~ ZHPDiag v2016.10.22.196 Von Nicolas Coolman (2016/10/22)
~ gestartet von Areski (Administrator) (2016/10/23 05:28:42)
~ Web: https://www.nicolascoolman.com
~ Blog: https://www.anti-malware.top
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Version des Status: Version OK
~ Modus: Scanner
~ Bericht: C:\Users\Areski\Desktop\ZHPDiag.txt
~ Bericht: C:\Users\Areski\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Systemstart: Normal (Normal boot)
Windows 10 Home, 64-bit (Build 14393) =>.Microsoft Corporation

---\\ Internet-browser (3) - 0s
~ GCIE: Google Chrome v53.0.2785.143
~ MFIE: Mozilla Firefox 48.0.2 (x86 de)
~ MSIE: Internet Explorer v11.321.14393.0

---\\ Windows-Produkt-Informationen (3) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ System-Datenschutz-software (3) - 2s
Avast Free Antivirus v12.3.2280 => Software.Protection
Malwarebytes Anti-Malware Version 2.2.1.1043 => Software.Protection
Windows Defender (Deactivate) => Software.Protection

---\\ Informationen über das system (6) - 0s
~ Operating System: Intel64 Family 6 Model 61 Stepping 4, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 8291.088 MB (40% free)
System Restore: Activé (Enable)
System drive C: has 101 GB () free of 235 GB

---\\ Verbindung zu den Systemmodus (3) - 0s
~ Computer Name: ARESKELL
~ User Name: Areski
~ Logged in as Administrator

---\\ Aufzählung von Disk-Einheiten (1) - 0s
~ Drive C: has 101 GB free of 235 GB (System)

---\\ Status der Windows-Sicherheitscenter (7) - 0s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ Suche generische Systemdateien (24) - 1s
[MD5.13BE475DA00AB05866CC3632F5AD54B0] - 15/09/2016 - (.Microsoft Corporation - Windows-Explorer.) -- C:\WINDOWS\Explorer.exe [4673296] =>.Microsoft Windows®
[MD5.C7645D43451C6D94D87F4D07BDE59C89] - 16/07/2016 - (.Microsoft Corporation - Windows-Hostprozess (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [69632] =>.Microsoft Corporation
[MD5.99A19C9A74E2F9820E501DCE77F84F70] - 16/07/2016 - (.Microsoft Corporation - Windows-Startanwendung.) -- C:\WINDOWS\System32\Wininit.exe [304240] =>.Microsoft Windows Publisher®
[MD5.B568DDB9AF50A7AFB67EE2BEF2D026B3] - 05/10/2016 - (.Microsoft Corporation - Interneterweiterungen für Win32.) -- C:\WINDOWS\System32\wininet.dll [2667520] =>.Microsoft Corporation
[MD5.1A3C4B5559CC49CC2C8B653365D375C7] - 15/09/2016 - (.Microsoft Corporation - Windows-Anmeldeanwendung.) -- C:\WINDOWS\System32\Winlogon.exe [674304] =>.Microsoft Corporation
[MD5.9600B7F2F89DE60A80D13DE42F672834] - 16/07/2016 - (.Microsoft Corporation - Softwarelizenzierungsbibliothek.) -- C:\WINDOWS\System32\sppcomapi.dll [402432] =>.Microsoft Corporation
[MD5.96B8A433F6407DE34850927C96C6CE9B] - 15/09/2016 - (.Microsoft Corporation - DNS-Client-API-DLL.) -- C:\WINDOWS\System32\dnsapi.dll [646136] =>.Microsoft Windows®
[MD5.227CFE3EDA82029AAC1C088A16297CD7] - 15/09/2016 - (.Microsoft Corporation - DNS-Client-API-DLL.) -- C:\WINDOWS\Syswow64\dnsapi.dll [496872] =>.Microsoft Windows®
[MD5.983266DA83FFF73DBDDD3730A4712228] - 16/07/2016 - (.Microsoft Corporation - Treiber für zusätzliche WinSock-Funktionen.) -- C:\WINDOWS\System32\drivers\AFD.sys [583520] =>.Microsoft Windows®
[MD5.A10F989A812B57B9695F6C305907C9C6] - 16/07/2016 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28512] =>.Microsoft Windows®
[MD5.F8FB51B9EF6372610E9B31A1D86B62FC] - 16/07/2016 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation
[MD5.613D0137C269187FA298A157E3D14A18] - 16/07/2016 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [173056] =>.Microsoft Corporation
[MD5.0D1D392ED2597F295956D058D33BD7C3] - 05/10/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [144896] =>.Microsoft Corporation
[MD5.10E3515FE5DBA6656FA62C29342EC4A1] - 16/07/2016 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [83456] =>.Microsoft Corporation
[MD5.B54B30992620C97230013A74461C8517] - 16/07/2016 - (.Microsoft Corporation - i8042-Anschlusstreiber.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [114176] =>.Microsoft Corporation
[MD5.F1DAECC3B3D6399875D4F10529D6A77C] - 16/07/2016 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [212480] =>.Microsoft Corporation
[MD5.E671EDAB0726E05ECEF4058B4CD73C4D] - 07/09/2016 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [450392] =>.Microsoft Windows®
[MD5.6FEBB0A847FFD5F057B9AC8889F1B9A7] - 16/07/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [279040] =>.Microsoft Corporation
[MD5.5DD8CB01C0394F8D052763D2E3C6E684] - 07/09/2016 - (.Microsoft Corporation - NT-Dateisystemtreiber.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2256224] =>.Microsoft Windows®
[MD5.6B81BF7853D161DB8AC62CD8B9C2DE6B] - 16/07/2016 - (.Microsoft Corporation - Treiber für parallelen Anschluss.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation
[MD5.17E565710172ED71B8531D8822E1C5D1] - 16/07/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [104960] =>.Microsoft Corporation
[MD5.7135785C21CA79D270D11037C43D3F19] - 17/07/2016 - (.Microsoft Corporation - Geräte-Redirector für Microsoft RDP.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [177152] =>.Microsoft Corporation
[MD5.9D2DD64A0B51C56285512DC9454340F6] - 16/07/2016 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118112] =>.Microsoft Windows®
[MD5.BF2546583BB75F01DDA60A7921DFB230] - 16/07/2016 - (.Microsoft Corporation - Volume Shadow Copy driver.) -- C:\WINDOWS\System32\drivers\volsnap.sys [391520] =>.Microsoft Windows®

---\\ Nicht von Microsoft nicht deaktiviert Windows XP/NT/2000-Dienste (19) - 1s
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.®
O23 - Service: @oem45.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Man (BcmBtRSupport) . (.Broadcom Corporation. - Bluetooth Radio Management Support.) - C:\WINDOWS\system32\BtwRSupportService.exe =>.Broadcom Corporation.
O23 - Service: Dienst "Bonjour" (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
O23 - Service: Cron Service (CronService) . (.Fork, Ltd. - Execution Service.) - C:\Windows\Prey\wpxsvc.exe
O23 - Service: Dell Customer Connect (Dell Customer Connect) . (.Dell Inc. - DCCService.) - C:\Program Files (x86)\Dell Customer Connect\DCCService.exe =>.Dell Inc®
O23 - Service: Dell Foundation Services (Dell Foundation Services) . (.Dell - DFS.Agent.WinService.) - C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe =>.Dell Inc.®
O23 - Service: Dell Update Service (DellUpdate) . (.Dell Inc. - Dell Update Windows Service.) - C:\Program Files (x86)\Dell Update\DellUpService.exe =>.Dell Inc.®
O23 - Service: ESIF Upper Framework Service (esifsvc) . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) - C:\Windows\SysWOW64\esif_uf.exe =>.Intel(R) Software®
O23 - Service: Google Update-Dienst (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation - Intel® Rapid Storage Technology®
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\WINDOWS\system32\igfxCUIService.exe =>.Intel Corporation
O23 - Service: Intel(R) Wake on Voice Setup (Intel(R) Wake on Voice Setup) . (.Intel - IntelWakeonVoiceService.) - C:\Program Files (x86)\Intel\Intel(R) Wake on Voice Setup\Intel(R)WakeonVoiceService.exe =>.Intel
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O23 - Service: (MBAMService) . (.Malwarebytes - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
O23 - Service: RTK IIS Codec Service (RtkI2SCodec) . (.Realtek Semiconductor - Realtek I2S Audio Service.) - C:\Program Files\Realtek\Audio\IIS\RtkI2SAudioService64.exe =>.Realtek Semiconductor Corp®
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: Waves System Service (WavesSysSvc) . (.Waves Audio Ltd. - WavesSysSvc Service Application.) - C:\Program Files\Realtek\Audio\AP\WavesSysSvc64.exe =>.Microsoft Windows Hardware Compatibility Publisher®

---\\ Allgemeinzustand der Dienste nicht Microsoft (SR=Running, SS=Stopped) (27) - 27s

SR - Auto [02/03/2016] [ 83768] Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.®
SR - Auto [30/08/2016] [ 197128] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.®
SR - Auto [27/03/2015] [ 2251992] @oem45.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Man (BcmBtRSupport) . (.Broadcom Corporation..) - C:\WINDOWS\system32\BtwRSupportService.exe =>.Broadcom Corporation.
SR - Auto [12/08/2015] [ 462096] Dienst "Bonjour" (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
SR - Demand [25/09/2013] [ 282112] BrYNSvc (BrYNSvc) . (.Brother Industries, Ltd..) - C:\Program Files (x86)\Browny02\BrYNSvc.exe =>.Brother Industries, Ltd.
SS - Demand [13/10/2015] [ 282216] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe =>.Intel Corporation - pGFX®
SR - Auto [05/02/2016] [ 611854] Cron Service (CronService) . (.Fork, Ltd..) - C:\Windows\Prey\wpxsvc.exe
SR - Auto [09/09/2016] [ 132472] Dell Customer Connect (Dell Customer Connect) . (.Dell Inc..) - C:\Program Files (x86)\Dell Customer Connect\DCCService.exe =>.Dell Inc®
SR - Auto [29/04/2016] [ 153960] Dell Foundation Services (Dell Foundation Services) . (.Dell.) - C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe =>.Dell Inc.®
SR - Auto [27/08/2015] [ 237272] Dell Update Service (DellUpdate) . (.Dell Inc..) - C:\Program Files (x86)\Dell Update\DellUpService.exe =>.Dell Inc.®
SR - Auto [19/09/2014] [ 1037568] ESIF Upper Framework Service (esifsvc) . (.Intel Corporation.) - C:\Windows\SysWOW64\esif_uf.exe =>.Intel(R) Software®
SS - Auto [24/10/2015] [ 144200] Google Update-Dienst (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [24/10/2015] [ 144200] Google Update-Dienst (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Auto [25/06/2014] [ 16232] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation - Intel® Rapid Storage Technology®
SS - Demand [24/04/2012] [ 169752] Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe =>.Intel Corporation®
SR - Auto [13/10/2015] [ 353896] Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\WINDOWS\system32\igfxCUIService.exe =>.Intel Corporation
SS - Demand [13/05/2014] [ 887256] Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe =>.Intel® Trusted Connect Service®
SR - Auto [24/09/2014] [ 17920] Intel(R) Wake on Voice Setup (Intel(R) Wake on Voice Setup) . (.Intel.) - C:\Program Files (x86)\Intel\Intel(R) Wake on Voice Setup\Intel(R)WakeonVoiceService.exe =>.Intel
SR - Demand [26/07/2016] [ 651576] iPod-Dienst (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.®
SR - Auto [10/11/2014] [ 158496] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
SR - Auto [10/11/2014] [ 409376] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
SS - Auto [10/03/2016] [ 1136608] (MBAMService) . (.Malwarebytes.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
SS - Demand [10/09/2016] [ 146888] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Auto [04/08/2015] [ 167168] RTK IIS Codec Service (RtkI2SCodec) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\IIS\RtkI2SAudioService64.exe =>.Realtek Semiconductor Corp®
SS - Auto [20/09/2016] [ 324224] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SR - Auto [04/08/2015] [ 515104] Waves System Service (WavesSysSvc) . (.Waves Audio Ltd..) - C:\Program Files\Realtek\Audio\AP\WavesSysSvc64.exe =>.Microsoft Windows Hardware Compatibility Publisher®

---\\ Im Automatikbetrieb geplanten Tasks (12) - 9s
[MD5.A35AE98D2D85B9504789A12860BBB5EC] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1656456] (.Activate.) =>.AVAST Software a.s.®
[MD5.C2C9E42D6C51E99C1BAB44F108E8851C] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6868696] (.Activate.) =>.Piriform Ltd®
[MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc®
[MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc®
[MD5.00000000000000000000000000000000] [APT] [UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337] (...) -- C:\WINDOWS\TEMP\DeleteFolderTask.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1132] =>.Google Inc®
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1136] =>.Google Inc®
O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\WINDOWS\System32\Tasks\avast! Emergency Update [4278] =>.AVAST Software a.s.®
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC [2858] =>.Piriform Ltd®
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3424] =>.Google Inc®
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [3648] =>.Google Inc®
O39 - APT: UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337 - (...) -- C:\WINDOWS\System32\Tasks\UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337 [2702] (.Orphan.) =>.Superfluous.Orphan

---\\ Prozess läuft (69) - 3s
[MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxCUIService Module.) -- C:\WINDOWS\system32\igfxCUIService.exe [0] [PID.1556] =>.Intel Corporation
[MD5.E5404658BAB25E38E9AD229E82B85133] - (.Waves Audio Ltd. - WavesSysSvc Service Application.) -- C:\Program Files\Realtek\Audio\AP\WavesSysSvc64.exe [515104] [PID.1808] =>.Microsoft Windows Hardware Compatibility Publisher®
[MD5.F4E0580B5789474385E7ACB189C4AF2C] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128] [PID.1416] =>.AVAST Software a.s.®
[MD5.3B3774C868868257533EC7E715BB6D53] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768] [PID.2532] =>.Apple Inc.®
[MD5.1EFB00E34AD794C404F0BB3CF7CA8B01] - (.Intel - IntelWakeonVoiceService.) -- C:\Program Files (x86)\Intel\Intel(R) Wake on Voice Setup\Intel(R)WakeonVoiceService.exe [17920] [PID.2540] =>.Intel
[MD5.00000000000000000000000000000000] - (.Broadcom Corporation. - Bluetooth Radio Management Support.) -- C:\WINDOWS\system32\BtwRSupportService.exe [0] [PID.2548] =>.Broadcom Corporation.
[MD5.7EA1EA05D0F8301EC9B8953A886900E5] - (.Realtek Semiconductor - Realtek I2S Audio Service.) -- C:\Program Files\Realtek\Audio\IIS\RtkI2SAudioService64.exe [167168] [PID.2644] =>.Realtek Semiconductor Corp®
[MD5.E0F25019195B8417F0F2BDA2D337EEE4] - (.Fork, Ltd. - Execution Service.) -- C:\Windows\Prey\wpxsvc.exe [611854] [PID.2752]
[MD5.B5C2F92EE1106DFE7BB1CCE4D35B6037] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462096] [PID.2760] =>.Apple Inc.®
[MD5.3A3CA93BF9212E6FDDE376F07EAB86E7] - (.Realtek Semiconductor - Realtek I2S Audio Background Proc.) -- C:\Program Files\Realtek\Audio\IIS\RtI2SBgProc64.exe [2725120] [PID.2780] =>.Realtek Semiconductor Corp®
[MD5.127C81F616E8CB699CFC16B0A2AF412C] - (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\SysWOW64\esif_uf.exe [1037568] [PID.2808] =>.Intel(R) Software®
[MD5.8337C8F8D136C2D35C44C78391F4F30F] - (.Node.js - Node.js: Server-side JavaScript.) -- C:\Windows\Prey\current\bin\node.exe [11811480] [PID.1972] =>.Node.js Foundation®
[MD5.F00EA296DDA78FE0D3E830F680737664] - (.Fork, Ltd. - Light Event Monitor.) -- C:\Windows\Prey\versions\1.6.3\node_modules\triggers\bin\lightevt.exe [63336] [PID.3668]
[MD5.26793BC0B998B3595F1FA5D7A0C16923] - (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\Temp\DPTF\esif_assist.exe [183816] [PID.4400] =>.Intel(R) Software®
[MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxEM Module.) -- C:\WINDOWS\system32\igfxEM.exe [0] [PID.5028] =>.Intel Corporation
[MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxHK Module.) -- C:\WINDOWS\system32\igfxHK.exe [0] [PID.5132] =>.Intel Corporation
[MD5.00000000000000000000000000000000] - (.Autoren - .) -- C:\WINDOWS\system32\igfxTray.exe [0] [PID.5188]
[MD5.58332C83C4A329A744B0B98F934934BB] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe [288920] [PID.3384] =>.Google Inc®
[MD5.788321A2C0C45F16820E00A8BA8FD3DA] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe [366232] [PID.3008] =>.Google Inc®
[MD5.986EBAA129E2A83BAEA91F3962DE8B2B] - (.Realtek Semiconductor - Realtek Audio-Manager.) -- C:\Program Files\Realtek\Audio\AP\RtkNGui64.exe [9420544] [PID.2136] =>.Realtek Semiconductor Corp®
[MD5.88EC814A578B65C96673FBEA417CABA0] - (.Realtek Semiconductor - Realtek I2S Audio Background Proc.) -- C:\Program Files\Realtek\Audio\AP\RtI2SBgProc64.exe [2725120] [PID.3740] =>.Realtek Semiconductor Corp®
[MD5.836F5B5C6917D62274D221102FB4EFF7] - (.Waves Audio Ltd. - Waves MaxxAudio Service Application.) -- C:\Program Files\Realtek\Audio\AP\WavesSvc64.exe [579712] [PID.4856] =>.Waves Inc®
[MD5.ADEA393B2B49EB25578702F4F5525E93] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [176952] [PID.2460] =>.Apple Inc.®
[MD5.87B102F726F11C4D4B129A5734620E7F] - (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23375200] [PID.5860] =>.Google Inc®
[MD5.87B102F726F11C4D4B129A5734620E7F] - (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23375200] [PID.5056] =>.Google Inc®
[MD5.E98CE40DC64F7CEBFE5766306A57AC70] - (.Dashlane, Inc. - Dashlane.) -- C:\Users\Areski\AppData\Roaming\Dashlane\Dashlane.exe [477568] [PID.4508] =>.Dashlane®
[MD5.76160FFAF6689721D9BB34385E71046B] - (...) -- C:\Users\Areski\AppData\Roaming\Dashlane\DashlanePlugin.exe [535936] [PID.6148] =>.Dashlane®
[MD5.EECB45F889E99174DA56FBDF37962D25] - (.Apple Inc. - iPodService Module (64-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [651576] [PID.6196] =>.Apple Inc.®
[MD5.EE45BF38AFFB4D2CF051AF4A9D3BB031] - (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote Clipper.) -- C:\Users\Areski\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe [809144] [PID.6516] =>.EVERNOTE CORPORATION®
[MD5.A12927788DE1555B598DFD16B4FA3F8B] - (.Brother Industries, Ltd. - Status Monitor Application.) -- C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792] [PID.6536] =>.Brother Industries, Ltd.
[MD5.0471D5669F18C50E552B2BC0CB15E7B3] - (.Brother Industries, Ltd. - BrYNCSvc.) -- C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112] [PID.6652] =>.Brother Industries, Ltd.
[MD5.CC84336ECBD7A97CEE502360AF5CE915] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [9083840] [PID.6848] =>.AVAST Software s.r.o.®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.2820] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.3152] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.2156] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.4444] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.4460] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.712] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.3360] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.3788] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.6688] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.5200] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.5228] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.5992] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.5808] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.6448] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.5256] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.3372] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.3444] =>.Google Inc®
[MD5.7225523A1034972D034298A5728E5D3C] - (.Dell Inc. - DCCService.) -- C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [132472] [PID.7624] =>.Dell Inc®
[MD5.B503A0F8201068C75AB47A72EF18F225] - (.Dell - DFS.Agent.WinService.) -- C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [153960] [PID.7852] =>.Dell Inc.®
[MD5.44C694C2B542DB3CDAEBDB1FF3233F4D] - (.Dell Inc. - Dell Update Windows Service.) -- C:\Program Files (x86)\Dell Update\DellUpService.exe [237272] [PID.8000] =>.Dell Inc.®
[MD5.DDADA5DC43704409BB66666B0FDD7BFE] - (.Dell - DFS.Common.Agent.) -- C:\Program Files\Dell\Dell Foundation Services\DFS.Common.Agent.exe [4568424] [PID.8040] =>.Dell Inc.®
[MD5.9221F67A8FC9EF9629E8E5CF0C5931B0] - (.Dell Inc. - Dell Update.) -- C:\Program Files (x86)\Dell Update\DellUpTray.exe [707800] [PID.5252] =>.Dell Inc.®
[MD5.E4B16F9770B0F04A1841C74368896870] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232] [PID.7528] =>.Intel Corporation - Intel® Rapid Storage Technology®
[MD5.CA295D3E5032DDF8A3CBD1A256E646FA] - (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496] [PID.8032] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
[MD5.ED5C8B920F2ACF11A26586B2FA66BF3D] - (.Intel Corporation - Intel(R) Local Management Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [409376] [PID.8260] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.10084] =>.Google Inc®
[MD5.A4CE33181F373EE47184FDB7FD76ACB8] - (.Spotify Ltd - Spotify.) -- C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe [6884976] [PID.7532] =>.Spotify AB®
[MD5.9F9AE9732D3EFB839B6286FC47115DAE] - (.Spotify Ltd - SpotifyCrashService.) -- C:\Users\Areski\AppData\Roaming\Spotify\SpotifyCrashService.exe [470640] [PID.8900] =>.Spotify AB®
[MD5.A4CE33181F373EE47184FDB7FD76ACB8] - (.Spotify Ltd - Spotify.) -- C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe [6884976] [PID.10056] =>.Spotify AB®
[MD5.5B3A76C2067DD01F7E42613F1FC59BFA] - (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Areski\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1483888] [PID.10112] =>.Spotify AB®
[MD5.A4CE33181F373EE47184FDB7FD76ACB8] - (.Spotify Ltd - Spotify.) -- C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe [6884976] [PID.4184] =>.Spotify AB®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.9748] =>.Google Inc®
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.7204] =>.Google Inc®
[MD5.CB2AF74658372607DCCEA22371FAF00E] - (...) -- C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1608.2213.0_x64__8wekyb3d8bbwe\Calculator.exe [3763712] [PID.344]
[MD5.C8CBDABC0FC82F58286181B7D562FEA8] - (.Telegram Messenger LLP - .) -- C:\Users\Areski\AppData\Roaming\Telegram Desktop\Telegram.exe [32933736] [PID.6020] {0084CF3F73EDB10D86} =>.Telegram Messenger LLP
[MD5.59EFE18E0373FA9F57B9178E1CEF246F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135208] [PID.5224] =>.Google Inc®
[MD5.351FFC334D83C212F9BBC2DCABC3BEEE] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Areski\Desktop\ZHPDiag3.exe [2422272] [PID.9116] =>.Nicolas Coolman

---\\ Google Chrome, Startseite,Seiten of search,Ausdehnung (19) - 1s
G2 - GCE: Preference [User Data\Default] [aakchaleigkohafkfjfjbblobjifikek] __MSG_name__
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [cjpalhdlnbpafiamejdnhcphjbkeiagm] uBlock Origin
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [ejidjjhkpiempkbhmpbfngldlkglhimk] __MSG_WEBSTORE_PRONGHORN_PRODUCT_NAME__
G2 - GCE: Preference [User Data\Default] [ejjicmeblgpmajnghnpcppodonldlgfn] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [fdjamakpfbbddfjaooikfcpapjohcfmg] Dashlane
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [gcbommkclmclpchllfjekcdonpmejbdp] __MSG_about_ext_name__
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [hmjkmjkepdijhoojdojkdfohbdgmmhki] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pioclpoplcdbaefihamjohnefbikjilc] __MSG_ExtensionName__
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pkehgijcmpdhfbdbbnkijodmdjhbjlgp] __MSG_name__

---\\ Mozilla Firefox, Plugins,Startseite,Seiten of search,Ausdehnung (6) - 1s
M0 - MFSP: prefs.js [Areski - 7dtijgxy.default] https://www.youtube.com/
P2 - EXT FILE: (.Firefox Hotfix - Firefox Hotfix: avoid updates that wou.) -- C:\Users\Areski\AppData\Roaming\Mozilla\Firefox\Profiles\7dtijgxy.default\extensions\firefox-hotfix@mozilla.org.xpi =>.Firefox Hotfix
P2 - EXT FILE: (.Dashlane - Password Manager and Secure Digital Wa.) -- C:\Users\Areski\AppData\Roaming\Mozilla\Firefox\Profiles\7dtijgxy.default\extensions\jetpack-extension@dashlane.com.xpi =>.Dashlane
P2 - EXT FILE: (.Adblock Plus - Ads were yesterday!.) -- C:\Users\Areski\AppData\Roaming\Mozilla\Firefox\Profiles\7dtijgxy.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi =>.Adblock Plus
P2 - EXT: (.Avira - Segurança do navegador Avira.) -- C:\Users\Areski\AppData\Roaming\Mozilla\Firefox\Profiles\7dtijgxy.default\extensions\abs@avira.com =>.Avira
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc.

---\\ Internet Explorer, Startseite,Seiten of search,Ausdehnung (16) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer

---\\ Internet Explorer, Proxy Management (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Line Analysis - IniFiles, Auto Laden von Programmen (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ Hosts Datei-Umleitung (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Internet Explorer Symbolleisten (1) - 0s
O3 - Toolbar: Dashlane Toolbar - [HKLM]{669695BC-A811-4A9D-8CDF-BA8C795F261C} . (.Dashlane, Inc. - Dashlane Toolbar.) -- C:\Users\Areski\AppData\Roaming\Dashlane\ie\KWIEBar.dll =>.Dashlane®

---\\ Auto Laden von Programmen vom Register und Ordner (23) - 1s
O4 - HKLM\..\Run: [RtkNGui] . (.Realtek Semiconductor - Realtek Audio-Manager.) -- C:\Program Files\Realtek\Audio\AP\RtkNGui64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [RtI2SBgProc] . (.Realtek Semiconductor - Realtek I2S Audio Background Proc.) -- C:\Program Files\Realtek\Audio\AP\RtI2SBgProc64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [WavesSvc] . (.Waves Audio Ltd. - Waves MaxxAudio Service Application.) -- C:\Program Files\Realtek\Audio\AP\WavesSvc64.exe =>.Waves Inc®
O4 - HKLM\..\Run: [CxAgent] . (.Conexant Systems, Inc. - Conexant APO Agent.) -- C:\Program Files\Realtek\Audio\AP\CXAPOAgent64.exe =>.Conexant Systems, Inc.®
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.®
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Areski\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®
O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe =>.Google Inc®
O4 - HKCU\..\Run: [Amazon Music] . (...) -- C:\Users\Areski\AppData\Local\Amazon Music\Amazon Music Helper.exe =>.Amazon Services LLC®
O4 - HKCU\..\Run: [Dashlane] . (.Dashlane, Inc. - Dashlane.) -- C:\Users\Areski\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - HKCU\..\Run: [DashlanePlugin] . (...) -- C:\Users\Areski\AppData\Roaming\Dashlane\DashlanePlugin.exe =>.Dashlane®
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®
O4 - HKLM\..\Wow6432Node\Run: [BrStsMon00] . (.Brother Industries, Ltd. - Status Monitor Application.) -- C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe =>.Brother Industries, Ltd.
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software s.r.o.®
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation®
O4 - HKUS\.DEFAULT\..\RunOnce: [Application Restart #1] . (.Microsoft Corporation - Bildschirmtastatur und Schreibbereich.) -- C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe =>.Microsoft Windows®
O4 - HKUS\S-1-5-18\..\RunOnce: [Application Restart #1] . (.Microsoft Corporation - Bildschirmtastatur und Schreibbereich.) -- C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe =>.Microsoft Windows®
O4 - HKUS\S-1-5-21-3331298620-2518700519-3266240138-1001\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Areski\AppData\Roaming\Spotify\SpotifyWebHelper.exe =>.Spotify AB®
O4 - HKUS\S-1-5-21-3331298620-2518700519-3266240138-1001\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe =>.Google Inc®
O4 - HKUS\S-1-5-21-3331298620-2518700519-3266240138-1001\..\Run: [Amazon Music] . (...) -- C:\Users\Areski\AppData\Local\Amazon Music\Amazon Music Helper.exe =>.Amazon Services LLC®
O4 - HKUS\S-1-5-21-3331298620-2518700519-3266240138-1001\..\Run: [Dashlane] . (.Dashlane, Inc. - Dashlane.) -- C:\Users\Areski\AppData\Roaming\Dashlane\Dashlane.exe =>.Dashlane®
O4 - HKUS\S-1-5-21-3331298620-2518700519-3266240138-1001\..\Run: [DashlanePlugin] . (...) -- C:\Users\Areski\AppData\Roaming\Dashlane\DashlanePlugin.exe =>.Dashlane®
O4 - HKUS\S-1-5-21-3331298620-2518700519-3266240138-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd®

---\\ Globale Tastenkombinationen Start (62) - 3s
O4 - GS\Desktop [Administrator]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Areski\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrator]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\sendTo [Administrator]: Bluetooth-Dateiübertragung.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Administrator]: Evernote.lnk . (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote.) C:\Users\Areski\AppData\Local\Apps\Evernote\Evernote\Evernote.exe =>.EVERNOTE CORPORATION®
O4 - GS\sendTo [Administrator]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrator]: Faxempfänger.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrator]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\TaskBar [Administrator]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrator]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Startup [Administrator]: EvernoteClipper.lnk . (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote Clipper.) C:\Users\Areski\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe =>.EVERNOTE CORPORATION®
O4 - GS\Programs [Administrator]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Areski\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrator]: Optionale Features.lnk . (.Microsoft Corporation - Features der On-Demand-Hilfe.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Administrator]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Administrator]: Telegram.lnk . (.Telegram Messenger LLP - .) C:\Users\Areski\AppData\Roaming\Telegram Desktop\Telegram.exe {0084CF3F73EDB10D86} =>.Telegram Messenger LLP
O4 - GS\Desktop [Areski]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Areski\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Areski]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Areski]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\sendTo [Areski]: Bluetooth-Dateiübertragung.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Areski]: Evernote.lnk . (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote.) C:\Users\Areski\AppData\Local\Apps\Evernote\Evernote\Evernote.exe =>.EVERNOTE CORPORATION®
O4 - GS\sendTo [Areski]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Areski]: Faxempfänger.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Areski]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\TaskBar [Areski]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Areski]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Startup [Areski]: EvernoteClipper.lnk . (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote Clipper.) C:\Users\Areski\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe =>.EVERNOTE CORPORATION®
O4 - GS\Programs [Areski]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Areski\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Areski]: Optionale Features.lnk . (.Microsoft Corporation - Features der On-Demand-Hilfe.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Areski]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Areski]: Telegram.lnk . (.Telegram Messenger LLP - .) C:\Users\Areski\AppData\Roaming\Telegram Desktop\Telegram.exe {0084CF3F73EDB10D86} =>.Telegram Messenger LLP
O4 - GS\Desktop [Gast]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Areski\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Gast]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Gast]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\sendTo [Gast]: Bluetooth-Dateiübertragung.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Gast]: Evernote.lnk . (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote.) C:\Users\Areski\AppData\Local\Apps\Evernote\Evernote\Evernote.exe =>.EVERNOTE CORPORATION®
O4 - GS\sendTo [Gast]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Gast]: Faxempfänger.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Gast]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\TaskBar [Gast]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Gast]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Startup [Gast]: EvernoteClipper.lnk . (.Evernote Corp., 305 Walnut Street, Redwood City, CA 9 - Evernote Clipper.) C:\Users\Areski\AppData\Local\Apps\Evernote\Evernote\EvernoteClipper.exe =>.EVERNOTE CORPORATION®
O4 - GS\Programs [Gast]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Areski\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Gast]: Optionale Features.lnk . (.Microsoft Corporation - Features der On-Demand-Hilfe.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Gast]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Gast]: Telegram.lnk . (.Telegram Messenger LLP - .) C:\Users\Areski\AppData\Roaming\Telegram Desktop\Telegram.exe {0084CF3F73EDB10D86} =>.Telegram Messenger LLP
O4 - GS\Accessories [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Editor.) C:\WINDOWS\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Programs [Public]: OneDrive.lnk . (.Microsoft Corporation - Microsoft OneDrive.) C:\Users\Areski\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Optionale Features.lnk . (.Microsoft Corporation - Features der On-Demand-Hilfe.) C:\Windows\System32\fodhelper.exe =>.Microsoft Corporation
O4 - GS\Programs [Public]: Spotify.lnk . (.Spotify Ltd - Spotify.) C:\Users\Areski\AppData\Roaming\Spotify\Spotify.exe =>.Spotify AB®
O4 - GS\Programs [Public]: Telegram.lnk . (.Telegram Messenger LLP - .) C:\Users\Areski\AppData\Roaming\Telegram Desktop\Telegram.exe {0084CF3F73EDB10D86} =>.Telegram Messenger LLP
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Remotedesktopverbindung.) C:\WINDOWS\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Snipping Tool.) C:\WINDOWS\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Schrittaufzeichnung.) C:\WINDOWS\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Windows WordPad-Anwendung.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - XPS-Viewer.) C:\WINDOWS\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Zeichentabelle.) C:\WINDOWS\system32\charmap.exe =>.Microsoft Corporation

---\\ Lop.com/Domain Entführer (7) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = fritz.box
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{35a85ab2-00da-406d-8601-5b9ac54b90b8}: DhcpNameServer = 192.168.1.3 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{71ae5837-3f65-40e4-b243-f8e27a83f8a0}: DhcpNameServer = 192.168.1.3 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{d2903baa-8f51-43e9-a8ca-1a5831733f28}: DhcpNameServer = 192.168.178.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{e44c2b86-a045-4bb0-9442-ffd7a226c5cb}: DhcpNameServer = 192.168.1.3 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{d2903baa-8f51-43e9-a8ca-1a5831733f28}: DhcpDomain = fritz.box

---\\ Zusätzliche Protokolle (22) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML-Anzeige.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32-Erweiterung für Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - ActiveX-Steuerung für Streamingvideo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32-Erweiterung für Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32-Erweiterung für Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32-Erweiterung für Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32-Erweiterung für Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML-Anzeige.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32-Erweiterung für Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML-Anzeige.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32-Erweiterung für Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML-Anzeige.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - ActiveX-Steuerung für Streamingvideo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML-Anzeige.) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation

---\\ Installierte Software (58) - 7s
O42 - Logiciel: Amazon Music - (.Amazon Services LLC.) [HKCU][64Bits] -- Amazon Amazon Music =>.Amazon Services LLC
O42 - Logiciel: Apple Application Support (32-Bit) - (.Apple Inc..) [HKLM][64Bits] -- {D4B07658-F443-4445-A261-E643996E139D} =>.Apple Inc.
O42 - Logiciel: Apple Application Support (64-Bit) - (.Apple Inc..) [HKLM][64Bits] -- {A6B0442B-E159-444B-B49D-6B9AC531EAE3} =>.Apple Inc.
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {2E4AF2A6-50EA-4260-9BA4-5E582D11879A} =>.Apple Inc.
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {56EC47AA-5813-4FF6-8E75-544026FBEA83} =>.Apple Inc.
O42 - Logiciel: Audacity 2.1.2 - (.Audacity Team.) [HKLM][64Bits] -- Audacity®_is1 =>.Audacity Team
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast =>.AVAST Software a.s.®
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {56DDDFB8-7F79-4480-89D5-25E1F52AB28F} =>.Apple Inc.
O42 - Logiciel: Canon MG6100 series MP Drivers - (...) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6100_series
O42 - Logiciel: Canon MX410 series MP Drivers - (...) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX410_series
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Cisco EAP-FAST Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {64BF0187-F3D2-498B-99EA-163AF9AE6EC9} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco LEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {51C7AD07-C3F6-4635-8E8A-231306D810FE} =>.Cisco Systems, Inc.
O42 - Logiciel: Cisco PEAP Module - (.Cisco Systems, Inc..) [HKLM][64Bits] -- {ED5776D5-59B4-46B7-AF81-5F2D94D7C640} =>.Cisco Systems, Inc.
O42 - Logiciel: Dashlane - (.Dashlane SAS.) [HKCU][64Bits] -- Dashlane =>.Dashlane SAS
O42 - Logiciel: Dell Customer Connect - (.Dell Inc..) [HKLM][64Bits] -- {35BEC446-269E-42E4-8EED-191A38CCFF3D} =>.Dell Inc.
O42 - Logiciel: Dell Foundation Services - (.Dell Inc..) [HKLM][64Bits] -- {C1C53DA1-9497-4ABB-A3D6-A63039820B37} =>.Dell Inc.
O42 - Logiciel: Dell Update - (.Dell Inc..) [HKLM][64Bits] -- {DB82968B-57A4-4397-81A5-ECAB21B5DFCD} =>.Dell Inc.
O42 - Logiciel: DW WLAN Card - (.Dell Inc..) [HKLM][64Bits] -- DW WLAN Card =>.Dell Inc.
O42 - Logiciel: Evernote v. 6.3.3 - (.Evernote Corp..) [HKLM][64Bits] -- {EB571A8A-81E0-11E6-8CC1-005056950253} =>.Evernote Corp.
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM][64Bits] -- {459CE109-4E46-4340-92BC-054642BC3BC2} =>.Google, Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: HandBrake 0.10.5 - (...) [HKLM][64Bits] -- HandBrake
O42 - Logiciel: HL-L2340D series - (.Brother Industries, Ltd..) [HKLM][64Bits] -- {46B58839-2405-48D6-A59D-F8246158A6ED} =>.Macrovision Corporation®
O42 - Logiciel: Intel Collaborative Processor Performance Control - (.Intel Corporation.) [HKLM][64Bits] -- 0E7DAF70-FB54-4B91-B192-7E771C25AEEB =>.Intel Corporation
O42 - Logiciel: Intel(R) Chipset Device Software - (.Intel Corporation.) [HKLM][64Bits] -- {BD667C75-0EDD-4073-A406-A6DD9C3016EB} =>.Intel Corporation
O42 - Logiciel: Intel(R) Dynamic Platform and Thermal Framework - (.Intel Corporation.) [HKLM][64Bits] -- {654EE65D-FAA4-4EA6-8C07-DC94E6A304D4} =>.Intel Corporation
O42 - Logiciel: Intel(R) HID Event Filter - (.Intel Corporation.) [HKLM][64Bits] -- 3FB06EEC-013D-4366-9918-71B97DFB84EB =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {1CEAC85D-2590-4760-800F-8DE5E91F3700} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {5F6F9FDB-4B94-4912-8966-77356C01303C} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {74541060-2DB1-4E8C-B239-3A78EA50F2F6} =>.Intel Corporation
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {CA07FCB1-DAE9-4F8A-8698-F9C30D1E375F} =>.Intel Corporation
O42 - Logiciel: Intel(R) ME UninstallLegacy - (.Intel Corporation.) [HKLM][64Bits] -- {43A76F9B-48F1-4E0D-A9B4-8E4F6C42E28C} =>.Intel Corporation
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - pGFX®
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140} =>.Intel Corporation
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {B96314A4-5138-460F-B769-1913B0A07D78} =>.Intel Corporation
O42 - Logiciel: Intel(R) Serial IO - (.Intel Corporation.) [HKLM][64Bits] -- {9FD91C5C-44AE-4D9D-85BE-AE52816B0294} =>.Intel Corporation
O42 - Logiciel: Intel(R) Serial IO - (.Intel Corporation.) [HKLM][64Bits] -- {B7368FC9-A295-4A95-A9EB-AFD659BA7B71} =>.Intel Corporation
O42 - Logiciel: Intel(R) Smart Connect Technology - (.Intel Corporation.) [HKLM][64Bits] -- {94A137EA-92EF-441C-A7E2-6757CC08EA82} =>.Intel Corporation
O42 - Logiciel: Intel® Chipsatz-Gerätesoftware - (.Intel(R) Corporation.) [HKLM][64Bits] -- {f5d71765-7cd1-4e68-998f-5b379e725da3} =>.Intel Corporation - Software and Firmware Products®
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {1B444AF9-1DBE-4884-8F35-969BEFCF69A8} =>.Intel Corporation
O42 - Logiciel: Intel® Wake on Voice - (.Intel Corporation.) [HKLM][64Bits] -- {A61059F4-F902-4417-8ED2-20A29972EC40} =>.Intel Corporation
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {955524E7-79EB-4CA9-BA4D-FD2DF587651B} =>.Apple Inc.
O42 - Logiciel: LAME v3.99.3 (for Windows) - (...) [HKLM][64Bits] -- LAME_is1
O42 - Logiciel: Lightworks - (.Lightworks.) [HKLM][64Bits] -- {E94DD4E4-7746-472c-AA7B-1242FED0CFC8}
O42 - Logiciel: Malwarebytes Anti-Malware Version 2.2.1.1043 - (.Malwarebytes.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 =>.Malwarebytes
O42 - Logiciel: Mozilla Firefox 48.0.2 (x86 de) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 48.0.2 (x86 de) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: Prey Anti-Theft - (.Prey, Inc..) [HKLM][64Bits] -- {592D43DB-C3CD-41D2-A967-AB5B510C029C} =>.Prey, Inc.
O42 - Logiciel: Realtek I2S Audio - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {89A448AA-3301-46AA-AFC3-34F2D7C670E8} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek USB Audio - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {0A46A65D-89AC-464C-8026-3CD44960BD04} =>.Realtek Semiconductor Corp®
O42 - Logiciel: Realtek USB Gigabit Ethernet Controller All-In-One Windows Driver - (.Realtek.) [HKLM][64Bits] -- {D8102684-7BA1-4948-88B9-535F84E6E588} =>.Realtek
O42 - Logiciel: Skype™ 7.29 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A.
O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify =>.Spotify AB®
O42 - Logiciel: Telegram Desktop version 0.10.16 - (.Telegram Messenger LLP.) [HKCU][64Bits] -- {53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1 =>.Telegram Messenger LLP
O42 - Logiciel: WIDCOMM Bluetooth Software - (.Broadcom Corporation.) [HKLM][64Bits] -- {C6D9ED03-6FCF-4410-9CB7-45CA285F9E11} =>.Broadcom Corporation
O42 - Logiciel: WordPress.com - (.Automattic, Inc..) [HKLM][64Bits] -- WordPress.com =>.Automattic, Inc.

---\\ HKCU & HKLM Software Keys (73) - 7s
HKLM\SOFTWARE\Wow6432Node\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\Wow6432Node\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\Wow6432Node\Aviata
HKLM\SOFTWARE\Wow6432Node\BcmSetup
HKLM\SOFTWARE\Wow6432Node\Brother =>.Brother
HKLM\SOFTWARE\Wow6432Node\Brother Industries, Ltd. =>.Brother Industries, Ltd.
HKLM\SOFTWARE\Wow6432Node\Canon =>.Canon
HKLM\SOFTWARE\Wow6432Node\CyberLink =>.CyberLink
HKLM\SOFTWARE\Wow6432Node\Dell =>.Dell
HKLM\SOFTWARE\Wow6432Node\DellBackupandRecovery
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\Wow6432Node\Lake
HKLM\SOFTWARE\Wow6432Node\Lame For Audacity
HKLM\SOFTWARE\Wow6432Node\Lightworks
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Prey
HKLM\SOFTWARE\Wow6432Node\Realtek =>.Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Skype =>.Skype
HKLM\SOFTWARE\Wow6432Node\SoftThinks =>.SoftThinks
HKLM\SOFTWARE\Wow6432Node\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\Wow6432Node\WafCX
HKLM\SOFTWARE\Wow6432Node\Wondershare =>.Wondershare
HKLM\SOFTWARE\Wow6432Node\WOW6432Node
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Amazon =>.Amazon
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\Brother =>.Brother
HKCU\SOFTWARE\BugSplat
HKCU\SOFTWARE\Canon =>.Canon
HKCU\SOFTWARE\CanonBJ
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\Conexant =>.Conexant
HKCU\SOFTWARE\Cyberlink =>.CyberLink
HKCU\SOFTWARE\Dashlane =>.Dashlane
HKCU\SOFTWARE\Dashlane_profiles
HKCU\SOFTWARE\Evernote =>.Evernote
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel =>.Intel
HKCU\SOFTWARE\Lake
HKCU\SOFTWARE\Lightworks
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\Michael Herf
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\Realtek =>.Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\SoftMaker Software GmbH =>.SoftMaker Software GmbH
HKCU\SOFTWARE\Spotify =>.Spotify
HKCU\SOFTWARE\SyncEngines
HKCU\SOFTWARE\Waves Audio
HKCU\SOFTWARE\Widcomm =>.Widcomm
HKCU\SOFTWARE\Wondershare =>.Wondershare
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software

---\\ Inhalt der Ordner Programme (199) - 11s
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software a.s.®
O43 - CFD: 30/08/2016 - [] AD -- C:\Program Files\Bonjour =>.Apple Inc.®
O43 - CFD: 23/09/2016 - [] AD -- C:\Program Files\CCleaner =>.Piriform Ltd®
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 03/06/2016 - [] D -- C:\Program Files\Dell =>.Broadcom Corporation®
O43 - CFD: 24/09/2016 - [] D -- C:\Program Files\DisplayLink Core Software
O43 - CFD: 21/10/2015 - [0] SHD -- C:\Program Files\Gemeinsame Dateien =>.Gemeinsame Dateien
O43 - CFD: 05/10/2016 - [] D -- C:\Program Files\Handbrake =>.Handbrake
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files\Intel =>.Intel CASE®
O43 - CFD: 06/10/2016 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files\iPod =>.Apple Inc.®
O43 - CFD: 30/08/2016 - [] AD -- C:\Program Files\iTunes =>.Apple Inc.®
O43 - CFD: 04/10/2016 - [] D -- C:\Program Files\Lightworks =>.EditShare EMEA (X-Edit Limited)®
O43 - CFD: 31/08/2016 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files\Realtek =>.Realtek Semiconductor Corp®
O43 - CFD: 31/08/2016 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 24/10/2015 - [] D -- C:\Program Files\WIDCOMM =>.Broadcom Corporation®
O43 - CFD: 16/09/2016 - [] RD -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 11/10/2016 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 16/09/2016 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 11/10/2016 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation®
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 21/10/2016 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation®
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 10/04/2016 - [] AD -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.®
O43 - CFD: 15/09/2016 - [] AD -- C:\Program Files (x86)\Audacity =>.The Audacity Team
O43 - CFD: 30/08/2016 - [0] D -- C:\Program Files (x86)\Avira =>.Avira Software
O43 - CFD: 30/08/2016 - [] AD -- C:\Program Files (x86)\Bonjour =>.Apple Inc.®
O43 - CFD: 24/06/2016 - [] D -- C:\Program Files (x86)\Brother =>.Brother
O43 - CFD: 24/06/2016 - [] D -- C:\Program Files (x86)\Browny02
O43 - CFD: 09/04/2015 - [] D -- C:\Program Files (x86)\Cisco =>.Cisco
O43 - CFD: 17/10/2016 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 30/07/2016 - [] D -- C:\Program Files (x86)\Dashlane =>.Dashlane
O43 - CFD: 16/09/2016 - [] AD -- C:\Program Files (x86)\Dell Customer Connect =>.Dell Inc®
O43 - CFD: 22/10/2015 - [] AD -- C:\Program Files (x86)\Dell Update =>.Dell Inc.®
O43 - CFD: 02/11/2015 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 24/06/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield Software
O43 - CFD: 09/04/2015 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 06/10/2016 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files (x86)\iTunes =>.Apple Inc.
O43 - CFD: 24/09/2016 - [] AD -- C:\Program Files (x86)\Lame For Audacity =>.The Audacity Team
O43 - CFD: 23/09/2016 - [] AD -- C:\Program Files (x86)\Malwarebytes Anti-Malware =>.Malwarebytes Corporation®
O43 - CFD: 09/04/2015 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 23/10/2016 - [] AD -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla Corporation®
O43 - CFD: 16/09/2016 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla Corporation®
O43 - CFD: 31/08/2016 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 03/12/2015 - [] D -- C:\Program Files (x86)\PowerDVD 12 =>.CyberLink®
O43 - CFD: 09/04/2015 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek
O43 - CFD: 31/08/2016 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 17/10/2016 - [] RD -- C:\Program Files (x86)\Skype =>.Skype Software Sarl®
O43 - CFD: 16/09/2016 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 16/09/2016 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 31/08/2016 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 11/10/2016 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation®
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files (x86)\WordPress.com
O43 - CFD: 16/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 11/10/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother =>.Brother
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG6100 series
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MX410 series
O43 - CFD: 16/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell =>.Dell
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive =>.Google Inc.
O43 - CFD: 30/08/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel =>.Intel Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes =>.Apple Inc.
O43 - CFD: 04/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightworks
O43 - CFD: 16/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype
O43 - CFD: 16/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 30/10/2015 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC =>.Wacom Technology
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WordPress.com
O43 - CFD: 21/10/2015 - [0] SHD -- C:\ProgramData\Anwendungsdaten
O43 - CFD: 10/04/2016 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 10/04/2016 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc.
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 09/04/2015 - [] D -- C:\ProgramData\Aviata
O43 - CFD: 24/06/2016 - [] D -- C:\ProgramData\Brother =>.Brother
O43 - CFD: 29/10/2015 - [] HD -- C:\ProgramData\CanonBJ =>.Canon Inc.
O43 - CFD: 25/12/2015 - [] HD -- C:\ProgramData\CanonIJFAX =>.Canon Inc.
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\Comms =>.Microsoft Corporation
O43 - CFD: 11/01/2016 - [] D -- C:\ProgramData\CyberLink =>.CyberLink
O43 - CFD: 22/12/2015 - [] D -- C:\ProgramData\Dell =>.Dell
O43 - CFD: 30/08/2016 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 24/09/2016 - [] D -- C:\ProgramData\DisplayLink =>.DisplayLink
O43 - CFD: 21/10/2015 - [0] SHD -- C:\ProgramData\Dokumente
O43 - CFD: 04/10/2016 - [] D -- C:\ProgramData\Geevs
O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\install_clap =>.Microsoft Corporation
O43 - CFD: 09/04/2015 - [] D -- C:\ProgramData\Intel =>.Intel Corporation
O43 - CFD: 23/09/2016 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes
O43 - CFD: 30/08/2016 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft
O43 - CFD: 31/08/2016 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 04/10/2016 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\PDVD =>.PDVD
O43 - CFD: 30/08/2016 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 22/10/2016 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 16/07/2016 - [0] D -- C:\ProgramData\SoftwareDistribution =>.Microsoft Corporation
O43 - CFD: 21/10/2015 - [0] SHD -- C:\ProgramData\Startmenü
O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\Temp =>.Microsoft Corporation
O43 - CFD: 31/08/2016 - [] D -- C:\ProgramData\USOPrivate =>.Microsoft Corporation
O43 - CFD: 31/08/2016 - [] D -- C:\ProgramData\USOShared =>.Microsoft Corporation
O43 - CFD: 21/10/2015 - [0] SHD -- C:\ProgramData\Vorlagen
O43 - CFD: 09/06/2016 - [] D -- C:\ProgramData\Wondershare =>.Wondershare
O43 - CFD: 10/04/2016 - [] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc.
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files (x86)\Common Files\Intel =>.Intel Corporation
O43 - CFD: 09/04/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel Corporation =>.Intel Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 09/04/2015 - [] D -- C:\Program Files (x86)\Common Files\PostureAgent =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 17/10/2016 - [] AD -- C:\Program Files (x86)\Common Files\Skype =>.Skype
O43 - CFD: 17/07/2016 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 06/06/2016 - [] D -- C:\Program Files (x86)\Common Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 09/06/2016 - [] D -- C:\Program Files (x86)\Common Files\Wondershare =>.Wondershare
O43 - CFD: 21/10/2015 - [] D -- C:\Users\Areski\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 11/04/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 05/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Audacity =>.The Audacity Team
O43 - CFD: 30/08/2016 - [] D -- C:\Users\Areski\AppData\Roaming\AVAST Software =>.AVAST Software
O43 - CFD: 06/07/2016 - [] RD -- C:\Users\Areski\AppData\Roaming\Brother =>.Brother
O43 - CFD: 25/12/2015 - [] D -- C:\Users\Areski\AppData\Roaming\CyberLink =>.CyberLink
O43 - CFD: 22/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Dashlane =>.Dashlane
O43 - CFD: 14/07/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Franz
O43 - CFD: 05/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\HandBrake =>.Handbrake
O43 - CFD: 05/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\HandBrake Team
O43 - CFD: 24/06/2016 - [] D -- C:\Users\Areski\AppData\Roaming\InstallShield =>.InstallShield
O43 - CFD: 24/10/2015 - [] D -- C:\Users\Areski\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 30/09/2016 - [] SD -- C:\Users\Areski\AppData\Roaming\Microsoft =>.Microsoft
O43 - CFD: 20/08/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 22/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Skype =>.Skype
O43 - CFD: 09/06/2016 - [] D -- C:\Users\Areski\AppData\Roaming\SoftMaker =>.SoftMaker
O43 - CFD: 23/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Spotify =>.Spotify
O43 - CFD: 23/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Telegram Desktop
O43 - CFD: 30/08/2016 - [] D -- C:\Users\Areski\AppData\Roaming\WordPress.com
O43 - CFD: 23/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 24/12/2015 - [0] D -- C:\Users\Areski\AppData\Local\ActiveSync =>.Microsoft Corporation
O43 - CFD: 04/08/2016 - [] D -- C:\Users\Areski\AppData\Local\Amazon Music
O43 - CFD: 30/08/2016 - [0] SHD -- C:\Users\Areski\AppData\Local\Anwendungsdaten
O43 - CFD: 10/04/2016 - [] D -- C:\Users\Areski\AppData\Local\Apple =>.Apple Inc.
O43 - CFD: 10/04/2016 - [] D -- C:\Users\Areski\AppData\Local\Apple Computer =>.Apple Inc.
O43 - CFD: 25/10/2015 - [] D -- C:\Users\Areski\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 07/04/2016 - [] D -- C:\Users\Areski\AppData\Local\Audacity =>.The Audacity Team
O43 - CFD: 21/10/2015 - [] D -- C:\Users\Areski\AppData\Local\Broadcom =>.Broadcom
O43 - CFD: 24/10/2015 - [] D -- C:\Users\Areski\AppData\Local\CEF =>.CEF
O43 - CFD: 04/11/2015 - [] D -- C:\Users\Areski\AppData\Local\Comms =>.Microsoft Corporation
O43 - CFD: 31/08/2016 - [] D -- C:\Users\Areski\AppData\Local\ConnectedDevicesPlatform =>.Microsoft Corporation
O43 - CFD: 17/10/2016 - [] D -- C:\Users\Areski\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 23/10/2016 - [0] D -- C:\Users\Areski\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 25/10/2015 - [] D -- C:\Users\Areski\AppData\Local\Evernote =>.EverNote Corporation
O43 - CFD: 15/12/2015 - [] D -- C:\Users\Areski\AppData\Local\EvernoteNW
O43 - CFD: 02/07/2016 - [0] D -- C:\Users\Areski\AppData\Local\FluxSoftware
O43 - CFD: 15/07/2016 - [] D -- C:\Users\Areski\AppData\Local\Franz
O43 - CFD: 11/12/2015 - [] D -- C:\Users\Areski\AppData\Local\Google =>.Google
O43 - CFD: 21/10/2015 - [] D -- C:\Users\Areski\AppData\Local\GWX =>.GWX
O43 - CFD: 06/11/2015 - [] D -- C:\Users\Areski\AppData\Local\Intel_Corporation =>.Intel Corporation
O43 - CFD: 03/12/2015 - [] D -- C:\Users\Areski\AppData\Local\MediaServer =>.MediaServer
O43 - CFD: 31/08/2016 - [] D -- C:\Users\Areski\AppData\Local\Microsoft =>.Microsoft
O43 - CFD: 25/10/2015 - [] D -- C:\Users\Areski\AppData\Local\MicrosoftEdge =>.Microsoft Corporation
O43 - CFD: 20/08/2016 - [] D -- C:\Users\Areski\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 24/10/2015 - [0] D -- C:\Users\Areski\AppData\Local\NetworkTiles =>.NetworkTiles
O43 - CFD: 24/09/2016 - [] D -- C:\Users\Areski\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 21/10/2015 - [0] D -- C:\Users\Areski\AppData\Local\PackageStaging =>.Apcera
O43 - CFD: 24/01/2016 - [] D -- C:\Users\Areski\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 24/10/2015 - [] D -- C:\Users\Areski\AppData\Local\Publishers =>.Microsoft Corporation
O43 - CFD: 24/01/2016 - [0] D -- C:\Users\Areski\AppData\Local\Skype =>.Skype
O43 - CFD: 23/10/2016 - [] D -- C:\Users\Areski\AppData\Local\Spotify =>.Spotify
O43 - CFD: 09/05/2016 - [] D -- C:\Users\Areski\AppData\Local\SquirrelTemp =>.Squirrels
O43 - CFD: 23/10/2016 - [] D -- C:\Users\Areski\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [0] SHD -- C:\Users\Areski\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 24/10/2015 - [] D -- C:\Users\Areski\AppData\Local\TileDataLayer =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [0] SHD -- C:\Users\Areski\AppData\Local\Verlauf
O43 - CFD: 21/12/2015 - [] D -- C:\Users\Areski\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 06/06/2016 - [] D -- C:\Users\Areski\AppData\Local\Windows Live =>.Microsoft Corporation
O43 - CFD: 09/06/2016 - [] D -- C:\Users\Areski\AppData\Local\Wondershare =>.Wondershare
O43 - CFD: 24/01/2016 - [0] D -- C:\Users\Areski\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 31/08/2016 - [] RD -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 12/10/2016 - [] RD -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 30/08/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Music
O43 - CFD: 04/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
O43 - CFD: 30/08/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dashlane =>.Dashlane
O43 - CFD: 07/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Evernote =>.EverNote Corporation
O43 - CFD: 15/07/2016 - [0] D -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Franz
O43 - CFD: 05/10/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Handbrake =>.Handbrake
O43 - CFD: 16/07/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 12/10/2016 - [] RD -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 30/08/2016 - [] D -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram
O43 - CFD: 16/07/2016 - [] RD -- C:\Users\Areski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell =>.Microsoft Corporation
O43 - CFD: 31/08/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft
O43 - CFD: 10/09/2016 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft

---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 1s
O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Areski\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Areski\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Areski\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Areski\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Areski\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileSyncShell.dll =>.Microsoft Corporation®
O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software a.s.®

---\\ Liste der Treiber des Systems (81) - 7s
O58 - SDL:2016/07/16 13:41:53 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [107360] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows®
O58 - SDL:2016/08/30 03:52:08 A . (.AVAST Software - avast! HWID.) -- C:\WINDOWS\System32\drivers\aswHwid.sys [37656] =>.AVAST Software a.s.® (ALWIL Software)
O58 - SDL:2016/08/30 03:52:08 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [108816] =>.AVAST Software a.s.®
O58 - SDL:2016/08/30 03:52:08 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr2.sys [103064] =>.AVAST Software a.s.®
O58 - SDL:2016/08/30 03:52:08 A . (.AVAST Software - avast! Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt.sys [74544] =>.AVAST Software a.s.® (ALWIL Software)
O58 - SDL:2016/09/13 13:53:53 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswsnx.sys [969184] =>.AVAST Software s.r.o.®
O58 - SDL:2016/09/22 15:52:19 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswsp.sys [513632] =>.AVAST Software s.r.o.®
O58 - SDL:2016/08/30 03:52:08 A . (.AVAST Software - Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStm.sys [163416] =>.AVAST Software a.s.®
O58 - SDL:2016/10/13 17:14:02 A . (.AVAST Software - avast! VM Monitor.) -- C:\WINDOWS\System32\drivers\aswvmm.sys [293352] =>.AVAST Software s.r.o.® (ALWIL Software)
O58 - SDL:2015/03/27 10:33:14 A . (.Broadcom Corporation. - Broadcom Bluetooth Firmware Download Filter.) -- C:\WINDOWS\System32\drivers\bcbtums.sys [173312] =>.Broadcom Corporation®
O58 - SDL:2016/07/16 13:41:53 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2016/07/16 13:41:53 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider
O58 - SDL:2016/02/10 01:00:02 A . (.Broadcom Corp - Broadcom WiFi Driver wireless driver.) -- C:\WINDOWS\System32\drivers\bcmwl63a.sys [11784968] =>.Broadcom Corporation®
O58 - SDL:2015/03/27 10:33:20 A . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter.) -- C:\WINDOWS\System32\drivers\btwampfl.sys [188160] =>.Broadcom Corporation®
O58 - SDL:2016/07/16 13:41:52 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [533856] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys [102752] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys [346976] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T4 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys [2104160] =>.Microsoft Windows®
O58 - SDL:2016/09/23 23:58:34 A . (.DisplayLink Corp. - Ethernet Driver.) -- C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [110360] =>.DISPLAYLINK®
O58 - SDL:2016/09/23 23:58:34 A . (.DisplayLink Corp. - DisplayLink USB Audio Driver.) -- C:\WINDOWS\System32\drivers\dlusbaudio_x64.sys [247064] =>.DISPLAYLINK®
O58 - SDL:2014/09/19 12:36:12 A . (.Intel Corporation - DPTF ACPI Device (64-Bit).) -- C:\WINDOWS\System32\drivers\dptf_acpi.sys [41824] =>.Intel(R) Software®
O58 - SDL:2014/09/19 12:36:14 A . (.Intel Corporation - DPTF ACPI Device (32-Bit).) -- C:\WINDOWS\System32\drivers\dptf_cpu.sys [38720] =>.Intel(R) Software®
O58 - SDL:2014/09/19 12:36:14 A . (.Intel Corporation - DPTF ACPI Device (64-Bit).) -- C:\WINDOWS\System32\drivers\dptf_pch.sys [38208] =>.Intel(R) Software®
O58 - SDL:2014/09/19 12:36:20 A . (.Intel Corporation - DPTF ACPI Device (64-Bit).) -- C:\WINDOWS\System32\drivers\esif_lf.sys [216360] =>.Intel(R) Software®
O58 - SDL:2016/07/16 13:41:52 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3418976] =>.Microsoft Windows®
O58 - SDL:2014/08/08 23:44:40 A . (.Intel Corporation - Intel(R) HID Event Filter.) -- C:\WINDOWS\System32\drivers\HidEventFilter.sys [36192] =>.Intel(R) Software®
O58 - SDL:2016/07/16 13:41:53 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:54 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys [33280] =>.Intel(R) Corporation
O58 - SDL:2016/07/16 13:41:54 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation
O58 - SDL:2016/07/16 13:41:54 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [64512] =>.Intel Corporation
O58 - SDL:2016/07/16 13:41:54 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [176384] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O58 - SDL:2016/07/16 13:41:52 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group®
O58 - SDL:2016/07/16 13:41:50 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation
O58 - SDL:2014/06/11 16:40:24 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver.) -- C:\WINDOWS\System32\drivers\iaLPSS_GPIO.sys [35832] =>.Intel Corporation - Software and Firmware Products®
O58 - SDL:2014/06/11 16:40:24 A . (.Intel Corporation - Intel(R) Serial IO SPI Driver.) -- C:\WINDOWS\System32\drivers\iaLPSS_SPI.sys [100856] =>.Intel Corporation - Software and Firmware Products®
O58 - SDL:2014/06/11 16:40:24 A . (.Intel Corporation - Intel(R) Serial IO UART Driver.) -- C:\WINDOWS\System32\drivers\iaLPSS_UART2.sys [143864] =>.Intel Corporation - Software and Firmware Products®
O58 - SDL:2014/10/01 23:34:44 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver -.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [670056] =>.Intel Corporation - Intel® Rapid Storage Technology®
O58 - SDL:2016/07/16 13:41:53 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys [526176] =>.Microsoft Windows®
O58 - SDL:2015/10/13 05:35:12 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [6429072] =>.Intel Corporation - pGFX®
O58 - SDL:2014/05/27 18:21:04 A . (.Autoren - .) -- C:\WINDOWS\System32\drivers\ikbevent.sys [22216] =>.Intel CASE®
O58 - SDL:2014/05/27 18:21:08 A . (.Autoren - .) -- C:\WINDOWS\System32\drivers\imsevent.sys [22728] =>.Intel CASE®
O58 - SDL:2015/08/04 00:10:34 A . (.Intel(R) Corporation - Intel® Smart Sound Technology (Intel® SST).) -- C:\WINDOWS\System32\drivers\IntcADSP.sys [756024] =>.Intel Corporation - Client Components Group®
O58 - SDL:2015/08/30 14:20:08 N . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [475384] =>.Intel Corporation - Client Components Group®
O58 - SDL:2014/08/26 05:14:28 A . (.Intel Corporation - Intel Collaborative Processor Performance C.) -- C:\WINDOWS\System32\drivers\IntelPcc.sys [79016] =>.Intel(R) Software®
O58 - SDL:2014/10/17 01:22:10 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\iwdbus.sys [30512] =>.Intel(R) Wireless Display®
O58 - SDL:2016/07/16 13:41:53 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108896] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [105824] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [101216] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82776] =>.Microsoft Windows®
O58 - SDL:2016/03/10 14:08:54 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\mbam.sys [27008] =>.Malwarebytes Corporation®
O58 - SDL:2016/03/10 14:08:58 A . (.Malwarebytes - Malwarebytes Chameleon Protection Driver.) -- C:\WINDOWS\System32\drivers\mbamchameleon.sys [140672] =>.Malwarebytes Corporation®
O58 - SDL:2016/10/23 01:31:55 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [192216] =>.Malwarebytes Corporation®
O58 - SDL:2016/07/16 13:41:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] =>.Microsoft Windows®
O58 - SDL:2016/10/05 12:09:07 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys [64352] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys [842584] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows®
O58 - SDL:2016/03/10 14:09:10 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\WINDOWS\System32\drivers\mwac.sys [65408] =>.Malwarebytes Corporation®
O58 - SDL:2016/07/16 13:41:53 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [108896] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:42:03 A . (.Autoren - .) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624]
O58 - SDL:2016/07/16 13:41:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58720] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [61792] =>.Microsoft Windows®
O58 - SDL:2015/08/04 00:00:16 N . (.Realtek Semiconductor Corp. - Realtek I2S Audio Codec Device Driver.) -- C:\WINDOWS\System32\drivers\RTKI2SAC.sys [235264] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/05/14 11:44:38 A . (.Realsil Semiconductor Corporation - RTS PCIE READER Driver.) -- C:\WINDOWS\System32\drivers\RtsPer.sys [751632] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2016/07/16 13:41:53 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows®
O58 - SDL:2014/11/10 19:12:38 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverx64.sys [129312] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group®
O58 - SDL:2016/07/16 13:41:53 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys [32096] =>.Microsoft Windows®
O58 - SDL:2016/07/16 13:41:53 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys [64864] =>.Microsoft Windows®

---\\ Neueste Dateien geändert oder erstellt (Benutzer) (7) - 9s
O61 - LFC: 2016/10/05 04:43:21 A . (..) -- C:\Users\Areski\Downloads\HandBrake-0.10.5-x86_64-Win_GUI-1.exe [16520043]
O61 - LFC: 2016/10/13 14:15:26 A . (..) -- C:\Users\Areski\AppData\Roaming\Spotify\natives_blob.bin [367250]
O61 - LFC: 2016/10/13 14:15:26 A . (..) -- C:\Users\Areski\AppData\Roaming\Spotify\snapshot_blob.bin [648432]
O61 - LFC: 2016/10/14 19:11:08 A . (..) -- C:\Users\Areski\AppData\Roaming\Dashlane\ie\IEInstaller.bat [157]
O61 - LFC: 2016/10/14 19:11:08 A . (..) -- C:\Users\Areski\AppData\Roaming\Dashlane\4.6.2.19264\bin\IEInstaller.bat [157]
O61 - LFC: 2016/10/04 18:13:56 A . (..) -- C:\Users\Areski\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState\TileCache_250_0_Data.bin [2105680]
O61 - LFC: 2016/10/23 05:26:15 A . (..) -- C:\Users\Areski\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148]

---\\ Verbände Shell Laichen (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Startprogramm für Ereignisanzeige-Snap-In.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Registrierungs-Editor.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Startmenü Internet (12) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE-Hilfsprogramm für Pro-Benutzerinitalisie.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE-Hilfsprogramm für Pro-Benutzerinitalisie.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE-Hilfsprogramm für Pro-Benutzerinitalisie.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Suche 'Ansteckung in Internet-Browsern (2) - 5s
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {FCA0C6AA-E59A-4B7D-9BA6-166BFDCC8E21} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Liste den Dienststart von Svchost (45) - 1s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Microsoft Smartcard-Zertifikatpropagierungs.) -- C:\WINDOWS\System32\certprop.dll [193536] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Microsoft Smartcard-Zertifikatpropagierungs.) -- C:\WINDOWS\System32\certprop.dll [193536] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - Serverdienst-DLL.) -- C:\WINDOWS\system32\srvsvc.dll [305152] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Gruppenrichtlinienclient.) -- C:\WINDOWS\System32\gpsvc.dll [1227264] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - IKE-Erweiterung.) -- C:\WINDOWS\System32\ikeext.dll [932352] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Dienst, der IPv6-Konnektivität über ein IPv.) -- C:\WINDOWS\System32\iphlpsvc.dll [945664] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL für sekundären Anmeldedienst.) -- C:\WINDOWS\system32\seclogon.dll [31232] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Anwendungsinformationsdienst.) -- C:\WINDOWS\System32\appinfo.dll [125952] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - iSCSI-Ermittlungsdienst.) -- C:\WINDOWS\system32\iscsiexe.dll [151552] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Microsoft EAPHost-Dienst.) -- C:\WINDOWS\System32\eapsvc.dll [112128] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Aufgabenplanungsdienst.) -- C:\WINDOWS\system32\schedsvc.dll [948224] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [222720] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - Computersuchdienst-DLL.) -- C:\WINDOWS\System32\browser.dll [134656] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Remotedesktop-Konfigurationsdienst.) -- C:\Windows\System32\SessEnv.dll [387072] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Problemberichte und -lösungen.) -- C:\WINDOWS\System32\wercplsupport.dll [94208] =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll [161792] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Microsoft®-Kontodienst.) -- C:\WINDOWS\system32\wlidsvc.dll [2104832] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Windows-Shelldesigndienste-DLL.) -- C:\WINDOWS\system32\themeservice.dll [70656] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Geolocation-Dienst.) -- C:\WINDOWS\System32\lfsvc.dll [37376] =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - Windows-Verwaltungsdienst-DLL.) -- C:\Windows\System32\Windows.Internal.Management.dll [407552] =>.Microsoft Corporation
O83 - Search Svchost Services: Irmon (Irmon) . (.Microsoft Corporation - Infrarotüberwachung.) -- C:\WINDOWS\System32\irmon.dll [25088] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - RAS-Verwaltung für automatisches Wählen.) -- C:\WINDOWS\System32\rasauto.dll [105472] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - RAS-Verbindungsverwaltung.) -- C:\WINDOWS\System32\rasmans.dll [648192] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamischer Schnittstellen-Manager.) -- C:\Windows\System32\mprdim.dll [496128] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Benachrichtigungsdienst für Systemereigniss.) -- C:\WINDOWS\System32\sens.dll [70656] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Microsoft NAT-Hilfskomponenten.) -- C:\WINDOWS\System32\ipnathlp.dll [541696] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Microsoft(R) Windows(R) Telefonieserver.) -- C:\Windows\System32\tapisrv.dll [309248] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update-Agent.) -- C:\WINDOWS\system32\wuaueng.dll [2315264] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Intelligenter Hintergrundübertragungsdienst.) -- C:\WINDOWS\System32\qmgr.dll [1053184] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Windows-Shelldienste-DLL.) -- C:\Windows\System32\shsvcs.dll [617472] =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [57344] =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Flight-Einstellungen.) -- C:\WINDOWS\system32\flightsettings.dll [614912] =>.Microsoft Corporation
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Windows-Pushbenachrichtigungssystemdienst.) -- C:\WINDOWS\system32\WpnService.dll [234496] =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll [1025536] =>.Microsoft Corporation
O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\WINDOWS\system32\dcpsvc.dll [183808] =>.Microsoft Corporation
O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\WINDOWS\system32\RDXService.dll [650752] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - BDE-Dienst.) -- C:\WINDOWS\System32\bdesvc.dll [361472] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Geräteinstallations-Manager.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [197632] =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Netzwerkeinrichtungsdienst.) -- C:\WINDOWS\System32\NetSetupSvc.dll [265216] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Microsoft-Netzwerkkonnektivitäts-Assistent.) -- C:\WINDOWS\System32\ncasvc.dll [167936] =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll [1013248] =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Updatesitzung für Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [539136] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [358400] =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - Benutzer-Manager.) -- C:\WINDOWS\System32\usermgr.dll [1020928] =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [1159680] =>.Microsoft Corporation

---\\ Zusätzliche Scan (O88) (2) - 3s
C:\Users\Areski\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage =>PUP.Optional.Generic
C:\Users\Areski\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.olark.com_0.localstorage-journal =>PUP.Optional.Generic

---\\ Zusammenfassung der Elemente gefunden auf Ihrer workstation (1) - 0s
https://www.anti-malware.top/2016/05/01/definition-dun-logiciel-pup-lpi/ =>PUP.Optional.Generic

~ End of the scan, 25777 items in 00h01mn52s (923)