Laptop Leistung stark beeinträchtigt + diverse andere Probleme

L3n0r3 · 04.03.2015, 00:56

Anmerkung zum MBAM log:

nach Beendigung des Suchlaufs und Klick auf "Aktionen anwenden" --> ca. 5 Minuten "(Keine Rückmeldung)"
als es endlich abgeschglossen war, habe ich einen Neustart durchgeführt --> Windows-Meldung "Features werden verarbeitet...."
Nach MBAM-Start und Klicken auf "Verlauf" --> ca. 6 Min. "(Keine Rückmeldung)"
der heutige Suchlauf war ca. 22:00 beendet, angezeigt wurde unter "Suchlauf" - "Anwendungsprotokoll" jedoch nur der vom 02.03. (hatte das Prog. gestern schon installiert und mal drüber gejagt, vorhin aber zuerst de- und dann neuinstalliert).
wollte Log wie beschrieben speichern --> ca. 15 Min. "(Keine Rückmeldung)"

Wo sieht man bitte die bereits geschriebenen Zeichen eines Beitrags? mbam.txt ist mit 1,27 MB zu groß fürs Einfügen

Das Anhängen hat auch nicht geklappt.

Ich schicke einfach mal die restlichen drei logs, in der Hoffnung, dass das irgendwas bringt.

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.111 - Bericht erstellt 03/03/2015 um 23:23:32
# Aktualisiert 18/02/2015 von Xplode
# Datenbank : 2015-02-18.3 [Lokal]
# Betriebssystem : Windows 8.1  (x64)
# Benutzername : - - SUPERHUHN
# Gestarted von : C:\Users\-\Desktop\AdwCleaner_4.111.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Geplante Tasks ] *****

Task Gelöscht : DSite

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [faststartff@gmail.com]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [fftoolbar2014@etech.com]
Schlüssel Gelöscht : HKCU\Software\Mozilla\Extends
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKLM\SOFTWARE\webssearchesSoftware
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - *.local;192.168.*.*

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17416

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v35.0.1 (x86 de)

[1pd4fa4x.default-1420750732713\prefs.js] - Zeile Gelöscht : user_pref("browser.newtab.url", "chrome://quick_start/content/index.html");
[1pd4fa4x.default-1420750732713\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.alias", "webssearches");
[1pd4fa4x.default-1420750732713\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.iconURL", "hxxp://istart.webssearches.com/favicon.ico");
[1pd4fa4x.default-1420750732713\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.name", "webssearches");
[1pd4fa4x.default-1420750732713\prefs.js] - Zeile Gelöscht : user_pref("browser.search.searchengine.url", "hxxp://istart.webssearches.com/web/?type=ds&ts=1422584475&from=cvs1&uid=ST500LM012XHN-M500MBB_S2RSJ9CC837427&q={searchTerms}");
[1pd4fa4x.default-1420750732713\prefs.js] - Zeile Gelöscht : user_pref("browser.search.selectedEngine", "webssearches");
[1pd4fa4x.default-1420750732713\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.enable_search1", false);
[1pd4fa4x.default-1420750732713\prefs.js] - Zeile Gelöscht : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false);

*************************

AdwCleaner[R1].txt - [6007 Bytes] - [01/03/2015 19:33:03]
AdwCleaner[R2].txt - [6076 Bytes] - [03/03/2015 23:18:54]
AdwCleaner[S1].txt - [4651 Bytes] - [03/03/2015 23:23:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4710  Bytes] ##########

--- --- ---

JRT Logfile:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.3 (03.01.2015:1)
OS: Windows 8.1 x64
Ran by - on 03.03.2015 at 23:30:50,99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\-\AppData\Roaming\mozilla\firefox\profiles\1pd4fa4x.default-1420750732713\prefs.js

user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine");
user_pref("browser.search.searchengine.ptid", "cvs1");
user_pref("browser.search.searchengine.uid", "ST500LM012XHN-M500MBB_S2RSJ9CC837427");



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 03.03.2015 at 23:35:53,27
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-02-2015
Ran by - (administrator) on SUPERHUHN on 03-03-2015 23:37:40
Running from C:\Users\-\Desktop
Loaded Profiles: UpdatusUser & - (Available profiles: UpdatusUser & -)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Windows\SysWOW64\MPK\lsynchost.exe
() C:\Windows\SysWOW64\MPK\lsynchost.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
() C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\sSettings.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDTouch.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Thisisu) C:\Users\-\Desktop\JRT.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2894152 2013-09-13] (ELAN Microelectronics Corp.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-16] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126712 2015-01-19] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-09-25] ( (Atheros Communications))
HKU\S-1-5-21-3774421412-1007907057-219690849-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Corporation)
HKU\S-1-5-21-3774421412-1007907057-219690849-1001\...\MountPoints2: {6fe46d1d-3af4-11e3-bf0d-20689d529cf9} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-3774421412-1007907057-219690849-1001\...\MountPoints2: {f047934c-baa3-11e3-bf41-20689d529cf9} - "E:\Startme.exe"
HKU\S-1-5-21-3774421412-1007907057-219690849-1001\...\MountPoints2: {fcecff43-b157-11e3-bf3e-20689d529cf9} - "E:\setup.exe" -a
HKU\S-1-5-21-3774421412-1007907057-219690849-1002\...\MountPoints2: {094e4444-77ef-11e4-bfab-20689d529cf9} - "E:\.\Setup.exe" AUTORUN=1
HKU\S-1-5-21-3774421412-1007907057-219690849-1002\...\MountPoints2: {09753480-b22c-11e4-bfdf-20689d529cf9} - "E:\.\Setup.exe" AUTORUN=1
HKU\S-1-5-21-3774421412-1007907057-219690849-1002\...\MountPoints2: {0c04df42-5859-11e4-bf99-806e6f6e6963} - "E:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-3774421412-1007907057-219690849-1002\...\MountPoints2: {6fe46d1d-3af4-11e3-bf0d-20689d529cf9} - "F:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-3774421412-1007907057-219690849-1002\...\MountPoints2: {f047934c-baa3-11e3-bf41-20689d529cf9} - "E:\Startme.exe"
HKU\S-1-5-21-3774421412-1007907057-219690849-1002\...\MountPoints2: {fcecff43-b157-11e3-bf3e-20689d529cf9} - "E:\setup.exe" -a
AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll File Not Found
BootExecute: autocheck autochk *  

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3774421412-1007907057-219690849-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3774421412-1007907057-219690849-1001 -> {0AD69A11-BE0B-4770-8FD4-BF91E4435485} URL =
SearchScopes: HKU\S-1-5-21-3774421412-1007907057-219690849-1002 -> {0AD69A11-BE0B-4770-8FD4-BF91E4435485} URL =
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\-\AppData\Roaming\Mozilla\Firefox\Profiles\1pd4fa4x.default-1420750732713
FF DefaultSearchEngine: LEO Eng-Deu
FF Homepage: hxxp://google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Multirow Bookmarks Toolbar Plus - C:\Users\-\AppData\Roaming\Mozilla\Firefox\Profiles\1pd4fa4x.default-1420750732713\Extensions\{4c7097f7-08f2-4ef2-9b9f-f95fa4cbb064}.xpi [2015-01-08]
FF Extension: NoScript - C:\Users\-\AppData\Roaming\Mozilla\Firefox\Profiles\1pd4fa4x.default-1420750732713\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-01-23]
FF Extension: Adblock Plus - C:\Users\-\AppData\Roaming\Mozilla\Firefox\Profiles\1pd4fa4x.default-1420750732713\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-08]
FF Extension: Tab Mix Plus - C:\Users\-\AppData\Roaming\Mozilla\Firefox\Profiles\1pd4fa4x.default-1420750732713\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-01-08]
FF Extension: Multirow Bookmarks Toolbar - C:\Users\-\AppData\Roaming\Mozilla\Firefox\Profiles\1pd4fa4x.default-1420750732713\Extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}.xpi [2015-01-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2013-07-22]
FF HKLM-x32\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files (x86)\congstar\Internet-Manager\Bin\addon
FF HKU\S-1-5-21-3774421412-1007907057-219690849-1002\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-14]

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [piehhloihgjjiomhieeddiidpekaajio] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Chrome\ChromePicker.crx [2013-07-22]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ALDITALKVerbindungsassistent_Service; C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [358968 2014-11-30] ()
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-16] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-09-25] (Windows (R) Win 7 DDK provider) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [182520 2015-01-19] (Avira Operations GmbH & Co. KG)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593152 2014-01-29] (Samsung Electronics CO., LTD.)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [100104 2013-09-06] (ELAN Microelectronics Corp.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-16] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 MainLSyncHost; c:\windows\syswow64\mpk\lsynchost.exe [1701176 2014-02-03] ()
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1363160 2014-11-28] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [765144 2014-11-28] (Secunia)
S3 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3000664 2015-01-06] (Samsung Electronics CO., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2013-09-25] (Atheros) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [131608 2014-10-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-12-09] (Avira Operations GmbH & Co. KG)
U4 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43064 2014-10-17] (Avira Operations GmbH & Co. KG)
R3 BTATH_HID; C:\Windows\system32\DRIVERS\btath_hid.sys [223432 2013-09-25] (Qualcomm Atheros)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-25] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 ccSet_NARA; C:\Windows\system32\drivers\NARAx64\0401000.00B\ccSetx64.sys [168608 2012-05-26] (Symantec Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R3 ewusbnet; C:\Windows\system32\DRIVERS\ewusbnet.sys [138752 2014-11-29] (Huawei Technologies Co., Ltd.)
S3 ggsomc; C:\Windows\System32\drivers\ggsomc.sys [30424 2014-09-27] (Sony Mobile Communications)
R0 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20672 2014-05-21] (Glarysoft Ltd)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2014-11-28] (Secunia)
R3 RadioHIDMini; C:\Windows\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Windows (R) Win 7 DDK provider)
S3 rtport; C:\windows\SysWOW64\drivers\rtport.sys [15144 2012-09-14] (Windows (R) 2003 DDK 3790 provider)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
R3 WUDFWpdComp; C:\Windows\System32\drivers\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
S0 BMLoad; system32\drivers\BMLoad.sys [X]
S0 BootDefragDriver; System32\drivers\BootDefragDriver.sys [X]
S3 BTCFilterService; \SystemRoot\system32\DRIVERS\motfilt.sys [X]
S3 HSPADataCardusbmdm; \SystemRoot\system32\DRIVERS\HSPADataCardusbmdm.sys [X]
S3 HSPADataCardusbnmea; \SystemRoot\system32\DRIVERS\HSPADataCardusbnmea.sys [X]
S3 HSPADataCardusbser; \SystemRoot\system32\DRIVERS\HSPADataCardusbser.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 motccgp; \SystemRoot\System32\drivers\motccgp.sys [X]
S3 motccgpfl; \SystemRoot\System32\drivers\motccgpfl.sys [X]
S3 motmodem; \SystemRoot\system32\DRIVERS\motmodem.sys [X]
S3 MotoSwitchService; \SystemRoot\System32\drivers\motswch.sys [X]
S3 Motousbnet; \SystemRoot\system32\DRIVERS\Motousbnet.sys [X]
S3 motusbdevice; \SystemRoot\System32\drivers\motusbdevice.sys [X]
S1 tcpipBM; \??\C:\WINDOWS\system32\drivers\tcpipBM.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 23:35 - 2015-03-03 23:35 - 00000998 _____ () C:\Users\-\Desktop\JRT.txt
2015-03-03 23:30 - 2015-03-03 23:30 - 00065536 _____ () C:\WINDOWS\system32\Ikeext.etl
2015-03-03 23:27 - 2015-03-03 23:27 - 00004818 _____ () C:\Users\-\Desktop\AdwCleaner[S1].txt
2015-03-03 23:27 - 2015-03-03 23:27 - 00000000 ___RD () C:\Users\-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-03-03 23:17 - 2015-03-03 23:17 - 01388333 _____ (Thisisu) C:\Users\-\Desktop\JRT.exe
2015-03-03 23:16 - 2015-03-03 23:16 - 02126848 _____ () C:\Users\-\Desktop\AdwCleaner_4.111.exe
2015-03-03 23:04 - 2015-03-03 23:04 - 01338935 _____ () C:\Users\-\Desktop\mbam.txt
2015-03-03 21:06 - 2015-03-03 22:37 - 00129752 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-03-03 21:05 - 2015-03-03 21:05 - 00001114 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-03-03 21:04 - 2015-03-03 21:05 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-03-03 21:04 - 2014-11-21 06:14 - 00093400 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-03-03 21:04 - 2014-11-21 06:14 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-03-03 21:04 - 2014-11-21 06:14 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-03-03 21:02 - 2015-03-03 21:03 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\-\Desktop\mbam-setup-2.0.4.1028.exe
2015-03-02 17:56 - 2015-03-02 17:56 - 00011720 _____ () C:\Users\-\Desktop\Ereignisse AviraAntivir.txt
2015-03-02 14:48 - 2015-03-02 14:50 - 00036171 _____ () C:\Users\-\Desktop\Addition.txt
2015-03-02 14:46 - 2015-03-03 23:37 - 00017912 _____ () C:\Users\-\Desktop\FRST.txt
2015-03-02 14:46 - 2015-03-03 23:37 - 00000000 ____D () C:\FRST
2015-03-02 14:44 - 2015-03-02 14:44 - 00000464 _____ () C:\Users\-\Desktop\defogger_disable.log
2015-03-02 14:44 - 2015-03-02 14:44 - 00000000 _____ () C:\Users\-\defogger_reenable
2015-03-02 14:42 - 2015-03-02 14:42 - 02092544 _____ (Farbar) C:\Users\-\Desktop\FRST64.exe
2015-03-02 14:42 - 2015-03-02 14:42 - 00380416 _____ () C:\Users\-\Desktop\Gmer-19357.exe
2015-03-02 14:15 - 2014-11-28 13:02 - 01983192 _____ (Secunia) C:\Users\-\Desktop\psi.exe
2015-03-02 13:05 - 2015-03-02 13:05 - 00050477 _____ () C:\Users\-\Desktop\Defogger.exe
2015-03-01 23:39 - 2015-03-01 23:39 - 00000000 ____D () C:\WINDOWS\System32\Tasks\Aufgaben der Ereignisanzeige
2015-03-01 22:07 - 2015-03-01 22:07 - 00003114 _____ () C:\WINDOWS\System32\Tasks\{0170AE36-7A68-4E7A-80A3-C73135927424}
2015-03-01 20:15 - 2015-03-01 20:15 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2015-03-01 20:00 - 2015-03-01 20:25 - 00000691 _____ () C:\WINDOWS\SecuniaPackage.log
2015-03-01 19:20 - 2015-03-01 19:20 - 00000000 ____D () C:\Users\-\AppData\Local\Secunia PSI
2015-03-01 19:20 - 2015-03-01 19:20 - 00000000 ____D () C:\Program Files (x86)\Secunia
2015-03-01 16:55 - 2015-03-01 16:55 - 05490752 _____ (Secunia) C:\Users\-\Downloads\PSISetup10004.exe
2015-03-01 16:30 - 2015-03-01 16:30 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\-\Downloads\revosetup95.exe
2015-03-01 16:18 - 2015-03-01 16:18 - 02126848 _____ () C:\Users\-\Downloads\AdwCleaner_4.111.exe
2015-03-01 15:34 - 2015-03-01 15:36 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\-\Downloads\mbam-setup-2.0.4.1028.exe
2015-02-28 22:06 - 2015-02-28 22:06 - 00000000 ____D () C:\Users\-\Downloads\WindowsShortcutArrowEditor
2015-02-28 22:05 - 2015-02-28 22:05 - 00828938 _____ () C:\Users\-\Downloads\WindowsShortcutArrowEditor.zip
2015-02-25 12:01 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\SysWOW64\locale.nls
2015-02-25 12:01 - 2014-12-13 22:28 - 00513488 _____ () C:\WINDOWS\system32\locale.nls
2015-02-22 17:59 - 2014-04-16 00:35 - 00028352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2015-02-22 17:59 - 2014-04-16 00:34 - 00029888 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2015-02-22 03:10 - 2015-02-22 03:10 - 00000000 ____D () C:\Users\-\AppData\Local\PDF24
2015-02-22 03:09 - 2015-02-22 03:10 - 00000000 ____D () C:\Program Files (x86)\PDF24
2015-02-22 03:09 - 2015-02-22 03:09 - 00001091 _____ () C:\Users\Public\Desktop\PDF24 Creator.lnk
2015-02-21 20:25 - 2015-02-21 20:26 - 16342352 _____ (Geek Software GmbH ) C:\Users\-\Downloads\pdf24-creator-6.9.2.exe
2015-02-21 17:38 - 2015-02-21 17:44 - 27721680 _____ (pdfforge ) C:\Users\-\Downloads\PDFCreator-2_0_2-setup.exe
2015-02-21 06:52 - 2015-02-21 06:52 - 00000000 ____D () C:\Users\-\AppData\Roaming\Avira
2015-02-20 05:07 - 2015-02-20 05:07 - 00001389 _____ () C:\Users\-\Desktop\mom schicken.txt
2015-02-19 18:51 - 2015-03-01 20:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2015-02-13 23:43 - 2015-03-03 22:51 - 00000884 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-13 23:43 - 2015-02-13 23:43 - 00003772 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-02-13 14:26 - 2015-01-23 05:41 - 06041600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-02-13 14:26 - 2015-01-23 04:17 - 04300800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-02-12 02:51 - 2015-01-15 23:43 - 00563504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-02-12 02:51 - 2015-01-15 23:43 - 00177984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-02-12 02:51 - 2015-01-14 05:22 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-02-12 02:51 - 2015-01-14 04:53 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-02-12 02:51 - 2015-01-13 23:11 - 01762840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2015-02-12 02:51 - 2015-01-13 23:04 - 01489072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2015-02-12 02:51 - 2015-01-10 10:10 - 07472960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-02-12 02:51 - 2015-01-10 10:10 - 01733440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-02-12 02:51 - 2015-01-10 09:28 - 01498360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-02-12 02:51 - 2015-01-10 08:00 - 00430080 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-02-12 02:51 - 2015-01-10 07:38 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-02-12 02:51 - 2014-12-09 04:45 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scesrv.dll
2015-02-12 02:51 - 2014-12-09 02:56 - 00538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\scesrv.dll
2015-02-12 02:50 - 2015-01-12 04:09 - 25056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-02-12 02:50 - 2015-01-12 03:48 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-02-12 02:50 - 2015-01-12 03:48 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-02-12 02:50 - 2015-01-12 03:47 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2015-02-12 02:50 - 2015-01-12 03:34 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-02-12 02:50 - 2015-01-12 03:25 - 19740160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-02-12 02:50 - 2015-01-12 03:21 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2015-02-12 02:50 - 2015-01-12 03:08 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-02-12 02:50 - 2015-01-12 03:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-02-12 02:50 - 2015-01-12 03:05 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2015-02-12 02:50 - 2015-01-12 03:02 - 02277888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-02-12 02:50 - 2015-01-12 02:58 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-02-12 02:50 - 2015-01-12 02:55 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-02-12 02:50 - 2015-01-12 02:51 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2015-02-12 02:50 - 2015-01-12 02:48 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-02-12 02:50 - 2015-01-12 02:48 - 00718848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-02-12 02:50 - 2015-01-12 02:48 - 00374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-02-12 02:50 - 2015-01-12 02:46 - 02125824 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-02-12 02:50 - 2015-01-12 02:45 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2015-02-12 02:50 - 2015-01-12 02:43 - 14401024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-02-12 02:50 - 2015-01-12 02:34 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2015-02-12 02:50 - 2015-01-12 02:30 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-02-12 02:50 - 2015-01-12 02:27 - 02865152 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2015-02-12 02:50 - 2015-01-12 02:27 - 02358272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-02-12 02:50 - 2015-01-12 02:25 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2015-02-12 02:50 - 2015-01-12 02:23 - 02052608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-02-12 02:50 - 2015-01-12 02:23 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-02-12 02:50 - 2015-01-12 02:23 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-02-12 02:50 - 2015-01-12 02:14 - 12829184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-02-12 02:50 - 2015-01-12 02:14 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-02-12 02:50 - 2015-01-12 02:02 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-02-12 02:50 - 2015-01-12 02:00 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-02-12 02:50 - 2015-01-12 01:56 - 01307136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-02-12 02:50 - 2015-01-12 01:55 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-02-12 02:50 - 2014-12-19 09:57 - 00788680 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2015-02-12 02:50 - 2014-12-19 09:25 - 00602776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2015-02-12 02:50 - 2014-12-09 00:12 - 00391526 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2015-02-12 02:49 - 2015-01-19 19:42 - 01487976 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2015-02-12 02:49 - 2015-01-10 09:22 - 04175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-03 23:26 - 2015-01-26 14:00 - 01376670 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-03 23:26 - 2014-05-21 06:50 - 00000344 _____ () C:\WINDOWS\Tasks\GlaryInitialize 5.job
2015-03-03 23:26 - 2014-01-31 12:45 - 00000000 __RDO () C:\Users\-\SkyDrive
2015-03-03 23:24 - 2015-01-26 14:27 - 00008883 _____ () C:\WINDOWS\setupact.log
2015-03-03 23:24 - 2013-08-22 15:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-03 23:24 - 2013-08-22 14:25 - 00524288 ___SH () C:\WINDOWS\system32\config\BBI
2015-03-03 23:23 - 2014-07-12 13:59 - 00000000 ____D () C:\AdwCleaner
2015-03-03 23:17 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\tracing
2015-03-03 23:17 - 2012-11-07 16:31 - 00000000 ____D () C:\Users\-\AppData\Local\CrashDumps
2015-03-03 23:12 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\rescache
2015-03-03 23:00 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-03-03 22:31 - 2015-01-26 20:24 - 00006968 _____ () C:\WINDOWS\PFRO.log
2015-03-03 22:30 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2015-03-03 21:54 - 2012-10-31 16:39 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3774421412-1007907057-219690849-1002
2015-03-02 22:49 - 2013-09-30 05:14 - 01780340 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-03-02 22:49 - 2013-09-30 04:56 - 00766620 _____ () C:\WINDOWS\system32\perfh007.dat
2015-03-02 22:49 - 2013-09-30 04:56 - 00159902 _____ () C:\WINDOWS\system32\perfc007.dat
2015-03-02 14:44 - 2013-11-30 17:29 - 00000000 ____D () C:\Users\-
2015-03-02 14:43 - 2014-05-11 13:43 - 00000000 ____D () C:\Users\-\Desktop\ipodfotos
2015-03-02 14:36 - 2012-10-31 18:26 - 00000000 ____D () C:\Users\-\Desktop\start
2015-03-02 14:07 - 2013-01-21 18:03 - 00000000 ____D () C:\Users\-\AppData\Roaming\Skype
2015-03-02 13:24 - 2013-07-22 10:34 - 00000000 ____D () C:\Users\-\Documents\Citavi 4
2015-03-02 12:42 - 2014-11-29 18:48 - 00000000 ____D () C:\Users\-\AppData\Roaming\ALDITALKVerbindungsassistent
2015-03-02 12:42 - 2013-07-15 11:38 - 00000000 ___RD () C:\Users\-\Dropbox
2015-03-02 12:35 - 2013-01-24 19:32 - 00000000 ____D () C:\Users\-\Documents\CyberLink
2015-03-02 12:33 - 2012-10-31 16:34 - 00000000 ____D () C:\Users\-\Documents\Bluetooth Folder
2015-03-02 12:31 - 2014-12-31 21:48 - 00000000 ____D () C:\Users\-\Desktop\schatzi ordner#
2015-03-01 23:45 - 2012-07-26 08:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-03-01 22:13 - 2012-08-23 04:34 - 00000000 ____D () C:\Program Files (x86)\Samsung
2015-03-01 22:01 - 2012-10-31 16:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-01 21:58 - 2012-08-05 23:44 - 00000000 ____D () C:\WINDOWS\Sec
2015-03-01 21:58 - 2012-07-26 09:12 - 00000000 ____D () C:\WINDOWS\LiveKernelReports
2015-03-01 20:52 - 2012-08-23 04:32 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-03-01 20:51 - 2012-08-23 05:35 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2015-03-01 20:48 - 2012-10-31 21:21 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
2015-03-01 03:06 - 2012-10-31 20:52 - 00000000 ____D () C:\Users\-\AppData\Roaming\vlc
2015-02-27 17:26 - 2012-08-23 04:34 - 00003040 _____ () C:\WINDOWS\System32\Tasks\SAgent
2015-02-27 16:58 - 2014-05-21 06:50 - 00000000 ____D () C:\Program Files (x86)\Glary Utilities 5
2015-02-25 17:04 - 2012-10-31 18:22 - 00000000 ____D () C:\Program Files (x86)\Audiograbber
2015-02-24 14:09 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-02-18 14:37 - 2013-08-22 16:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-02-14 04:23 - 2012-10-31 18:54 - 00000000 ____D () C:\Users\-\AppData\Roaming\Spotify
2015-02-14 03:24 - 2013-05-17 19:12 - 00000000 ____D () C:\Users\-\AppData\Roaming\Spotydl
2015-02-14 03:19 - 2012-10-31 19:04 - 00000000 ____D () C:\Users\-\AppData\Local\Spotify
2015-02-13 23:44 - 2012-10-31 20:58 - 00000000 ____D () C:\Users\-\AppData\Local\Adobe
2015-02-12 10:34 - 2013-12-17 16:09 - 00000000 ____D () C:\Program Files (x86)\Avira
2015-02-12 10:27 - 2013-08-22 15:44 - 00362760 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2015-02-12 03:44 - 2013-08-21 12:27 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-12 03:35 - 2012-12-14 16:42 - 116773704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-11 21:29 - 2015-01-24 18:20 - 00000000 ____D () C:\Users\-\AppData\Roaming\Atheros
2015-02-03 20:31 - 2014-05-17 08:26 - 00714720 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-02-03 20:31 - 2014-05-17 08:26 - 00106976 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-01 21:54 - 2012-10-31 16:30 - 00000000 ____D () C:\Users\-\AppData\Local\VirtualStore

==================== Files in the root of some directories =======

2012-11-01 12:21 - 2015-01-09 00:00 - 0007597 _____ () C:\Users\-\AppData\Local\resmon.resmoncfg
2014-07-19 21:21 - 2014-07-19 21:21 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2012-08-23 05:42 - 2012-08-08 05:07 - 2258432 _____ (Samsung Electronics) C:\ProgramData\MakeMarkerFile.exe
2012-08-23 05:42 - 2012-08-07 11:11 - 0003196 _____ () C:\ProgramData\MakeMarkerFile.xml

Some content of TEMP:
====================
C:\Users\-\AppData\Local\Temp\Quarantine.exe
C:\Users\-\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-03-01 22:29

==================== End Of Log ============================

--- --- ---
--- --- ---

Laptop Leistung stark beeinträchtigt + diverse andere Probleme

Plagegeister aller Art und deren Bekämpfung: Laptop Leistung stark beeinträchtigt + diverse andere Probleme

Laptop Leistung stark beeinträchtigt + diverse andere Probleme

Ähnliche Themen: Laptop Leistung stark beeinträchtigt + diverse andere Probleme