| Liftaboy | 24.11.2017 00:24 |
FRST.txt Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2017
durchgeführt von Andreas (Administrator) auf PANZERKNACKERAG (24-11-2017 00:21:53)
Gestartet von C:\Users\Andreas\Downloads
Geladene Profile: Andreas (Verfügbare Profile: Andreas & Sabine & Andi & Lilly & Henry)
Platform: Windows 10 Home Version 1607 14393.1884 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(© 2015 Microsoft Corporation) C:\Users\Andreas\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
() C:\Program Files (x86)\Aiseesoft Studio\FoneLab\AppService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer) C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Farbar) C:\Users\Andreas\Downloads\FRST64(4).exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-03-26] (NVIDIA Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-09-11] (Apple Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-24] (CANON INC.)
HKLM-x32\...\Run: [FoneLabAppService] => C:\Program Files (x86)\Aiseesoft Studio\FoneLab\AppService.exe [88024 2016-11-28] ()
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30877280 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\...\Run: [BingSvc] => C:\Users\Andreas\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-01-24] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\...\MountPoints2: {4dddac9b-5f0f-11e4-825b-806e6f6e6963} - "E:\start.exe" /auto
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{6bec6e77-363b-4efa-8764-7578e6bd6ffb}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{fd859df0-d741-4f96-9d5f-83c0eeec0daf}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.com/?pc=SL5M&ocid=SL5MDHP&osmkt=de-de
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2134866062-150588591-2205931496-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2134866062-150588591-2205931496-1001 -> {14EE7BB7-4D91-49EA-BF94-0723F9ABCD22} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2134866062-150588591-2205931496-1001 -> {40A5325A-CDB7-47B7-A62D-F0575CECC9AA} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2134866062-150588591-2205931496-1001 -> {670435E5-AA04-4E08-ADEF-4F691CEE694F} URL =
SearchScopes: HKU\S-1-5-21-2134866062-150588591-2205931496-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-2134866062-150588591-2205931496-1001 -> {B89DA9DE-F980-45C4-97DC-E2E708BF072B} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-2134866062-150588591-2205931496-1001 -> {F11D4372-76F4-4261-823F-D12362434148} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
FireFox:
========
FF ProfilePath: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\06pi6lzl.default [2017-11-24]
FF Homepage: Mozilla\Firefox\Profiles\06pi6lzl.default -> hxxp://www.google.de/
FF NewTab: Mozilla\Firefox\Profiles\06pi6lzl.default -> hxxp://www.google.de/
FF Extension: (Bing Search) - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\06pi6lzl.default\Extensions\bingsearch.full@microsoft.com.xpi [2016-01-24] [Lagacy]
FF Extension: (kikin plugin (NO23 Edition)) - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\06pi6lzl.default\Extensions\{AA994882-F391-4d2e-806F-8908DA4814ED} [2017-10-31] [Lagacy] [ist nicht signiert]
FF SearchPlugin: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\06pi6lzl.default\searchplugins\bing-.xml [2016-01-24]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_187.dll [2017-11-21] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_187.dll [2017-11-21] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-12-10] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2017-03-16] ()
FF Plugin HKU\S-1-5-21-2134866062-150588591-2205931496-1001: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll [2015-11-20] (Sony Network Entertainment International LLC)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx" <nicht gefunden>
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-09-07] (Apple Inc.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2278688 2017-09-26] (Acer Incorporated)
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [11776 2012-05-19] () [Datei ist nicht signiert]
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-07-22] (Acer Incorporated)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [370064 2015-09-30] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-12-10] (Intel Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [455912 2014-12-30] (Acer Incorporate)
R2 MySQL; C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe [12907520 2013-02-01] () [Datei ist nicht signiert]
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1616160 2014-03-26] (NVIDIA Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103704 2017-10-09] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [106888 2012-05-19] (Windows (R) Win 7 DDK provider)
U5 GeneStor; C:\Windows\System32\Drivers\GeneStor.sys [110824 2014-06-11] (GenesysLogic)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2017-11-22] (Malwarebytes)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvacwu.inf_amd64_31f4ef4821269ebb\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RtkBtFilter; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [615728 2015-06-04] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [5144064 2016-07-16] (Realtek Semiconductor Corporation )
R3 SynRMIHID; C:\WINDOWS\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-20] (Synaptics Incorporated)
S3 TTHID; C:\WINDOWS\System32\drivers\Cinergy_Hybrid-Stick_HID.sys [27944 2012-09-27] (DTV-DVB)
S3 UDXTTM6010; C:\WINDOWS\system32\DRIVERS\UDXTTM6010.sys [841384 2012-09-27] ()
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-11-24 00:21 - 2017-11-24 00:21 - 002393088 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64(4).exe
2017-11-24 00:05 - 2017-11-24 00:05 - 008261584 _____ (Malwarebytes) C:\Users\Andreas\Downloads\adwcleaner_7.0.4.0(1).exe
2017-11-23 23:49 - 2017-11-23 23:49 - 008261584 _____ (Malwarebytes) C:\Users\Andreas\Downloads\adwcleaner_7.0.4.0.exe
2017-11-23 23:17 - 2017-11-23 23:17 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\424653D8.sys
2017-11-23 23:16 - 2017-11-23 23:28 - 000000000 ____D C:\Users\Andreas\Desktop\mbar
2017-11-23 23:16 - 2017-11-23 23:28 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2017-11-23 23:16 - 2017-11-23 23:16 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Andreas\Downloads\mbar-1.10.3.1001.exe
2017-11-23 23:16 - 2017-11-23 23:16 - 000192952 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2017-11-23 22:12 - 2017-11-23 22:12 - 002393088 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64(3).exe
2017-11-23 08:38 - 2017-11-23 08:38 - 000000000 ___HD C:\$WINDOWS.~BT
2017-11-23 08:30 - 2017-11-23 08:30 - 000001083 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-11-23 08:30 - 2017-11-23 08:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-11-23 08:30 - 2017-11-23 08:30 - 000000000 ____D C:\Program Files\VS Revo Group
2017-11-23 08:29 - 2017-11-23 08:30 - 007189760 _____ (VS Revo Group ) C:\Users\Andreas\Downloads\revo204setup.exe
2017-11-23 08:25 - 2017-11-23 08:25 - 000000000 ____D C:\Users\Andreas\AppData\Local\UNP
2017-11-22 18:48 - 2017-11-22 18:48 - 002391552 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64(2).exe
2017-11-22 18:47 - 2017-11-22 18:48 - 002391552 _____ (Farbar) C:\Users\Andreas\Downloads\FRST64(1).exe
2017-11-22 18:44 - 2017-11-22 18:44 - 000055979 _____ C:\Users\Andi\Downloads\Addition.txt
2017-11-22 18:43 - 2017-11-22 18:44 - 000054231 _____ C:\Users\Andi\Downloads\FRST.txt
2017-11-22 18:42 - 2017-11-22 18:43 - 002391552 _____ (Farbar) C:\Users\Andi\Downloads\FRST64.exe
2017-11-19 17:22 - 2017-11-19 17:22 - 007830208 _____ C:\Users\Andi\Downloads\foodblogsstudieagenturgerhard-150527082756-lva1-app6891.pdf
2017-11-19 17:22 - 2017-11-19 17:22 - 003864252 _____ C:\Users\Andi\Downloads\dawandasocialmediawebinar-140409045436-phpapp02.pdf
2017-11-19 17:14 - 2017-11-19 17:14 - 000484410 _____ C:\Users\Andi\Downloads\bz13-gastspiel-130525080904-phpapp02.pdf
2017-11-19 17:10 - 2017-11-19 17:10 - 006181601 _____ C:\Users\Andi\Downloads\ersteschrittesocialmediastrategie-090715002534-phpapp02.pdf
2017-11-15 18:45 - 2017-11-01 23:44 - 000581048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-11-15 18:45 - 2017-11-01 23:44 - 000341976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2017-11-15 18:45 - 2017-11-01 23:44 - 000269152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2017-11-15 18:45 - 2017-11-01 23:44 - 000139096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-11-15 18:45 - 2017-11-01 23:44 - 000120416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2017-11-15 18:45 - 2017-11-01 23:27 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2017-11-15 18:45 - 2017-11-01 23:26 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-11-15 18:45 - 2017-11-01 23:19 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2017-11-15 18:45 - 2017-11-01 23:17 - 002641920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-11-15 18:45 - 2017-11-01 23:17 - 000538112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll
2017-11-15 18:45 - 2017-11-01 23:16 - 012349440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-11-15 18:45 - 2017-11-01 23:15 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2017-11-15 18:45 - 2017-11-01 23:14 - 000506368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-11-15 18:45 - 2017-11-01 23:14 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2017-11-15 18:45 - 2017-11-01 23:13 - 001988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-11-15 18:45 - 2017-11-01 23:12 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-11-15 18:45 - 2017-11-01 23:12 - 000656896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-11-15 18:45 - 2017-11-01 23:12 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-11-15 18:45 - 2017-11-01 23:11 - 002997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-11-15 18:45 - 2017-11-01 23:11 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-11-15 18:45 - 2017-11-01 23:11 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-11-15 18:45 - 2017-11-01 23:11 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-11-15 18:45 - 2017-11-01 23:06 - 013441536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-11-15 18:45 - 2017-11-01 23:05 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-11-15 18:45 - 2017-11-01 23:04 - 003401216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-11-15 18:45 - 2017-11-01 23:04 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-11-15 18:45 - 2017-11-01 23:04 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2017-11-15 18:45 - 2017-11-01 23:03 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-11-15 18:45 - 2017-11-01 23:01 - 002538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-11-15 18:45 - 2017-11-01 23:01 - 001984512 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-11-15 18:45 - 2017-11-01 23:00 - 000903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-11-15 18:45 - 2017-11-01 20:44 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-11-15 18:45 - 2017-10-09 03:41 - 000082272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2017-11-15 18:45 - 2017-10-09 03:37 - 000500576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2017-11-15 18:45 - 2017-10-09 03:35 - 001181528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-11-15 18:45 - 2017-10-09 03:34 - 000965464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2017-11-15 18:45 - 2017-10-09 03:34 - 000082608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcd.dll
2017-11-15 18:45 - 2017-10-09 03:30 - 000558424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-11-15 18:45 - 2017-10-09 03:30 - 000381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-11-15 18:45 - 2017-10-09 03:30 - 000169304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2017-11-15 18:45 - 2017-10-09 03:28 - 022220856 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-11-15 18:45 - 2017-10-09 03:28 - 000482384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2017-11-15 18:45 - 2017-10-09 03:26 - 002529120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-11-15 18:45 - 2017-10-09 03:23 - 020967832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-11-15 18:45 - 2017-10-09 03:16 - 000178008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-11-15 18:45 - 2017-10-09 03:02 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2017-11-15 18:45 - 2017-10-09 03:02 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mgmtapi.dll
2017-11-15 18:45 - 2017-10-09 03:01 - 000372736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-11-15 18:45 - 2017-10-09 03:00 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCredential.dll
2017-11-15 18:45 - 2017-10-09 02:59 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-11-15 18:45 - 2017-10-09 02:58 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-11-15 18:45 - 2017-10-09 02:57 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCredential.dll
2017-11-15 18:45 - 2017-10-09 02:56 - 007626240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-11-15 18:45 - 2017-10-09 02:55 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-11-15 18:45 - 2017-10-09 02:53 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2017-11-15 18:45 - 2017-10-09 02:52 - 000862208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-11-15 18:45 - 2017-10-09 02:52 - 000713216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2017-11-15 18:45 - 2017-10-09 02:51 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spbcd.dll
2017-11-15 18:45 - 2017-10-09 02:50 - 001373184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2017-11-15 18:45 - 2017-10-09 02:46 - 006474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-11-15 18:45 - 2017-10-09 02:44 - 004423680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-11-15 18:45 - 2017-10-09 02:44 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-11-15 18:45 - 2017-10-09 02:44 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-11-15 18:44 - 2017-11-02 00:06 - 000223584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 002032472 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2017-11-15 18:44 - 2017-11-01 23:53 - 001578848 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000678752 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000613720 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000612192 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000484184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000379232 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000259936 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000190296 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-11-15 18:44 - 2017-11-01 23:53 - 000067928 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2017-11-15 18:44 - 2017-11-01 23:53 - 000034648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-11-15 18:44 - 2017-11-01 23:48 - 002253656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-11-15 18:44 - 2017-11-01 23:46 - 000635456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-11-15 18:44 - 2017-11-01 23:46 - 000484184 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2017-11-15 18:44 - 2017-11-01 23:44 - 002187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-11-15 18:44 - 2017-11-01 23:44 - 000658272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-11-15 18:44 - 2017-11-01 23:44 - 000402264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-11-15 18:44 - 2017-11-01 23:43 - 001090912 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-11-15 18:44 - 2017-11-01 23:43 - 000983904 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-11-15 18:44 - 2017-11-01 23:43 - 000811864 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-11-15 18:44 - 2017-11-01 23:43 - 000687968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-11-15 18:44 - 2017-11-01 23:43 - 000647520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2017-11-15 18:44 - 2017-11-01 23:43 - 000385856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2017-11-15 18:44 - 2017-11-01 23:43 - 000299360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2017-11-15 18:44 - 2017-11-01 23:43 - 000144728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-11-15 18:44 - 2017-11-01 23:43 - 000124072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2017-11-15 18:44 - 2017-11-01 23:42 - 000089552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2017-11-15 18:44 - 2017-11-01 23:40 - 000455512 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-11-15 18:44 - 2017-11-01 23:36 - 000947552 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-11-15 18:44 - 2017-11-01 23:33 - 000485520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-11-15 18:44 - 2017-11-01 23:22 - 000822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-11-15 18:44 - 2017-11-01 23:21 - 012205056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-11-15 18:44 - 2017-11-01 23:20 - 022571008 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-11-15 18:44 - 2017-11-01 23:20 - 019415040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-11-15 18:44 - 2017-11-01 23:20 - 018365952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-11-15 18:44 - 2017-11-01 23:16 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-11-15 18:44 - 2017-11-01 23:15 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-11-15 18:44 - 2017-11-01 23:14 - 006066176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-11-15 18:44 - 2017-11-01 23:14 - 003662848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-11-15 18:44 - 2017-11-01 23:12 - 002028032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-11-15 18:44 - 2017-11-01 23:12 - 000693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-11-15 18:44 - 2017-11-01 23:12 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-11-15 18:44 - 2017-11-01 23:12 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2017-11-15 18:44 - 2017-11-01 23:12 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-11-15 18:44 - 2017-11-01 23:09 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-11-15 18:44 - 2017-11-01 23:08 - 013107712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-11-15 18:44 - 2017-11-01 23:06 - 023678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-11-15 18:44 - 2017-11-01 23:05 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-11-15 18:44 - 2017-11-01 23:05 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll
2017-11-15 18:44 - 2017-11-01 23:05 - 000389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-11-15 18:44 - 2017-11-01 23:05 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-11-15 18:44 - 2017-11-01 23:05 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2017-11-15 18:44 - 2017-11-01 23:04 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2017-11-15 18:44 - 2017-11-01 23:04 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2017-11-15 18:44 - 2017-11-01 23:04 - 000171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2017-11-15 18:44 - 2017-11-01 23:04 - 000159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2017-11-15 18:44 - 2017-11-01 23:03 - 008119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-11-15 18:44 - 2017-11-01 23:03 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-11-15 18:44 - 2017-11-01 23:03 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2017-11-15 18:44 - 2017-11-01 23:00 - 004742144 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-11-15 18:44 - 2017-11-01 23:00 - 002097664 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-11-15 18:44 - 2017-11-01 23:00 - 001518080 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-11-15 18:44 - 2017-11-01 23:00 - 000799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-11-15 18:44 - 2017-11-01 23:00 - 000760320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-11-15 18:44 - 2017-11-01 23:00 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-11-15 18:44 - 2017-11-01 22:58 - 003616256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-11-15 18:44 - 2017-11-01 22:58 - 001285120 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2017-11-15 18:44 - 2017-10-09 03:40 - 001117016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2017-11-15 18:44 - 2017-10-09 03:37 - 007780184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-11-15 18:44 - 2017-10-09 03:37 - 000199000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2017-11-15 18:44 - 2017-10-09 03:37 - 000097120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcd.dll
2017-11-15 18:44 - 2017-10-09 03:33 - 000652344 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2017-11-15 18:44 - 2017-10-09 03:30 - 000509784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-11-15 18:44 - 2017-10-09 03:28 - 000241496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-11-15 18:44 - 2017-10-09 03:27 - 000206176 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-11-15 18:44 - 2017-10-09 03:26 - 001102680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2017-11-15 18:44 - 2017-10-09 03:25 - 000392024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2017-11-15 18:44 - 2017-10-09 03:24 - 000304232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2017-11-15 18:44 - 2017-10-09 03:22 - 001600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-11-15 18:44 - 2017-10-09 03:00 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mgmtapi.dll
2017-11-15 18:44 - 2017-10-09 02:58 - 009129984 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-11-15 18:44 - 2017-10-09 02:58 - 000173056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdboot.exe
2017-11-15 18:44 - 2017-10-09 02:57 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-11-15 18:44 - 2017-10-09 02:55 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvc.dll
2017-11-15 18:44 - 2017-10-09 02:55 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2017-11-15 18:44 - 2017-10-09 02:54 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2017-11-15 18:44 - 2017-10-09 02:53 - 001478656 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-11-15 18:44 - 2017-10-09 02:52 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-11-15 18:44 - 2017-10-09 02:52 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\spbcd.dll
2017-11-15 18:44 - 2017-10-09 02:51 - 000582656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2017-11-15 18:44 - 2017-10-09 02:51 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
2017-11-15 18:44 - 2017-10-09 02:50 - 000069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2017-11-15 18:44 - 2017-10-09 02:49 - 004749824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-11-15 18:44 - 2017-10-09 02:48 - 000425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2017-11-15 18:44 - 2017-10-09 02:46 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-11-15 18:44 - 2017-10-09 02:44 - 006664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-11-15 18:44 - 2017-10-09 02:44 - 004708864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-11-15 18:44 - 2017-10-09 02:44 - 002321408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-11-15 18:44 - 2017-10-09 02:44 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-11-15 18:44 - 2017-10-09 02:43 - 001231360 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-11-15 18:44 - 2017-10-09 02:41 - 001817088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-11-15 18:44 - 2017-10-09 01:29 - 000788624 _____ C:\WINDOWS\SysWOW64\locale.nls
2017-11-15 18:44 - 2017-10-09 01:29 - 000788624 _____ C:\WINDOWS\system32\locale.nls
2017-11-14 23:58 - 2017-11-14 23:58 - 000003388 _____ C:\WINDOWS\System32\Tasks\AcerCloud
2017-11-13 09:05 - 2017-11-13 09:05 - 000002026 _____ C:\Users\Public\Desktop\abDocs.lnk
2017-11-13 09:04 - 2017-11-13 09:04 - 000003404 _____ C:\WINDOWS\System32\Tasks\abDocsDllLoader
2017-10-31 16:42 - 2017-11-01 10:49 - 000000000 ____D C:\Users\Lilly\Documents\Audacity
2017-10-31 16:38 - 2017-11-01 10:54 - 000000000 ____D C:\Users\Lilly\AppData\Roaming\audacity
2017-10-31 16:38 - 2017-10-31 16:38 - 000000000 ____D C:\Users\Lilly\AppData\Local\Audacity
2017-10-31 16:24 - 2017-10-31 16:25 - 000000000 ____D C:\Users\Andreas\Documents\Audacity
2017-10-31 16:20 - 2017-10-31 16:36 - 000000000 ____D C:\Users\Andreas\AppData\Roaming\audacity
2017-10-31 16:20 - 2017-10-31 16:20 - 000001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2017-10-31 16:20 - 2017-10-31 16:20 - 000001080 _____ C:\Users\Public\Desktop\Audacity.lnk
2017-10-31 16:20 - 2017-10-31 16:20 - 000000000 ____D C:\Users\Andreas\AppData\Local\Audacity
2017-10-31 16:20 - 2017-10-31 16:20 - 000000000 ____D C:\Program Files (x86)\Audacity
2017-10-31 16:15 - 2017-10-31 16:15 - 000001434 _____ C:\Users\Andreas\AppData\Local\RecConfig.xml
2017-10-31 16:14 - 2017-10-31 16:17 - 000001144 _____ C:\Users\Andreas\Desktop\No23 Recorder.lnk
2017-10-31 16:14 - 2017-10-31 16:17 - 000000000 ____D C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No23 Recorder
2017-10-31 16:14 - 2017-10-31 16:17 - 000000000 ____D C:\Users\Andreas\AppData\Local\No23 Recorder
2017-10-31 16:13 - 2017-10-31 16:13 - 000000000 ____D C:\Users\Andreas\AppData\Local\Downloaded Installations
2017-10-31 16:11 - 2017-10-31 16:11 - 001533960 _____ (CHIP Digital GmbH) C:\Users\Lilly\Downloads\No23 Recorder - CHIP-Installer.exe
2017-10-31 16:06 - 2017-10-31 16:06 - 000000000 ____D C:\Users\Lilly\Documents\CyberLink
2017-10-31 16:06 - 2017-10-31 16:06 - 000000000 ____D C:\Users\Lilly\AppData\Roaming\CyberLink
2017-10-31 16:06 - 2017-10-31 16:06 - 000000000 ____D C:\Users\Lilly\AppData\Local\CyberLink
2017-10-31 15:54 - 2017-11-12 12:37 - 000003376 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2134866062-150588591-2205931496-1006
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2017-11-24 00:22 - 2015-09-16 07:46 - 000016575 _____ C:\Users\Andreas\Downloads\FRST.txt
2017-11-24 00:21 - 2015-09-16 07:07 - 000000000 ____D C:\FRST
2017-11-24 00:12 - 2016-07-16 23:51 - 002753800 _____ C:\WINDOWS\system32\perfh007.dat
2017-11-24 00:12 - 2016-07-16 23:51 - 000719256 _____ C:\WINDOWS\system32\perfc007.dat
2017-11-24 00:12 - 2015-12-04 22:25 - 005613382 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-11-24 00:08 - 2017-03-28 23:35 - 000000000 ____D C:\Users\Andreas\AppData\LocalLow\Mozilla
2017-11-24 00:08 - 2016-10-01 07:18 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-11-24 00:08 - 2016-10-01 07:02 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-11-24 00:08 - 2016-10-01 07:02 - 000000000 ____D C:\ProgramData\NVIDIA
2017-11-24 00:08 - 2016-07-16 07:04 - 003407872 _____ C:\WINDOWS\system32\config\BBI
2017-11-24 00:08 - 2014-12-20 15:10 - 000000000 __SHD C:\Users\Andreas\IntelGraphicsProfiles
2017-11-24 00:06 - 2015-11-26 23:23 - 000000000 ____D C:\AdwCleaner
2017-11-23 23:17 - 2015-07-29 21:49 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-23 22:13 - 2015-09-16 07:46 - 000061305 _____ C:\Users\Andreas\Downloads\Addition.txt
2017-11-23 19:40 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\rescache
2017-11-23 18:41 - 2016-12-17 20:10 - 000000000 ____D C:\Users\Sabine\AppData\LocalLow\Mozilla
2017-11-23 18:34 - 2016-07-16 12:45 - 000000000 ____D C:\WINDOWS\INF
2017-11-23 18:34 - 2014-12-20 18:09 - 000000000 __SHD C:\Users\Sabine\IntelGraphicsProfiles
2017-11-23 08:39 - 2016-12-17 19:49 - 000001148 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-11-23 08:39 - 2016-10-01 07:39 - 000000000 ___DC C:\WINDOWS\Panther
2017-11-23 08:39 - 2015-12-21 00:30 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-11-23 08:39 - 2015-02-06 15:40 - 000001160 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-11-23 08:38 - 2015-12-13 11:53 - 000000085 _____ C:\WINDOWS\wininit.ini
2017-11-23 08:38 - 2015-12-13 11:08 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-11-23 08:38 - 2014-12-20 16:09 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2017-11-23 08:34 - 2016-07-16 12:47 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2017-11-23 08:34 - 2016-07-16 07:04 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-11-23 08:33 - 2015-09-07 14:56 - 000000000 ____D C:\Program Files\Common Files\AV
2017-11-23 08:25 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-11-22 18:47 - 2017-09-03 10:46 - 000003380 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2134866062-150588591-2205931496-1001
2017-11-22 18:47 - 2015-12-04 23:36 - 000002438 _____ C:\Users\Andreas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-11-22 18:47 - 2014-12-20 15:11 - 000000000 ___RD C:\Users\Andreas\OneDrive
2017-11-22 18:46 - 2016-07-16 12:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-11-22 18:46 - 2014-12-20 15:46 - 000000000 ____D C:\Users\Andreas\AppData\Roaming\Mozilla
2017-11-22 18:46 - 2014-12-20 15:15 - 000000000 ____D C:\Users\Andreas\AppData\Local\CrashDumps
2017-11-22 18:45 - 2016-12-19 00:15 - 000000000 ____D C:\Users\Andi\AppData\LocalLow\Mozilla
2017-11-22 18:45 - 2015-09-17 19:51 - 000192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-11-22 18:45 - 2014-12-20 21:56 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-11-22 18:39 - 2016-10-01 07:01 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-11-22 09:31 - 2014-12-20 22:09 - 979256320 _____ C:\Users\Andi\Documents\Outlook.pst
2017-11-22 08:30 - 2014-12-20 18:50 - 000000000 __SHD C:\Users\Andi\IntelGraphicsProfiles
2017-11-21 19:33 - 2014-12-20 18:09 - 000000000 ____D C:\Users\Sabine\AppData\Local\clear.fi
2017-11-21 17:33 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-11-21 17:33 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-11-21 17:33 - 2015-01-25 17:39 - 000000000 ____D C:\Users\Sabine\AppData\Local\CrashDumps
2017-11-19 14:55 - 2014-12-20 19:22 - 000000000 ____D C:\Users\Andi\AppData\Local\CrashDumps
2017-11-19 14:04 - 2016-10-01 07:03 - 000000000 ____D C:\Users\Sabine
2017-11-19 13:59 - 2016-05-04 15:43 - 000000000 ____D C:\Users\Sabine\Documents\Kinder
2017-11-19 13:44 - 2015-11-07 18:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-19 13:44 - 2015-02-06 15:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-11-17 19:42 - 2016-06-15 13:53 - 000000000 ____D C:\Users\Sabine\Documents\Rezepte
2017-11-17 18:33 - 2014-12-20 18:11 - 000000000 ____D C:\Users\Sabine\AppData\Roaming\Mozilla
2017-11-17 09:03 - 2016-10-01 07:03 - 000000000 ____D C:\Users\Andi
2017-11-17 09:02 - 2014-12-20 18:54 - 000000000 ____D C:\Users\Andi\AppData\Roaming\Mozilla
2017-11-16 23:22 - 2017-09-29 21:48 - 000000000 ____D C:\Program Files\rempl
2017-11-15 19:47 - 2016-10-01 07:01 - 000359032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-11-15 19:46 - 2016-07-16 12:47 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-11-15 19:46 - 2016-07-16 12:47 - 000000000 ___RD C:\Program Files\Windows Defender
2017-11-15 19:46 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-11-15 19:46 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-11-15 19:46 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-11-15 19:46 - 2016-07-16 12:47 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-11-15 19:45 - 2016-07-16 12:47 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-11-15 19:45 - 2016-07-16 12:47 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-11-15 19:04 - 2014-12-30 11:07 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-11-15 18:58 - 2017-10-11 07:49 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-11-15 18:58 - 2016-07-16 12:36 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-11-15 18:58 - 2014-12-30 11:07 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-11-15 18:52 - 2016-06-20 09:23 - 000000000 ____D C:\Users\Sabine\Downloads\Spanisch
2017-11-14 23:58 - 2014-07-25 22:20 - 000000000 ____D C:\Program Files (x86)\Acer
2017-11-14 23:56 - 2014-12-20 18:51 - 000000000 ____D C:\Users\Andi\AppData\Local\clear.fi
2017-11-13 09:53 - 2014-07-25 22:21 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2017-11-13 09:04 - 2016-10-01 07:18 - 000003508 _____ C:\WINDOWS\System32\Tasks\BacKGroundAgent
2017-11-13 09:04 - 2014-07-25 22:57 - 000000000 ___HD C:\OEM
2017-11-12 17:01 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-11-12 14:19 - 2017-01-05 15:49 - 000000000 ____D C:\Users\Lilly\AppData\LocalLow\Mozilla
2017-11-12 12:37 - 2016-01-03 17:18 - 000002432 _____ C:\Users\Lilly\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-11-12 12:37 - 2016-01-03 17:18 - 000000000 ___RD C:\Users\Lilly\OneDrive
2017-11-12 12:35 - 2015-11-15 17:30 - 000000000 __SHD C:\Users\Lilly\IntelGraphicsProfiles
2017-11-05 19:45 - 2015-03-08 21:03 - 000000000 ____D C:\Users\Sabine\Documents\Schule allgemein
2017-11-05 01:47 - 2016-07-16 12:49 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-11-05 01:47 - 2016-07-16 12:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-03 21:21 - 2017-08-04 19:00 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2134866062-150588591-2205931496-1004
2017-11-03 21:21 - 2015-12-04 23:44 - 000002435 _____ C:\Users\Sabine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-11-03 21:21 - 2015-12-04 23:44 - 000000000 ___RD C:\Users\Sabine\OneDrive
2017-11-03 19:02 - 2017-08-04 19:03 - 000003374 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2134866062-150588591-2205931496-1005
2017-11-03 19:02 - 2015-12-04 22:28 - 000002429 _____ C:\Users\Andi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-11-03 19:02 - 2015-12-04 22:28 - 000000000 ___RD C:\Users\Andi\OneDrive
2017-11-01 10:54 - 2016-10-01 07:03 - 000000000 ____D C:\Users\Lilly
2017-10-29 21:51 - 2016-10-01 07:18 - 000004440 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-10-29 15:51 - 2016-07-16 12:47 - 000000000 ____D C:\WINDOWS\system32\NDF
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-03-22 16:22 - 2016-03-22 16:38 - 000098334 _____ () C:\Program Files\shexview-x64.zip
2016-03-22 16:22 - 2015-09-01 12:48 - 000066867 _____ () C:\Program Files\shexview.zip
2006-12-11 19:13 - 2006-12-11 19:13 - 000097336 _____ (Un4seen Developments) C:\Users\Andreas\AppData\Local\bass.dll
2006-12-11 19:13 - 2006-12-11 19:13 - 000013872 _____ (Un4seen Developments) C:\Users\Andreas\AppData\Local\basscd.dll
2014-12-20 15:11 - 2015-11-29 17:00 - 000168801 _____ () C:\Users\Andreas\AppData\Local\BTServer.log
2007-08-13 17:46 - 2007-08-13 17:46 - 000102912 _____ (Albert L Faber) C:\Users\Andreas\AppData\Local\CDRip.dll
2007-08-13 17:46 - 2007-08-13 17:46 - 000155136 _____ () C:\Users\Andreas\AppData\Local\lame_enc.dll
2007-01-18 21:09 - 2007-01-18 21:09 - 000623616 _____ (Ivan Bischof ©2003 - 2005) C:\Users\Andreas\AppData\Local\No23 Recorder.exe
2005-08-23 22:34 - 2005-08-23 22:34 - 000029184 _____ () C:\Users\Andreas\AppData\Local\no23xwrapper.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 000015872 _____ () C:\Users\Andreas\AppData\Local\ogg.dll
2017-10-31 16:15 - 2017-10-31 16:15 - 000001434 _____ () C:\Users\Andreas\AppData\Local\RecConfig.xml
2006-10-26 01:06 - 2006-10-26 01:06 - 000143872 _____ () C:\Users\Andreas\AppData\Local\vorbis.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 000064000 _____ () C:\Users\Andreas\AppData\Local\vorbisenc.dll
2006-10-26 01:06 - 2006-10-26 01:06 - 000019456 _____ () C:\Users\Andreas\AppData\Local\vorbisfile.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2017-11-23 18:46
==================== Ende von FRST.txt ============================
Addition.txt Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-11-2017
durchgeführt von Andreas (24-11-2017 00:22:34)
Gestartet von C:\Users\Andreas\Downloads
Windows 10 Home Version 1607 14393.1884 (X64) (2016-10-01 06:20:39)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2134866062-150588591-2205931496-500 - Administrator - Disabled)
Andi (S-1-5-21-2134866062-150588591-2205931496-1005 - Limited - Enabled) => C:\Users\Andi
Andreas (S-1-5-21-2134866062-150588591-2205931496-1001 - Administrator - Enabled) => C:\Users\Andreas
DefaultAccount (S-1-5-21-2134866062-150588591-2205931496-503 - Limited - Disabled)
Gast (S-1-5-21-2134866062-150588591-2205931496-501 - Limited - Disabled)
Henry (S-1-5-21-2134866062-150588591-2205931496-1007 - Limited - Enabled) => C:\Users\Henry
HomeGroupUser$ (S-1-5-21-2134866062-150588591-2205931496-1003 - Limited - Enabled)
Lilly (S-1-5-21-2134866062-150588591-2205931496-1006 - Limited - Enabled) => C:\Users\Lilly
Sabine (S-1-5-21-2134866062-150588591-2205931496-1004 - Limited - Enabled) => C:\Users\Sabine
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.10.2002 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2001 - Acer Incorporated)
abFiles (HKLM-x32\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 2.00.3002 - Acer Incorporated)
abMusic (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 3.01.2003.6 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 4.00.2001.1 - Acer Incorporated)
Acer Care Center (HKLM\...\{A424844F-CDB3-45E2-BB77-1DDE4A091E76}) (Version: 1.00.3012 - Acer Incorporated)
Acer Explorer Agent (HKLM\...\{4D0F42CF-1693-43D9-BDC8-19141D023EE0}) (Version: 2.00.3000 - Acer Incorporated)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8115 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.12.2006 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.8106.0 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.01.3016.0 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8108 - Acer Incorporated)
Acer User Experience Improvement Program App Monitor Plugin (HKLM\...\{978724F6-1863-4DD5-9E66-FB77F5AB5613}) (Version: 1.02.3005 - Acer Incorporated)
Acer User Experience Improvement Program Framework (HKLM\...\{12A718F2-2357-4D41-9E1F-18583A4745F7}) (Version: 1.02.3005 - Acer Incorporated)
Acer Video Player (HKLM-x32\...\{B6846F20-4821-11E3-8F96-0800200C9A66}) (Version: 1.00.2005.0 - Acer Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Aloha TriPeaks (HKLM-x32\...\WTA-8cf191b2-a67c-435e-afef-755778855bd4) (Version: 2.2.0.98 - WildTangent) Hidden
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.25.2001.0 - Acer Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{3D1290E6-1F77-46D5-A715-A56679C8D4E3}) (Version: 6.0.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D0E45DEC-F4B9-4370-A9DF-66837789C2EF}) (Version: 6.0.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{E3C4B99B-BE71-4C27-8E3C-4FAE3C46E1D5}) (Version: 11.0.0.30 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.)
Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
Bejeweled 2 Deluxe (HKLM-x32\...\WTA-fc929f39-f1f8-40b7-a75b-59e9db6a5971) (Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)
Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version: - Canon Inc.)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4917 - CyberLink Corp.)
CyberLink Power Media Player 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3.4218 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4220 - CyberLink Corp.)
Dokan Library 0.5.3 (HKLM-x32\...\DokanLibrary) (Version: - )
Farm to Fork Collector's Edition (HKLM-x32\...\WTA-3eb7a672-18b3-4cf4-9220-bbbe2d1b4241) (Version: 3.0.2.59 - WildTangent) Hidden
FoneLab 8.3.30 (HKLM-x32\...\{CA7ED0B0-3CD4-4254-A9D2-2D7F78C5E3C5}_is1) (Version: 8.3.30 - Aiseesoft Studio)
Foxit PhantomPDF (HKLM-x32\...\{D4DF5498-C95C-4A02-9951-725FB2D7BC0D}) (Version: 6.0.121.624 - Foxit Corporation)
Game Explorer Categories - genres (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 11.0.0.7 - WildTangent, Inc.)
Game Explorer Categories - main (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 11.0.0.7 - WildTangent, Inc.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.2.2.1001 - Genesys Logic)
GMX Softwareaktualisierung (HKLM-x32\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.3.0 - 1&1 Mail & Media GmbH)
Governor of Poker 2 Premium Edition (HKLM-x32\...\WTA-93f6ec6c-4ab5-4e4a-b9a0-4c465f5afda4) (Version: 3.0.2.59 - WildTangent) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.165.1 - Intel Corporation)
iTunes (HKLM\...\{1441974B-BB94-41EC-AC0F-30D5F5AC54F7}) (Version: 12.7.0.166 - Apple Inc.)
Jewel Match 3 (HKLM-x32\...\WTA-0db80174-f49f-4e0d-b74b-010daab2c125) (Version: 3.0.2.59 - WildTangent) Hidden
kikin Plugin (NO23 Edition) 1.11 (HKLM-x32\...\kikin Plugin (NO23 Edition)) (Version: 1.11 - kikin)
King Oddball (HKLM-x32\...\WTA-afba9316-373f-48e3-9a55-cf9306ef9964) (Version: 3.0.2.48 - WildTangent) Hidden
LAV Filters 0.65 (HKLM-x32\...\lavfilters_is1) (Version: 0.65 - Hendrik Leppkes)
LUXOR Evolved (HKLM-x32\...\WTA-7629c3e0-81c4-4331-8d48-fea6aa86a243) (Version: 2.2.0.98 - WildTangent) Hidden
Magic Academy (HKLM-x32\...\WTA-e59a4c10-1ee0-4663-ad29-985ed06aa136) (Version: 2.2.0.98 - WildTangent) Hidden
Media Go (HKLM-x32\...\{65256C0D-3FE7-4D2E-BB3E-53F1175481C8}) (Version: 3.0.403 - Sony)
Media Go Network Downloader (HKLM-x32\...\{C52148B9-19E0-433A-9422-3451B1BEE20F}) (Version: 1.6.01.0 - Sony)
Media Go Video Playback Engine 2.20.106.05220 (HKLM-x32\...\{ECAE7E40-24A6-9E8E-EA93-90D080C878B3}) (Version: 2.20.106.05220 - Sony)
MediaPortal (HKLM-x32\...\MediaPortal) (Version: 1.12.0 - Team MediaPortal)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUSR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2134866062-150588591-2205931496-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Mozilla Firefox 57.0 (x64 de) (HKLM\...\Mozilla Firefox 57.0 (x64 de)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.0.6525 - Mozilla)
MySQL Server 5.6 (HKLM\...\{56DA0CB5-ABD2-4318-BEAB-62FDBC9B12CC}) (Version: 5.6.10 - Oracle Corporation)
No23 Recorder (HKLM-x32\...\{22B0E143-2B0B-435B-9F56-136A3D16065F}) (Version: 2.1.0.3 - No23)
NVIDIA Grafiktreiber 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.54 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
Peggle Nights (HKLM-x32\...\WTA-89083f96-439b-40b7-94dd-184399db681d) (Version: 2.2.0.98 - WildTangent) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
Plants vs. Zombies - Game of the Year (HKLM-x32\...\WTA-b7be7ebf-5b65-4415-80ff-723610ba3440) (Version: 3.0.2.59 - WildTangent) Hidden
Polar Bowler 1st Frame (HKLM-x32\...\WTA-9012a3af-2672-4f16-898d-6eb41a599dc0) (Version: 3.0.2.59 - WildTangent) Hidden
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.816.818.061114 - REALTEK Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.32.508.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7218 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.243 - REALTEK Semiconductor Corp.)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
RK-WLAN-Keygen (HKLM-x32\...\RK-WLAN-Keygen_is1) (Version: 1.4 - Robert Knapp Software)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Spotify (HKLM-x32\...\Spotify) (Version: 0.9.6.81.gd359a796 - Spotify AB)
TERRATEC Cinergy Hybrid Stick (64 Bit) (HKLM-x32\...\{53DE5511-BBC4-441D-AD55-6B8E23A3AA05}) (Version: 1.00.08.06 - TERRATEC Electronic GmbH)
The Chronicles of Emerland Solitaire (HKLM-x32\...\WTA-1f9302ba-ad6c-4d95-adb3-3d317c47f6b9) (Version: 3.0.2.51 - WildTangent) Hidden
TreeSize Free V3.4.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.4.2 - JAM Software)
Trinklit Supreme (HKLM-x32\...\WTA-36680bb4-a1ba-44ae-bc97-e8e69ef6d63f) (Version: 2.2.0.98 - WildTangent) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0011-0000-0000-0000000FF1CE}_PROPLUSR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{61702639-6539-473A-8FE5-618E194C0069}) (Version: 2.7.0.0 - Microsoft Corporation)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUSR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUSR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUSR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUSR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer) (Version: 4.0.11.13 - WildTangent) Hidden
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-wildgames) (Version: 4.1.1.14 - WildTangent) Hidden
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows-Treiberpaket - TerraTec (TTHID) HIDClass (05/21/2009 1.00.01.05) (HKLM\...\7051B1F240802F891754E1EFC6431B0D98C2DA65) (Version: 05/21/2009 1.00.01.05 - TerraTec )
Windows-Treiberpaket - TerraTec (UDXTTM6010) Media (05/14/2009 1.00.08.06) (HKLM\...\FCC6C304DBC4CB7CFCC0BEF0BCE1BEC491CD289D) (Version: 05/14/2009 1.00.08.06 - TerraTec )
WISO steuer:Sparbuch 2016 (HKLM-x32\...\{CE5A6FB2-B026-4F20-898D-1D03CAEBCFB4}) (Version: 23.00.1146 - Buhl Data Service GmbH)
WISO steuer:Sparbuch 2017 (HKLM-x32\...\{EA16D0A1-7AE7-493C-A575-29A1D2C9E001}) (Version: 24.00.1375 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2015 (HKLM-x32\...\{5ECF1904-3E4D-4E8F-B9B9-C4996737BAC4}) (Version: 22.00.8811 - Buhl Data Service GmbH)
Zuma's Revenge (HKLM-x32\...\WTA-0513b71e-fc05-4f5d-b314-c3f66985b033) (Version: 2.2.0.97 - WildTangent) Hidden
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2017-10-02] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2017-10-02] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2017-10-02] (Acer Incorporated)
ContextMenuHandlers1: [Foxit_ConvertToPDF] -> {C5269811-4A29-4818-A4BB-111F9FC63A5F} => C:\Program Files (x86)\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll [2014-05-14] (Foxit Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-09-30] (Intel Corporation)
ContextMenuHandlers5: [igfxOSP] -> {FA507C3F-30C6-4DCA-9EE5-2656072EEC14} => C:\WINDOWS\system32\igfxOSP.dll [2015-09-30] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {20BE3061-96D8-420D-9468-C7F2EAF226B7} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-11-15] (Microsoft Corporation)
Task: {2923779E-6EEB-48BE-A74D-8C074541E151} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [2014-08-29] ()
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {357049B3-B84E-41F4-9579-950D43BC67A7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {35DF1C80-BF8E-4AC9-9DE6-97FF9A033028} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {44885019-5189-4B87-8C02-F27489CCF719} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4591B8E4-F63B-4CE3-B194-C1712DE9CC6A} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2017-10-02] (Acer)
Task: {4621F24C-2B09-4415-A9B5-59E80B23B1ED} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2014-08-29] ()
Task: {5929BE00-5EB4-45FA-AEF3-9F4424E9F855} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTrayLauncher.exe [2014-07-22] (Acer Incorporated)
Task: {5ED1E25B-2496-4293-B5CF-133ECE1470B6} - System32\Tasks\BacKGroundAgent => C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe [2017-09-26] (Acer Incorporated)
Task: {68E16F1E-8B3F-4F27-9047-502115091050} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {78399F1B-EF4B-4E80-AB3D-06F50EEA7866} - System32\Tasks\abDocsDllLoader => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe [2017-09-28] ()
Task: {7D388A0D-9FF3-4F5B-A2C8-AC0CE4282294} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {81FDA3E6-D1F3-4FA6-91FE-E4C1740E8CC7} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {90C228E0-AB6E-462C-955F-EE7AA6CFCA8D} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {9B6DBE0A-3F89-416E-929F-FD91B36DC467} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {9B991F65-92E6-4239-B366-162EDCBF1A64} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {A21BBCF8-234D-4AC2-A4E3-DC743D2CB19A} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {A4E82483-32A3-451F-BB7E-A45A3EBF451F} - System32\Tasks\Quick Access Quick Launcher => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2014-06-26] (Acer Incorporate)
Task: {AA9F1F0F-147D-4013-A93A-B1C5D81C0680} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [2014-06-08] (Acer Incorporated)
Task: {BA47594C-1118-4800-9479-66ABC18EA2AA} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2015-01-12] (1&1 Mail & Media GmbH)
Task: {BBA5851C-136B-47A0-BE6E-4D9BE4051F84} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2014-12-30] (Acer Incorporate)
Task: {BF4CBBAB-B41A-41DB-9C48-17E451B29579} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-21] (Adobe Systems Incorporated)
Task: {C4159BE2-816A-4417-93D1-244BE736B253} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Sabine\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {C6981658-D2D8-442A-AE86-315EAB01D7CF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.)
Task: {EB60C5F3-04E8-48A3-A44C-23A0E5E87D09} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {F44B6B5F-D7E8-4395-B083-3765E55632CC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {F69239AC-BF10-463C-8CAE-7FD508923AE7} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [2014-03-13] (TODO: <Company name>)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Andreas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\LOVEFiLM.lnk -> C:\Program Files\LoveFilm\StartURL.exe () -> hxxp://Lovefilm.de/acer
ShortcutWithArgument: C:\Users\Public\Desktop\Dropbox.lnk -> C:\Program Files\Dropbox\StartURL.exe () -> hxxps://www.dropbox.com/partners/acer2014/download
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-07-16 12:42 - 2016-07-16 12:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-09-18 15:58 - 2017-09-07 07:01 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-03-16 15:08 - 2017-03-16 15:08 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-09-01 01:49 - 2017-09-01 01:49 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2012-05-19 01:03 - 2012-05-19 01:03 - 000011776 _____ () C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
2013-02-01 14:09 - 2013-02-01 14:09 - 012907520 _____ () C:\Program Files\MySQL\MySQL Server 5.6\bin\mysqld.exe
2014-07-25 22:23 - 2012-04-24 11:43 - 000254512 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2016-10-01 07:02 - 2016-12-29 14:16 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-09-30 20:39 - 2015-09-30 20:39 - 000415128 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-10-01 07:34 - 2016-10-01 07:34 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-16 16:04 - 2017-03-04 07:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-16 16:03 - 2017-03-04 07:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-16 16:03 - 2017-03-04 07:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-16 16:03 - 2017-03-04 07:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-10-11 07:47 - 2017-09-18 03:13 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-10-11 07:47 - 2017-09-18 03:14 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-10-11 07:47 - 2017-09-18 03:16 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-09-11 13:45 - 2017-09-11 13:45 - 000092472 _____ () C:\Program Files\iTunes\zlib1.dll
2017-09-11 13:45 - 2017-09-11 13:45 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll
2017-01-23 10:03 - 2016-11-28 07:07 - 000088024 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\AppService.exe
2017-09-28 17:21 - 2017-09-28 17:21 - 001769312 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
2017-08-04 19:10 - 2017-08-04 19:11 - 000019968 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-08-04 19:10 - 2017-08-04 19:11 - 028986880 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-08-04 19:10 - 2017-08-04 19:11 - 000428032 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-08-04 19:10 - 2017-08-04 19:11 - 020510208 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2017-08-04 19:10 - 2017-08-04 19:11 - 002339328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2017-08-04 19:10 - 2017-08-04 19:11 - 003041792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2017-06-03 11:19 - 2017-06-03 11:20 - 003139496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-06-03 11:19 - 2017-06-03 11:20 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
2017-08-04 19:10 - 2017-08-04 19:11 - 001361920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35063.13610.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-01-23 10:03 - 2015-11-24 06:18 - 000013824 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\Utility.dll
2017-01-23 10:03 - 2016-08-31 03:16 - 000922112 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\Framework.dll
2017-01-23 10:03 - 2016-01-22 10:12 - 002827776 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\IosDevice.dll
2017-01-23 10:03 - 2011-03-24 08:42 - 000334848 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\QtXml4.dll
2017-01-23 10:03 - 2011-03-24 08:56 - 007981056 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\QtGui4.dll
2017-01-23 10:03 - 2011-03-24 08:43 - 000934912 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\QtNetwork4.dll
2017-01-23 10:03 - 2011-03-24 08:42 - 002145792 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\QtCore4.dll
2017-01-23 10:03 - 2015-11-24 06:18 - 000987136 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\libxml2.dll
2017-01-23 10:03 - 2011-03-24 10:25 - 009843200 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\QtWebKit4.dll
2017-01-23 10:03 - 2015-11-24 06:18 - 000077824 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\zlib1.dll
2017-01-23 10:03 - 2011-03-24 09:06 - 000232960 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\phonon4.dll
2017-01-23 10:03 - 2011-03-24 09:06 - 002530816 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\QtXmlPatterns4.dll
2017-01-23 10:03 - 2015-11-24 06:18 - 000562072 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\SQLite3.dll
2017-01-23 10:03 - 2011-03-24 10:37 - 000025600 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\imageformats\qgif4.dll
2017-01-23 10:03 - 2011-03-24 10:37 - 000027648 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\imageformats\qico4.dll
2017-01-23 10:03 - 2011-03-24 10:37 - 000119808 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\imageformats\qjpeg4.dll
2017-01-23 10:03 - 2011-03-24 10:37 - 000220672 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\imageformats\qmng4.dll
2017-01-23 10:03 - 2011-03-24 10:37 - 000278528 _____ () C:\Program Files (x86)\Aiseesoft Studio\FoneLab\imageformats\qtiff4.dll
2014-10-29 02:20 - 2013-12-10 00:27 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-09-22 15:14 - 2017-09-22 15:14 - 000202528 _____ () C:\Program Files (x86)\Acer\abPhoto\curllib.dll
2017-09-22 15:17 - 2017-09-22 15:17 - 000641312 _____ () C:\Program Files (x86)\Acer\abPhoto\tag.dll
2017-09-22 15:17 - 2017-09-22 15:17 - 000654072 _____ () C:\Program Files (x86)\Acer\abPhoto\sqlite3.dll
2017-09-22 15:16 - 2017-09-22 15:16 - 000119072 _____ () C:\Program Files (x86)\Acer\abPhoto\OpenLDAP.dll
2017-11-13 09:04 - 2017-11-13 09:04 - 000015136 _____ () C:\WINDOWS\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
2017-09-26 12:35 - 2017-09-26 12:35 - 000013088 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll
2017-09-26 12:34 - 2017-09-26 12:34 - 000277856 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll
2017-10-02 14:56 - 2017-10-02 14:56 - 000202456 _____ () C:\Program Files (x86)\Acer\Acer Portal\curllib.dll
2017-10-02 14:56 - 2017-10-02 14:56 - 000119000 _____ () C:\Program Files (x86)\Acer\Acer Portal\OpenLDAP.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-2134866062-150588591-2205931496-1001\...\localhost -> localhost
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2013-08-22 14:25 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\acer01.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-2134866062-150588591-2205931496-1001\...\StartupApproved\Run: => "Skype"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{E1A92F31-8779-4976-9FAA-B88B89FBBCCC}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{7AB6867E-A6A0-4921-9DB7-9B9C42DB48B9}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{329CBEE9-09F8-4D71-A738-82022377D095}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{49C8FC1A-E311-40F5-AC46-2424EB2F1912}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{F7A92043-2F11-451A-ACEB-EBB3710EF0E2}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{F406CE67-5B24-465A-A4F0-9AA0C7DAC781}] => (Allow) C:\Program Files (x86)\Acer\abMusic\WindowsUpnpMV.exe
FirewallRules: [{2B5F8EE6-4EFB-49E5-A0E0-DC0BB0E64B1F}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{E7D149C2-982C-4657-B83B-CA8CFA1137C4}] => (Allow) C:\Program Files (x86)\Acer\abMusic\DMCDaemon.exe
FirewallRules: [{BE9F1554-6A5B-499B-8703-C684B3A25C23}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{BF04E5B8-50F5-430B-920B-9FF2088E0239}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{B0EE37C9-2324-4759-88C9-905F67F665FB}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{08B984BE-02D6-444E-A620-603FE7DC7366}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{0A20BDB2-3A22-4C8B-A174-0307ED73048D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{6B04AB04-A2A8-4C44-AD62-DFBE5F7C8CCA}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{2EA69E2E-4249-4721-9591-66DB1CB31741}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{05FB242C-6370-4FB6-8BA6-BD7354BF5106}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{3F14814A-6654-4502-BAE3-2DB1FEF910BF}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{2589C329-AB2F-46F6-8E8D-9248B56CE344}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{D6EF0449-6107-48A0-95A8-EF40668E33BC}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{F464C4BB-0BDC-43B9-BFC5-5E6583599744}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{A887D22E-D816-4E22-9ED0-B28FE8F6AE12}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{80386162-F41D-4031-83F2-073C9E49FD26}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{1624C36E-444C-42D3-832D-31A4D3F3FB78}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{1CE4ECF8-BF4E-4C8D-9DDA-CE2B2CEA14A6}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8365241C-BB39-4BBA-BEE1-FFECADF20EF5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E23DD453-51FA-49D7-9642-0936E64DB9FE}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{E7E48332-4443-4EC7-B5AE-3D8FD1FFE331}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe
FirewallRules: [{B619AB69-0F79-4D7E-8D9E-FE3516FCB21F}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{E72D8B36-D7B2-478E-8ABE-6A25C0241128}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
FirewallRules: [{135ED0F7-BAA4-4CEF-8AF7-9F372E8D7CB5}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Play.exe
FirewallRules: [{7C2A0603-2CDF-4896-BC0B-4BA60D0ACDDA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe
FirewallRules: [{DA81C204-3F0B-42E1-BC7A-F4D8E0DC2270}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{0D53CF8E-4B67-4E08-BFAB-2D521C646B07}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe
FirewallRules: [{3D0B0542-1EFA-4A57-822B-F0CFD12916B7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{BDAD2AE5-E99E-4912-9354-02F36A1C5812}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{56DA5225-1DF5-44D0-8981-76E932F0F1A5}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{2398FF9F-F3DD-4C70-B8D6-B86D99013E5C}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{E1E1287E-6D0A-4EF0-AAC6-F1E56D359379}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{B7CF3611-0EF0-4D3C-8AAC-722E4E9406EF}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{3CE43130-E3E6-48C9-9373-4D5D87C1C3AD}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{C75E90A0-CD33-4629-842C-707DC0CB5200}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{7022597C-F573-41EA-8C80-F7E790BF78FB}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{48BAC961-0DE0-4A88-A238-D3AC286052F2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{8A769D57-6917-454B-BF52-6C6C9EB2D2D8}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{BFEBE359-18FB-4541-BF39-72B160BE8435}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{1439AD3E-83F8-4434-A8C6-3A1817D6FC13}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{C700422C-68F3-4116-8872-EDB999F54278}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{8386C31D-E12D-46FB-84F1-377EA3D89B87}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{0FE6099C-C4FA-43D1-8E79-A742D92AD6C1}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{035E1273-9625-4A9F-8F1F-D09304FD3E02}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{3D1D2498-9E8F-4268-A5BD-5AD30EFA5388}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{ADDFDCDC-47AA-4534-8831-D5A3F000C4A2}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{BC5D5A30-A349-4628-B205-D73A4E1F45CD}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{88FB6876-E474-49D8-9956-F32EBA51421B}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{12E85810-53A9-4CE6-9A52-E1602F0D3787}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{D10ECF31-23A7-471E-9D4E-AB7C4343DD80}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{C8F87D99-3C5C-4B8A-8974-EF32132F7A07}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{7EBA17A1-DA6B-49F0-AB43-4424E7570448}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{7023960D-721E-46E6-9C00-9300C7813291}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{BACAA2A4-1251-4CBD-9E1D-BCDD45EBE449}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{D3A602DA-A7D9-4BEC-83AF-2482A8669B93}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{DDB76471-9CEC-4AED-82F0-C12A18C6AE36}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{0FF2792E-1CF4-4513-A1F4-7A76B091FAF7}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{39BDF93D-5743-4A64-91E9-31429E671672}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{D8FC1E6D-B575-4A67-9429-7A11EB4AF179}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{0ACCBA34-7079-4163-8CAB-DC7F96EFAE48}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{71BF80F3-E08E-485E-988D-72E01DD1C599}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{C0C91010-9539-47E1-9B86-8E67FE73FF0A}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{655EFE3C-79E3-44BE-BAA7-9D4F71EF398F}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{BAC7012A-C916-414E-8754-E2D0A22AC49E}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{1A8D0C64-70BE-422F-9CAC-B76272EB5F45}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{4E0A992E-5213-4B26-AE25-F348DAF77736}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F6620B94-958A-4F3A-81E6-72D532D26AD8}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{01CCE8F5-2FEA-44B6-ABEE-FEC5D7F24982}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D31C9B6C-A079-4794-B4D4-90B4AA5F805D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4C8DDCE5-7F4E-46A0-B64D-58DE12630DF5}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{FC9E9F29-69E5-489A-9E47-CB343511011C}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{94A77EB3-CA91-46A6-9E02-5A4D348F8B60}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F80E1A5E-20FC-49B9-9D84-FAADF5BA7AB2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{4CB4B616-E2D3-4087-A02D-E6C020578DE8}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{4E624566-7988-4192-9AA9-295A350BA972}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{8B423A97-23FD-4879-ABA4-16964A17F8D0}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{924FC018-66C2-4487-97CD-ACC9425617B0}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{02DFCD35-F23D-426B-B703-09F1A1EEA1F9}] => (Allow) C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\TvService.exe
FirewallRules: [{F8EF3D21-07FC-40CD-A76E-AB49F1F32CD9}] => (Allow) C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\TvService.exe
FirewallRules: [{70E52097-10B4-4723-9B96-CBB220DFAFD2}] => (Allow) C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\SetupTv.exe
FirewallRules: [{50C6FF97-6AF3-45DF-90B1-7F771715D744}] => (Allow) C:\Program Files (x86)\Team MediaPortal\MediaPortal TV Server\SetupTv.exe
FirewallRules: [{53CEF680-E0C6-4A05-AAE6-3C4315917125}] => (Allow) C:\Program Files (x86)\Team MediaPortal\MediaPortal\MediaPortal.exe
FirewallRules: [{51C1567A-6240-4E63-8FA8-CCE880C6610B}] => (Allow) C:\Program Files (x86)\Team MediaPortal\MediaPortal\MediaPortal.exe
FirewallRules: [{12E3B06D-59DA-41F7-AF2D-8AA759477A5C}] => (Allow) LPort=3306
FirewallRules: [{97BEC20D-ED31-4FF0-B4CD-39C2C6C26F9D}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{D024A9FA-24FC-4373-B352-0700F1754369}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{AE82275B-4759-4470-BC28-CDAE82A0AF10}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{FD9F4A19-A476-4C28-971C-A196FFED42D2}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{473210B1-A024-4046-A97E-D4B4543F6DE6}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{23536C55-2D7D-4050-8458-70EA31C0B6B3}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{53162D9E-FA0A-4E2C-A53E-396CB8986FC4}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{5C9EC650-8940-4EFE-8AFB-457D92BA5EAF}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{BBF5DC0D-ED20-41B1-BF74-E583ABCBE0A0}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{B72CCE5B-8651-4E24-A834-220F6D0841FC}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{08F06AC4-42E2-4995-ABFB-F035C41687F1}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{D2FB210B-A7D1-4F7F-BDEF-9E5D5887DBA4}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{EE2588A8-4876-4D04-8112-BF2643EEF828}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{2665CEAF-36C9-4024-8087-339C17F16A47}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{738C35AA-40E5-4A53-9E6A-04B7D5298BD6}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{E66C92AE-D87B-4AE8-B137-E6EC642287F9}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{EBAA8308-42A2-45D4-981C-965CB4FC109F}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{23AC04C0-813F-4996-B4A7-A2FA51D2265B}] => (Allow) C:\Program Files (x86)\Acer\abMedia\DMCDaemon.exe
FirewallRules: [{2432F9E4-1C59-4FEF-852C-F26B99A3FC59}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{04630B92-0329-43CE-8B3A-7DEA4F4C87CD}] => (Allow) C:\Program Files (x86)\Acer\abMedia\WindowsUpnpMV.exe
FirewallRules: [{F11B0048-EEC2-41C3-9C96-389B966DD41D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{834E9124-BE34-48C7-8047-62A3443B419F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{D7BC6918-1CBB-4E73-B63D-2601D7B846D8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BC822A5F-15FE-40CA-9248-A4DD7DBC069B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{8573FD22-05E4-4738-B7F8-88CE7C0DF2CE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{93D18C95-4E94-4644-AE9F-162E249A6104}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6673B8D9-EC49-4708-A024-234616072EE9}] => (Allow) C:\Program Files\iTunes\iTunes.exe
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/23/2017 11:14:40 PM) (Source: COM) (EventID: 10031) (User: )
Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{2CD39202-3A2F-4935-9A86-65B919919A7F}" wurde abgelehnt.
Error: (11/23/2017 11:14:34 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: PanzerknackerAG)
Description: 7.488: Der EFS-Dienst*konnte keinen Benutzer für „Unternehmensdatenschutz“ bereitstellen. Fehlercode: 0x80070005.
Error: (11/23/2017 10:09:19 PM) (Source: COM) (EventID: 10031) (User: )
Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{2CD39202-3A2F-4935-9A86-65B919919A7F}" wurde abgelehnt.
Error: (11/23/2017 10:09:10 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: PanzerknackerAG)
Description: 7.488: Der EFS-Dienst*konnte keinen Benutzer für „Unternehmensdatenschutz“ bereitstellen. Fehlercode: 0x80070005.
Error: (11/23/2017 06:36:46 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: PanzerknackerAG)
Description: 7.488: Der EFS-Dienst*konnte keinen Benutzer für „Unternehmensdatenschutz“ bereitstellen. Fehlercode: 0x80070005.
Error: (11/23/2017 06:31:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.
Details:
(HRESULT : 0x80040210) (0x80040210)
Error: (11/23/2017 06:31:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.
Details:
(HRESULT : 0x80040210) (0x80040210)
Error: (11/23/2017 06:31:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.
Details:
(HRESULT : 0x80040210) (0x80040210)
Error: (11/23/2017 06:31:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.
Details:
(HRESULT : 0x80040210) (0x80040210)
Error: (11/23/2017 06:31:37 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.
Details:
(HRESULT : 0x80040210) (0x80040210)
Systemfehler:
=============
Error: (11/24/2017 12:10:20 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Plattformdienst für verbundene Geräte" wurde mit folgendem Fehler beendet:
Unbekannter Fehler
Error: (11/24/2017 12:08:28 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (11/24/2017 12:08:28 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (11/24/2017 12:07:55 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
und der APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (11/24/2017 12:07:40 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "User Experience Improvement Program" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/24/2017 12:07:40 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/24/2017 12:07:40 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ePower Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/24/2017 12:07:40 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/24/2017 12:07:40 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Quick Access Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/24/2017 12:07:40 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2017-11-23 08:35:10.311
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-22 18:48:59.504
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-22 18:48:59.501
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-22 18:48:59.483
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-22 18:48:59.481
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-22 18:43:54.351
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-22 18:43:54.348
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-22 18:43:54.329
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-22 18:43:54.326
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-11-19 13:44:42.831
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 8115.27 MB
Verfügbarer physikalischer RAM: 5324.75 MB
Summe virtueller Speicher: 9395.27 MB
Verfügbarer virtueller Speicher: 6379.24 MB
==================== Laufwerke ================================
Drive c: (Acer) (Fixed) (Total:117.99 GB) (Free:29.04 GB) NTFS
Drive d: (DATA) (Fixed) (Total:917.37 GB) (Free:487.57 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E39C3140)
Partition: GPT.
========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: E39C3178)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
SecurityCheck und:
Lesestoff: