Windows 8.1 - Ungültiges Bild C:\PROGRA~2\SEARCH~1\bin\VC64LO~.DLL

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:36 on 30/07/2015 (****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:28-07-2015
durchgeführt von **** (Administrator) auf NETADMIN (30-07-2015 14:38:21)
Gestartet von C:\Users\****\Desktop\trojaner weg
Geladene Profile: **** & Administrator (Verfügbare Profile: **** & Administrator)
Platform: Windows 8.1 Pro (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser Pfad: "C:\Users\****\AppData\Local\Vivaldi\Application\vivaldi.exe" -- "%1")
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(ArcSoft, Inc.) C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\Bin\IpOverUsbSvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Steganos Software GmbH) C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(FS) C:\Program Files (x86)\FS\Spyro Portal\FlashPortal.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\vmms.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
() C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Game Inc.) C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.203.736.0.exe
(Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SrTasks.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [112856 2014-04-14] (VMware, Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [832272 2014-05-21] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [191528 2014-06-27] (Geek Software GmbH)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-07-30] (Oracle Corporation)
HKLM-x32\...\Run: [GamingKeyboard] => C:\Program Files (x86)\SHARKOON Skiller\GameMon.exe [1803264 2012-06-07] (Game Inc.)
HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [506864 2013-03-08] (MSI)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [730416 2015-06-11] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-06-02] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [37632 2014-01-30] (Overwolf LTD)
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [wcfkvx.exe] => C:\Users\****\AppData\Roaming\bugfxa\wcfkvx.exe
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [Cracked Steam Service] => "c:\program files (x86)\cracked steam\Cracked AntiSteam.exe" /SERVICE
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [Google Update] => C:\Users\****\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-06-02] (Google Inc.)
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [MAPMAKER" Launcher] => C:\Users\****\Desktop\MapMaker Launcher 2.8.7.7.exe -silent
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 5\CyberGhost.EXE [410216 2014-11-03] (CyberGhost S.R.L.)
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [Spotify Web Helper] => C:\Users\****\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1964088 2015-03-20] (Spotify Ltd)
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [MK LOL] => C:\Program Files (x86)\MKJogo\MK IM\Bin\MKIM.exe [1092296 2014-12-04] ()
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [466144 2014-11-27] (Sony)
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [OKAYFREEDOM_Agent] => C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe [6517160 2014-12-12] (Steganos Software GmbH)
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\...\Run: [Spotify] => C:\Users\****\AppData\Roaming\Spotify\Spotify.exe [6701624 2015-03-20] (Spotify Ltd)
AppInit_DLLs: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC64LO~1.DLL => C:\Program Files (x86)\SearchProtect\SearchProtect\bin\VC64Loader.dll [246080 2014-11-27] ()
AppInit_DLLs-x32: C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL => "C:\PROGRA~2\SEARCH~1\SEARCH~1\bin\VC32LO~1.DLL" Datei nicht gefunden
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2014-11-18]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2014-02-15]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ATTENTION

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

ProxyEnable: [.DEFAULT] => Internet Explorer proxy ist aktiviert.
ProxyServer: [.DEFAULT] => http=127.0.0.1:1403;https=127.0.0.1:1403
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://safesearch.avira.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://safesearch.avira.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://safesearch.avira.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = https://safesearch.avira.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://safesearch.avira.com/
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://safesearch.avira.com/
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://safesearch.avira.com/
HKU\S-1-5-21-2314403856-2824009859-24823230-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://safesearch.avira.com/
URLSearchHook: [S-1-5-21-2314403856-2824009859-24823230-500] ATTENTION ==> Standard URLSearchHook fehlt
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2314403856-2824009859-24823230-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2314403856-2824009859-24823230-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxp://nortonsafe.search.ask.com/web?q={SEARCHTERMS}&o=APN10506&l=dis&prt=NIS&chn=retail&geo=DE&ver=21&locale=de_DE&gct=kwd&qsrc=2869
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: youtubeadblocker -> {6884511e-368a-4c51-8e81-7bad72988a3c} -> C:\Program Files (x86)\youtubeadblocker\4SzgjWPifBozkO.x64.dll Keine Datei
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_20\bin\ssv.dll [2014-09-01] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_20\bin\jp2ssv.dll [2014-09-01] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> C:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-10-06] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-10-06] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-2314403856-2824009859-24823230-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{0D3339BE-97FE-420F-8A80-15C50715EE1C}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{B13453D3-7683-40A3-ADDB-255F33513804}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{B9EEEB35-9911-4B69-B7E6-76814888DF09}: [DhcpNameServer] 7.254.254.254
Tcpip\..\Interfaces\{FE254F83-9638-42B8-8947-E1C1134CE33D}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll [2014-02-25] ()
FF Plugin: @java.com/DTPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\dtplugin\npDeployJava1.dll [2014-09-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.20.2 -> C:\Program Files\Java\jre1.8.0_20\bin\plugin2\npjp2.dll [2014-09-01] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll [2014-02-25] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-06] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-10-06] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll [2013-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-03-04] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-03-04] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin HKU\S-1-5-21-2314403856-2824009859-24823230-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\****\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2314403856-2824009859-24823230-1001: @talk.google.com/O1DPlugin -> C:\Users\****\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF Plugin HKU\S-1-5-21-2314403856-2824009859-24823230-1001: @tools.google.com/Google Update;version=3 -> C:\Users\****\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-2314403856-2824009859-24823230-1001: @tools.google.com/Google Update;version=9 -> C:\Users\****\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-2314403856-2824009859-24823230-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\****\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-09-27] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\****\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-04-17] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\****\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-04-17] (Google)
FF SearchPlugin: C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\searchplugins\trovi-search.xml [2014-10-05]
FF Extension: Firefox OS 2.0 Simulator - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\fxos_2_0_simulator@mozilla.org [2015-02-01]
FF Extension: Firefox OS 2.1 Simulator - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\fxos_2_1_simulator@mozilla.org [2015-02-01]
FF Extension: Firefox OS 2.2 Simulator - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\fxos_2_2_simulator@mozilla.org [2015-04-03]
FF Extension: Mozilla Firefox Hotfixer - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\veggy@veggyAddon.com [2015-03-24]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{09ca032b-423b-a460-505c-3be0233d6d11} [2015-05-20]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{0fd0c47c-7f90-d92e-b29d-b2b5201879ad} [2015-03-10]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{328c0144-2817-0585-11ac-8ba69979846b} [2015-05-27]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{52506c65-92ab-1d17-5dcb-7225eb1fb0e2} [2015-05-22]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{574bc6e9-ffe9-9667-e080-637221010d62} [2015-06-02]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{64be4785-8e92-f6ec-4ca0-6338578aaa3b} [2015-06-11]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{6d22d23c-4162-5b3e-ce9c-d162935ac893} [2015-05-22]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{7d6f078b-acb1-cc1a-6ff0-d51bedb5aea4} [2015-05-22]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{93e739aa-028d-5c23-736a-87676804ff76} [2015-05-27]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{9e2d4b58-1428-9f58-d1c1-f82f02907a12} [2015-06-11]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{ad0c2e6f-a938-2d4d-f896-170173210afb} [2015-06-11]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{b0ba5b91-7dce-3908-b4cf-7b1df5b61970} [2015-05-27]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{b4f3b79f-d1ea-0a96-ddd6-392ccc78c06d} [2015-06-11]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{c1b5deba-26ba-3b2f-c4e0-82948ff9c70d} [2015-05-22]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{ccce9d5c-fe80-b720-752f-f88a7653be6c} [2015-05-27]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{d1eb472f-6982-143e-1935-87555dd27bec} [2015-06-11]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{dbd38648-fbec-ea42-e6c9-f8e9c3155469} [2015-05-22]
FF Extension: Zoom It - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{ea240ad1-5851-bbf2-45f7-ec839443a71a} [2015-05-20]
FF Extension: Firebug - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\firebug@software.joehewitt.com.xpi [2015-02-01]
FF Extension: MEGA - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\firefox@mega.co.nz.xpi [2015-02-19]
FF Extension: Web Developer - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2014-06-13]
FF Extension: Toggle Web Developer Toolbar - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{c75a27d8-4529-449f-b67b-aba65d7a1c0a}.xpi [2014-11-03]
FF Extension: Adblock Plus - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-21]
FF Extension: OkayFreedom - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{DB981CCA-088E-4731-A4A2-2FE218703C0E}.xpi [2015-01-18]
FF Extension: DownThemAll! - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-11-03]
FF Extension: Greasemonkey - C:\Users\****\AppData\Roaming\Mozilla\Firefox\Profiles\lilx2re2.default-1402395754761\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-02-28]
FF Extension: Kein Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF

Chrome: 
=======
CHR Profile: C:\Users\****\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-29]
CHR Extension: (Google Docs) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-29]
CHR Extension: (Google Drive) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-29]
CHR Extension: (YouTube) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-29]
CHR Extension: (uBlock Origin) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2015-07-29]
CHR Extension: (Google Search) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-29]
CHR Extension: (Tampermonkey) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-07-29]
CHR Extension: (Google Sheets) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-29]
CHR Extension: (Avira Browser Safety) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-07-29]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-29]
CHR Extension: (Chrome Web Store Payments) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-29]
CHR Extension: (Gmail) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-29]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Services (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [44736 2013-10-24] (ArcSoft, Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [827184 2015-06-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [450808 2015-06-11] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [450808 2015-06-11] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1188360 2015-06-11] (Avira Operations GmbH & Co. KG)
S2 AODService; C:\Program Files (x86)\AMD\OverDrive\AODAssist.exe [137584 2014-01-08] ()
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [217280 2015-06-02] (Avira Operations GmbH & Co. KG)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-05-21] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-05-21] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-05-21] (BlueStack Systems, Inc.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-06-27] (Microsoft Corporation)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-11-03] (CyberGhost S.R.L)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [182304 2014-11-16] (EasyAntiCheat Ltd)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Datei ist nicht signiert]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Datei ist nicht signiert]
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2014-02-20] (Microsoft Corporation) [Datei ist nicht signiert]
S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-01-12] (Hi-Rez Studios) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\Bin\IpOverUsbSvc.exe [22768 2014-04-17] (Microsoft Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
R2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [324024 2014-12-12] (Steganos Software GmbH)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1930608 2015-03-25] (Electronic Arts)
S4 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [98560 2014-01-30] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-06-20] ()
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [685568 2013-11-11] () [Datei ist nicht signiert]
R2 SpyroService; C:\Program Files (x86)\FS\Spyro Portal\FlashPortal.exe [50688 2012-09-20] (FS) [Datei ist nicht signiert]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [Datei ist nicht signiert]
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 vmms; C:\Windows\system32\vmms.exe [13784064 2015-04-01] (Microsoft Corporation)
R2 vmware-converter-agent; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter-a.exe [479824 2013-04-09] (VMware, Inc.)
R2 vmware-converter-server; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [479824 2013-04-09] (VMware, Inc.)
R2 vmware-converter-worker; C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\vmware-converter.exe [479824 2013-04-09] (VMware, Inc.)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [14407384 2014-04-14] ()
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87736 2014-04-30] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AODDriver4.3.0; C:\Program Files (x86)\AMD\OverDrive\amd64\AODDriver2.sys [59624 2014-01-08] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-11] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132656 2015-06-11] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2015-03-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-03-24] (Avira Operations GmbH & Co. KG)
S3 bmdrvr; C:\Windows\SysWow64\drivers\bmdrvr.sys [75344 2013-02-22] (VMware, Inc.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-05-21] (BlueStack Systems)
R3 DroidCam; C:\Windows\system32\DRIVERS\droidcam.sys [33080 2015-04-19] (Dev47Apps)
R3 DroidCamVideo; C:\Windows\system32\DRIVERS\droidcamvideo.sys [229176 2015-04-19] (Windows (R) Win 7 DDK provider)
R3 GameKB; C:\Windows\system32\drivers\GameKB.sys [27648 2012-05-11] ()
S3 GPCIDrv; C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\GPCIDrv64.sys [14376 2010-02-04] ()
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-03-30] (LogMeIn Inc.)
R1 hvservice; C:\Windows\System32\drivers\hvservice.sys [68960 2014-06-27] (Microsoft Corporation)
S1 kwjflwbc; C:\Windows\system32\drivers\kwjflwbc.sys [55168 2015-07-30] (Microsoft Corporation)
S3 lunparser; C:\Windows\System32\drivers\lunparser.sys [19456 2014-06-27] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2013-07-29] (CACE Technologies, Inc.)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 passthruparser; C:\Windows\System32\drivers\passthruparser.sys [22016 2014-06-27] (Microsoft Corporation)
S3 pvhdparser; C:\Windows\System32\drivers\pvhdparser.sys [27136 2014-06-27] (Microsoft Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 vhdparser; C:\Windows\System32\drivers\vhdparser.sys [18944 2014-06-27] (Microsoft Corporation)
R2 VMparport; C:\Windows\system32\drivers\VMparport.sys [32472 2014-04-14] (VMware, Inc.)
R3 VMSMP; C:\Windows\system32\DRIVERS\vmswitch.sys [688640 2014-10-08] (Microsoft Corporation)
S3 VMSP; C:\Windows\system32\DRIVERS\vmswitch.sys [688640 2014-10-08] (Microsoft Corporation)
S3 VMSVSF; C:\Windows\system32\DRIVERS\vmswitch.sys [688640 2014-10-08] (Microsoft Corporation)
S3 VMSVSP; C:\Windows\system32\DRIVERS\vmswitch.sys [688640 2014-10-08] (Microsoft Corporation)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [73296 2013-10-08] (VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-02-22] (VMware, Inc.)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 XSplit_Dummy; C:\Windows\system32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
R3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S1 btrtrvgq; \??\C:\Windows\system32\drivers\btrtrvgq.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 EasyAntiCheatSys; \??\C:\Windows\system32\EasyAntiCheat.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 X6va016; \??\C:\Windows\SysWOW64\Drivers\X6va016 [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-07-30 14:38 - 2015-07-30 14:38 - 00000000 ____D C:\FRST
2015-07-30 14:36 - 2015-07-30 14:36 - 00000000 _____ C:\Users\****\defogger_reenable
2015-07-30 14:28 - 2015-07-30 14:39 - 00000000 ____D C:\Users\****\Desktop\trojaner weg
2015-07-30 14:12 - 2015-07-30 14:12 - 00055168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\kwjflwbc.sys
2015-07-29 13:06 - 2015-07-29 13:06 - 00002267 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-07-29 13:06 - 2015-07-29 13:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-29 12:31 - 2015-07-29 12:31 - 00001136 _____ C:\Users\Public\Desktop\Avira.lnk
2015-07-29 12:29 - 2015-07-29 12:29 - 00000000 ____D C:\Users\****\AppData\Local\CEF
2015-07-29 12:26 - 2015-07-29 13:03 - 06420480 _____ C:\Program Files (x86)\GUT5C5.tmp
2015-07-29 12:26 - 2015-07-29 13:03 - 00000000 ____D C:\Program Files (x86)\GUM16E.tmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-07-30 14:37 - 2014-05-30 15:46 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-30 14:36 - 2014-02-07 19:32 - 00000000 ____D C:\Users\****
2015-07-30 14:35 - 2014-04-25 14:08 - 00000000 __RDO C:\Users\****\SkyDrive
2015-07-30 14:31 - 2015-05-14 12:21 - 00003020 _____ C:\Windows\System32\Tasks\MSIAfterburner
2015-07-30 14:31 - 2014-02-07 19:31 - 01505183 _____ C:\Windows\WindowsUpdate.log
2015-07-30 14:30 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2015-07-30 14:29 - 2014-02-07 21:41 - 00000000 ____D C:\Users\****\AppData\Roaming\TS3Client
2015-07-30 14:24 - 2014-04-27 14:03 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-30 14:24 - 2014-02-07 20:01 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2314403856-2824009859-24823230-1001
2015-07-30 14:05 - 2015-02-22 12:45 - 00000000 ____D C:\Program Files (x86)\Opera
2015-07-30 14:03 - 2014-04-27 14:03 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-30 14:02 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\sru
2015-07-30 14:00 - 2015-02-12 20:09 - 00000000 ____D C:\Users\Administrator
2015-07-30 14:00 - 2014-02-07 19:41 - 01895006 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-30 14:00 - 2013-08-23 01:24 - 00808806 _____ C:\Windows\system32\perfh007.dat
2015-07-30 14:00 - 2013-08-23 01:24 - 00177844 _____ C:\Windows\system32\perfc007.dat
2015-07-30 13:59 - 2014-06-30 17:15 - 27590656 _____ C:\Windows\system32\vmguest.iso
2015-07-30 13:57 - 2014-05-20 19:32 - 00000000 ____D C:\ProgramData\VMware
2015-07-30 13:55 - 2013-08-22 16:46 - 00106207 _____ C:\Windows\setupact.log
2015-07-30 13:55 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-30 13:54 - 2014-02-07 19:46 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-30 13:49 - 2014-02-07 19:16 - 02225528 _____ C:\Windows\PFRO.log
2015-07-29 16:09 - 2015-03-25 17:21 - 00000000 ____D C:\Users\****\AppData\Local\Warframe
2015-07-29 15:41 - 2015-02-22 12:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY
2015-07-29 15:41 - 2015-02-22 12:44 - 00000000 ____D C:\Program Files (x86)\mbot_de_528
2015-07-29 15:20 - 2014-10-04 15:55 - 00000000 ____D C:\Program Files (x86)\SearchProtect
2015-07-29 15:09 - 2014-03-01 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarkComet RAT Legacy
2015-07-29 15:07 - 2015-04-21 14:19 - 00000000 ____D C:\Users\****\AppData\Roaming\UseNeXT
2015-07-29 14:35 - 2015-04-23 16:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-07-29 13:40 - 2014-06-02 18:09 - 00004078 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2314403856-2824009859-24823230-1001UA
2015-07-29 13:40 - 2014-06-02 18:09 - 00003698 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2314403856-2824009859-24823230-1001Core
2015-07-29 13:40 - 2014-06-02 18:09 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2314403856-2824009859-24823230-1001UA.job
2015-07-29 13:40 - 2014-06-02 18:09 - 00001082 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2314403856-2824009859-24823230-1001Core.job
2015-07-29 13:22 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\LiveKernelReports
2015-07-29 13:18 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2015-07-29 13:07 - 2014-04-27 14:03 - 00000000 ____D C:\Users\****\AppData\Local\Google
2015-07-29 13:06 - 2014-04-27 14:03 - 00000000 ____D C:\Program Files (x86)\Google
2015-07-29 13:04 - 2014-04-27 14:03 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-29 13:04 - 2014-04-27 14:03 - 00003860 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-29 13:00 - 2015-02-02 15:26 - 00000000 ____D C:\Users\****\Desktop\Root m2
2015-07-29 12:49 - 2015-02-22 12:54 - 00000000 __SHD C:\Users\****\AppData\Local\EmieBrowserModeList
2015-07-29 12:49 - 2014-05-06 17:13 - 00000000 __SHD C:\Users\****\AppData\Local\EmieUserList
2015-07-29 12:49 - 2014-05-06 17:13 - 00000000 __SHD C:\Users\****\AppData\Local\EmieSiteList
2015-07-29 12:31 - 2015-04-23 16:45 - 00000000 ____D C:\Program Files (x86)\Avira
2015-07-29 12:31 - 2014-03-21 17:49 - 00000000 ____D C:\ProgramData\Package Cache
2015-07-05 12:08 - 2014-02-10 19:02 - 00300704 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-07-29 12:26 - 2015-07-29 13:03 - 6420480 _____ () C:\Program Files (x86)\GUT5C5.tmp
2014-03-12 18:02 - 2014-03-12 19:17 - 1213405855 _____ (InstallShield Software Corporation) C:\Program Files (x86)\S4_League.exe
2014-06-15 14:17 - 2014-08-30 19:59 - 0000132 _____ () C:\Users\****\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2014-06-08 13:40 - 2014-06-10 14:52 - 0000132 _____ () C:\Users\****\AppData\Roaming\Adobe CS6-Targa-Format - Voreinstellungen
2014-03-08 18:37 - 2014-07-31 16:03 - 0012005 _____ () C:\Users\****\AppData\Roaming\alsoft.ini
2014-05-05 17:33 - 2015-03-21 20:01 - 0000600 _____ () C:\Users\****\AppData\Local\PUTTY.RND
2015-01-25 13:15 - 2015-01-25 13:15 - 0000017 _____ () C:\Users\****\AppData\Local\resmon.resmoncfg
2014-11-10 14:44 - 2014-11-10 14:44 - 0000000 _____ () C:\Users\****\AppData\Local\{A6AC4786-4E59-4667-8DAB-DB440E667991}
2014-05-28 13:51 - 2014-05-28 13:51 - 0000000 _____ () C:\Users\****\AppData\Local\{CCF22136-5DC1-4CF7-8584-B56A6B229720}
2015-04-19 14:35 - 2015-05-03 14:03 - 0000034 _____ () C:\ProgramData\droidcam-settings

Einige Dateien in TEMP:
====================
C:\Users\****\AppData\Local\Temp\avgnt.exe
C:\Users\****\AppData\Local\Temp\ChangeIcon.exe
C:\Users\****\AppData\Local\Temp\D588.exe
C:\Users\****\AppData\Local\Temp\d70KLrQfgdEMhtVoyEiV7.exe
C:\Users\****\AppData\Local\Temp\devcon64.exe
C:\Users\****\AppData\Local\Temp\drm_dyndata_7380015.dll
C:\Users\****\AppData\Local\Temp\dsp_ipp.dll
C:\Users\****\AppData\Local\Temp\EAD16C3.exe
C:\Users\****\AppData\Local\Temp\EAD9E54.exe
C:\Users\****\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\****\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\****\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\****\AppData\Local\Temp\lowproc.exe
C:\Users\****\AppData\Local\Temp\mirc732.exe
C:\Users\****\AppData\Local\Temp\ose00000.exe
C:\Users\****\AppData\Local\Temp\SPSetup.exe
C:\Users\****\AppData\Local\Temp\stubhelper.dll
C:\Users\****\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\****\AppData\Local\Temp\swt-win32-3550-64.dll
C:\Users\****\AppData\Local\Temp\tmpUPX.exe
C:\Users\****\AppData\Local\Temp\UninstallEADM.dll
C:\Users\****\AppData\Local\Temp\UnityWebPlayer4075706568655706697.exe
C:\Users\****\AppData\Local\Temp\xmlUpdater.exe
C:\Users\****\AppData\Local\Temp\_is5AEF.exe


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\System32\winlogon.exe => Datei ist digital signiert
C:\Windows\System32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\System32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\System32\services.exe => Datei ist digital signiert
C:\Windows\System32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\System32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\System32\rpcss.dll => Datei ist digital signiert
C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-06-11 13:54

==================== Ende von log ============================