLM-x32\...\{2E6AA783-D4A9-4AD3-9994-B64D923738D7}) (Version: 1.00.17 - vwd AG)

HiDrive (HKLM-x32\...\{88D57A8B-DF01-4C4D-8EF4-289C08BD2F96}) (Version: 4.2.1.0 - STRATO AG)

Image Data Converter (HKLM-x32\...\{87998E4E-6D9C-411B-AAE9-B8523FFE357D}) (Version: 4.2.02.10112 - Sony Corporation)

Intel Driver Update Utility (HKLM-x32\...\{ca4bc3a8-b99c-4416-90d8-351a8ceab458}) (Version: 2.2.0.2 - Intel)

Intel WiDi Media Share (x32 Version: 1.1.0.0 - Intel Corporation) Hidden

Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)

Intel(R) Driver Update Utility 2.2 (x32 Version: 2.2.0.1 - Intel) Hidden

Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)

Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{302600C1-6BDF-4FD1-1309-148929CC1385}) (Version: 3.1.1309.0390 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Intel(R) WiDi (HKLM\...\{83A1A885-9BE7-4B1A-A3F9-88E81890173F}) (Version: 4.3.4.0 - Intel Corporation)

IntelÂ® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)

IntelÂ® WiDi Media Share (HKLM-x32\...\{32d14b1d-18fa-48e7-867d-93b7a72c816a}) (Version: 1.1.0.0 - Intel Corporation)

IntelÂ® WiDi Remote (HKLM-x32\...\{f329f83b-c06f-48ce-99eb-f324e2f94b01}) (Version: 1.0.0.0 - Intel Corporation)

IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)

iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)

Java 8 Update 102 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180102F0}) (Version: 8.0.1020.14 - Oracle Corporation)

JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.55.0 - JMicron Technology Corp.)

Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

MapTk (MapToolKit) (HKLM-x32\...\{0236FF14-34AF-4D37-BA6C-17567B7A8685}_is1) (Version:  - )

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft Document Explorer 2008 (HKLM-x32\...\Microsoft Document Explorer 2008) (Version:  - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Outlook Hotmail Connector 64-Bit (HKLM\...\{95140000-007A-0407-1000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)

Microsoft Outlook Social Connector Provider for Windows Live Messenger 64-bit (HKLM\...\{95140000-007D-0409-1000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{6F29F195-B11C-3EAD-B883-997BB29DFA17}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{4FFA2088-8317-3B14-93CD-4C699DB37843}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x64 (HKLM\...\{965DF723-5688-359E-84D2-417CAFE644B5}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ Compilers 2008 Standard Edition - enu - x86 (HKLM-x32\...\{44D9A2CB-0692-3180-B5E2-26F4E807D067}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools fÃ¼r Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden

Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)

Mozilla Firefox 50.0 (x64 de) (HKLM\...\Mozilla Firefox 50.0 (x64 de)) (Version: 50.0 - Mozilla)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - SEIKO EPSON Corporation)

MyEpson Portal (x32 Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden

NirSoft WirelessNetView (HKLM-x32\...\NirSoft WirelessNetView) (Version:  - )

NVIDIA 3D Vision Treiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.90 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Paragon Backup and Recoveryâ„¢ 2014 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)

PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.1 - pdfforge)

Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.24 - Dell Inc.)

QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)

Reader for PC (HKLM-x32\...\{D279DFB7-97A3-439D-8BE9-95D8AFA68562}) (Version: 2.4.01.10241 - Sony Corporation)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{91140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUSR_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version:  - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version:  - Microsoft) Hidden

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

SmartShare (HKLM-x32\...\{BAB337AE-DD9E-45C3-BED6-0EE4732AEC60}) (Version: 2.2.1405.1601 - LG Electronics Inc.)

Spotify (HKU\S-1-5-21-143339661-846541388-530592055-1002\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

Synaptics Gesture Suite featuring SYNAPTICS | Scrybe (HKLM-x32\...\{147DFAD8-34C3-4DE1-9FCA-ACEFDE9EF810}) (Version: 1.6.5.17120 - Synaptics Inc.)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.15.2 - Synaptics Incorporated)

System Requirements Lab for Intel (HKLM-x32\...\{C7CA731B-BF9A-46D9-92CF-8A8737AE9240}) (Version: 4.5.13.0 - Husdawg, LLC)

Total Immersion D'Fusion @Home Web Plug-In (HKLM-x32\...\D'Fusion @Home Web Plug-In) (Version:  - Total Immersion)

TRC-Brasil 11.05 2011-05-22 (HKLM-x32\...\Tracksource RoteÃ¡vel Completo - TRC-Brasil_is1) (Version: 11.05 2011-05-22 - Projeto Tracksource Brasil)

Ãœberwachungstool fÃ¼r die IntelÂ® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)

Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)

WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {035A9A4F-B696-49DC-9565-6A36C0EBEF1D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)

Task: {0D78C388-7509-4FE6-A5FB-098175E1545E} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)

Task: {11788F8E-6BA1-45C8-B13A-FA9F2681E4BA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-06] (Google Inc.)

Task: {133555AB-2B60-4BA9-BDAA-F01F3AE03402} - System32\Tasks\{877A3688-B368-4D99-B519-DB656244B393} => pcalua.exe -a "C:\Program Files (x86)\Canon\IJ Manual\Canon MG6200 series\uninstall.exe"

Task: {1A438826-8381-44D6-A6B9-8F489490F86D} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1BE75B25-9E44-4F82-95D6-D79F60FF3247} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1DE85612-34FA-429A-9D31-5CDBC2650323} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {1F9A0589-84B5-42BA-AFDE-228B26EA0EC2} - System32\Tasks\EPSON ET-4550 Series Update {F58BC06F-9519-4B48-B3D9-392DEEA747B9} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {28AF8722-4067-428D-8BE0-E65205185B0B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {31158C7A-66C9-4F5A-93B2-4EFD47974767} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-11-08] (Microsoft Corporation)

Task: {321BC64F-22B4-4376-A69F-320A591125C3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {3517BCB2-F82F-43FF-92CD-65B00301C15E} - \PCDoctorBackgroundMonitorTask -> Keine Datei <==== ACHTUNG

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe

Task: {3D88E051-66CE-4CFC-9371-5E60E0A371C5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {3EEB8463-7733-4D40-8E4F-CBABDC0ACE94} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {4324C4A4-5416-4DA7-9F0B-FDF41833D324} - \SystemToolsDailyTest -> Keine Datei <==== ACHTUNG

Task: {4484C003-4F32-4384-8030-E4C4851E3F59} - System32\Tasks\{8AC66CE9-0E07-4269-869C-86FDAA1E2C04} => pcalua.exe -a C:\Users\Norman\AppData\Local\Apps\2.0\WPX0DM2N.492\KAANJB92.8H0\dell..tion_e30b47f5d4a30e9e_0006.0006_e3e278ac9f13d461\Uninstaller.exe -c uninstall

Task: {44E5FC0B-7C72-45E2-9C56-43CC558E11E3} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {527B5428-05E5-403D-B2D7-755ED2A1DEFB} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {5499FFD0-826B-4096-8C27-30A24297365B} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {54D09165-62A4-46D6-AB2D-84F926E6A64D} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe

Task: {56F78C49-02AC-472B-9AF3-557B49123E26} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22] (Oracle Corporation)

Task: {582170F0-FF9B-400D-AE49-75009B2E6767} - System32\Tasks\EPSON ET-4550 Series Update {8F854212-531C-4F83-90B2-997F22F7FA1F} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {593DE477-5325-4914-BF7E-3448537E41F9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {5D79A697-EFF9-4FD8-B420-18AC0D375505} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)

Task: {632484DB-1288-42DB-B76E-83BEC2218227} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {63A85D7B-C95F-4087-8A09-8082F37632EA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {70F31CE2-B841-4129-99F4-B4823E566B60} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {7C94D902-6042-4C63-9E48-BB6585BFA4E8} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {7FFB4346-F6CE-46BD-B04C-70751983D698} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {81AA9449-0338-4196-AB82-C8EB4802916D} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8E6552C0-1141-45A4-8D28-92FC52F385F1} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {97CDDA5E-013E-4420-A8E9-75A1ECA04D5C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {996AC3FA-FE8C-4877-8FDA-8528B5969542} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {9AE661AD-32D1-4A04-99D0-D58B7CDB48F3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9C3C6ACD-5255-4E03-BD26-7092C6EF74C2} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe

Task: {A85F96BF-E61D-4F05-9957-2F739826DBA2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe

Task: {B499892F-1E79-4D05-BAFD-4E7C12930048} - System32\Tasks\SmartShare => C:\Program Files (x86)\LG Software\LG Smart Share\SmartShareStart.exe [2014-03-13] (LG Electronics Inc.)

Task: {B98F5A2E-3D00-42ED-A557-E79AF9B0BF6C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {BD585239-8EB9-4933-A8E8-B0FA3A35010E} - \PCDEventLauncherTask -> Keine Datei <==== ACHTUNG

Task: {BEE9CE76-88FB-41FB-B94E-36A4B7A35958} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {D2E516C1-237E-465F-8481-60E17010A5DD} - System32\Tasks\{0EE9F46A-89CF-4603-BE10-7B3B15B52B1F} => pcalua.exe -a "C:\Program Files (x86)\test und FINANZtest Archiv CD-Rom 2012\Uninst.exe"

Task: {D5EAEB49-5195-4869-99F4-B092EA0AA9C9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {D7213CF8-8470-44E2-91BF-02A9FF5BFF4C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-19] (Adobe Systems Incorporated)

Task: {DE52E1A7-88F9-4E76-9F05-434F048511DD} - System32\Tasks\EPSON ET-4550 Series Update {9FB6518E-86D9-4A7F-A4EC-B9E4721EE623} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE [2013-11-22] (SEIKO EPSON CORPORATION)

Task: {E518C07C-FA41-4267-BD27-7BCE1EE2293D} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {EB590BBD-5E1D-4B11-AF1E-DFAFD0B000B3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {EFBE991D-2AB8-42F8-BA1D-C936AD834C64} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F6520BE3-B270-482E-B856-0538FBB0FCFC} - System32\Tasks\Moo0 System Monitor 1.76 => C:\Program Files (x86)\Moo0\SystemMonitor 1.76\SystemMonitor.exe

Task: {F6AEB890-1D27-4C31-8B90-99C7563D5E1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {FA00DFF2-F119-4681-A5D5-04C5DDB86DA1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)

Task: {FABBEB4E-6065-4957-8BFD-1BA469C1CCA8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {8F854212-531C-4F83-90B2-997F22F7FA1F}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{8F854212-531C-4F83-90B2-997F22F7FA1F} /F:UpdateWORKGROUP\NORMAN-PC$

Searches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {9FB6518E-86D9-4A7F-A4EC-B9E4721EE623}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{9FB6518E-86D9-4A7F-A4EC-B9E4721EE623} /F:Update WORKGROUP\NORMAN-PC$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\EPSON ET-4550 Series Update {F58BC06F-9519-4B48-B3D9-392DEEA747B9}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSMSE.EXE:/EXE:{F58BC06F-9519-4B48-B3D9-392DEEA747B9} /F:Update WORKGROUP\NORMAN-PC$ÄŠSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== VerknÃ¼pfungen =============================
 

(Die EintrÃ¤ge kÃ¶nnen gelistet werden, um sie zurÃ¼ckzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-12-09 18:01 - 2016-11-11 11:10 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-09-21 21:52 - 2016-09-16 23:54 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2006-12-04 00:26 - 2006-12-04 00:26 - 00022016 _____ () C:\WINDOWS\System32\sugo3l6.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-12-09 18:01 - 2016-11-11 11:10 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll

2016-09-21 23:30 - 2016-09-21 23:30 - 00959168 _____ () C:\Users\Norman\AppData\Local\Microsoft\OneDrive\17.3.6381.0405\amd64\ClientTelemetry.dll

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2016-09-21 22:41 - 2016-09-21 22:41 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll

2016-12-09 18:00 - 2016-11-11 10:23 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll

2016-11-08 22:58 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-08 22:59 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-08 22:58 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll

2016-11-08 22:58 - 2016-11-02 11:15 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll

2016-11-08 22:58 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-08 22:58 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2016-11-17 20:12 - 2016-11-17 20:12 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2016-11-17 20:12 - 2016-11-17 20:12 - 00178688 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2016-11-17 20:12 - 2016-11-17 20:12 - 41609728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.9.261.0_x64__kzf8qxf38zg5c\SkyWrap.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 06673568 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\HiDrive.App.exe

2010-11-29 21:04 - 2010-11-29 21:04 - 00403968 _____ () C:\Program Files\Intel\TurboBoost\de\SignalIslandUi.resources.dll

2016-02-28 13:56 - 2016-01-19 08:16 - 00081408 _____ () C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe

2016-02-28 13:56 - 2016-01-19 08:16 - 00285184 _____ () C:\Program Files (x86)\FreeStyle Libre\FreeStyle Libre\MAS.FreeStyleLibre.exe

2016-10-05 22:21 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-10-05 22:21 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-05-04 19:34 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 01035936 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\CefSharp.Core.dll

2016-10-13 15:31 - 2016-10-13 15:31 - 48943768 _____ () C:\Users\Norman\AppData\Roaming\STRATO\HiDrive\libcef.dll

2015-03-19 19:47 - 2013-12-06 22:06 - 00642016 _____ () C:\Program Files (x86)\LG Software\LG Smart Share\DMS\sqlite3.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1 [104]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== VerknÃ¼pfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurÃ¼ckgesetzt oder entfernt.)
 
 

==================== Internet Explorer VertrauenswÃ¼rdig/EingeschrÃ¤nkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-143339661-846541388-530592055-1002\...\localhost -> localhost
 

==================== Hosts Inhalt: ===============================
 

(Wenn benÃ¶tigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurÃ¼ckzusetzen.)
 

2016-12-09 15:17 - 2016-12-09 15:19 - 00000820 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

127.0.0.1       localhost
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix fÃ¼r diesen Bereich.)
 

HKU\S-1-5-21-143339661-846541388-530592055-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Norman\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\irfanview_wallpaper.bmp

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte EintrÃ¤ge ==
 

MSCONFIG\Services: AdobeARMservice => 2

MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3

MSCONFIG\Services: AERTFilters => 2

MSCONFIG\Services: chip1click => 2

MSCONFIG\Services: SDScannerService => 2

MSCONFIG\Services: SDUpdateService => 2

MSCONFIG\Services: SDWSCService => 2

MSCONFIG\startupreg: "C: => 

MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe

HKLM\...\StartupApproved\StartupFolder: => "Scrybe.lnk"

HKLM\...\StartupApproved\Run: => "CanonMyPrinter"

HKLM\...\StartupApproved\Run: => "HotKeysCmds"

HKLM\...\StartupApproved\Run: => "BCSSync"

HKLM\...\StartupApproved\Run: => "BrowserChoice"

HKLM\...\StartupApproved\Run32: => "APSDaemon"

HKLM\...\StartupApproved\Run32: => "iTunesHelper"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKLM\...\StartupApproved\Run32: => "Adobe ARM"

HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher"

HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"

HKLM\...\StartupApproved\Run32: => "QuickTime Task"

HKLM\...\StartupApproved\Run32: => "Reader Application Helper"

HKLM\...\StartupApproved\Run32: => "DivXMediaServer"

HKLM\...\StartupApproved\Run32: => "Malwarebytes Anti-Exploit"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Akamai NetSession Interface"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "IDMan"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Nero MediaHome 4"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "SandboxieControl"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "AnyDVD"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Amazon Cloud Player"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "DellSystemDetect"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-143339661-846541388-530592055-1002\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [UDP Query User{DF082938-94F6-47D7-8944-92EE30ACBA5E}C:\program files\microsoft office\office14\groove.exe] => C:\program files\microsoft office\office14\groove.exe

FirewallRules: [TCP Query User{9AEFE5FF-34BA-4323-B353-0E5B75FEC22F}C:\program files\microsoft office\office14\groove.exe] => C:\program files\microsoft office\office14\groove.exe

FirewallRules: [{8F3E64EF-0E2B-4316-8E1B-F4EFAA1F95ED}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

FirewallRules: [{16EC4BD1-ECC9-410D-BE22-D6157E21151C}] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

FirewallRules: [UDP Query User{AF4C3C75-E7AA-4848-B62B-7B4E6F72E80D}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{BD5F3226-231D-47F8-AD8B-E2C7084BAE5D}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{6C97E9F9-0FF6-4A0E-8F23-6BF57E6443FE}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{F71890F2-2919-40C3-9B58-A07A12032A60}C:\users\norman\appdata\roaming\spotify\spotify.exe] => C:\users\norman\appdata\roaming\spotify\spotify.exe

FirewallRules: [{672399EC-8C2A-49C0-AAEA-4514CB17CFE8}] => C:\Users\Norman\AppData\Roaming\Andy\Setup.exe

FirewallRules: [{2487166A-C3D3-4F08-ABA6-C40A238041A3}] => C:\Users\Norman\AppData\Roaming\Andy\Setup.exe

FirewallRules: [{88711F82-1A87-41EE-894E-F029647E8C2E}] => C:\Program Files\Andy\HandyAndy.exe

FirewallRules: [{079B6616-12F1-42B0-8E3E-8AE9E1B20D57}] => C:\Program Files\Andy\HandyAndy.exe

FirewallRules: [{3F5EC342-383C-41BB-B930-81473B993008}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{C8B259E6-A396-4F3B-B90B-EB77D296FB1E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{F9B30D0D-9CEB-415B-A06F-00250C2EE94B}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{1A89FDA3-7922-4BCF-90A9-D54022FF612D}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{FF0815FF-32AB-4992-B9D3-32C511DE8361}] => C:\Program Files\Andy\andy.exe

FirewallRules: [{625FE1AB-FC14-44E8-BEFD-A77EE0F2E25B}] => C:\Program Files\Andy\andy.exe

FirewallRules: [{714C8173-6057-424A-BA3C-58170EE21B1D}] => C:\Users\Norman\Downloads\DCS-5222L_REVB_SETUPWIZARD_1.04.10_WIN\wizard\autorun.exe

FirewallRules: [{FF9AD526-0C85-4EAE-AFE1-245EEDFBF129}] => C:\Users\Norman\Downloads\dlink\wizard\autorun.exe

FirewallRules: [UDP Query User{4841AF52-F27F-45C4-A420-522FC883F89C}C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe] => C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe

FirewallRules: [TCP Query User{A4E6880C-6074-45B3-84B2-16A98A2B5FC2}C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe] => C:\users\norman\appdata\roaming\ipcamsetup\ipcamera.exe

FirewallRules: [UDP Query User{BE4021CE-4781-4EF4-A5EC-1A4AC9456762}C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe] => C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe

FirewallRules: [TCP Query User{B7E1B6E7-D51D-4F43-A603-2D026566B640}C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe] => C:\users\norman\downloads\ipcameratool version 1.0.0.1 - 20131120\ipcamera.exe

FirewallRules: [{AD697AB1-1F75-4C42-BA0B-CFFC7E9272B9}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe

FirewallRules: [{1398A097-CCAD-43B2-947F-C8909095796B}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe

FirewallRules: [UDP Query User{F40E9912-4765-460F-BF5B-CFA167C4EB6A}C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe] => C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe

FirewallRules: [TCP Query User{42A1759D-B976-4DAC-88AA-191EF1837A48}C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe] => C:\program files (x86)\lg software\lg smart share\dmr\smartsharedmr.exe

FirewallRules: [UDP Query User{DF8247B3-6D53-48B8-A220-7EB20C63FA82}C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe] => C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe

FirewallRules: [TCP Query User{0DE45B44-2632-4D4F-961B-C49D9D41EC2E}C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe] => C:\program files (x86)\lg software\lg smart share\dms\smartsharedms.exe

FirewallRules: [UDP Query User{2608149C-6A8F-4DE1-96B1-1C3EB0AF0BE1}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{4C849D8A-2F79-461C-8969-936DA8E94B50}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [{E38E860E-9E63-43F9-8E58-E8F16F540C55}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{BCBC1985-1AD8-48DE-A39E-1BC56B26ABF1}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{0A3B5422-5970-4320-AC7D-029CF7018AA8}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{65E8BFFF-D4F0-4C38-9BEB-CC718C1D23A4}] => C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{43F34969-359C-43DF-8298-279FC511286B}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [TCP Query User{BFE8205E-BD23-433A-830A-9ACFD6F9D1EA}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [{D58390AF-C6F3-479A-94CF-CBB13E74CF65}] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [{4DAFCAE7-B2DE-4F1D-B3A3-4559A83C27BC}] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{7163A2CA-DC51-4C73-83DD-9884AEE20CBE}C:\program files (x86)\mozilla firefox\plugin-container.exe] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [TCP Query User{321CD3A1-A232-4126-A715-538AB644DC13}C:\program files (x86)\mozilla firefox\plugin-container.exe] => C:\program files (x86)\mozilla firefox\plugin-container.exe

FirewallRules: [UDP Query User{3149A794-517A-4F57-9CF2-723164FDDAB2}C:\program files (x86)\gts\gts.exe] => C:\program files (x86)\gts\gts.exe

FirewallRules: [TCP Query User{FF94542E-68A5-4DAE-8011-0259C4D61344}C:\program files (x86)\gts\gts.exe] => C:\program files (x86)\gts\gts.exe

FirewallRules: [UDP Query User{E5746F8B-D5C0-4354-B434-F34C8A6C2F9C}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [TCP Query User{1D3940C3-1304-49F7-AE14-74D4DE38ED2C}C:\program files (x86)\gts\update.exe] => C:\program files (x86)\gts\update.exe

FirewallRules: [{7B47768D-0201-4978-813C-55CE7CCD2DE5}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{4EB9D924-2B5C-4515-8DCB-73093E3969FB}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{430199CD-23D4-4060-A869-234507B433C9}] => c:\Program Files (x86)\Dell\VideoStage\VideoStage.exe

FirewallRules: [{2A5E8176-D9F5-406B-83AA-17B3FB8B0A78}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{467F2E48-9B8A-441E-B34F-8354E20470B7}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe

FirewallRules: [{8C8135CF-40B2-488E-B1CC-BB13C0155914}] => C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [{6CDD6428-3209-4BC2-8441-00DFE1ED5F18}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{6D96BFEA-C893-4A9D-A409-BC6148B5FA11}] => LPort=2869

FirewallRules: [{F38F5CFF-F70D-4E99-BA64-06BC83E4228B}] => LPort=1900

FirewallRules: [{62B4C63A-7436-45C5-8F81-D436A3FC4DFF}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{85F03B60-5720-41F5-A23D-79C856C4A2F3}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

FirewallRules: [{B504C53B-4CE5-4F3E-BBC4-B03E3C573E67}] => C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

FirewallRules: [{0F1E28A3-8336-4271-9449-38A6442CC981}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{57747E09-46BC-4DED-82ED-012BAA3E51BA}] => C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{9C905D26-63DC-4FE2-A8E2-D34B36830001}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{CBFE21B9-D98C-470E-B0E6-6C553A237F05}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{919D4C7B-FCDE-4EA2-A840-08A223618767}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{5CBAE31B-A73A-4BD4-8689-DC805E449A3F}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{69976F95-3638-43EB-BF63-CEFFDDE14669}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{E099848A-6CB2-4C3D-9AA0-6D2B0BA3EE11}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{29940111-2D72-455D-ABE5-B85F083DCC9D}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{633FE991-A1C7-4938-B071-CB2B9919CFBD}] => C:\Program Files\Acrylic Wi-Fi Home\Acrylic.exe

FirewallRules: [{EEA2650F-77E9-4C7B-90E1-0EE2B5967E4E}] => C:\Program Files\Acrylic Wi-Fi Home\Acrylic.exe

FirewallRules: [{5ED2F3A2-25F3-4811-A0DB-1BAA639F652B}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Wiederherstellungspunkte =========================
 

04-12-2016 01:32:16 JRT Pre-Junkware Removal

05-12-2016 21:46:47 chip 1-click download service wurde entfernt.

09-12-2016 18:07:41 Windows Update

10-12-2016 21:41:27 JRT Pre-Junkware Removal
 

==================== Fehlerhafte GerÃ¤te im GerÃ¤temanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== FehlereintrÃ¤ge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/10/2016 09:54:17 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.479, Zeitstempel: 0x58256d37

Ausnahmecode: 0xc000041d

Fehleroffset: 0x000da832

ID des fehlerhaften Prozesses: 0x2048

Startzeit der fehlerhaften Anwendung: 0x01d25327821235ee

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: bc1c0abc-9d5a-41ed-b5d2-b87804bac5cf

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/10/2016 09:50:03 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NvStreamUserAgent.exe, Version: 7.1.2084.9592, Zeitstempel: 0x57605c64

Name des fehlerhaften Moduls: ntdll.dll, Version: 10.0.14393.479, Zeitstempel: 0x5825887f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000030bdd

ID des fehlerhaften Prozesses: 0x124c

Startzeit der fehlerhaften Anwendung: 0x01d25326f464e9c6

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\ntdll.dll

Berichtskennung: ad0fe28a-7c42-4794-a24e-6877ba7ee041

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/10/2016 09:41:42 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (12/09/2016 06:08:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )

Description: Fehler beim Kryptografiedienst wÃ¤hrend der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
 

Details:

AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
 

System Error:

Zugriff verweigert

.
 

Error: (12/09/2016 05:02:42 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.321, Zeitstempel: 0x57f4c291

Ausnahmecode: 0xc000041d

Fehleroffset: 0x000da6f2

ID des fehlerhaften Prozesses: 0x2770

Startzeit der fehlerhaften Anwendung: 0x01d252359e897627

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: b2ba5cd3-9208-4020-9532-164ddb3e44ad

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/09/2016 04:06:14 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: SmartShareDMR.exe, Version: 2.0.1206.1901, Zeitstempel: 0x534377b4

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.14393.321, Zeitstempel: 0x57f4c291

Ausnahmecode: 0xc000041d

Fehleroffset: 0x000da6f2

ID des fehlerhaften Prozesses: 0x2b1c

Startzeit der fehlerhaften Anwendung: 0x01d2522dc3da8c0e

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: 98390a81-bff4-4c8e-bb01-6304f212cc17

VollstÃ¤ndiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/08/2016 09:11:43 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: NORMAN-PC)

Description: Bei der Aktivierung der App â€žMicrosoft.ZuneVideo_8wekyb3d8bbwe!Microsoft.ZuneVideoâ€œ ist folgender Fehler aufgetreten: -2147023170. Weitere Informationen finden Sie im Protokoll â€žMicrosoft-Windows-TWinUI/Betriebsbereitâ€œ.
 

Error: (12/08/2016 06:18:08 PM) (Source: Perflib) (EventID: 1023) (User: )

Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
 

Error: (12/08/2016 06:17:48 PM) (Source: Perflib) (EventID: 1008) (User: )

Description: Die Open-Prozedur fÃ¼r den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten fÃ¼r diesen Dienst sind nicht verfÃ¼gbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
 

Error: (12/08/2016 06:14:41 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm MicrosoftEdge.exe, Version 11.0.14393.447 kann nicht mehr unter Windows ausgefÃ¼hrt werden und wurde beendet. ÃœberprÃ¼fen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: c638
 

Startzeit: 01d251721014c28c
 

Beendigungszeit: 4294967295
 

Anwendungspfad: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
 

Berichts-ID: c713be12-bd69-11e6-8027-88532e0c320c
 

VollstÃ¤ndiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
 

Auf das fehlerhafte Paket bezogene Anwendungs-ID: MicrosoftEdge
 
 

Systemfehler:

=============

Error: (12/10/2016 10:00:39 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/10/2016 09:54:05 PM) (Source: DCOM) (EventID: 10016) (User: NORMAN-PC)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Computerstandard" wird dem Benutzer "Norman-PC\Norman" (SID: S-1-5-21-143339661-846541388-530592055-1002) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{C2F03A33-21F5-47FA-B4BB-156362A2F239}

 und der APPID 

{316CDED5-E4AE-4B15-9113-7055D84DCC97}

 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/10/2016 09:54:05 PM) (Source: DCOM) (EventID: 10016) (User: NORMAN-PC)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Computerstandard" wird dem Benutzer "Norman-PC\Norman" (SID: S-1-5-21-143339661-846541388-530592055-1002) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{C2F03A33-21F5-47FA-B4BB-156362A2F239}

 und der APPID 

{316CDED5-E4AE-4B15-9113-7055D84DCC97}

 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/10/2016 09:54:05 PM) (Source: DCOM) (EventID: 10016) (User: NORMAN-PC)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Computerstandard" wird dem Benutzer "Norman-PC\Norman" (SID: S-1-5-21-143339661-846541388-530592055-1002) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{C2F03A33-21F5-47FA-B4BB-156362A2F239}

 und der APPID 

{316CDED5-E4AE-4B15-9113-7055D84DCC97}

 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/10/2016 09:54:05 PM) (Source: DCOM) (EventID: 10016) (User: NORMAN-PC)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Computerstandard" wird dem Benutzer "Norman-PC\Norman" (SID: S-1-5-21-143339661-846541388-530592055-1002) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{C2F03A33-21F5-47FA-B4BB-156362A2F239}

 und der APPID 

{316CDED5-E4AE-4B15-9113-7055D84DCC97}

 im Anwendungscontainer "Microsoft.Windows.Cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/10/2016 09:41:42 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{DABF28BE-F6B4-4E40-8F40-C4FB26F3116C}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/10/2016 09:27:17 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÃ„T)

Description: Durch die Berechtigungseinstellungen fÃ¼r "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÃ„T\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" fÃ¼r die COM-Serveranwendung mit der CLSID 

{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}

 und der APPID 

{F72671A9-012C-4725-9D2F-2A4D32D65169}

 im Anwendungscontainer "Nicht verfÃ¼gbar" (SID: Nicht verfÃ¼gbar) gewÃ¤hrt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool fÃ¼r Komponentendienste geÃ¤ndert werden.
 

Error: (12/10/2016 09:21:31 PM) (Source: DCOM) (EventID: 10010) (User: NORMAN-PC)

Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/10/2016 09:20:58 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" KorrekturmaÃŸnahmen (Neustart des Diensts) durchzufÃ¼hren, ist fehlgeschlagen. Fehler: 

Es wird bereits eine Instanz des Dienstes ausgefÃ¼hrt.
 

Error: (12/10/2016 09:20:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Office Software Protection Platform" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

CodeIntegrity:

===================================

  Date: 2016-12-10 21:21:23.213

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:23.211

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:23.209

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:22.816

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:22.812

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:22.803

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:20.632

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:20.631

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:20.628

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

  Date: 2016-12-10 21:21:09.046

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-2720QM CPU @ 2.20GHz

Prozentuale Nutzung des RAM: 27%

Installierter physikalischer RAM: 8086.16 MB

Verfügbarer physikalischer RAM: 5828.42 MB

Summe virtueller Speicher: 9366.16 MB

Verfügbarer virtueller Speicher: 7118.2 MB
 

==================== Laufwerke ================================
 

Drive c: (OS) (Fixed) (Total:402.19 GB) (Free:285.36 GB) NTFS

Drive d: (Data) (Fixed) (Total:1862.89 GB) (Free:1495.17 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 07F2837E)

Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)

Partition 2: (Active) - (Size=14.6 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=402.2 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=48.8 GB) - (Type=05)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

cosinus

11.12.2016 14:26

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"

BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" => Keine Datei

Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" Keine Datei

FF SearchPlugin: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml [2016-10-02]

FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\extensions\@greatdealz.xpi => nicht gefunden

FF HKU\S-1-5-21-143339661-846541388-530592055-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Norman\AppData\Roaming\IDM\idmmzcc3 => nicht gefunden

CHR Extension: (Avira Browserschutz) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-23]

S2 Avira.ServiceHost; "C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe" [X]

C:\Program Files (x86)\Avira

C:\Program Files (x86)\AskPartnerNetwork

ProgramData\Package Cache

C:\ProgramData\Avira

C:\ProgramData\IObit

C:\Users\Norman\AppData\Roaming\Avira

C:\Users\Public\AlexaNSISPlugin.8636.dll

Task: {2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {3517BCB2-F82F-43FF-92CD-65B00301C15E} - \PCDoctorBackgroundMonitorTask -> Keine Datei <==== ACHTUNG

Task: {3D88E051-66CE-4CFC-9371-5E60E0A371C5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {4324C4A4-5416-4DA7-9F0B-FDF41833D324} - \SystemToolsDailyTest -> Keine Datei <==== ACHTUNG

Task: {97CDDA5E-013E-4420-A8E9-75A1ECA04D5C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {996AC3FA-FE8C-4877-8FDA-8528B5969542} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {BD585239-8EB9-4933-A8E8-B0FA3A35010E} - \PCDEventLauncherTask -> Keine Datei <==== ACHTUNG

Task: {F6AEB890-1D27-4C31-8B90-99C7563D5E1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

querotudo

11.12.2016 14:55

Fixlog.txt

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016

durchgeführt von Norman (11-12-2016 14:44:20) Run:1

Gestartet von C:\Users\Norman\Downloads

Geladene Profile: Norman (Verfügbare Profile: Norman & Admin)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"

BHO: Avira SearchFree Toolbar -> {41564952-412D-5637-00A7-7A786E7484D7} -> "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" => Keine Datei

Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll" Keine Datei

FF SearchPlugin: C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml [2016-10-02]

FF HKLM-x32\...\Firefox\Extensions: [@greatdealz] - C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\extensions\@greatdealz.xpi => nicht gefunden

FF HKU\S-1-5-21-143339661-846541388-530592055-1002\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Norman\AppData\Roaming\IDM\idmmzcc3 => nicht gefunden

CHR Extension: (Avira Browserschutz) - C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-23]

S2 Avira.ServiceHost; "C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe" [X]

C:\Program Files (x86)\Avira

C:\Program Files (x86)\AskPartnerNetwork

ProgramData\Package Cache

C:\ProgramData\Avira

C:\ProgramData\IObit

C:\Users\Norman\AppData\Roaming\Avira

C:\Users\Public\AlexaNSISPlugin.8636.dll

Task: {2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Keine Datei <==== ACHTUNG

Task: {3517BCB2-F82F-43FF-92CD-65B00301C15E} - \PCDoctorBackgroundMonitorTask -> Keine Datei <==== ACHTUNG

Task: {3D88E051-66CE-4CFC-9371-5E60E0A371C5} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {4324C4A4-5416-4DA7-9F0B-FDF41833D324} - \SystemToolsDailyTest -> Keine Datei <==== ACHTUNG

Task: {97CDDA5E-013E-4420-A8E9-75A1ECA04D5C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {996AC3FA-FE8C-4877-8FDA-8528B5969542} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {BD585239-8EB9-4933-A8E8-B0FA3A35010E} - \PCDEventLauncherTask -> Keine Datei <==== ACHTUNG

Task: {F6AEB890-1D27-4C31-8B90-99C7563D5E1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

emptytemp:

         

*****************
 

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Avira SystrayStartTrigger => Wert erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}" => Schlüssel erfolgreich entfernt

"HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}" => Schlüssel erfolgreich entfernt

HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Wert erfolgreich entfernt

HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Schlüssel nicht gefunden. 

C:\Users\Norman\AppData\Roaming\Mozilla\Firefox\Profiles\jy1jlaly.default\searchplugins\google-lavasoft.xml => erfolgreich verschoben

HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\@greatdealz => Wert erfolgreich entfernt

HKU\S-1-5-21-143339661-846541388-530592055-1002\Software\Mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com => Wert erfolgreich entfernt

C:\Users\Norman\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk => erfolgreich verschoben

Avira.ServiceHost => Dienst erfolgreich entfernt

"C:\Program Files (x86)\Avira" => nicht gefunden.

"C:\Program Files (x86)\AskPartnerNetwork" => nicht gefunden.

ProgramData\Package Cache => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.

C:\ProgramData\Avira => erfolgreich verschoben

C:\ProgramData\IObit => erfolgreich verschoben

C:\Users\Norman\AppData\Roaming\Avira => erfolgreich verschoben

C:\Users\Public\AlexaNSISPlugin.8636.dll => erfolgreich verschoben

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AC4B7C8-FBC7-4BAC-BE58-47DEE4C0C489}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3517BCB2-F82F-43FF-92CD-65B00301C15E}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3517BCB2-F82F-43FF-92CD-65B00301C15E}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PCDoctorBackgroundMonitorTask" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3D88E051-66CE-4CFC-9371-5E60E0A371C5}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D88E051-66CE-4CFC-9371-5E60E0A371C5}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4324C4A4-5416-4DA7-9F0B-FDF41833D324}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4324C4A4-5416-4DA7-9F0B-FDF41833D324}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SystemToolsDailyTest" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{97CDDA5E-013E-4420-A8E9-75A1ECA04D5C}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97CDDA5E-013E-4420-A8E9-75A1ECA04D5C}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{996AC3FA-FE8C-4877-8FDA-8528B5969542}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{996AC3FA-FE8C-4877-8FDA-8528B5969542}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BD585239-8EB9-4933-A8E8-B0FA3A35010E}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BD585239-8EB9-4933-A8E8-B0FA3A35010E}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PCDEventLauncherTask" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F6AEB890-1D27-4C31-8B90-99C7563D5E1B}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F6AEB890-1D27-4C31-8B90-99C7563D5E1B}" => Schlüssel erfolgreich entfernt

"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => Schlüssel erfolgreich entfernt
 

=========== EmptyTemp: ==========
 

BITS transfer queue => 1933348 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 21765761 B

Java, Flash, Steam htmlcache => 2551 B

Windows/system/drivers => 15578444 B

Edge => 13840814 B

Chrome => 215985892 B

Firefox => 394912736 B

Opera => 0 B
 

Temp, IE cache, history, cookies, recent:

Default => 0 B

Users => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 0 B

systemprofile32 => 0 B

LocalService => 1025036 B

NetworkService => -638 B

Norman => 250675134 B

Admin => 161932 B
 

RecycleBin => 111891 B

EmptyTemp: => 873.6 MB temporäre Dateien entfernt.
 

================================
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 14:48:12 ====

cosinus

11.12.2016 15:44

Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:

1. Schritt: MBAM

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

2. Schritt: ESET

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

3. Schritt: SecurityCheck

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

querotudo

11.12.2016 19:28

Hi Cosinus,

hier kommt Teil1, der mbam.txt:

Code:

Malwarebytes Anti-Malware

www.malwarebytes.org
 

Suchlaufdatum: 11.12.2016

Suchlaufzeit: 16:09

Protokolldatei: mbam.txt

Administrator: Ja
 

Version: 2.2.1.1043

Malware-Datenbank: v2016.12.11.05

Rootkit-Datenbank: v2016.11.20.01

Lizenz: Kostenlose Version

Malware-Schutz: Deaktiviert

Schutz vor bösartigen Websites: Deaktiviert

Selbstschutz: Deaktiviert
 

Betriebssystem: Windows 10

CPU: x64

Dateisystem: NTFS

Benutzer: Norman
 

Suchlauftyp: Bedrohungssuchlauf

Ergebnis: Abgeschlossen

Durchsuchte Objekte: 377739

Abgelaufene Zeit: 18 Min., 31 Sek.
 

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Deaktiviert

Heuristik: Aktiviert

PUP: Aktiviert

PUM: Aktiviert
 

Prozesse: 0

(keine bösartigen Elemente erkannt)
 

Module: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 0

(keine bösartigen Elemente erkannt)
 

Registrierungswerte: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Dateien: 0

(keine bösartigen Elemente erkannt)
 

Physische Sektoren: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

Hi Cosinus,

Eset hat eine Menge gefunden. Hier das Log:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=f8bba1ff8c07cc48b8110cab2b6a48e5

# end=init

# utc_time=2016-12-11 03:39:17

# local_time=2016-12-11 04:39:17 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.2.9200 NT 

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=37126

Update Finalize

Updated modules version: 0

Old modules - leave modules

Update Init

Update Download

Update Finalize

Updated modules version: 31699

Update Init

Update Download

esets_scanner_update returned -1 esets_gle=53251

Update Finalize

Updated modules version: 31699

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# EOSSerial=f8bba1ff8c07cc48b8110cab2b6a48e5

# end=updated

# utc_time=2016-12-11 04:03:21

# local_time=2016-12-11 05:03:21 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# osver=6.2.9200 NT 

# product=EOS

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.7777

# api_version=3.1.1

# EOSSerial=f8bba1ff8c07cc48b8110cab2b6a48e5

# engine=31699

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2016-12-11 06:09:49

# local_time=2016-12-11 07:09:49 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1031

# osver=6.2.9200 NT 

# compatibility_mode_1=''

# compatibility_mode=5893 16776573 100 94 15182 12810405 0 0

# scanned=307481

# found=17

# cleaned=0

# scan_time=7587

sh=52CD9F9936429922D533777F7B51D667B0E8FEC6 ft=1 fh=f44718903cb82894 vn="Variante von MSIL/Rebrand.LittleRegClean.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Program Files (x86)\Registry Dr-\Helper.dll"

sh=28F886EA3CD593DBF426C8548DAB28A567E8D887 ft=1 fh=b1ec1d0abfe685c7 vn="Variante von MSIL/Rebrand.LittleRegClean.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Program Files (x86)\Registry Dr-\RegistryDr.exe"

sh=08296125FC58E7F1D16A4504A0CEA82F064C096C ft=1 fh=274dcf932a1d4ccf vn="Variante von MSIL/Rebrand.LittleRegClean.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Program Files (x86)\Registry Dr-\Uninst000.CA.dll"

sh=44E9D78B1E26D31B37206A735CB06B836A072339 ft=1 fh=cac44e7cf3433e75 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Admin\Desktop\bubshoot_dx_1.6.exe"

sh=1FA2801776006BFD78666CFBC35E3C6D3F685967 ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NVU Trojaner" ac=I fn="C:\Users\Norman\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\3c109712-11aa0e4e"

sh=B17B081B37281BD27F7DC7228DB366A9BE607B0B ft=1 fh=b43ba431bab46a9e vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe"

sh=D591C934DD6553612002FC49CC29CE31B044854B ft=1 fh=9527e1bd7de09c2a vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe"

sh=233300DB6B4BBA613657907668D6D16A24E52EB9 ft=1 fh=d794993a2b90ad03 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe"

sh=7099DC6FF90CBAA5CA8CF76A862DEF490F9D5361 ft=1 fh=b982c04c4d051cca vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"

sh=2AB20B5FB718DC8D006F0F8A11C250FA44EED984 ft=1 fh=17b2900a6c3a46de vn="Win32/InstallMonetizer.AQ evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\PDFCreator-2_0_1-setup.exe"

sh=2F873E114B2B262BEF867A12F4906B9DD1ADC583 ft=1 fh=a397bd1f1271229b vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\SpyBot Search Destroy - CHIP-Installer.exe"

sh=443BBC0D682A7C4CDD5446F1C9B566DB2619E8BC ft=1 fh=88cc9143ef8da7a4 vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\WirelessNetView - CHIP-Installer.exe"

sh=D36DBCE8D95465F7DD6DBBD9A87DF23044E9189D ft=1 fh=d672c4b7f2540ede vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\Programs\roomeon - CHIP-Installer.exe"

sh=2F7C632EF16EE5D75DE29894B9810CC0D5CB5C58 ft=1 fh=dd21750e073812c5 vn="Variante von Win32/SoftonicDownloader.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\Programs\SoftonicDownloader_fuer_avery-zweckform-designpro.exe"

sh=5B72F67E8B77AA560630F4FBC42F8DA1863C9818 ft=1 fh=3818e331b3a31bed vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Norman\Downloads\Programs\SpyBot Search Destroy - CHIP-Installer.exe"

sh=A70EFAB5F2D2D83AD2B7E0304169C73F6D0EC700 ft=1 fh=011924ad9c4ebdbf vn="Variante von Win32/Toolbar.Linkury.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll"

sh=E51C1F496CCC0388B868BFA70AD8235F07CBB48E ft=0 fh=0000000000000000 vn="Variante von Generik.FLVLYZN Trojaner" ac=I fn="D:\HiDrive\Verschiedenes\aaaalt\Software\Gutes.zip"

cosinus

11.12.2016 19:33

Zitat:

C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe
C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe
C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe
C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

Keine Downloads mehr von CHIP.de!!!

Die verarschen ihre Kunden aus reiner Profitgier. Siehe auch http://www.trojaner-board.de/168364-...mpfehlung.html und CHIP-Installer - was ist das? - Anleitungen

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

C:\Program Files (x86)\Registry Dr-

C:\Users\Admin\Desktop\bubshoot_dx_1.6.exe

C:\Users\Norman\AppData\LocalLow\Sun\Java\Deployment\cache

C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe

C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe

C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe

C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

C:\Users\Norman\Downloads\PDFCreator-2_0_1-setup.exe

C:\Users\Norman\Downloads\SpyBot Search Destroy - CHIP-Installer.exe

C:\Users\Norman\Downloads\WirelessNetView - CHIP-Installer.exe

C:\Users\Norman\Downloads\Programs\roomeon - CHIP-Installer.exe

C:\Users\Norman\Downloads\Programs\SoftonicDownloader_fuer_avery-zweckform-designpro.exe

C:\Users\Norman\Downloads\Programs\SpyBot Search Destroy - CHIP-Installer.exe

C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw

D:\HiDrive\Verschiedenes\aaaalt\Software\Gutes.zip

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

querotudo

11.12.2016 19:50

Security Check Log:

Code:

 Results of screen317's Security Check version 1.009  

   x64 (UAC is enabled)  

 Internet Explorer 11  
 ``````````````Antivirus/Firewall Check:`````````````` 

Windows Defender   

 WMI entry may not exist for antivirus; attempting automatic update. 
 `````````Anti-malware/Other Utilities Check:````````` 

 Java version 32-bit out of Date! 

 Adobe Flash Player         23.0.0.207  

 Mozilla Firefox (48.0.2) 

 Google Chrome (54.0.2840.71) 

 Google Chrome (54.0.2840.99) 

 Google Chrome (SetupMetrics...) 
 ````````Process Check: objlist.exe by Laurent````````  

 Windows Defender MSMpEng.exe 

 Windows Defender MSASCuiL.exe   
 `````````````````System Health check````````````````` 

 Total Fragmentation on Drive C:  % 
 ````````````````````End of Log``````````````````````

und hier noch das FRST Fixlog:

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016

durchgeführt von Norman (11-12-2016 19:43:10) Run:2

Gestartet von C:\Users\Norman\Downloads

Geladene Profile: Norman (Verfügbare Profile: Norman & Admin)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

C:\Program Files (x86)\Registry Dr-

C:\Users\Admin\Desktop\bubshoot_dx_1.6.exe

C:\Users\Norman\AppData\LocalLow\Sun\Java\Deployment\cache

C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe

C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe

C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe

C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

C:\Users\Norman\Downloads\PDFCreator-2_0_1-setup.exe

C:\Users\Norman\Downloads\SpyBot Search Destroy - CHIP-Installer.exe

C:\Users\Norman\Downloads\WirelessNetView - CHIP-Installer.exe

C:\Users\Norman\Downloads\Programs\roomeon - CHIP-Installer.exe

C:\Users\Norman\Downloads\Programs\SoftonicDownloader_fuer_avery-zweckform-designpro.exe

C:\Users\Norman\Downloads\Programs\SpyBot Search Destroy - CHIP-Installer.exe

C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw

D:\HiDrive\Verschiedenes\aaaalt\Software\Gutes.zip

emptytemp:

         

*****************
 

C:\Program Files (x86)\Registry Dr- => erfolgreich verschoben

C:\Users\Admin\Desktop\bubshoot_dx_1.6.exe => erfolgreich verschoben

C:\Users\Norman\AppData\LocalLow\Sun\Java\Deployment\cache => erfolgreich verschoben

C:\Users\Norman\Downloads\AndY Android Emulator - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\BlueStacks App Player - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\FinePrint - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\PDFCreator-2_0_1-setup.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\SpyBot Search Destroy - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\WirelessNetView - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\Programs\roomeon - CHIP-Installer.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\Programs\SoftonicDownloader_fuer_avery-zweckform-designpro.exe => erfolgreich verschoben

C:\Users\Norman\Downloads\Programs\SpyBot Search Destroy - CHIP-Installer.exe => erfolgreich verschoben

C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw => erfolgreich verschoben

D:\HiDrive\Verschiedenes\aaaalt\Software\Gutes.zip => erfolgreich verschoben
 

=========== EmptyTemp: ==========
 

BITS transfer queue => 583648 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 254129 B

Java, Flash, Steam htmlcache => 0 B

Windows/system/drivers => 13642 B

Edge => 0 B

Chrome => 0 B

Firefox => 12480542 B

Opera => 0 B
 

Temp, IE cache, history, cookies, recent:

Default => 0 B

Users => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 0 B

systemprofile32 => 0 B

LocalService => 0 B

NetworkService => 1708 B

Norman => 1031396 B

Admin => 0 B
 

RecycleBin => 0 B

EmptyTemp: => 13.7 MB temporäre Dateien entfernt.
 

================================
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 19:43:27 ====

cosinus

11.12.2016 20:22

Firefox umgehend updaten.

Hinweise zu chip.de gelesen?

querotudo

11.12.2016 20:34

Hi Cosinus,

die Hinweise zu Chip habe ich gelesen. Ich war auch immer genervt von diesem Downloader. Da ich jetzt filepony kennengelernt habe, werde ich künftig hier downloaden.

Ich habe eine 32 und eine 64 Bit Installation von Firefox auf diesem Rechner. Beide melden sich als aktuell (Version 50.0.2). Auch die Mozillaseite sagt: Glückwunsch! Sie verwenden die neueste Firefox-Version. Was soll ich aktualisieren?

cosinus

11.12.2016 20:59

Dann wurde die zwischendurch aktualisiert.
An für sich brauchst du aber nur eine Edition vom Firefox. 32 und 64 Bit Edition ist doch etwas chaotisch oder?

querotudo

11.12.2016 21:11

Du hast recht. Die 32er Version ist irgendwie übrig geblieben. Ich werde sie deinstallieren.

cosinus

11.12.2016 21:15

Dann wären wir durch! :daumenhoc

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

Abschließend müssen wir noch ein paar Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen - sofern benötigt, wenn nicht benötigt natürlich sinnigerweise deinstallieren oder Alternativen verwenden (und diese aktuell halten).

Browser (Internet Explorer, Edge, Firefox, Chrome, ...)
Java (bitte wirklich nur installieren/installiert lassen wenn unbedingt nötig!)
Flash-Player (nach Möglichkeit deinstallieren und HTML5 verwenden siehe zB https://www.youtube.com/html5 )
PDF-Reader (nach Möglichkeit nicht den Adobe Reader verwenden)

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

	Emsisoft	Microsoft Security Essentials	ESET
	http://filepony.de/icon/emsisoft_anti_malware.png	http://filepony.de/icon/microsoft_se...essentials.png	http://deeprybka.trojaner-board.de/eset/esetmd.png

Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und/oder mit dem ESET Online Scanner scannen.

Optional:

http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. NoScript kann gerade bei technisch nicht allzu versierten Nutzern beim Surfen zum Nervfaktor werden; ob das Tool geeignet ist, muss jeder selbst mal ausprobieren und dann für sich entscheiden. Alternativen zu NoScript (wenn um das das Verhindern von Usertracking und Werbung auf Webseiten) geht wären da Ghostery oder uBlock. Ghostery ist eine sehr bekannte Erweiterung, die aber auch in Kritik geraten ist, vgl. dazu bitte diesen Thread => Ghostery schleift Werbung durch

http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

querotudo

11.12.2016 23:28

Hi Cosinus,

jetzt hab ich doch noch eine Frage. Keine meiner beiden Firefox Versionen lässt sich deinstallieren. Gibt es da einen Trick?

Gruß,
querotudo

Hi Cosinus,

jetzt hat es geklappt. Ich mußte Firefox noch einmal drüber installieren, danach war die 32 Bit Version deinstallierbar.

Noch einmal vielen, vielen Dank für Deine kompetente Anleitung und Geduld mit mir.

Bis dann,
querotudo

Alle Zeitangaben in WEZ +1. Es ist jetzt 21:20 Uhr.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131