| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: compatibilitycheck.exe gefunden!, Pc läuft nicht rund, Explorer streikt manchmal + gebootet wird auch nicht immer einwandfrei.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
30.01.2015, 00:14
| #1 |
| |  compatibilitycheck.exe gefunden!, Pc läuft nicht rund, Explorer streikt manchmal + gebootet wird auch nicht immer einwandfrei. Hallo Trojaner-Board Forum, ich habe seit längerem wiederkehrende Probleme mit meinem PC. Es läuft einfach nicht mehr so rund und schnell, wie früher. Explorer will teilweise nicht so richtig arbeiten, und es kam auch schon vor, dass ich 2-3 Anläufe brauchte, bis ich komplett gebootet habe. Ganz zu schweigen von kleinen anderen Dingen, die ich auch bereits hier im Forum wiedergefunden haben (z.B. willkürliche Audiowiedergabe von Werbungen) Nachdem Windows mir nun mitgeteilt hat, dass compatibilitycheck.exe nicht mehr funktioniert hatte und beendet werden musste, bin ich neugierig geworden, worum es sich denn dabei handelt. Dabei bin ich auf dieses Forum gestoßen und habe mein Problem direkt bei einigen anderen wiedererkannt. Aufgrund des überragenden Feedbacks und des spitzen Support konnte ich nicht umhin ebenfalls ein thread mit meinem, sehr ähnlichem, Problem zu erstellen, in der Hoffnung, dass die GuRus mir ebenso gut helfen können. Nun habe ich mich schon ausführlich mit den vorigen Themen beschäftigt und entsprechende Vorbereitungen getroffen, sprich FRST , AdwCleaner,JRT Malewarebytes Anit-Maleware und ESET wurden bereit auf dem Desktop gelagert. Ich habe mir die Freiheit genommen, FRST schoneimal für einen ersten Scan zu nutzen. Ich bräuchte also nur noch die Instruktionen, damit ich die nächsten Schritte richtig durchführe. Freue mich schon auf das Ausschlachten der Schädlingssoftware  FRST.txt Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-01-2015 01 Ran by Domi (administrator) on DOMS-KISTE on 29-01-2015 23:59:33 Running from C:\Users\Domi\Desktop Loaded Profiles: Domi (Available profiles: Domi) Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Windows\System32\SLsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe (Realtek Semiconductor) C:\Windows\RtHDVCpl.exe (Kaspersky Lab ZAO) D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (SCM Microsystems) C:\Windows\System32\sokscmpn.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe (Valve Corporation) D:\Programme\Steam\Steam.exe (Spotify Ltd) C:\Users\Domi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (Dropbox, Inc.) C:\Users\Domi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Kaspersky Lab ZAO) D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation) D:\Programme\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (Valve Corporation) D:\Programme\Steam\bin\steamwebhelper.exe () C:\Windows\System32\PnkBstrA.exe (SCM Microsystems) C:\Windows\System32\sokscmnt.exe (TuneUp Software) D:\Programme\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe (SCM Microsystems) C:\Windows\SCARDS32.EXE (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (TuneUp Software) D:\Programme\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe (Microsoft Corporation) C:\Windows\System32\mobsync.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Valve Corporation) C:\Program Files\Common Files\Steam\SteamService.exe (Microsoft Corporation) C:\Windows\System32\conime.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6144000 2008-05-20] (Realtek Semiconductor) HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-20] (Realtek Semiconductor Corp.) HKLM\...\Run: [AVP] => D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe [365336 2010-11-02] (Kaspersky Lab ZAO) HKLM\...\Run: [CHIPDRIVEPinManager] => C:\Windows\system32\sokscmpn.exe [528384 2003-10-06] (SCM Microsystems) HKLM\...\Run: [amd_dc_opt] => C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD) HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation) Winlogon\Notify\klogon: C:\Windows\system32\klogon.dll (Kaspersky Lab ZAO) Winlogon\Notify\ScCertProp: wlnotify.dll [X] HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter HKU\S-1-5-21-1739850726-13863088-3879657738-1000\...\Run: [Steam] => d:\programme\steam\steam.exe [1942720 2015-01-23] (Valve Corporation) HKU\S-1-5-21-1739850726-13863088-3879657738-1000\...\Run: [Spotify Web Helper] => C:\Users\Domi\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1676344 2014-12-11] (Spotify Ltd) HKU\S-1-5-21-1739850726-13863088-3879657738-1000\...\Run: [Spotify] => C:\Users\Domi\AppData\Roaming\Spotify\spotify.exe [6737976 2014-12-11] (Spotify Ltd) HKU\S-1-5-21-1739850726-13863088-3879657738-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation) HKU\S-1-5-21-1739850726-13863088-3879657738-1000\...\MountPoints2: {74db45f7-fa32-11df-bc1b-0022153fd994} - K:\LaunchU3.exe -a HKU\S-1-5-21-1739850726-13863088-3879657738-1000\...\MountPoints2: {7c031a75-41d9-11e1-919a-0022153fd994} - K:\LaunchU3.exe -a Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.) Startup: C:\Users\Domi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1739850726-13863088-3879657738-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.) BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) BHO: IEVkbdBHO Class -> {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} -> D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\ievkbd.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> D:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation) BHO: FilterBHO Class -> {E33CF602-D945-461A-83F0-819F76A199F8} -> D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\klwtbbho.dll (Kaspersky Lab ZAO) DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab DPF: {CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - D:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 195.50.140.248 195.50.140.246 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll () FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.) FF Plugin: @Apple.com/iTunes,version=1.0 -> D:\Programme\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin: @canon.com/MycameraPlugin -> D:\Programme\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.) FF Plugin: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation) FF Plugin: @real.com/nppl3260;version=6.0.12.448 -> C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.) FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1739850726-13863088-3879657738-1000: ubisoft.com/uplaypc -> C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.) FF Extension: Kaspersky URL Advisor - C:\Program Files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru [2010-04-28] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} [2010-04-28] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} [2010-04-28] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} [2010-07-19] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010-04-28] FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-02-23] FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-04-28] FF HKLM\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\virtualKeyboard@kaspersky.ru FF Extension: Kaspersky Virtual Keyboard - D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\virtualKeyboard@kaspersky.ru [2011-05-31] FF HKLM\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\linkfilter@kaspersky.ru FF Extension: Kaspersky URL Advisor - D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\linkfilter@kaspersky.ru [2011-05-03] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Profile: C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-06] CHR Extension: (Google Docs) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-19] CHR Extension: (Google Drive) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-19] CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-08] CHR Extension: (YouTube) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-19] CHR Extension: (Google-Suche) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-19] CHR Extension: (Google Tabellen) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-06] CHR Extension: (Google Wallet) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-19] CHR Extension: (Google Mail) - C:\Users\Domi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-19] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AVP; D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\avp.exe [365336 2010-11-02] (Kaspersky Lab ZAO) S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed] R2 MBAMScheduler; D:\Programme\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-11-21] (Malwarebytes Corporation) R2 MBAMService; D:\Programme\ Malwarebytes Anti-Malware \mbamservice.exe [969016 2014-11-21] (Malwarebytes Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.) R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [75136 2011-09-29] () R2 SCM_Smart_Card_Office_Kernel; C:\Windows\system32\sokscmnt.exe [449536 2003-10-07] (SCM Microsystems) [File not signed] S2 SkypeUpdate; D:\Programme\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies) R2 TuneUp.UtilitiesSvc; D:\Programme\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1781048 2014-07-16] (TuneUp Software) R2 TWKSCARDSRV; C:\Windows\SCARDS32.EXE [264192 2003-04-30] (SCM Microsystems) [File not signed] R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.) S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-29] (Initio Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [132184 2010-06-09] (Kaspersky Lab ZAO) R1 kl2; C:\Windows\System32\DRIVERS\kl2.sys [11352 2010-06-09] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [488536 2010-10-01] (Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [22104 2010-04-22] (Kaspersky Lab ZAO) S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [19984 2009-11-02] (Kaspersky Lab) R3 L1E; C:\Windows\System32\DRIVERS\L1E60x86.sys [47616 2008-02-02] (Atheros Communications, Inc.) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-11-21] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-01-29] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-11-21] (Malwarebytes Corporation) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [7680 2006-10-18] () S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl.sys [18432 2011-05-10] (Apple Inc.) [File not signed] S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [507136 2006-12-05] (PixArt Imaging Inc.) S3 SCR3XX2K; C:\Windows\System32\DRIVERS\SCR3XX2K.sys [59136 2010-11-11] (SCM Microsystems Inc.) R3 TuneUpUtilitiesDrv; D:\Programme\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software) R0 TwkMs; C:\Windows\system32\Drivers\TwkMs.sys [4828 2003-04-30] (Towitoko AG) [File not signed] R2 TwkPCSC; C:\Windows\system32\Drivers\TwkPCSC.sys [11676 2003-04-30] (Towitoko AG) [File not signed] S3 IpInIp; system32\DRIVERS\ipinip.sys [X] S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X] S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-29 23:58 - 2015-01-29 23:58 - 00015792 _____ () C:\Users\Domi\Desktop\Unbenannt 1.odt 2015-01-29 23:56 - 2015-01-29 23:56 - 00000000 ____D () C:\Windows\Sun 2015-01-29 23:33 - 2015-01-29 23:33 - 00000000 ____D () C:\Program Files\Common Files\Java 2015-01-29 23:33 - 2015-01-29 23:32 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll 2015-01-29 23:32 - 2015-01-29 23:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2015-01-29 23:31 - 2015-01-29 23:33 - 00000000 ____D () C:\ProgramData\Oracle 2015-01-29 23:31 - 2015-01-29 23:31 - 00000000 ____D () C:\Program Files\Java 2015-01-29 23:24 - 2015-01-29 23:24 - 00639400 _____ (Oracle Corporation) C:\Users\Domi\Downloads\chromeinstall-8u31.exe 2015-01-29 21:56 - 2015-01-29 23:59 - 00019289 _____ () C:\Users\Domi\Desktop\FRST.txt 2015-01-29 21:56 - 2015-01-29 23:59 - 00000000 ____D () C:\FRST 2015-01-29 15:59 - 2015-01-29 15:59 - 01121792 _____ (Farbar) C:\Users\Domi\Desktop\FRST.exe 2015-01-29 13:04 - 2015-01-29 13:04 - 00000000 ____D () C:\Program Files\ESET 2015-01-29 13:03 - 2015-01-29 13:03 - 02347384 _____ (ESET) C:\Users\Domi\Desktop\esetsmartinstaller_deu.exe 2015-01-29 12:39 - 2015-01-29 22:51 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-01-29 12:39 - 2015-01-29 12:39 - 00000717 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-01-29 12:39 - 2015-01-29 12:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-01-29 12:39 - 2015-01-29 12:39 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-01-29 12:39 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-01-29 12:39 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-01-29 12:39 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-01-29 12:37 - 2015-01-29 12:38 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\Domi\Downloads\mbam-setup-2.0.4.1028.exe 2015-01-29 12:27 - 2015-01-29 12:27 - 01707939 _____ (Thisisu) C:\Users\Domi\Desktop\JRT.exe 2015-01-29 12:27 - 2015-01-29 12:27 - 00000000 ____D () C:\Windows\ERUNT 2015-01-29 11:53 - 2014-12-19 01:25 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2015-01-29 11:48 - 2014-12-06 04:14 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\nlasvc.dll 2015-01-29 11:48 - 2014-12-06 04:14 - 00153600 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll 2015-01-29 11:48 - 2014-12-06 04:14 - 00093184 _____ (Microsoft Corporation) C:\Windows\system32\ncsi.dll 2015-01-29 11:48 - 2014-12-06 04:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\nlaapi.dll 2015-01-28 22:32 - 2015-01-29 22:48 - 00003062 _____ () C:\Windows\PFRO.log 2015-01-28 22:04 - 2015-01-29 22:47 - 00000000 ____D () C:\AdwCleaner 2015-01-28 22:03 - 2015-01-28 22:03 - 02194432 _____ () C:\Users\Domi\Desktop\AdwCleaner_4.109.exe 2015-01-28 17:13 - 2015-01-28 17:13 - 00001963 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-01-28 17:13 - 2015-01-28 17:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2015-01-28 16:48 - 2015-01-28 21:55 - 00000112 _____ () C:\ProgramData\V3PqchW2.dat 2015-01-28 15:30 - 2015-01-28 15:30 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Adobe 2015-01-28 15:30 - 2015-01-28 15:30 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Adobe 2015-01-28 15:27 - 2015-01-28 16:45 - 00000000 ____D () C:\ProgramData\Package Cache 2015-01-28 15:26 - 2015-01-28 16:06 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Compatibility Verifier 2015-01-28 15:26 - 2015-01-28 16:06 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Compatibility Verifier 2015-01-25 21:25 - 2015-01-25 23:55 - 00000000 ____D () C:\Windows\Minidump ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-01-29 23:57 - 2010-04-28 10:31 - 00000424 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{A831E30F-11AA-4CF2-8AF1-26FCDA75FDFA}.job 2015-01-29 23:28 - 2014-06-17 19:58 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-01-29 23:28 - 2012-07-10 17:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-01-29 22:53 - 2008-01-21 02:35 - 01821037 _____ () C:\Windows\WindowsUpdate.log 2015-01-29 22:51 - 2013-04-30 10:31 - 00000000 ____D () C:\Users\Domi\AppData\Roaming\Spotify 2015-01-29 22:51 - 2012-05-10 19:03 - 00000000 ____D () C:\Users\Domi\AppData\Roaming\Dropbox 2015-01-29 22:51 - 2010-04-27 17:38 - 00000000 ____D () C:\ProgramData\Kaspersky Lab 2015-01-29 22:49 - 2011-06-19 18:09 - 00000258 _____ () C:\Windows\scardsrv.ini 2015-01-29 22:48 - 2014-06-17 19:58 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-01-29 22:48 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-01-29 22:48 - 2006-11-02 13:47 - 00004112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0 2015-01-29 22:48 - 2006-11-02 13:47 - 00004112 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0 2015-01-29 22:47 - 2006-11-02 14:01 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2015-01-29 14:42 - 2010-04-30 15:54 - 00134144 _____ () C:\Users\Domi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-01-29 11:53 - 2013-08-18 10:36 - 00000000 ____D () C:\Windows\system32\MRT 2015-01-29 11:48 - 2006-11-02 11:24 - 110348472 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe 2015-01-28 22:26 - 2010-05-03 16:46 - 00000000 ____D () C:\Program Files\Common Files\Steam 2015-01-28 22:22 - 2010-06-25 20:54 - 00000000 ____D () C:\Program Files\TeamViewer 2015-01-28 22:18 - 2010-04-27 15:35 - 00000000 ____D () C:\Users\Domi 2015-01-28 21:25 - 2014-06-17 19:57 - 00000000 ____D () C:\Program Files\Google 2015-01-28 17:30 - 2012-03-29 20:03 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2015-01-28 17:30 - 2011-05-18 21:39 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2015-01-28 17:08 - 2012-05-10 21:10 - 00000916 _____ () C:\Users\Domi\Desktop\Dropbox.lnk 2015-01-28 17:08 - 2012-05-10 21:04 - 00000000 ____D () C:\Users\Domi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2015-01-28 16:50 - 2011-06-09 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 7.0 2015-01-28 16:29 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\Msdtc 2015-01-28 16:28 - 2006-11-02 11:22 - 50855936 _____ () C:\Windows\system32\config\software_previous 2015-01-28 16:28 - 2006-11-02 11:22 - 38273024 _____ () C:\Windows\system32\config\components_previous 2015-01-28 16:28 - 2006-11-02 11:22 - 208666624 _____ () C:\Windows\system32\config\system_previous 2015-01-28 16:28 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\security_previous 2015-01-28 16:28 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\sam_previous 2015-01-28 16:28 - 2006-11-02 11:22 - 00262144 _____ () C:\Windows\system32\config\default_previous 2015-01-28 16:27 - 2014-10-17 13:53 - 00000000 ____D () C:\ProgramData\McAfee Security Scan 2015-01-28 16:27 - 2013-04-28 15:47 - 00000000 ____D () C:\Users\Domi\AppData\Roaming\vlc 2015-01-28 16:27 - 2010-04-27 16:14 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information 2015-01-28 16:27 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\system32\spool 2015-01-28 16:27 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\registration 2015-01-28 15:09 - 2013-04-30 10:32 - 00000000 ____D () C:\Users\Domi\AppData\Local\Spotify 2015-01-08 09:55 - 2010-04-28 10:00 - 00249488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe ==================== Files in the root of some directories ======= 2010-10-04 22:21 - 2011-09-29 16:34 - 0138056 ____H () C:\Users\Domi\AppData\Roaming\PnkBstrK.sys 2010-04-27 15:35 - 2014-12-08 22:16 - 0001356 _____ () C:\Users\Domi\AppData\Local\d3d9caps.dat 2010-04-30 15:54 - 2015-01-29 14:42 - 0134144 _____ () C:\Users\Domi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2010-07-21 17:13 - 2010-07-21 17:13 - 0005056 _____ () C:\ProgramData\drctchbl.xvi 2011-04-11 21:41 - 2011-04-11 21:41 - 0000056 ____H () C:\ProgramData\ezsidmv.dat 2014-05-21 23:08 - 2014-05-23 11:44 - 0001367 _____ () C:\ProgramData\flcd_proxy.log 2014-12-06 07:22 - 2014-12-09 17:44 - 0000112 _____ () C:\ProgramData\QvqV7eO.dat 2010-07-23 21:08 - 2010-07-23 21:08 - 0000040 _____ () C:\ProgramData\ra3.ini 2015-01-28 16:48 - 2015-01-28 21:55 - 0000112 _____ () C:\ProgramData\V3PqchW2.dat 2010-07-21 17:13 - 2010-07-21 17:13 - 0004110 _____ () C:\ProgramData\xqkcebzs.dik Files to move or delete: ==================== C:\ProgramData\QvqV7eO.dat C:\ProgramData\V3PqchW2.dat Some content of TEMP: ==================== C:\Users\Domi\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpbzldk6.dll C:\Users\Domi\AppData\Local\Temp\Quarantine.exe C:\Users\Domi\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-01-29 22:55 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 28-01-2015 01
Ran by Domi at 2015-01-30 00:00:16
Running from C:\Users\Domi\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Kaspersky Anti-Virus (Disabled - Out of date) {56547CC9-C9B2-849D-8FEF-A496150D6A06}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Anti-Virus (Disabled - Up to date) {ED359D2D-EF88-8B13-B55F-9FE46E8A20BB}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 4.65 (HKLM\...\7-Zip) (Version: - )
ACSynchro (HKLM\...\ST6UNST #1) (Version: - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 13.0.0.111 - Adobe Systems Incorporated)
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.45.2 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 16.0.0.296 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-A95000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.8.638 - Adobe Systems, Inc.)
Apple Application Support (HKLM\...\{83CAF0DE-8D3B-4C37-A631-2B8F16EC3031}) (Version: 3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{235EBB33-3DA1-46DF-AADE-9955123409CB}) (Version: 8.0.5.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed II (HKLM\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Assassin's Creed Revelations (HKLM\...\Steam App 201870) (Version: - Ubisoft Montreal)
Atheros Communications Inc.(R) AR8121/AR8113 Gigabit/Fast Ethernet Driver (HKLM\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.24 - Atheros Communications Inc.)
Aufstieg des Hexenkönigs™ (HKLM\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version: - )
Batman: Arkham Asylum (HKLM\...\{4E79A60F-15D2-4BEC-91AD-E41EC42E61B0}) (Version: 1.0.0.0 - Eidos Interactive Limited)
Batman: Arkham City™ (HKLM\...\GFWL_{57520FA0-AC56-469B-9983-FF1000008300}) (Version: 1.0.0000.131 - WB Games)
Batman: Arkham City™ (Version: 1.0.0000.131 - WB Games) Hidden
Batman: Arkham City™ (Version: 1.0.0003.131 - WB Games) Hidden
Batman™: Arkham Origins (HKLM\...\Steam App 209000) (Version: - WB Games Montreal)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Black Ops - Multiplayer (HKLM\...\Steam App 42710) (Version: - Treyarch)
Call of Duty: Black Ops (HKLM\...\Steam App 42700) (Version: - Treyarch)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM\...\Steam App 10190) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM\...\Steam App 10180) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 3 - Dedicated Server (HKLM\...\Steam App 42750) (Version: - Infinity Ward - Sledgehammer Games)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM\...\Steam App 42690) (Version: - Infinity Ward - Sledgehammer Games)
Call of Duty: Modern Warfare 3 (HKLM\...\Steam App 42680) (Version: - Infinity Ward)
CANON iMAGE GATEWAY MyCamera Download Plugin (HKLM\...\MyCamera Download Plugin) (Version: 3.1.1.2 - Canon Inc.)
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM\...\CANON iMAGE GATEWAY Task) (Version: 1.9.0.9 - Canon Inc.)
Canon MOV Decoder (HKLM\...\Canon MOV Decoder) (Version: 1.8.0.7 - Canon Inc.)
Canon MOV Encoder (HKLM\...\Canon MOV Encoder) (Version: 1.6.0.1 - Canon Inc.)
Canon MovieEdit Task for ZoomBrowser EX (HKLM\...\MovieEditTask) (Version: 3.7.0.4 - Canon Inc.)
Canon MP Navigator EX 1.0 (HKLM\...\MP Navigator EX 1.0) (Version: - )
Canon MP210 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP210_series) (Version: - )
Canon MP210 series Benutzerregistrierung (HKLM\...\Canon MP210 series Benutzerregistrierung) (Version: - )
Canon My Printer (HKLM\...\CanonMyPrinter) (Version: 3.2.0 - Canon Inc.)
Canon Utilities Digital Photo Professional 3.10 (HKLM\...\DPP) (Version: 3.10.0.0 - Canon Inc.)
Canon Utilities Easy-PhotoPrint EX (HKLM\...\Easy-PhotoPrint EX) (Version: - )
Canon Utilities EOS Sample Music (HKLM\...\EOS Sample Music) (Version: 1.0.0.204 - Canon Inc.)
Canon Utilities EOS Utility (HKLM\...\EOS Utility) (Version: 2.10.0.0 - Canon Inc.)
Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX (HKLM\...\EOS Video Snapshot Task) (Version: 1.0.0.10 - Canon Inc.)
Canon Utilities Movie Uploader for YouTube (HKLM\...\MovieUploaderForYouTube) (Version: 1.2.0.7 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM\...\PhotoStitch) (Version: 3.1.22.46 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM\...\Picture Style Editor) (Version: 1.9.0.0 - Canon Inc.)
Canon Utilities Solution Menu (HKLM\...\CanonSolutionMenu) (Version: - )
Canon Utilities ZoomBrowser EX (HKLM\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.)
Canon ZoomBrowser EX Memory Card Utility (HKLM\...\ZoomBrowser EX Memory Card Utility) (Version: 1.5.0.9 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.17 - Piriform)
CHIPDRIVE - Gerätetreiber V2.14.41 (HKLM\...\TwkSCard) (Version: - )
Command & Conquer Alarmstufe Rot 2 (HKLM\...\Red Alert 2) (Version: - )
Command & Conquer™ Alarmstufe Rot 3 (HKLM\...\{296D8550-CB06-48E4-9A8B-E5034FB64715}) (Version: 1.0.1.0 - Electronic Arts)
Counter-Strike: Source (HKLM\...\Steam App 240) (Version: - Valve)
Crysis 2 Maximum Edition (HKLM\...\Steam App 108800) (Version: - Crytek Studios)
Die Schlacht um Mittelerde™ II (HKLM\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - )
Dropbox (HKU\S-1-5-21-1739850726-13863088-3879657738-1000\...\Dropbox) (Version: 3.0.5 - Dropbox, Inc.)
Dual-Core Optimizer (HKLM\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
ESET Online Scanner v3 (HKLM\...\ESET Online Scanner) (Version: - )
Fotosizer 1.34 (HKLM\...\Fotosizer) (Version: 1.34 - Fotosizer.com)
Free Studio version 5.9.0.1212 (HKLM\...\Free Studio_is1) (Version: 5.9.0.1212 - DVDVideoSoft Ltd.)
Free YouTube Download version 2.10.30 (HKLM\...\Free YouTube Download_is1) (Version: - DVDVideoSoft Limited.)
Free YouTube to iPhone Converter version 2.11.11.923 (HKLM\...\Free YouTube to iPhone Converter_is1) (Version: - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.11.32.918 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.32.918 - DVDVideoSoft Ltd.)
Google Chrome (HKLM\...\Google Chrome) (Version: 40.0.2214.93 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
GUILD WARS (HKLM\...\Guild Wars) (Version: - )
Halo: Spartan Assault (HKLM\...\Steam App 277430) (Version: - Vanguard Games)
iTunes (HKLM\...\{5D928931-D1D2-4A93-A82D-BF60D0E7CFA5}) (Version: 12.0.1.26 - Apple Inc.)
Java 8 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Joe (HKLM\...\{36A1E3D6-288A-4EEE-A081-30D9808B2BE3}) (Version: 3.05.0100 - Wirth New Media Sarl)
Kaspersky Anti-Virus 2011 (HKLM\...\InstallWIX_{66F1F013-008F-4875-B283-5A814B820347}) (Version: 11.0.2.556 - Kaspersky Lab)
Kaspersky Anti-Virus 2011 (Version: 11.0.2.556 - Kaspersky Lab) Hidden
Malwarebytes Anti-Malware Version 2.0.4.1028 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.4.1028 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NewBlue 3D Transformations for Windows (HKLM\...\NewBlue 3D Transformations for Windows) (Version: 1.4 - NewBlue)
Not The Robots (HKLM\...\Steam App 257120) (Version: - 2DArray)
NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation)
NVIDIA PhysX (HKLM\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenOffice.org 3.4 (HKLM\...\{4C552FD3-2CCD-4E00-AC64-0681DBB3F8B5}) (Version: 3.4.9590 - OpenOffice.org)
Origin (HKLM\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1BF}) (Version: 3.60.0 - dotPDN LLC)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5628 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM\...\{08B3869E-D282-424C-9AFC-870E04A4BA14}) (Version: 1.00.0000 - Rockstar Games)
Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
ScanSoft OmniPage SE 4 (HKLM\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.6.8442 - Skype Technologies S.A.)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1739850726-13863088-3879657738-1000\...\Spotify) (Version: 0.9.15.27.g87efe634 - Spotify AB)
StarMoney (Version: 2.0 - StarFinanz) Hidden
StarMoney 7.0 (HKLM\...\{4E3BEDBD-4DBE-437A-96DE-E494FFBD9FEB}) (Version: 7.0 - StarFinanz GmbH)
State of Decay (HKLM\...\Steam App 241540) (Version: - Undead Labs)
Steam (HKLM\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab CYRI (HKLM\...\{943A8D28-80D6-41DC-AE94-81FEB42041BF}) (Version: 4.5.1.0 - Husdawg, LLC)
Team Fortress 2 (HKLM\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH)
The Darkness II (HKLM\...\Steam App 67370) (Version: - Digital Extremes)
TuneUp Utilities 2014 (de-DE) (Version: 14.0.1000.340 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM\...\TuneUp Utilities) (Version: 14.0.1000.340 - TuneUp Software)
TuneUp Utilities 2014 (Version: 14.0.1000.340 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (Version: 10.0.4320.9 - TuneUp Software) Hidden
Unturned (HKLM\...\Steam App 304930) (Version: - Nelson Sexton)
Uplay (HKLM\...\Uplay) (Version: 4.8 - Ubisoft)
VCRedistSetup (Version: 1.0.0 - Nero AG) Hidden
Vegas Pro 11.0 (HKLM\...\{6BE7495E-8DF1-11E1-BB7D-F04DA23A5C58}) (Version: 11.0.682 - Sony)
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.6.8 - Shark007)
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VoiceOver Kit (HKLM\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live ID-Anmelde-Assistent (HKLM\...\{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wisdom-soft AutoScreenRecorder 3.1 Pro (HKLM\...\Wisdom-soft AutoScreenRecorder 3.1 Pro) (Version: - Wisdom Software Inc.)
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{23170F69-40C1-278A-1000-000100020000}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{4DF0C730-DF9D-4AE3-9153-AA6B82E9795A}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{DFFACDC5-679F-4156-8947-C5C76BC0B67F}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{F3364BA0-65B9-11CE-A9BA-00AA004AE837}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1739850726-13863088-3879657738-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Domi\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
==================== Restore Points =========================
29-01-2015 11:47:07 Windows Update
29-01-2015 23:21:46 Removed Java(TM) 6 Update 16
29-01-2015 23:23:01 Removed Java(TM) 6 Update 18
29-01-2015 23:24:12 Removed Java(TM) 6 Update 29
29-01-2015 23:24:58 Removed Java 7 Update 55
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2006-11-02 11:23 - 2015-01-29 22:03 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {17E67EBB-E361-42FB-9D15-F24A0713B507} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-06-17] (Google Inc.)
Task: {4502F8B6-B145-4E29-B482-E2F2ADBB41E2} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Domi => C:\Program Files\Windows Calendar\wincal.exe [2009-04-10] (Microsoft Corporation)
Task: {55B3D5DD-2BCF-4962-9303-69E48F7CEC86} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8F6D13E2-0472-44F8-A7DD-64D6EDA21FA7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-01-28] (Adobe Systems Incorporated)
Task: {B251862E-7E50-45F8-8B5C-5ED1D8E980CC} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {C8FF60AC-9684-4735-B87F-1532C30FBE4E} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-12-17] (Oracle Corporation)
Task: {D13FE50C-63AD-4540-8FD9-1816EFD5F56E} - System32\Tasks\ScanSoft Background Update => C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {DE0D1194-FC3C-4EA8-959D-A9A774DF98A4} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => D:\Programme\TuneUp Utilities 2014\OneClick.exe [2014-07-16] (TuneUp Software)
Task: {EE4501CC-6058-459A-9157-A2AD2F8FB802} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-06-17] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\User_Feed_Synchronization-{A831E30F-11AA-4CF2-8AF1-26FCDA75FDFA}.job => C:\Windows\system32\msfeedssync.exe
==================== Loaded Modules (whitelisted) =============
2014-08-29 12:13 - 2014-12-01 22:31 - 02396672 _____ () D:\Programme\Steam\libavcodec-56.dll
2014-08-29 12:13 - 2014-12-01 22:31 - 00442880 _____ () D:\Programme\Steam\libavutil-54.dll
2014-08-29 12:13 - 2014-12-01 22:31 - 00479744 _____ () D:\Programme\Steam\libavformat-56.dll
2014-08-29 12:13 - 2014-12-01 22:31 - 00332800 _____ () D:\Programme\Steam\libavresample-2.dll
2013-03-25 14:23 - 2014-11-11 19:47 - 00774656 _____ () D:\Programme\Steam\SDL2.dll
2015-01-25 16:11 - 2014-12-02 01:29 - 05002752 _____ () D:\Programme\Steam\v8.dll
2015-01-25 16:11 - 2014-12-02 01:29 - 01612800 _____ () D:\Programme\Steam\icui18n.dll
2015-01-25 16:11 - 2014-12-02 01:29 - 01210368 _____ () D:\Programme\Steam\icuuc.dll
2014-05-21 21:41 - 2015-01-23 23:34 - 02227904 _____ () D:\Programme\Steam\video.dll
2014-08-29 12:13 - 2014-12-01 22:31 - 00485888 _____ () D:\Programme\Steam\libswscale-3.dll
2011-07-15 20:09 - 2015-01-23 23:33 - 00696512 _____ () D:\Programme\Steam\bin\chromehtml.dll
2014-02-12 19:58 - 2014-02-12 19:58 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-10-11 13:05 - 2014-10-11 13:05 - 01044776 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-01-08 21:44 - 2015-01-08 21:44 - 00750080 _____ () C:\Users\Domi\AppData\Roaming\Dropbox\bin\libGLESv2.dll
2015-01-29 22:50 - 2015-01-29 22:50 - 00043008 _____ () c:\users\domi\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpbzldk6.dll
2015-01-08 21:44 - 2015-01-08 21:44 - 00047616 _____ () C:\Users\Domi\AppData\Roaming\Dropbox\bin\libEGL.dll
2015-01-08 21:44 - 2015-01-08 21:44 - 00863744 _____ () C:\Users\Domi\AppData\Roaming\Dropbox\bin\plugins\platforms\qwindows.dll
2015-01-08 21:44 - 2015-01-08 21:44 - 00200704 _____ () C:\Users\Domi\AppData\Roaming\Dropbox\bin\plugins\imageformats\qjpeg.dll
2010-10-05 19:26 - 2010-10-05 19:26 - 02111160 _____ () D:\Programme\Kaspersky Lab\Kaspersky Anti-Virus 2011\avzkrnl.dll
2010-05-03 16:46 - 2015-01-16 00:42 - 34641288 _____ () D:\Programme\Steam\bin\libcef.dll
2010-10-04 22:21 - 2011-09-29 16:34 - 00075136 _____ () C:\Windows\system32\PnkBstrA.exe
2014-07-16 09:24 - 2014-07-16 09:24 - 00585528 _____ () D:\Programme\TuneUp Utilities 2014\avgreplibx.dll
2015-01-28 17:13 - 2015-01-25 22:08 - 09170760 _____ () C:\Program Files\Google\Chrome\Application\40.0.2214.93\pdf.dll
2015-01-29 23:32 - 2015-01-29 23:32 - 00019368 _____ () C:\Program Files\Java\jre1.8.0_31\bin\jp2native.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
HKU\S-1-5-21-1739850726-13863088-3879657738-1000\Software\Classes\.exe: => <===== ATTENTION!
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
MSCONFIG\startupfolder: C:^Users^Domi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Monitor => C:\Windows\PixArt\PAC207\Monitor.exe
MSCONFIG\startupreg: OpwareSE4 => "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
MSCONFIG\startupreg: RGSC => D:\Programme\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
========================= Accounts: ==========================
Administrator (S-1-5-21-1739850726-13863088-3879657738-500 - Administrator - Disabled)
Domi (S-1-5-21-1739850726-13863088-3879657738-1000 - Administrator - Enabled) => C:\Users\Domi
Gast (S-1-5-21-1739850726-13863088-3879657738-501 - Limited - Disabled)
==================== Faulty Device Manager Devices =============
Name: Windows Mobile-based device
Description: Windows Mobile-based device
Class Guid: {eec5ad98-8080-425f-922a-dabf3de3f69a}
Manufacturer: (Standard Windows Mobile devices)
Service: WUDFRd
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
System errors:
=============
Microsoft Office Sessions:
=========================
CodeIntegrity Errors:
===================================
Date: 2015-01-30 00:00:10.876
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-30 00:00:10.682
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-30 00:00:10.496
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-30 00:00:10.310
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-30 00:00:10.009
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-30 00:00:09.778
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-30 00:00:09.574
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-30 00:00:09.386
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-29 23:59:47.381
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-01-29 23:59:47.197
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
Percentage of memory in use: 53%
Total physical RAM: 3326.12 MB
Available physical RAM: 1541.96 MB
Total Pagefile: 6882.89 MB
Available Pagefile: 4724.14 MB
Total Virtual: 2047.88 MB
Available Virtual: 1912.52 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:97.66 GB) (Free:34.41 GB) NTFS
Drive d: () (Fixed) (Total:351.5 GB) (Free:79.24 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: () (Fixed) (Total:931.51 GB) (Free:703.53 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive k: () (Fixed) (Total:465.76 GB) (Free:428.24 GB) NTFS ==>[System with boot components (obtained from reading drive)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 92DD75E5)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: 94178B58)
Partition 1: (Not Active) - (Size=97.7 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=351.5 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 964727C4)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
| Themen zu compatibilitycheck.exe gefunden!, Pc läuft nicht rund, Explorer streikt manchmal + gebootet wird auch nicht immer einwandfrei. |
| adware, bonjour, browser, compatibilitycheck.exe, converter, cpu, desktop, dvdvideosoft ltd., flash player, gerätetreiber, google, home, homepage, installation, kaspersky, monitor, mozilla, mp3, realtek, registry, rundll, scan, schädlingssoftware, security, services.exe, shark, starmoney, svchost.exe, system, windows |
Baum-Darstellung