Datenleck Aufsprüfen PC1

Armer_Thor · 20.06.2015, 15:21

Vor kurzem sind mir Zugangsdaten für einige Dienste und konnten abhanden gekommen.
Aufgefallen ist die erst nach Missbrauch. Die Kennwörter waren niemandem bekannt und auch nirgends niedergeschrieben oder in jedweder Form gespeichert. Nun möchte ich beide Geräte überprüfen an dem die Kennwörter eingegeben wurden.

PC1 - Laptop mit Win 8

Grundsätzlich mit gratisvariante von Avira geschützt.
Nun Mit der neusten Desinfect aus der aktuellen CT gescannt.
Außerdem defogger, FRST und Gmaer ausgeführt.

- Gmer hat 2 Fehlermeldungen ausgegeben:

-- Beim Start: C:\Windows\system32\config\system: Der Prozess kann nicht auf die Datei zugreifen,da sie von einem anderen Prozess verwendet wird.

--- Während des Scans: C:\Users\Profilname\ntuser.dat

er Prozess kann nicht auf die Datei zugreifen,da sie von einem anderen Prozess verwendet wird.

Logs stehen am Ende des Beitrags: Username und Gerätename wurden durch "Profilname" ersetzt.

Ich hoffe das zumindest dieses System sauber ist

Additions.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by Profilname at 2015-06-20 15:05:03
Running from C:\Users\Profilname\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1767951355-1007739754-1276474970-500 - Administrator - Disabled)
Profilname (S-1-5-21-1767951355-1007739754-1276474970-1001 - Administrator - Enabled) => C:\Users\Profilname
Gast (S-1-5-21-1767951355-1007739754-1276474970-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1767951355-1007739754-1276474970-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ASUS Gaming Center (HKLM-x32\...\{23C8A788-4790-4F3C-B103-0ACC7D9DC5BE}) (Version: 1.0.2 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.4 - ASUS)
ASUS ROG Gaming Mouse (HKLM-x32\...\{3B9E171F-A955-4834-B877-447C0A437260}) (Version: 2.00.026 - ASUS)
ASUS ROG MacroKey (HKLM-x32\...\{348022C5-F497-4333-AFEE-208F22F169F2}_is1) (Version: 1.0.0.28 - G-spy Co., Ltd)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.5 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.02.0001 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.1 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0037 - ASUS)
Avira (HKLM-x32\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.30944 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Command and Conquer 3: Kane's Wrath (HKLM-x32\...\Steam App 24810) (Version:  - EA Los Angeles)
CyberLink MediaStory (HKLM-x32\...\InstallShield_{55762F9A-FCE3-45d5-817B-051218658423}) (Version: 1.0.1314 - CyberLink Corp.)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.18 - ASUSTek Computer Inc.)
Dishonored (HKLM-x32\...\Steam App 205100) (Version:  - Arkane Studios)
ETDWare PS/2-X64 11.5.13.9_WHQL (HKLM\...\Elantech) (Version: 11.5.13.9 - ELAN Microelectronic Corp.)
Foxit PhantomPDF (HKLM-x32\...\{FC76E6BB-7CBB-4CD6-8178-3BCADC0526C3}) (Version: 6.0.62.801 - Foxit Corporation)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.1.1 - Genesys Logic)
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1016 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology(patch version 17.0.1419.2) (HKLM\...\{302600C1-6BDF-4FD1-1405-148929CC1385}) (Version: 17.0.1405.0464 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{85b9d34f-7397-4e39-8600-07942ef6ca04}) (Version: 17.0.5 - Intel Corporation)
METAL GEAR SOLID V: GROUND ZEROES (HKLM-x32\...\Steam App 311340) (Version:  - Kojima Productions)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 6.35 - mIRC Co. Ltd.)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 38.0.1 - Mozilla)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.12.2862 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.34.617.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7335 - Realtek Semiconductor Corp.)
ROG Game First III (HKLM-x32\...\{0C6E32E1-31D9-49F1-B67F-2941994002D5}) (Version: 1.00.16 - ASUSTeK Computer Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.21 - NVIDIA Corporation) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
The Darkness II (HKLM-x32\...\Steam App 67370) (Version:  - Digital Extremes)
Thief (HKLM-x32\...\Steam App 239160) (Version:  - Eidos-Montréal)
Thunderbolt(TM) Software (HKLM\...\{BED2816F-D47A-41DA-AFCF-44E1B257C368}) (Version: 2.0.4.250 - Intel(R) Corporation)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.11.399 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

02-06-2015 20:35:43 Windows Update
09-06-2015 18:46:46 DirectX wurde installiert
12-06-2015 20:44:10 Windows Update
14-06-2015 23:07:16 DirectX wurde installiert
20-06-2015 00:08:37 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
20-06-2015 00:08:43 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01C7EE9E-1BBF-46F7-8EA7-5E508E266D92} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => tbtsvc.exe
Task: {291F8F6C-4BFA-4188-8A65-083E53BFCE7C} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {30CD5939-AB9C-4E22-BE04-E2BD7158966C} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2015-02-12] ()
Task: {30D21188-AF49-4210-AA6D-E8ECB03F09A1} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Logon-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {36E27157-D0DB-4D2D-A708-3BCE4417161E} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2014-09-02] (ASUSTek Computer Inc.)
Task: {3757EC25-6E4D-46F5-A2F5-962EFDF11FC1} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {3E5664C4-F665-49A0-8AE8-1CC3AC846188} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-09-02] (Realtek Semiconductor)
Task: {42CB133E-01A6-4BB3-8207-E0FB06CFD4C8} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-06-03] (ASUS)
Task: {6409079B-DC70-42B8-B01B-BFD447376CE0} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {72F6E40D-EF13-4ADF-96DC-660ED254B473} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => Thunderbolt.exe
Task: {787779D4-423C-409A-81D9-123EC6A67CB2} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit64.exe [2014-02-26] ()
Task: {7AF32167-5D43-4498-9862-3B781A27856A} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\Time-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {82A023AF-8AE5-4717-9208-2C53E3C1AF0F} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattel\DiagTrackRunner.exe [2015-03-16] (Microsoft Corporation)
Task: {83149969-7C36-4AA0-BD4F-77CBDE97E67E} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {835539E3-2F2A-46BB-AE2C-B7E041FA85F7} - System32\Tasks\Gaming Center => C:\Program Files (x86)\ASUS\ASUS Gaming Center\vivokey.exe [2014-04-30] (ASUSTek Computer Inc.)
Task: {86ED87FF-E8C6-42E9-903F-FD1521D1C45E} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-09-01] (Realtek Semiconductor)
Task: {B033B55F-17F8-4786-9FC4-9C4ECDC323E9} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {B5D1CF05-89A1-4BE7-9E32-26C48826A203} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => start ThunderboltService
Task: {C1A852A0-00A1-4611-80D9-5BFFC33549A5} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-06-12] (Microsoft Corporation)
Task: {DC901DAE-FFBB-4E14-A3E3-44AD2F9F5DCC} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => Thunderbolt.exe
Task: {DE205064-DE19-4CF0-A20E-98923DDF0F3A} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {E83319F4-0215-42E0-AED0-D9DD3596DD97} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-07-09] (ASUSTek Computer Inc.)
Task: {F8CD0730-BF8B-42B1-B35D-5FFCDCF2B227} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2015-03-23] (ASUSTeK Computer Inc.)
Task: {FE8E8F37-1850-452D-94F5-F7D0ADB73A2B} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-06-11] (ASUSTek Computer Inc.)
Task: {FFD6988B-22A3-42F7-B8BF-AD353D28FC7B} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-10s => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)

==================== Loaded Modules (Whitelisted) ==============

2014-12-11 04:21 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-05-25 19:42 - 2015-05-25 19:42 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2014-12-11 04:31 - 2013-05-15 16:39 - 00463872 _____ () C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe
2014-12-11 04:29 - 2014-02-26 05:13 - 00053248 _____ () C:\Windows\SysWOW64\UMonit64.exe
2014-06-03 22:01 - 2014-06-03 22:01 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-06-03 22:01 - 2014-06-03 22:01 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-06-03 22:01 - 2014-06-03 22:01 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-06-03 22:01 - 2014-06-03 22:01 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2015-05-18 02:31 - 2015-06-02 05:22 - 01007104 _____ () C:\Spiele\Origin\platforms\qwindows.dll
2015-05-18 02:31 - 2015-06-02 05:22 - 00023552 _____ () C:\Spiele\Origin\imageformats\qgif.dll
2015-05-18 02:31 - 2015-06-02 05:22 - 00024576 _____ () C:\Spiele\Origin\imageformats\qico.dll
2015-05-18 02:31 - 2015-06-02 05:22 - 00216576 _____ () C:\Spiele\Origin\imageformats\qjpeg.dll
2015-05-18 02:31 - 2015-06-02 05:22 - 00261120 _____ () C:\Spiele\Origin\imageformats\qmng.dll
2015-05-18 02:31 - 2015-06-02 05:22 - 00019456 _____ () C:\Spiele\Origin\imageformats\qtga.dll
2015-05-18 02:31 - 2015-06-02 05:22 - 00337408 _____ () C:\Spiele\Origin\imageformats\qtiff.dll
2015-05-18 02:31 - 2015-06-02 05:22 - 00018944 _____ () C:\Spiele\Origin\imageformats\qwbmp.dll
2014-12-11 04:25 - 2013-10-23 15:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-04-27 10:24 - 2013-04-27 10:24 - 00071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1767951355-1007739754-1276474970-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Profilname\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{D48F6F7F-BD46-41F0-BD6B-37F58504FF32}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{606AE995-9C21-4595-A361-D694AFBF14BB}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{D07C2BDC-33CE-4019-96CF-0E5FAAC63EF5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9DF2011A-BAF6-41DF-9BEF-7188CCD90CAB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{916DD865-4294-4366-946D-3E9A5E1C4BEA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{DD71F7C7-3121-4C1B-8255-F64644530340}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{5AEF3889-CB25-42D2-8338-6A993DE29600}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{88A69DE3-773C-4BC6-9AE1-A6E791F8B9C9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0277D7D6-643C-41DC-A8F8-02D7ADF9FEA9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9E458772-C26E-4D17-AA38-FCDD8A70A2B7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F0E5EB37-CD7C-457C-B09F-71C150037846}] => (Allow) C:\Windows\system32\ftp.exe
FirewallRules: [{2158D9F2-2CDB-4F15-9974-31FEA2213E2C}] => (Allow) C:\Windows\system32\ftp.exe
FirewallRules: [{9C9C552A-E0D9-4B40-B28F-01305626C5CE}] => (Allow) C:\Windows\SysWOW64\ftp.exe
FirewallRules: [{1685CB77-9C32-41F3-B88A-B629BCBBDC80}] => (Allow) C:\Windows\SysWOW64\ftp.exe
FirewallRules: [{18153B11-249C-4677-8E7F-F3A6EEBB2B67}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{EBAFE9C5-A81D-42B7-B8BD-9468C7F4CABF}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C5BFC37A-F0A7-4EA9-BB5F-F02E66DA818A}] => (Allow) C:\Steam_Games\Steam\Steam.exe
FirewallRules: [{C6B8EAE0-4C7A-44BF-9708-DA8654955BE2}] => (Allow) C:\Steam_Games\Steam\Steam.exe
FirewallRules: [{38AD4D1C-C126-4F7E-84DB-49CD23A34A20}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{ED0F09B2-5AB0-401F-939B-16EEEB93DF1E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{EDA59C6C-1125-4A91-9671-E41A57DE15FD}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Arma 2\arma2.exe
FirewallRules: [{230EB1BD-FCC3-45C4-B3B6-E0E7BEB60D84}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Arma 2\arma2.exe
FirewallRules: [{3DD4A496-180C-4504-98B0-F74DCA1F51E8}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA.exe
FirewallRules: [{CAAEAA16-9E3F-4E8D-8E5F-9D4A19933B15}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA.exe
FirewallRules: [{65C45EC3-7E24-4AF9-8891-659489E0F332}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\Expansion\beta\Arma2OA.exe
FirewallRules: [{39FAB9F4-922C-4E7E-96DE-5234788D42F0}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\Expansion\beta\Arma2OA.exe
FirewallRules: [{BBB746E1-3EE4-40C9-826B-44D10013D3CF}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA_BE.exe
FirewallRules: [{481EF33C-68DF-49F0-9A36-39CD6393D2B2}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA_BE.exe
FirewallRules: [{B03083CA-1BA0-4BF6-AC3C-477CE438305E}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\DLCsetup\ACR\datacachepreprocessor.exe
FirewallRules: [{4A3B736F-0CBA-4A0B-BD7D-738A89E760B1}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\DLCsetup\ACR\datacachepreprocessor.exe
FirewallRules: [{9AC41D93-AA9B-4BD3-BC07-CEDE96C27BB5}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\DLCsetup\PMC\datacachepreprocessor.exe
FirewallRules: [{85132833-0F52-4654-AD8D-D0E6DA8170C1}] => (Allow) C:\Steam_Games\Steam\steamapps\common\arma 2 operation arrowhead\DLCsetup\PMC\datacachepreprocessor.exe
FirewallRules: [{D5F312DC-2DD4-40A5-9CE5-F944B78F79DF}] => (Allow) C:\Steam_Games\Steam\steamapps\common\call of duty black ops\BlackOps.exe
FirewallRules: [{BE7837B2-3F0D-4E42-BE64-7D10614EB298}] => (Allow) C:\Steam_Games\Steam\steamapps\common\call of duty black ops\BlackOps.exe
FirewallRules: [{DE9A4F00-8D26-4416-BD9C-8D6F837E6848}] => (Allow) C:\Steam_Games\Steam\steamapps\common\call of duty black ops\BlackOpsMP.exe
FirewallRules: [{B1FCAE80-12D9-4439-94CF-16372BC9E86B}] => (Allow) C:\Steam_Games\Steam\steamapps\common\call of duty black ops\BlackOpsMP.exe
FirewallRules: [{801AE6D1-3073-44EC-83CF-407C96928F83}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{41A246FA-5C78-43BC-8824-0AB623E695DA}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{13C61DF8-9D4A-4CBA-9A5D-F5DB4B5616B5}] => (Allow) C:\Steam_Games\Steam\steamapps\common\DXHRML\dxhrml.exe
FirewallRules: [{32BBEE42-FCD1-4F11-96E4-76401991293B}] => (Allow) C:\Steam_Games\Steam\steamapps\common\DXHRML\dxhrml.exe
FirewallRules: [{6D7C62DA-162A-416E-8338-193A13186D18}] => (Allow) C:\Steam_Games\Steam\steamapps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{6E603CA2-9E23-4C30-9095-6DCAD88F0BD2}] => (Allow) C:\Steam_Games\Steam\steamapps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{73B8BB1A-1BEF-41DE-B1F8-5EEA836B9EA7}] => (Allow) C:\Steam_Games\Steam\steamapps\common\max payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{F7177A81-7E3B-43AA-B6EC-46F06BAC0AF2}] => (Allow) C:\Steam_Games\Steam\steamapps\common\max payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{35045B08-B21D-4A99-B7D4-E3AB7734ADB9}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{6B87DB2C-272E-4DF1-B2D2-6A66DC99A574}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{9C664C85-55C0-4DCF-8C3C-6965481CF44F}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [{304118CF-72DC-4CBA-8E0C-A071433FBB02}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [{CF642E0D-9F55-4E8A-9A63-79B5A9B3EF9D}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{49D77475-31F7-4FBB-886C-E85F9A3B244B}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{B122015E-3C3F-4B3C-9364-A352CF98EEDE}] => (Allow) C:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\CNC3.exe
FirewallRules: [{43A4E560-73B1-46E2-B7CA-58788907902F}] => (Allow) C:\spiele\steam\steamapps\common\command and conquer 3 tiberium wars\CNC3.exe
FirewallRules: [{447EF613-82C6-4B7A-818E-E01F71E73413}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{FA45E5E6-432A-4876-A38B-0C129356CFC2}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{AF5B1984-CA59-48B5-9E86-85D04C601390}] => (Allow) C:\spiele\steam\steamapps\common\aliens vs predator\AvP_Launcher.exe
FirewallRules: [{E887CAB3-824E-4EB0-823E-424C2370B639}] => (Allow) C:\spiele\steam\steamapps\common\aliens vs predator\AvP_Launcher.exe
FirewallRules: [{7BEC4332-CF6A-4950-81B2-D31552BCF4FF}] => (Allow) C:\spiele\steam\steamapps\common\aliens vs predator\AvP_DX11.exe
FirewallRules: [{776E3DBD-A19F-4A60-9A14-5B1E7CC9CAB4}] => (Allow) C:\spiele\steam\steamapps\common\aliens vs predator\AvP_DX11.exe
FirewallRules: [{1D74CED6-9097-424D-B67A-F39E2BD3381F}] => (Allow) C:\spiele\steam\steamapps\common\aliens vs predator\AvP.exe
FirewallRules: [{89942E1A-593C-481E-8CFF-878DEE6A3719}] => (Allow) C:\spiele\steam\steamapps\common\aliens vs predator\AvP.exe
FirewallRules: [{70FD8D64-7E0B-4BFE-BCCB-F6993CD570EC}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Command and Conquer 3 - Kane's Wrath\CNC3EP1.exe
FirewallRules: [{B60394D4-CBF0-471F-B473-C104DE2877E6}] => (Allow) C:\Steam_Games\Steam\steamapps\common\Command and Conquer 3 - Kane's Wrath\CNC3EP1.exe
FirewallRules: [{35838E8C-0FAB-43B3-B2A1-C6BEC76452B9}] => (Allow) C:\Spiele\Steam\Steam.exe
FirewallRules: [{F6DF763A-3AE5-4479-8D6A-345C128DF534}] => (Allow) C:\Spiele\Steam\Steam.exe
FirewallRules: [TCP Query User{4FEEA555-584F-41AF-A293-4C2FC3EF6F9B}E:\mirc\mirc.exe] => (Allow) E:\mirc\mirc.exe
FirewallRules: [UDP Query User{E2548BBA-8530-4952-87AE-34CA6588493B}E:\mirc\mirc.exe] => (Allow) E:\mirc\mirc.exe
FirewallRules: [{CBBDE26B-A3C3-49F2-98F6-2CD92DA8A587}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{CF55FB9F-108C-4283-9F92-0C73029761BB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{602F9970-F9CA-43A2-A948-00F5DB575B45}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{B77DD191-03A6-4B64-874C-96793BDDAD0B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{45AD69CA-7AEB-48AE-A02E-B1E577759332}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{A50E3513-6CC1-4981-9015-F40E4AE588FE}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{308D9CE5-B83E-436F-9F3D-F2EA64E95888}] => (Allow) C:\Spiele\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{DDD580E3-EF67-4ACA-8E3C-8154D6FA4532}] => (Allow) C:\Spiele\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{CD08116C-D6C3-4578-9593-33BFE64E8E8C}] => (Allow) C:\Spiele\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{898781E3-AFA4-4F23-B7FE-88DD35F7E99A}] => (Allow) C:\Spiele\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{2F074AC0-CE81-4DEF-B1E1-13A95A29614D}] => (Allow) C:\Spiele\Steam\steamapps\common\max payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{DFECC3EC-C517-4B1F-AE75-98402E1D232D}] => (Allow) C:\Spiele\Steam\steamapps\common\max payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [TCP Query User{7BBE6CED-FA2C-4FD4-ABA2-0F86A4BCEEE5}C:\spiele\battlenet\diablo iii\diablo iii.exe] => (Allow) C:\spiele\battlenet\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{13EB5DE0-F34D-4BF1-A7FA-7057A15F2B75}C:\spiele\battlenet\diablo iii\diablo iii.exe] => (Allow) C:\spiele\battlenet\diablo iii\diablo iii.exe
FirewallRules: [{8618A7ED-7D26-47BE-BA51-0E11224D097B}] => (Allow) C:\Spiele\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{5E992CC2-2702-486C-963A-1D7E09B56113}] => (Allow) C:\Spiele\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{4B40C92A-6DFA-4100-871D-A86C9FC5FE99}] => (Allow) C:\Spiele\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{5110C18E-6D63-4955-98C9-9E11B73CE93B}] => (Allow) C:\Spiele\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [TCP Query User{5E699258-D4C3-4D4F-9C5A-2BD1C8D0A80F}C:\spiele\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) C:\spiele\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe
FirewallRules: [UDP Query User{458ED06C-3AA3-48A4-8BDE-885B51D45A2D}C:\spiele\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) C:\spiele\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe
FirewallRules: [{2060D222-C28F-4238-A066-1A20A1054F1E}] => (Allow) C:\Spiele\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA.exe
FirewallRules: [{0F5BBD26-A76C-4B4D-958C-36BD21FC6B58}] => (Allow) C:\Spiele\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA.exe
FirewallRules: [{8C3F97D1-EAF2-4638-81EC-5329DB3CA6C2}] => (Allow) C:\Spiele\Steam\steamapps\common\arma 2 operation arrowhead\Expansion\beta\Arma2OA.exe
FirewallRules: [{3AF65722-324D-4808-8F27-718DD2C2A9B1}] => (Allow) C:\Spiele\Steam\steamapps\common\arma 2 operation arrowhead\Expansion\beta\Arma2OA.exe
FirewallRules: [{7ABAA44E-A350-4BEB-BBF1-612E6ED6E333}] => (Allow) C:\Spiele\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA_BE.exe
FirewallRules: [{98FE3377-0285-41A0-9CC5-636E48B28E01}] => (Allow) C:\Spiele\Steam\steamapps\common\arma 2 operation arrowhead\ArmA2OA_BE.exe
FirewallRules: [{F8A5DF1F-A9D3-4CFF-BBE6-17901D2858F8}] => (Allow) C:\Spiele\Steam\steamapps\common\arma 2 operation arrowhead\DLCsetup\ACR\datacachepreprocessor.exe
FirewallRules: [{1CA693FD-4787-4954-A742-582DD8B4AD7F}] => (Allow) C:\Spiele\Steam\steamapps\common\arma 2 operation arrowhead\DLCsetup\ACR\datacachepreprocessor.exe
FirewallRules: [{E458AFB2-A47A-4BF0-AAA0-3534E1AE3026}] => (Allow) C:\Spiele\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{85C6CA21-3D48-4623-94A0-D447D083F667}] => (Allow) C:\Spiele\Steam\steamapps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{A1D460B0-F2CC-4F33-A133-B45F1FB8538E}C:\spiele\steam\steamapps\common\call of duty black ops\blackopsmp.exe] => (Allow) C:\spiele\steam\steamapps\common\call of duty black ops\blackopsmp.exe
FirewallRules: [UDP Query User{AD09BC55-0B13-42CC-AAF3-AF99B035E055}C:\spiele\steam\steamapps\common\call of duty black ops\blackopsmp.exe] => (Allow) C:\spiele\steam\steamapps\common\call of duty black ops\blackopsmp.exe
FirewallRules: [{6A215FD4-3056-4C5F-9409-9FF4DB28FD80}] => (Allow) C:\Spiele\Steam\steamapps\common\Darkness II\DarknessII.exe
FirewallRules: [{313C5C47-CF5D-4B91-8F21-613615624237}] => (Allow) C:\Spiele\Steam\steamapps\common\Darkness II\DarknessII.exe
FirewallRules: [{E5EF1B6C-32D9-40C5-9C41-3D5C5CC1EBD9}] => (Allow) C:\Spiele\Steam\steamapps\common\Thief\Binaries\Win64\Shipping-ThiefGame.exe
FirewallRules: [{3F347320-A505-490A-9D13-C7D7868547C1}] => (Allow) C:\Spiele\Steam\steamapps\common\Thief\Binaries\Win64\Shipping-ThiefGame.exe
FirewallRules: [{028FC6A6-B9F2-4AD1-B205-4A49E83BA914}] => (Allow) C:\Spiele\Steam\steamapps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe
FirewallRules: [{95C5F6AD-CBE0-4C05-9BA9-09589722A640}] => (Allow) C:\Spiele\Steam\steamapps\common\Metal Gear Solid Ground Zeroes\MgsGroundZeroes.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (06/19/2015 11:28:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Thunderbolt.exe, Version: 2.0.4.54, Zeitstempel: 0x530cadea
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000000000008b9c
ID des fehlerhaften Prozesses: 0x6b4
Startzeit der fehlerhaften Anwendung: 0xThunderbolt.exe0
Pfad der fehlerhaften Anwendung: Thunderbolt.exe1
Pfad des fehlerhaften Moduls: Thunderbolt.exe2
Berichtskennung: Thunderbolt.exe3
Vollständiger Name des fehlerhaften Pakets: Thunderbolt.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Thunderbolt.exe5

Error: (06/19/2015 11:28:47 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Thunderbolt.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ApplicationException
Stapel:
   bei System.Threading.Mutex.ReleaseMutex()
   bei Thunderbolt.frmConnectedDevices.CloseApp()
   bei Thunderbolt.frmConnectedDevices..ctor(System.String[])
   bei Thunderbolt.Program.Main(System.String[])

Error: (06/19/2015 11:27:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Thunderbolt.exe, Version: 2.0.4.54, Zeitstempel: 0x530cadea
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000000000008b9c
ID des fehlerhaften Prozesses: 0x6c8
Startzeit der fehlerhaften Anwendung: 0xThunderbolt.exe0
Pfad der fehlerhaften Anwendung: Thunderbolt.exe1
Pfad des fehlerhaften Moduls: Thunderbolt.exe2
Berichtskennung: Thunderbolt.exe3
Vollständiger Name des fehlerhaften Pakets: Thunderbolt.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Thunderbolt.exe5

Error: (06/19/2015 11:27:25 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Thunderbolt.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ApplicationException
Stapel:
   bei System.Threading.Mutex.ReleaseMutex()
   bei Thunderbolt.frmConnectedDevices.CloseApp()
   bei Thunderbolt.frmConnectedDevices..ctor(System.String[])
   bei Thunderbolt.Program.Main(System.String[])

Error: (06/19/2015 11:14:32 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Thunderbolt.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ApplicationException
Stapel:
   bei System.Threading.Mutex.ReleaseMutex()
   bei Thunderbolt.frmConnectedDevices.CloseApp()
   bei Thunderbolt.frmConnectedDevices..ctor(System.String[])
   bei Thunderbolt.Program.Main(System.String[])

Error: (06/19/2015 03:55:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Thunderbolt.exe, Version: 2.0.4.54, Zeitstempel: 0x530cadea
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.3.9600.17415, Zeitstempel: 0x54505737
Ausnahmecode: 0xe0434352
Fehleroffset: 0x0000000000008b9c
ID des fehlerhaften Prozesses: 0x6e0
Startzeit der fehlerhaften Anwendung: 0xThunderbolt.exe0
Pfad der fehlerhaften Anwendung: Thunderbolt.exe1
Pfad des fehlerhaften Moduls: Thunderbolt.exe2
Berichtskennung: Thunderbolt.exe3
Vollständiger Name des fehlerhaften Pakets: Thunderbolt.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Thunderbolt.exe5

Error: (06/19/2015 03:55:45 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Thunderbolt.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ApplicationException
Stapel:
   bei System.Threading.Mutex.ReleaseMutex()
   bei Thunderbolt.frmConnectedDevices.CloseApp()
   bei Thunderbolt.frmConnectedDevices..ctor(System.String[])
   bei Thunderbolt.Program.Main(System.String[])

Error: (06/12/2015 09:40:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dxhr.exe, Version: 1.4.651.0, Zeitstempel: 0x4fb36dd8
Name des fehlerhaften Moduls: dxhr.exe, Version: 1.4.651.0, Zeitstempel: 0x4fb36dd8
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001f0de0
ID des fehlerhaften Prozesses: 0x1890
Startzeit der fehlerhaften Anwendung: 0xdxhr.exe0
Pfad der fehlerhaften Anwendung: dxhr.exe1
Pfad des fehlerhaften Moduls: dxhr.exe2
Berichtskennung: dxhr.exe3
Vollständiger Name des fehlerhaften Pakets: dxhr.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: dxhr.exe5

Error: (06/12/2015 09:35:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dxhr.exe, Version: 1.4.651.0, Zeitstempel: 0x4fb36dd8
Name des fehlerhaften Moduls: dxhr.exe, Version: 1.4.651.0, Zeitstempel: 0x4fb36dd8
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00135c0d
ID des fehlerhaften Prozesses: 0x147c
Startzeit der fehlerhaften Anwendung: 0xdxhr.exe0
Pfad der fehlerhaften Anwendung: dxhr.exe1
Pfad des fehlerhaften Moduls: dxhr.exe2
Berichtskennung: dxhr.exe3
Vollständiger Name des fehlerhaften Pakets: dxhr.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: dxhr.exe5

Error: (06/12/2015 09:34:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dxhr.exe, Version: 1.4.651.0, Zeitstempel: 0x4fb36dd8
Name des fehlerhaften Moduls: dxhr.exe, Version: 1.4.651.0, Zeitstempel: 0x4fb36dd8
Ausnahmecode: 0xc0000005
Fehleroffset: 0x001f2dab
ID des fehlerhaften Prozesses: 0x5ac
Startzeit der fehlerhaften Anwendung: 0xdxhr.exe0
Pfad der fehlerhaften Anwendung: dxhr.exe1
Pfad des fehlerhaften Moduls: dxhr.exe2
Berichtskennung: dxhr.exe3
Vollständiger Name des fehlerhaften Pakets: dxhr.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: dxhr.exe5


System errors:
=============
Error: (06/20/2015 00:05:36 PM) (Source: DCOM) (EventID: 10010) (User: Profilname-Laptop)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (06/20/2015 00:05:06 PM) (Source: DCOM) (EventID: 10010) (User: Profilname-Laptop)
Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}

Error: (06/20/2015 11:54:32 AM) (Source: DCOM) (EventID: 10016) (User: Profilname-Laptop)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Profilname-LaptopprofilnameS-1-5-21-1767951355-1007739754-1276474970-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/20/2015 11:54:32 AM) (Source: DCOM) (EventID: 10016) (User: Profilname-Laptop)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Profilname-LaptopProfilnameS-1-5-21-1767951355-1007739754-1276474970-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/20/2015 11:54:32 AM) (Source: DCOM) (EventID: 10016) (User: Profilname-Laptop)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}profilnames-Laptopprofilname-1-5-21-1767951355-1007739754-1276474970-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/20/2015 11:54:32 AM) (Source: DCOM) (EventID: 10016) (User: profilnames-Laptop)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}profilnames-LaptopprofilnameS-1-5-21-1767951355-1007739754-1276474970-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/20/2015 11:54:32 AM) (Source: DCOM) (EventID: 10016) (User: Profilnames-Laptop)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}profilnames-LaptopprofilnameS-1-5-21-1767951355-1007739754-1276474970-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/20/2015 11:54:32 AM) (Source: DCOM) (EventID: 10016) (User: profilnames-Laptop)
Description: AnwendungsspezifischLokalStart{7022A3B3-D004-4F52-AF11-E9E987FEE25F}{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}Profilnames-LaptopprofilnameS-1-5-21-1767951355-1007739754-1276474970-1001LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (06/20/2015 11:54:22 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎20.‎06.‎2015 um 00:59:48 unerwartet heruntergefahren.

Error: (06/20/2015 11:54:15 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 32212256841144288


Microsoft Office:
=========================
Error: (06/19/2015 11:28:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Thunderbolt.exe2.0.4.54530cadeaKERNELBASE.dll6.3.9600.1741554505737e04343520000000000008b9c6b401d0aa7251d2877bC:\Program Files\Intel\Thunderbolt Software\Thunderbolt.exeC:\Windows\system32\KERNELBASE.dll96229cde-1665-11e5-8272-e8b1fc6bf462

Error: (06/19/2015 11:28:47 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Thunderbolt.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ApplicationException
Stapel:
   bei System.Threading.Mutex.ReleaseMutex()
   bei Thunderbolt.frmConnectedDevices.CloseApp()
   bei Thunderbolt.frmConnectedDevices..ctor(System.String[])
   bei Thunderbolt.Program.Main(System.String[])

Error: (06/19/2015 11:27:28 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Thunderbolt.exe2.0.4.54530cadeaKERNELBASE.dll6.3.9600.1741554505737e04343520000000000008b9c6c801d0aa72229e3b36C:\Program Files\Intel\Thunderbolt Software\Thunderbolt.exeC:\Windows\system32\KERNELBASE.dll666af846-1665-11e5-8271-e8b1fc6bf462

Error: (06/19/2015 11:27:25 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Thunderbolt.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ApplicationException
Stapel:
   bei System.Threading.Mutex.ReleaseMutex()
   bei Thunderbolt.frmConnectedDevices.CloseApp()
   bei Thunderbolt.frmConnectedDevices..ctor(System.String[])
   bei Thunderbolt.Program.Main(System.String[])

Error: (06/19/2015 11:14:32 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Thunderbolt.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ApplicationException
Stapel:
   bei System.Threading.Mutex.ReleaseMutex()
   bei Thunderbolt.frmConnectedDevices.CloseApp()
   bei Thunderbolt.frmConnectedDevices..ctor(System.String[])
   bei Thunderbolt.Program.Main(System.String[])

Error: (06/19/2015 03:55:48 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Thunderbolt.exe2.0.4.54530cadeaKERNELBASE.dll6.3.9600.1741554505737e04343520000000000008b9c6e001d0aa330a576d7eC:\Program Files\Intel\Thunderbolt Software\Thunderbolt.exeC:\Windows\system32\KERNELBASE.dll4de80693-1626-11e5-826c-e8b1fc6bf462

Error: (06/19/2015 03:55:45 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Thunderbolt.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.ApplicationException
Stapel:
   bei System.Threading.Mutex.ReleaseMutex()
   bei Thunderbolt.frmConnectedDevices.CloseApp()
   bei Thunderbolt.frmConnectedDevices..ctor(System.String[])
   bei Thunderbolt.Program.Main(System.String[])

Error: (06/12/2015 09:40:12 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dxhr.exe1.4.651.04fb36dd8dxhr.exe1.4.651.04fb36dd8c0000005001f0de0189001d0a546f65d83f8C:\Spiele\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exeC:\Spiele\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exed6e6cf8f-113a-11e5-826a-e8b1fc6bf462

Error: (06/12/2015 09:35:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dxhr.exe1.4.651.04fb36dd8dxhr.exe1.4.651.04fb36dd8c000000500135c0d147c01d0a546c4af0471C:\Spiele\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exeC:\Spiele\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exe310bd92a-113a-11e5-826a-e8b1fc6bf462

Error: (06/12/2015 09:34:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: dxhr.exe1.4.651.04fb36dd8dxhr.exe1.4.651.04fb36dd8c0000005001f2dab5ac01d0a540f1107539C:\Spiele\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exeC:\Spiele\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exefdab60b8-1139-11e5-826a-e8b1fc6bf462


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4710HQ CPU @ 2.50GHz
Percentage of memory in use: 12%
Total physical RAM: 16333.11 MB
Available physical RAM: 14315.8 MB
Total Pagefile: 18765.11 MB
Available Pagefile: 16485.02 MB
Total Virtual: 131072 MB
Available Virtual: 131071.79 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:464.71 GB) (Free:152.25 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Data1) (Fixed) (Total:931.51 GB) (Free:870.04 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: E3EA9747)

Partition: GPT Partition Type.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 6310F6FB)

Partition: GPT Partition Type.

==================== End of log ============================

Defogger

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:04 on 20/06/2015 (Profilname)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

Frst

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by Profilname (administrator) on Profilnames-LAPTOP on 20-06-2015 15:04:44
Running from C:\Users\Profilname\Desktop
Loaded Profiles: Profilname (Available Profiles: Profilname)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ROG Game First III\AsusGameFirstService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Gaming Center\vivokey.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDGesture.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Electronic Arts) C:\Spiele\Origin\Origin.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
() C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe
() C:\Windows\SysWOW64\UMonit64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2473800 2014-09-09] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3276040 2014-05-09] (ELAN Microelectronics Corp.)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM-x32\...\Run: [ROGNB] => C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe [463872 2013-05-15] ()
HKLM-x32\...\Run: [ASUS ROG MacroKey] => C:\Program Files (x86)\ASUS\ASUS ROG MacroKey\Hid.exe [2036224 2014-07-30] (ASUS)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [730416 2015-06-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [254976 2015-04-16] (Razer Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [130864 2015-05-21] (Avira Operations GmbH & Co. KG)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-1767951355-1007739754-1276474970-1001\...\Run: [Steam] => "C:\Steam_Games\Steam\steam.exe" -silent
HKU\S-1-5-21-1767951355-1007739754-1276474970-1001\...\Run: [EADM] => C:\Spiele\Origin\Origin.exe [3632472 2015-06-02] (Electronic Arts)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1767951355-1007739754-1276474970-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1767951355-1007739754-1276474970-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Profilname\AppData\Roaming\Mozilla\Firefox\Profiles\lt1e8mof.default
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Extension: Avira Browser Safety - C:\Users\Profilname\AppData\Roaming\Mozilla\Firefox\Profiles\lt1e8mof.default\Extensions\abs@avira.com [2015-06-12]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [827184 2015-06-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [450808 2015-06-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [450808 2015-06-19] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1188360 2015-06-19] (Avira Operations GmbH & Co. KG)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [File not signed]
R2 AsusGameFirstService; C:\Program Files (x86)\ASUS\ROG Game First III\AsusGameFirstService.exe [345912 2014-08-29] (ASUSTeK)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [208632 2015-05-21] (Avira Operations GmbH & Co. KG)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [102152 2014-05-09] (ELAN Microelectronics Corp.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-09] (NVIDIA Corporation)
R2 iBtSiva; C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe [121288 2014-05-09] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [File not signed]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-05-29] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19438920 2014-09-09] (NVIDIA Corporation)
S3 Origin Client Service; C:\Spiele\Origin\OriginClientService.exe [1997168 2015-06-02] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-05-25] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-05-20] ()
R2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [368128 2015-04-16] (Razer Inc.) [File not signed]
S3 ThunderboltService; C:\Program Files\Intel\Thunderbolt Software\tbtsvc.exe [1179944 2014-05-13] (Intel Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3816176 2014-05-29] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132656 2015-06-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-04-16] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-04-16] (Avira Operations GmbH & Co. KG)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [226304 2014-03-18] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [140600 2014-03-26] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [1424184 2014-04-22] (Motorola Solutions, Inc.)
U5 GeneStor; C:\Windows\System32\Drivers\GeneStor.sys [107208 2014-01-17] (GenesysLogic)
R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [192456 2014-05-09] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [77992 2014-08-04] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
R3 NETwNb64; C:\Windows\system32\DRIVERS\Netwbw02.sys [3446240 2014-06-18] (Intel Corporation)
S3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R1 NFC_Driver; C:\Windows\System32\drivers\NFC_Driver.sys [48336 2014-03-27] (Titan ARC Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-09] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [39056 2015-04-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-20 15:04 - 2015-06-20 15:04 - 00017412 _____ C:\Users\Profilname\Desktop\FRST.txt
2015-06-20 15:04 - 2015-06-20 15:04 - 00000472 _____ C:\Users\Profilname\Desktop\defogger_disable.log
2015-06-20 15:04 - 2015-06-20 15:04 - 00000000 ____D C:\FRST
2015-06-20 15:04 - 2015-06-20 15:04 - 00000000 _____ C:\Users\Profilname\defogger_reenable
2015-06-20 14:54 - 2015-06-20 14:57 - 00000000 ____D C:\Users\Profilname\Desktop\Laptop
2015-06-20 14:47 - 2015-06-20 14:47 - 02109952 _____ (Farbar) C:\Users\Profilname\Desktop\FRST64.exe
2015-06-20 14:47 - 2015-06-20 14:47 - 00380416 _____ C:\Users\Profilname\Desktop\GMER-kqxc66yd.exe
2015-06-20 14:46 - 2015-06-20 14:46 - 00050477 _____ C:\Users\Profilname\Desktop\Defogger.exe
2015-06-19 23:57 - 2015-06-19 23:57 - 00000209 _____ C:\Users\Profilname\Desktop\METAL GEAR SOLID V GROUND ZEROES.url
2015-06-19 13:13 - 2015-06-19 13:13 - 00000000 _____ C:\Recovery.txt
2015-06-19 11:36 - 2015-06-19 11:36 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2015-06-15 14:40 - 2015-06-15 14:40 - 00000000 ____D C:\Users\Profilname\AppData\Roaming\Foxit Software
2015-06-14 23:07 - 2015-06-16 00:57 - 00000000 ____D C:\Users\Profilname\AppData\Roaming\DarknessII
2015-06-14 20:18 - 2015-06-14 20:18 - 00000000 ____D C:\Users\Profilname\AppData\Local\GWX
2015-06-13 16:53 - 2015-06-13 16:53 - 00000209 _____ C:\Users\Profilname\Desktop\Thief.url
2015-06-13 16:52 - 2015-06-13 16:52 - 00000208 _____ C:\Users\Profilname\Desktop\The Darkness II.url
2015-06-12 23:06 - 2015-06-20 11:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-12 20:46 - 2015-05-22 15:08 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-12 20:46 - 2015-05-21 15:08 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-12 20:46 - 2015-05-21 15:08 - 01020928 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-12 20:46 - 2015-05-21 15:08 - 00756736 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-12 20:46 - 2015-05-21 15:08 - 00422912 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-12 20:46 - 2015-05-21 15:08 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-12 20:46 - 2015-05-21 15:08 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-12 20:46 - 2015-04-17 00:07 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-11 19:32 - 2015-05-25 15:23 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-11 19:32 - 2015-05-25 15:07 - 01430528 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-11 19:32 - 2015-04-16 08:17 - 00325464 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2015-06-11 19:32 - 2015-04-14 00:37 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2015-06-11 19:32 - 2015-04-14 00:34 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2015-06-11 19:32 - 2015-04-10 02:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2015-06-11 19:32 - 2015-04-10 02:17 - 01018880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2015-06-11 19:32 - 2015-04-09 00:41 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rgb9rast.dll
2015-06-11 19:32 - 2015-04-09 00:07 - 00410336 _____ C:\Windows\system32\ApnDatabase.xml
2015-06-11 19:32 - 2015-04-02 00:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-06-11 19:32 - 2015-04-02 00:30 - 02483712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-06-11 19:32 - 2015-03-20 05:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2015-06-11 19:32 - 2015-03-20 05:08 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-06-11 19:32 - 2015-03-20 04:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-06-11 19:32 - 2015-03-20 04:07 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-06-11 19:32 - 2015-03-02 03:43 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2015-06-11 19:32 - 2015-03-02 03:21 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2015-06-11 19:31 - 2015-04-01 06:21 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-06-11 19:31 - 2015-04-01 06:18 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-06-11 19:31 - 2015-04-01 06:17 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-06-11 19:31 - 2015-04-01 06:08 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-06-11 19:31 - 2015-04-01 05:46 - 03633664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-06-11 19:31 - 2015-04-01 05:17 - 02551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-06-11 19:31 - 2015-04-01 05:17 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-06-11 19:31 - 2015-04-01 04:53 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-06-11 19:31 - 2015-04-01 04:53 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-06-11 19:31 - 2015-04-01 04:45 - 02749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-06-11 19:31 - 2015-04-01 04:45 - 00699392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-06-11 19:31 - 2015-04-01 04:14 - 01920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-06-11 19:31 - 2015-04-01 04:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-06-10 19:55 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 19:55 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 19:55 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 19:55 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 19:55 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 19:55 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 19:55 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 19:55 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 19:55 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 19:55 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 19:55 - 2015-05-23 04:47 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-06-10 19:55 - 2015-05-23 04:43 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-06-10 19:55 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 19:55 - 2015-05-23 04:38 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 19:55 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 19:55 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 19:55 - 2015-05-23 04:28 - 01042944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2015-06-10 19:55 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 19:55 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 19:55 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 19:55 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 19:55 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 19:55 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 19:55 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 19:55 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 19:55 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 19:55 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 19:55 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 19:55 - 2015-05-22 20:23 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-06-10 19:55 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 19:55 - 2015-05-22 20:15 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-06-10 19:55 - 2015-05-22 20:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-06-10 19:55 - 2015-05-22 20:08 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 19:55 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 19:55 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 19:55 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 19:55 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 19:55 - 2015-05-22 19:49 - 02865152 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2015-06-10 19:55 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 19:55 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 19:55 - 2015-05-21 18:47 - 04177920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 19:55 - 2015-04-25 04:34 - 00653824 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 19:55 - 2015-04-25 04:33 - 00549888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-09 18:47 - 2015-06-09 18:47 - 00000000 ____D C:\Users\Profilname\AppData\Local\Activision
2015-05-30 10:58 - 2015-06-14 20:25 - 00000000 ____D C:\Users\Profilname\AppData\Local\dxhr
2015-05-30 10:56 - 2015-05-30 10:56 - 00000000 ____D C:\Users\Profilname\AppData\Local\28050
2015-05-30 08:17 - 2015-05-30 08:17 - 00000926 _____ C:\Users\Public\Desktop\Battlefield 4.lnk
2015-05-30 08:17 - 2015-05-30 08:17 - 00000902 _____ C:\Users\Public\Desktop\Battlefield 4(64 bit).lnk
2015-05-25 22:52 - 2015-05-25 22:52 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-05-25 22:52 - 2015-05-25 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-05-25 22:51 - 2015-05-25 22:51 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
2015-05-25 22:51 - 2015-05-25 22:51 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
2015-05-25 22:50 - 2015-05-25 22:50 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2015-05-25 20:40 - 2015-05-25 23:10 - 00005498 _____ C:\Users\Profilname\Desktop\Neues Textdokument.txt
2015-05-25 20:33 - 2015-05-25 20:33 - 00000000 ____D C:\Windows\PCHEALTH
2015-05-25 20:33 - 2015-05-25 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
2015-05-25 20:33 - 2015-05-25 20:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2015-05-25 20:33 - 2015-05-25 20:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Synchronization Services
2015-05-25 20:33 - 2015-05-25 20:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Sync Framework
2015-05-25 20:33 - 2015-05-25 20:33 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-05-25 20:32 - 2015-06-12 20:47 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-05-25 20:32 - 2015-05-25 20:33 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2015-05-25 20:32 - 2015-05-25 20:32 - 00000000 __RHD C:\MSOCache
2015-05-25 20:32 - 2015-05-25 20:32 - 00000000 ____D C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2015-05-25 20:32 - 2015-05-25 20:32 - 00000000 ____D C:\Users\Profilname\AppData\Local\Microsoft Help
2015-05-25 20:32 - 2015-05-25 20:32 - 00000000 ____D C:\Program Files\Microsoft Office
2015-05-25 20:32 - 2015-05-25 20:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 8
2015-05-25 20:32 - 2015-05-25 20:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
2015-05-25 19:42 - 2015-05-25 19:42 - 00076152 _____ C:\Windows\system32\PnkBstrA.exe
2015-05-25 04:44 - 2015-05-25 04:44 - 00000000 ____D C:\Users\Profilname\AppData\Local\PunkBuster
2015-05-25 04:22 - 2015-05-25 04:22 - 00000000 ____D C:\Users\Profilname\Documents\Battlefield 4
2015-05-25 04:21 - 2015-05-25 04:21 - 00000707 _____ C:\Users\Public\Desktop\Origin.lnk
2015-05-25 04:21 - 2015-05-25 04:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2015-05-25 04:21 - 2015-05-25 04:21 - 00000000 ____D C:\ProgramData\Electronic Arts

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-20 15:04 - 2015-05-16 21:42 - 00000000 ____D C:\Users\Profilname
2015-06-20 15:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-06-20 14:55 - 2014-10-29 14:02 - 00765582 _____ C:\Windows\system32\perfh007.dat
2015-06-20 14:55 - 2014-10-29 14:02 - 00159366 _____ C:\Windows\system32\perfc007.dat
2015-06-20 14:55 - 2014-03-18 17:26 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-20 14:54 - 2013-08-22 16:46 - 00028671 _____ C:\Windows\setupact.log
2015-06-20 14:00 - 2014-12-11 04:17 - 01470056 _____ C:\Windows\WindowsUpdate.log
2015-06-20 12:33 - 2015-05-16 19:47 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1767951355-1007739754-1276474970-1001
2015-06-20 12:04 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-06-20 12:00 - 2015-05-16 20:53 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2015-06-20 12:00 - 2015-05-16 20:53 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2015-06-20 11:54 - 2015-05-20 13:24 - 00000000 ____D C:\ProgramData\Origin
2015-06-20 11:54 - 2015-05-16 22:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-06-20 11:54 - 2015-05-16 21:42 - 00000093 _____ C:\Users\Profilname\AppData\Roaming\sp_data.sys
2015-06-20 11:54 - 2014-12-11 04:21 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-20 11:54 - 2014-03-18 10:16 - 00210628 _____ C:\Windows\PFRO.log
2015-06-20 11:54 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-20 00:08 - 2015-05-20 12:02 - 00129240 _____ C:\Windows\DirectX.log
2015-06-20 00:08 - 2014-10-29 08:25 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-19 03:55 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2015-06-19 03:53 - 2015-05-20 14:06 - 00153256 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-06-19 03:53 - 2015-05-20 14:06 - 00132656 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-06-19 03:53 - 2015-05-20 14:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-06-17 15:10 - 2015-05-17 22:06 - 00000000 __SHD C:\Users\PRofilname\AppData\Local\EmieBrowserModeList
2015-06-17 15:10 - 2015-05-16 21:45 - 00000000 __SHD C:\Users\Profilname\AppData\Local\EmieUserList
2015-06-17 15:10 - 2015-05-16 21:45 - 00000000 __SHD C:\Users\Profilname\AppData\Local\EmieSiteList
2015-06-14 06:37 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2015-06-13 16:50 - 2013-08-22 16:44 - 00481504 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-12 23:14 - 2015-05-16 21:58 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-12 23:14 - 2015-05-16 21:58 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-12 23:14 - 2013-08-22 17:36 - 00000000 ___RD C:\Windows\ToastData
2015-06-12 23:14 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-12 23:14 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-06-12 20:46 - 2015-05-16 20:51 - 00000000 ____D C:\Windows\system32\MRT
2015-06-12 20:45 - 2015-05-16 20:51 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-12 20:45 - 2013-08-22 15:25 - 00000199 _____ C:\Windows\win.ini
2015-06-10 19:53 - 2015-05-20 14:05 - 00000000 ____D C:\Program Files (x86)\Avira
2015-06-03 18:18 - 2013-08-22 17:38 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-03 18:18 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-03 03:03 - 2015-05-16 19:48 - 00000000 ____D C:\Program Files (x86)\Razer
2015-06-02 05:23 - 2015-05-20 12:12 - 00000000 ____D C:\Users\Profilname\AppData\Roaming\Origin
2015-06-01 11:25 - 2015-05-20 12:19 - 00000000 ____D C:\Users\Profilname\AppData\Local\Battle.net
2015-05-30 09:32 - 2015-05-20 15:47 - 00226680 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2015-05-30 09:22 - 2015-05-20 15:47 - 00226680 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2015-05-26 04:47 - 2015-05-17 22:08 - 00000000 ____D C:\Users\Profilname\AppData\Roaming\vlc
2015-05-25 23:21 - 2015-05-16 21:58 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-25 23:21 - 2015-05-16 21:58 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-25 22:51 - 2014-10-29 08:25 - 00000000 ____D C:\ProgramData\Skype
2015-05-25 20:33 - 2014-10-29 13:30 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-05-25 20:33 - 2014-03-18 17:10 - 00000000 ____D C:\Windows\ShellNew
2015-05-25 20:32 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-05-25 04:33 - 2015-05-20 15:48 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins
2015-05-25 04:33 - 2014-12-11 04:33 - 00000000 ____D C:\ProgramData\McAfee
2015-05-25 04:21 - 2015-05-20 13:25 - 00000000 ____D C:\Users\Profilname\AppData\Local\Origin

==================== Files in the root of some directories =======

2015-05-16 21:42 - 2015-06-20 11:54 - 0000093 _____ () C:\Users\Profilname\AppData\Roaming\sp_data.sys
2014-12-11 04:26 - 2014-12-11 04:26 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2014-10-29 08:25 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Files to move or delete:
====================
C:\ProgramData\SetStretch.VBS


Some files in TEMP:
====================
C:\Users\Profilname\AppData\Local\Temp\avgnt.exe
C:\Users\Profilname\AppData\Local\Temp\mccspuninstall.exe
C:\Users\Profilname\AppData\Local\Temp\mirc635.exe
C:\Users\Profilname\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Profilname\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Profilname\AppData\Local\Temp\nvStInst.exe
C:\Users\Profilname\AppData\Local\Temp\sonarinst.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-20 12:04

==================== End of log ============================

LogDatei von Desinfect:

HTML-Code:

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>Virenfunde</title>
<link rel="stylesheet" type="text/css" href="file:///opt/desinfect/metascan.css" />
</head>
<body>
<h2 align="center">Virenfunde</h2>
<table class="virustab">
<tr>
<th class="leftempty">&nbsp;</th>
<th>Avira</th>
<th>Bitdefender</th>
<th>Kaspersky</th>
<th>ClamAV</th>
<th>Aktion</th>
</tr>
<tr class="even">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/Recovery/oem/DELAY.EXE">/media/Recovery/oem/DELAY.EXE</a></td>
</tr>
<tr  class="even">
<td class="leftempty"></td>
<td><a target="_blank" href="hxxp://www.avira.com/de/support-virus-lab?sq=TR/Agent.179568">TR/Agent.179568</td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Worm.Agent-88">Win.Worm.Agent-88</td><td>
<a href="vtupload:///media/Recovery/oem/DELAY.EXE">VirusTotal</a>
 <a href="rename:///media/Recovery/oem/DELAY.EXE">umbenennen</a> </td>
</tr>
<tr class="odd">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/Data1/mIRC/mirc.exe">/media/Data1/mIRC/mirc.exe</a></td>
</tr>
<tr  class="odd">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Trojan.Small-504">Trojan.Small-504</td><td>
<a href="vtupload:///media/Data1/mIRC/mirc.exe">VirusTotal</a>
 <a href="rename:///media/Data1/mIRC/mirc.exe">umbenennen</a> </td>
</tr>
<tr class="even">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/Data1/Portable Apps/m_irc-1635/DEViLiSiON/mirc.exe">/media/Data1/Portable Apps/m_irc-1635/DEViLiSiON/mirc.exe</a></td>
</tr>
<tr  class="even">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Trojan.Small-504">Trojan.Small-504</td><td>
<a href="vtupload:///media/Data1/Portable Apps/m_irc-1635/DEViLiSiON/mirc.exe">VirusTotal</a>
 <a href="rename:///media/Data1/Portable Apps/m_irc-1635/DEViLiSiON/mirc.exe">umbenennen</a> </td>
</tr>
<tr class="odd">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Spiele/Dying Light/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">/media/desinfect/OS/Spiele/Dying Light/_CommonRedist/DirectX/Jun2010/DXSETUP.exe</a></td>
</tr>
<tr  class="odd">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Trojan.Dropped-1793">Win.Trojan.Dropped-1793</td><td>
<a href="vtupload:///media/desinfect/OS/Spiele/Dying Light/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Spiele/Dying Light/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">umbenennen</a> </td>
</tr>
<tr class="even">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Spiele/Origin Games/Battlefield 4/__Installer/directx/redist/DXSETUP.exe">/media/desinfect/OS/Spiele/Origin Games/Battlefield 4/__Installer/directx/redist/DXSETUP.exe</a></td>
</tr>
<tr  class="even">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Trojan.Dropped-1793">Win.Trojan.Dropped-1793</td><td>
<a href="vtupload:///media/desinfect/OS/Spiele/Origin Games/Battlefield 4/__Installer/directx/redist/DXSETUP.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Spiele/Origin Games/Battlefield 4/__Installer/directx/redist/DXSETUP.exe">umbenennen</a> </td>
</tr>
<tr class="odd">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Spiele/Steam/steamapps/common/call of duty black ops/Redist/DirectX/DXSETUP.exe">/media/desinfect/OS/Spiele/Steam/steamapps/common/call of duty black ops/Redist/DirectX/DXSETUP.exe</a></td>
</tr>
<tr  class="odd">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Trojan.Dropped-1793">Win.Trojan.Dropped-1793</td><td>
<a href="vtupload:///media/desinfect/OS/Spiele/Steam/steamapps/common/call of duty black ops/Redist/DirectX/DXSETUP.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Spiele/Steam/steamapps/common/call of duty black ops/Redist/DirectX/DXSETUP.exe">umbenennen</a> </td>
</tr>
<tr class="even">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Spiele/Steam/steamapps/common/call of duty modern warfare 3/Redist/DirectX/DXSETUP.exe">/media/desinfect/OS/Spiele/Steam/steamapps/common/call of duty modern warfare 3/Redist/DirectX/DXSETUP.exe</a></td>
</tr>
<tr  class="even">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Trojan.Dropped-1793">Win.Trojan.Dropped-1793</td><td>
<a href="vtupload:///media/desinfect/OS/Spiele/Steam/steamapps/common/call of duty modern warfare 3/Redist/DirectX/DXSETUP.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Spiele/Steam/steamapps/common/call of duty modern warfare 3/Redist/DirectX/DXSETUP.exe">umbenennen</a> </td>
</tr>
<tr class="odd">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Spiele/Steam/steamapps/common/Dishonored/Binaries/Redist/directx_full_redist/DXSETUP.exe">/media/desinfect/OS/Spiele/Steam/steamapps/common/Dishonored/Binaries/Redist/directx_full_redist/DXSETUP.exe</a></td>
</tr>
<tr  class="odd">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Trojan.Dropped-1793">Win.Trojan.Dropped-1793</td><td>
<a href="vtupload:///media/desinfect/OS/Spiele/Steam/steamapps/common/Dishonored/Binaries/Redist/directx_full_redist/DXSETUP.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Spiele/Steam/steamapps/common/Dishonored/Binaries/Redist/directx_full_redist/DXSETUP.exe">umbenennen</a> </td>
</tr>
<tr class="even">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Spiele/Steam/steamapps/common/max payne 3/MP3_Installers/DirectX/DXSETUP.exe">/media/desinfect/OS/Spiele/Steam/steamapps/common/max payne 3/MP3_Installers/DirectX/DXSETUP.exe</a></td>
</tr>
<tr  class="even">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Trojan.Dropped-1793">Win.Trojan.Dropped-1793</td><td>
<a href="vtupload:///media/desinfect/OS/Spiele/Steam/steamapps/common/max payne 3/MP3_Installers/DirectX/DXSETUP.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Spiele/Steam/steamapps/common/max payne 3/MP3_Installers/DirectX/DXSETUP.exe">umbenennen</a> </td>
</tr>
<tr class="odd">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Spiele/Steam/steamapps/common/Shadow Warrior/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">/media/desinfect/OS/Spiele/Steam/steamapps/common/Shadow Warrior/_CommonRedist/DirectX/Jun2010/DXSETUP.exe</a></td>
</tr>
<tr  class="odd">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Trojan.Dropped-1793">Win.Trojan.Dropped-1793</td><td>
<a href="vtupload:///media/desinfect/OS/Spiele/Steam/steamapps/common/Shadow Warrior/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Spiele/Steam/steamapps/common/Shadow Warrior/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">umbenennen</a> </td>
</tr>
<tr class="even">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Spiele/Steam/steamapps/common/Thief/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">/media/desinfect/OS/Spiele/Steam/steamapps/common/Thief/_CommonRedist/DirectX/Jun2010/DXSETUP.exe</a></td>
</tr>
<tr  class="even">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Win.Trojan.Dropped-1793">Win.Trojan.Dropped-1793</td><td>
<a href="vtupload:///media/desinfect/OS/Spiele/Steam/steamapps/common/Thief/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Spiele/Steam/steamapps/common/Thief/_CommonRedist/DirectX/Jun2010/DXSETUP.exe">umbenennen</a> </td>
</tr>
<tr class="odd">
<td colspan="6" class="filename"><a title="Im Dateimananger öffnen" href="filemanager:///media/desinfect/OS/Users/Kontoname/AppData/Local/Temp/Rar$DRa0.881/mirc.exe">/media/desinfect/OS/Users/Kontoname/AppData/Local/Temp/Rar$DRa0.881/mirc.exe</a></td>
</tr>
<tr  class="odd">
<td class="leftempty"></td>
<td></td>
<td></td>
<td></td>
<td class="clamlight"><a target="_blank" href="hxxp://www.google.com/search?q=Trojan.Small-504">Trojan.Small-504</td><td>
<a href="vtupload:///media/desinfect/OS/Users/Kontoname/AppData/Local/Temp/Rar$DRa0.881/mirc.exe">VirusTotal</a>
 <a href="rename:///media/desinfect/OS/Users/Kontoname/AppData/Local/Temp/Rar$DRa0.881/mirc.exe">umbenennen</a> </td>
</tr>
</table>
<div class="cleanall"><p><a href="renameall:///virus">Alle gefundenen Dateien mit der Endung .VIRUS versehen</a></p></div></body>
</html>

Datenleck Aufsprüfen PC1

Log-Analyse und Auswertung: Datenleck Aufsprüfen PC1

Datenleck Aufsprüfen PC1

Ähnliche Themen: Datenleck Aufsprüfen PC1