|
Plagegeister aller Art und deren Bekämpfung: Internet nur eingeschränkt möglich dns antwortet nichtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
01.08.2015, 13:28 | #1 |
| Internet nur eingeschränkt möglich dns antwortet nicht ja schönen guten tag ich hab seit gestern probleme in internet zu kommen, wenn ich fire fox aufrufe und auf ne internetseite gehe lädt die ewig und geht nichs weiter. es sind aber nicht alle seiten betroffen z.b youtube facebook und google gehen komischerweise auch meine anderen programme kommen nicht mehr ins internet, wie z.b kaspersky oder steam als problemmeldung kommt Der computer ist offenbar ordnungsgemäß konfiguriert, jedoch antwortet, das Gerät bzw. die Ressource (DNS-Server). nicht Mein system ist windows 8.1 64bit Netzwerkkarte killer e 2200 gigabit ethernet controller Router ist ein Hybrid router der telekom ich hoffe mir kann einer helfen danke im vorraus mfg Master |
01.08.2015, 13:54 | #2 |
/// the machine /// TB-Ausbilder | Internet nur eingeschränkt möglich dns antwortet nicht hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Downloade dir bitte Farbar's MiniToolBox auf deinen Desktop und starte das Tool Setze einen Haken bei folgenden Einträgen
__________________ |
01.08.2015, 14:59 | #3 |
| Internet nur eingeschränkt möglich dns antwortet nicht danke hier die dateien
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:30-07-2015 durchgeführt von Andreas (2015-08-01 15:47:41) Gestartet von F:\Neuer Ordner Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1891406950-2737956948-3480474048-500 - Administrator - Disabled) Andreas (S-1-5-21-1891406950-2737956948-3480474048-1002 - Administrator - Enabled) => C:\Users\Andreas Gast (S-1-5-21-1891406950-2737956948-3480474048-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1891406950-2737956948-3480474048-1004 - Limited - Enabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Kaspersky Total Security (Disabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Kaspersky Total Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} FW: Kaspersky Total Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.) Amazon Music (HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC) AntiLogger Free version 1.8.2.198 (HKLM-x32\...\{A80DB23D-0618-405B-89D9-28F99814E287}_is1) (Version: 1.8.2.198 - Zemana Ltd.) Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.) Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 2.0.8.000 - Asmedia Technology) Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft) AutoHotkey 1.1.14.03 (HKLM\...\AutoHotkey) (Version: 1.1.14.03 - Lexikos) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform) ClipGrab 3.4.4 (HKLM-x32\...\{8A1033B0-EF33-4FB5-97A1-C47A7DCDD7E6}_is1) (Version: - Philipp Schmieder Medien) CyberLink BD_3D Advisor 2.0 (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.5425 - CyberLink Corp.) CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.) CyberLink PowerProducer 5.5 (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.5.3.4118 - CyberLink Corp.) DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version: - FromSoftware, Inc) Druckerdeinstallation für EPSON BX320FW Series (HKLM\...\EPSON BX320FW Series) (Version: - SEIKO EPSON Corporation) EXPERTool v8.9 (HKLM-x32\...\{551D9481-9487-4D0C-9A1D-6BC3E7B6D991}_is1) (Version: 8.9.8.5 - Gainward Co. Ltd.) Fraps (HKLM-x32\...\Fraps) (Version: - ) GN - The Playing Room (HKLM\...\UDK-6d4c630d-d131-4c09-9e35-bba646adf04f) (Version: - Epic Games, Inc.) Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games) Intel(R) Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Smart Connect Technology (HKLM\...\{94A137EA-92EF-441C-A7E2-6757CC08EA82}) (Version: 5.0.10.2907 - Intel Corporation) Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\3FD0C489-0F02-481a-A3E1-9754CD396761) (Version: - Intel Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan) iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.550 - Oracle) Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Kaspersky Password Manager (HKLM-x32\...\InstallWIX_{E522EB0E-20CC-42A9-82EA-50968D01E7A2}) (Version: 8.0.1.1315 - Kaspersky Lab) Kaspersky Password Manager (x32 Version: 8.0.1.1315 - Kaspersky Lab) Hidden Kaspersky Total Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab) Kaspersky Total Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden KeePass Password Safe 2.28 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.28 - Dominik Reichl) Killer Bandwidth Control Filter Driver (Version: 1.1.52.1085 - Rivet Networks) Hidden Killer E220x Drivers (Version: 1.1.52.1085 - Rivet Networks) Hidden Killer Network Manager (Version: 1.1.52.1085 - Rivet Networks) Hidden Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.52.1085 - Qualcomm Atheros) LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - ) Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40620.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.) Mozilla Firefox 39.0 (x86 de) (HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla) MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 1.0.0.84 - MSI) MSI Fast Boot (HKLM-x32\...\{0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1) (Version: 1.0.1.5 - MSI) MSI Intel Extreme Tuning Utility (HKLM-x32\...\{fbd55c4e-e884-4210-a79b-5f158834b133}) (Version: 4.4.0.103 - Intel Corporation) MSI Intel Extreme Tuning Utility (x32 Version: 4.4.0.103 - Intel Corporation) Hidden MSI Live Update (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.0.011 - MSI) MSI Smart Utilities (HKLM-x32\...\{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1) (Version: 2.0.0.06 - MSI) MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.025 - MSI) NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation) NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation) NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation) NVIDIA Miracast Virtueller Ton 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.1.10.2728 - Electronic Arts, Inc.) ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7293 - Realtek Semiconductor Corp.) ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version: - Roccat GmbH) ROCCAT Kone[+] Mouse Driver (HKLM-x32\...\{B99CB207-4704-4C51-9309-0FA90AA26DD4}) (Version: - Roccat GmbH) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics) SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden Sound Blaster Cinema (HKLM-x32\...\{8801CA65-921A-4CCC-9D63-879D1D0BAA97}) (Version: 1.00.05 - Creative Technology Limited) Spotify (HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\Spotify) (Version: 1.0.7.157.g2a6526f9 - Spotify AB) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) SpyHunter 4 (HKLM-x32\...\SpyHunter) (Version: 4.19.13.4482 - Enigma Software Group, LLC) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Trend Micro SafeSync (HKLM\...\HFRS_is1) (Version: 5.1.0.1173 - Trend Micro) Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft) VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.8 - MSI) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Wiederherstellungspunkte ========================= 23-07-2015 21:03:09 Windows Update 29-07-2015 23:21:19 Windows Update 31-07-2015 17:53:08 Wiederherstellungsvorgang ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2013-08-22 15:25 - 2014-10-09 11:45 - 00450713 ____A C:\windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123moviedownload.com Da befinden sich 1000 zusätzliche Einträge. ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0A7ECBF0-AD33-4592-BD66-660B1422D23E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2015-07-03] (Microsoft Corporation) Task: {12CEFE02-2EEA-477E-A56A-63A045D17354} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.) Task: {53105D6B-E496-4008-88B7-3F53DF9B8E00} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {5324B28C-8EC9-4B08-8BC4-898CA8B7D767} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd) Task: {6168F8D7-52FE-4DBC-AE17-2BD59DFD6F31} - \SpyHunter4Startup No Task File <==== ACHTUNG Task: {9D672F4D-7EAE-4B62-9169-E17D4FC38C8F} - System32\Tasks\{DEB89EE9-4FA0-45EA-9B53-1359B33E6E8C} => pcalua.exe -a "C:\Program Files (x86)\Setup Files\Ms7845v1A0\MSISetup.exe" -d "C:\Program Files (x86)\Setup Files\Ms7845v1A0" Task: {A308A170-C142-4C46-8DDD-4C6E16B11B5B} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated) Task: {DBD57D8D-1734-4CEC-AC1B-744FFBD69812} - System32\Tasks\{EF8F9D5C-988F-418D-89AF-D875B324205A} => pcalua.exe -a "G:\Memento Mori\MEMENTO.exe" -d "G:\Memento Mori" Task: {F9432596-0D4E-41F3-8FD7-5A426FEB29F3} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {FD901C3F-30AD-442F-804D-FF3B6F18A988} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2013-12-18 18:33 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2014-08-25 17:01 - 2014-08-25 17:01 - 00209712 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe 2014-08-25 17:01 - 2014-08-25 17:01 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll 2014-08-25 17:01 - 2014-08-25 17:01 - 00057648 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTEncryptionCheck.dll 2014-08-25 17:01 - 2014-08-25 17:01 - 00037168 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll 2014-10-25 13:42 - 2014-09-26 12:44 - 01993216 _____ () C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe 2014-01-01 17:58 - 2014-01-01 17:58 - 00075136 _____ () C:\windows\SysWOW64\PnkBstrA.exe 2015-07-03 09:42 - 2015-07-03 09:42 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\ErrorReporting.dll 2013-12-24 02:50 - 2012-11-01 12:23 - 00089600 _____ () C:\windows\SYSTEM32\CmdRtr64.DLL 2013-12-24 02:50 - 2012-11-01 12:21 - 00325120 _____ () C:\windows\SYSTEM32\APOMgr64.DLL 2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\kpcengine.2.3.dll 2014-11-17 00:35 - 2005-07-18 14:43 - 00160256 _____ () C:\Program Files (x86)\MSI\Live Update\unrar.dll 2015-07-31 23:33 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-07-31 23:33 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2015-07-31 23:33 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2015-07-31 23:33 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2015-07-31 23:33 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-05-21 22:37 - 2014-04-30 10:15 - 01723888 _____ () C:\MSI\Smart Utilities\SuperRAIDExt.DLL 2015-04-13 19:15 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2011-03-09 15:21 - 2011-03-09 15:21 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2011-03-09 15:21 - 2011-03-09 15:21 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2014-05-30 18:15 - 2012-06-17 11:20 - 00061440 _____ () P:\hiddriver.dll 2013-12-24 03:24 - 2013-09-17 04:20 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\Andreas\SkyDrive:ms-properties ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer trusted/restricted =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com Da befinden sich 7865 mehr eingeschränkte Seiten. ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Andreas\Pictures\sunset_maui_hawaiian_island-wide.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKLM\...\StartupApproved\StartupFolder: => "ISCTSystray.lnk" HKLM\...\StartupApproved\Run32: => "Adobe ARM" HKLM\...\StartupApproved\Run32: => "Fast Boot" HKLM\...\StartupApproved\Run32: => "Super-Charger" HKLM\...\StartupApproved\Run32: => "RoccatKone+" HKLM\...\StartupApproved\Run32: => "Live Update" HKLM\...\StartupApproved\Run32: => "Super Charger" HKLM\...\StartupApproved\Run32: => "KeePass 2 PreLoad" HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\StartupApproved\Run: => "TBPanel" HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\StartupApproved\Run: => "Amazon Music" HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\StartupApproved\Run: => "kpm.exe" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe FirewallRules: [{781C0133-1C14-46BA-88A6-B725FB638F67}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{3B56369D-5245-4FBA-8CBA-3D81C7C0CCA4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{2E41C2AE-4A07-4D61-A31E-91D5E2B98D59}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{68B42597-9A17-4A37-AE0A-8EFAD07898B4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{7B8636E4-57B0-44CC-B3CD-177572891FF8}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{40D1595D-7A3B-4E13-A5AC-98C505C7DC61}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{56BFDF62-F1F6-48A1-89D4-F5CEA60CB3B5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{CCD6EAE4-7D61-410E-961D-4F1C4C475552}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{B4F37FD9-4D40-41CC-A0DA-171BFDA325F8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe FirewallRules: [{17C79D04-83D2-4A08-830F-19CBA5375519}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{496A2F73-FFEC-4EFB-A828-18B6BA5B6E78}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{342A297F-F6D5-4412-A010-B2C6E2C67515}] => (Allow) S:\Steam\Steam.exe FirewallRules: [{D113B862-6939-4B16-A859-D5913A019DAA}] => (Allow) S:\Steam\Steam.exe FirewallRules: [TCP Query User{D8F86A79-9588-494A-8D55-5771E382118D}S:\steam\steam.exe] => (Allow) S:\steam\steam.exe FirewallRules: [UDP Query User{B47A6250-C503-450C-9310-408A37842FD8}S:\steam\steam.exe] => (Allow) S:\steam\steam.exe FirewallRules: [{5BBC5CBB-22C3-418B-8A97-EC9E45F48EEA}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{D66464E1-116F-4C21-8FD0-4CB598AB7AA0}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{ED4B9AD8-0453-4159-B105-692DEFD27E95}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{C96BAC45-3A6F-49E2-9608-6CC97CFBF27A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{6CACB904-36A4-4A23-A0C8-74079E0B8185}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{4EC1306D-5379-43A5-9275-C6FD6192D705}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{3161DB21-C90D-4D60-8F2F-CBF97AC745A2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{19B6FBAA-916C-4DA0-A81F-A5379CBDFA0E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{7926C02D-7E13-4C70-9417-4989EFDE0B03}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{9BB031B3-CA57-477D-A5AC-06C7DFCCADAA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{08E800F5-AD2A-424E-AD12-6E130036BD02}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{B9072A9C-3786-467B-8138-4AF69B55A228}] => (Allow) C:\Program Files (x86)\Intel\Extreme Tuning Utility\Client\PerfTune.exe FirewallRules: [{9364CD8E-CAA2-419B-85D2-6C4B3645A564}] => (Allow) G:\SteamLibrary\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe FirewallRules: [{86FF3EFA-D46B-4488-A8EF-39D2F99C9656}] => (Allow) G:\SteamLibrary\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe FirewallRules: [{40AFE3C0-A8C2-4FAB-9591-3D1F40368476}] => (Allow) S:\Steam\bin\steamwebhelper.exe FirewallRules: [{8F5CB348-0E6E-4B4F-91C3-6B870DDEE562}] => (Allow) S:\Steam\bin\steamwebhelper.exe FirewallRules: [{F09E22A9-68D6-4CF9-AFAE-2B0997E4FAAB}] => (Allow) G:\giantess the playing room\Binaries\Win32\UDK.exe FirewallRules: [{0A7A3B7D-AE50-451A-B3AE-13D757C443BC}] => (Allow) G:\giantess the playing room\Binaries\Win32\UDK.exe FirewallRules: [{67FE60ED-6D64-428D-9AF3-D3A06611DFFE}] => (Allow) G:\FarCry 4\bin\FarCry4.exe FirewallRules: [{FE59AAFE-A2CE-4E47-B0E1-FE1AF71A305F}] => (Allow) G:\FarCry 4\bin\FarCry4.exe FirewallRules: [{8075B42A-6B11-43E8-9490-FE997B0046D3}] => (Allow) G:\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{9654A084-C6FA-436C-9042-A705AE68EFBF}] => (Allow) G:\FarCry 4\bin\IGE_WPF64.exe FirewallRules: [{931FC52B-B6A8-4647-8F00-311B24767186}] => (Allow) G:\SteamLibrary\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{EB64E5B5-984A-480E-B497-29CE2D64897E}] => (Allow) G:\SteamLibrary\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe FirewallRules: [{39CFCAEB-A3A7-4413-AA4B-CF89914E4330}] => (Allow) G:\Assassin's Creed Unity\ACU.exe FirewallRules: [{36268577-8A3C-428A-A790-6CF0CD6FEB13}] => (Allow) G:\Assassin's Creed Unity\ACU.exe FirewallRules: [TCP Query User{7E4FA725-DB5D-4690-AD7C-67673C0E27E1}P:\mozilla firefox\firefox.exe] => (Allow) P:\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{1F94B76D-8927-4E7D-BE61-40783560A986}P:\mozilla firefox\firefox.exe] => (Allow) P:\mozilla firefox\firefox.exe FirewallRules: [{62177928-25EA-46FC-88E6-BED364598528}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{136A75CF-BA04-4F86-9BC4-971CB06DAAF6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{42826916-9CD4-475A-A23D-8199BA408E08}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{031CC939-FE35-47E3-A836-B46F4D0CA9BF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{E2458192-0B1F-4AD2-8338-7D4C28EB6E99}] => (Allow) P:\iTunes.exe FirewallRules: [{D59B6ECB-686B-46A1-B911-902592BE31C0}] => (Allow) G:\Assassin's Creed Unity\ACU.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Standardtastatur (PS/2) Description: Standardtastatur (PS/2) Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (Standardtastaturen) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (08/01/2015 03:39:57 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: There was an error communicating to the Orion inference server Error: (08/01/2015 03:39:36 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT) Description: There was an error with the Windows Location Provider database Error: (08/01/2015 03:17:35 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: ANDREASPC) Description: There was an error communicating to the Orion inference server Error: (08/01/2015 03:17:35 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: There was an error communicating to the Orion inference server Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: ANDREASPC) Description: There was an error communicating to the Orion inference server Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: There was an error communicating to the Orion inference server Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT) Description: There was an error with the Windows Location Provider database Error: (08/01/2015 02:33:28 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: There was an error communicating to the Orion inference server Error: (08/01/2015 02:17:52 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (08/01/2015 01:59:48 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: There was an error communicating to the Orion inference server Systemfehler: ============= Error: (08/01/2015 03:17:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%2147952449 Error: (08/01/2015 03:17:06 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%2147952449 Error: (08/01/2015 03:17:01 PM) (Source: Tcpip) (EventID: 4199) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.1 mit dem Computer mit der Netzwerkhardwareadresse F4-9F-F3-A2-F9-37 ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (08/01/2015 03:09:38 PM) (Source: Tcpip) (EventID: 4199) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.1 mit dem Computer mit der Netzwerkhardwareadresse F4-9F-F3-A2-F9-37 ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (08/01/2015 02:54:47 PM) (Source: Tcpip) (EventID: 4199) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.1 mit dem Computer mit der Netzwerkhardwareadresse F4-9F-F3-A2-F9-37 ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (08/01/2015 02:07:29 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 01.08.2015 um 14:03:08 unerwartet heruntergefahren. Error: (08/01/2015 02:07:22 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT) Description: 32212256844723192716379896 Error: (08/01/2015 02:02:42 PM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: Der Dienst Diagnostics Tracking Service konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (08/01/2015 01:51:56 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst NlaSvc erreicht. Error: (08/01/2015 01:51:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office: ========================= Error: (08/01/2015 03:39:57 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: -2143485946 Error: (08/01/2015 03:39:36 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT) Description: -2147024883 Error: (08/01/2015 03:17:35 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: ANDREASPC) Description: -2143485936 Error: (08/01/2015 03:17:35 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: ANDREASPC) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT) Description: -2147024883 Error: (08/01/2015 02:33:28 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: -2143485946 Error: (08/01/2015 02:17:52 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (08/01/2015 01:59:48 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2007) (User: NT-AUTORITÄT) Description: -2143485946 CodeIntegrity: =================================== Date: 2015-07-31 19:56:41.996 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume2\Program Files\Windows Defender\NisSrv.exe that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-31 19:56:33.444 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-07-31 19:56:29.733 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-07-31 19:55:26.154 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Speicherinformationen =========================== Processor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz Percentage of memory in use: 21% Total physical RAM: 8135.93 MB Available physical RAM: 6373.08 MB Total Virtual: 9415.93 MB Available Virtual: 7245.05 MB ==================== Drives ================================ Drive c: (OSDisk) (Fixed) (Total:117.93 GB) (Free:64.52 GB) NTFS Drive d: (Sicherung) (Fixed) (Total:384.64 GB) (Free:277.83 GB) NTFS Drive f: () (Removable) (Total:1.89 GB) (Free:1.52 GB) FAT Drive g: (Games) (Fixed) (Total:400.39 GB) (Free:182.94 GB) NTFS Drive p: (Programme) (Fixed) (Total:146.48 GB) (Free:145.46 GB) NTFS Drive s: (Spiele) (Fixed) (Total:114.46 GB) (Free:113.5 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 3A200426) Partition 1: (Active) - (Size=499 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=117.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=114.5 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: 3F993F99) Partition 1: (Not Active) - (Size=384.6 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=400.4 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=146.5 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Size: 1.9 GB) (Disk ID: 000AAB23) Partition 1: (Active) - (Size=1.9 GB) - (Type=0E) ==================== Ende von log ============================ Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:30-07-2015 durchgeführt von Andreas (Administrator) auf ANDREASPC (01-08-2015 15:47:22) Gestartet von F:\Neuer Ordner Geladene Profile: Andreas (Verfügbare Profile: Andreas) Platform: Windows 8.1 Pro (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Windows\System32\dasHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe (Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe () C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe (MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe (Micro-Star International) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe (MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe (MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Micro-Star International) C:\MSI\Smart Utilities\SuperRAIDSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avpui.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Apple Inc.) P:\iTunesHelper.exe (Spotify Ltd) C:\Users\Andreas\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe (ROCCAT GmbH) P:\KoneXTDMonitor.exe (Zemana Ltd.) C:\Program Files (x86)\Zemana AntiLogger Free\AntiLogger Free.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe ==================== Registry (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation) HKLM\...\Run: [MBCfg64] => C:\windows\system32\RunDLL32.exe C:\windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7637208 2014-07-15] (Realtek Semiconductor) HKLM\...\Run: [ISCT Tray] => C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe [5860656 2014-08-25] (Intel Corporation) HKLM\...\Run: [iTunesHelper] => P:\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.) HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.) HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [179976 2013-09-25] (cyberlink) HKLM-x32\...\Run: [UpdatePPShortCut] => C:\Program Files (x86)\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe [223096 2012-04-17] (CyberLink Corp.) HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [RoccatKone+] => P:\ROCCAT\Kone[+] Mouse\Kone[+]Monitor.EXE [557056 2013-10-25] (ROCCAT GmbH) HKLM-x32\...\Run: [RoccatKoneXTD] => P:\KoneXTDMonitor.EXE [552960 2013-10-25] (ROCCAT GmbH) HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1047536 2014-04-08] (MSI) HKLM-x32\...\Run: [KeePass 2 PreLoad] => P:\KeePass Password Safe 2\KeePass.exe [2109952 2014-10-07] (Dominik Reichl) HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [764472 2012-09-19] () HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [3484624 2014-10-24] (Micro-Star International) HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [797648 2014-09-23] () HKLM-x32\...\Run: [ZALFree] => C:\Program Files (x86)\Zemana AntiLogger Free\AntiLogger Free.exe [8205944 2014-12-30] (Zemana Ltd.) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\Run: [EPSON3F474C (Epson Stylus Office BX320FW)] => C:\windows\system32\spool\DRIVERS\x64\3\E_IATIGIE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\Run: [Amazon Music] => C:\Users\Andreas\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] () HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\Run: [kpm.exe] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 8\kpm.exe [6120544 2014-11-14] (Kaspersky Lab ZAO) HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\...\Run: [Spotify Web Helper] => C:\Users\Andreas\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480 2015-06-28] (Spotify Ltd) HKU\S-1-5-18\...\RunOnce: [{80655FC2-A38F-4B8C-8775-9A3C68A6C305}] => "C:\Program Files (x86)\MSI\Live Update\LU5\DL_FILE\Killer_Network_Drivers_1.1.42.1045\Setup.exe" /silent AppInit_DLLs: C:\PROGRA~2\KEYCRY~1\KEYCRY~4.DLL => C:\Program Files (x86)\KeyCryptSDK\KeyCrypt64(1).dll [94664 2014-12-30] (Zemana Ltd.) AppInit_DLLs-x32: C:\PROGRA~2\KEYCRY~1\KEYCRY~3.DLL => C:\Program Files (x86)\KeyCryptSDK\KeyCrypt32(1).dll [86400 2014-12-30] (Zemana Ltd.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2015-07-31] ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks) ShellIconOverlayIdentifiers: [00HumyoPaired] -> {A203F945-39E9-4286-AFA2-F3ADFCD5FAAA} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers: [00HumyoPriority] -> {6F1BB626-1107-4b82-B322-54C5E64461B8} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers: [00HumyoProblem] -> {7479C9AF-DA81-4944-92E5-23E49390BB2B} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers: [00HumyoSynced] -> {7479C9AF-DA81-4944-92E5-23E49390BB2A} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers: [00HumyoSyncing] -> {7479C9AF-DA81-4944-92E5-23E49390BB29} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers: [00HumyoUnavailable] -> {66669544-5639-4922-99C8-CE7A86651364} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\shellex.dll [2015-01-25] (Kaspersky Lab ZAO) ShellIconOverlayIdentifiers-x32: [00HumyoPaired] -> {A203F945-39E9-4286-AFA2-F3ADFCD5FAAA} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension32.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers-x32: [00HumyoPriority] -> {6F1BB626-1107-4b82-B322-54C5E64461B8} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension32.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers-x32: [00HumyoProblem] -> {7479C9AF-DA81-4944-92E5-23E49390BB2B} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension32.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers-x32: [00HumyoSynced] -> {7479C9AF-DA81-4944-92E5-23E49390BB2A} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension32.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers-x32: [00HumyoSyncing] -> {7479C9AF-DA81-4944-92E5-23E49390BB29} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension32.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers-x32: [00HumyoUnavailable] -> {66669544-5639-4922-99C8-CE7A86651364} => C:\Program Files\Trend Micro SafeSync\HrfsShellExtension32.dll [2012-07-12] (Trend Micro Inc.) ShellIconOverlayIdentifiers-x32: [KAVOverlayIcon] -> {014F27E2-6D75-4E42-A0E9-2A2C68498AFA} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\shellex.dll [2015-01-25] (Kaspersky Lab ZAO) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..) HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\Software\Microsoft\Internet Explorer\Main,Start Page = www.mifcom.de HKU\S-1-5-21-1891406950-2737956948-3480474048-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.mifcom.de SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-01-25] (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-26] (Oracle Corporation) BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-01-25] (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-26] (Oracle Corporation) BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\x64\IEExt\ie_plugin.dll [2015-01-25] (Kaspersky Lab ZAO) BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-01-25] (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-26] (Oracle Corporation) BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-01-25] (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-26] (Oracle Corporation) BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\IEExt\ie_plugin.dll [2015-01-25] (Kaspersky Lab ZAO) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{9C28E915-FD3A-47DE-BC95-3081F4401C75}: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default FF NewTab: chrome://fvd.speeddial/content/fvd_about_blank.html FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] () FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-26] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-26] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40620.0\npctrl.dll [2015-06-20] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-17] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-17] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-26] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-26] (Oracle Corporation) FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-01-25] () FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com [2015-01-25] () FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-01-25] () FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40620.0\npctrl.dll [2015-06-19] ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1891406950-2737956948-3480474048-1002: ubisoft.com/uplaypc -> G:\Uplay\npuplaypc.dll [2015-04-02] () FF Extension: Flash Video Downloader - YouTube HD Downloader [4K] - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\artur.dubovoy@gmail.com [2015-05-29] FF Extension: EverSync - Sync bookmarks, backup your favorites. - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\fvdmedia@gmail.com [2015-05-29] FF Extension: Speed Dial [FVD] - New Tab Page, Sync... - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\pavel.sherbakov@gmail.com [2015-05-29] FF Extension: Flash and Video Download - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2015-07-24] FF Extension: Add-on Compatibility Reporter - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\compatibility@addons.mozilla.org.xpi [2014-03-30] FF Extension: Awesome screenshot: Capture and Annotate - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi [2014-10-10] FF Extension: Google Translator for Firefox - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\translator@zoli.bod.xpi [2013-12-23] FF Extension: MouseZoom - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\{28FAD68E-4001-48d5-B994-68069F7CFB1D}.xpi [2013-12-23] FF Extension: Video DownloadHelper - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-14] FF Extension: Adblock Plus - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-12-23] FF Extension: Tab Mix Plus - C:\Users\Andreas\AppData\Roaming\Mozilla\Firefox\Profiles\cxhyxylo.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2013-12-23] FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\content_blocker@kaspersky.com [2015-01-25] FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2015-01-25] FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\FFExt\online_banking@kaspersky.com [2015-01-25] StartMenuInternet: FIREFOX.EXE - P:\firefox.exe Chrome: ======= CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.) R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO) S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-25] (CyberLink) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [209712 2014-08-25] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-17] (Intel Corporation) R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [395776 2015-05-06] (Rivet Networks) [Datei ist nicht signiert] S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\Command Center\BIOSData\MSIBIOSDataService.exe [2099712 2014-10-21] (MSI) [Datei ist nicht signiert] S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4026880 2014-09-26] (MSI) [Datei ist nicht signiert] S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2118656 2014-10-23] () [Datei ist nicht signiert] S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4157440 2014-09-26] () [Datei ist nicht signiert] R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [1993216 2014-09-26] () [Datei ist nicht signiert] S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2242048 2014-10-21] () [Datei ist nicht signiert] S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2063360 2014-07-28] () [Datei ist nicht signiert] S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [550400 2014-09-25] () [Datei ist nicht signiert] R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [103992 2012-10-26] (MSI) R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [1730000 2014-10-24] (Micro-Star International) R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [162800 2014-03-17] (MSI) R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation) S3 OnlineStorageService; C:\Program Files\Trend Micro SafeSync\hrfscore.exe [7908664 2012-07-12] (Trend Micro Inc.) R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [75136 2014-01-01] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [27632 2014-04-30] (Micro-Star International) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation) R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-03-14] (Intel(R) Corporation) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 AcpiCtlDrv; C:\Windows\System32\drivers\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation) R1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [115760 2015-04-29] (Rivet Networks, LLC.) R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [98504 2013-09-25] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\system32\DRIVERS\CSVirtualDiskDrv.sys [67784 2013-09-25] (Infowatch) R3 ikbevent; C:\Windows\system32\DRIVERS\ikbevent.sys [22216 2014-05-27] () R3 imsevent; C:\Windows\system32\DRIVERS\imsevent.sys [22728 2014-05-27] () R3 INETMON; C:\windows\System32\Drivers\INETMON.sys [25800 2014-05-27] () R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-02-18] (Intel Corporation) R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-05-27] () R3 Ke2200; C:\Windows\system32\DRIVERS\e22w8x64.sys [130224 2014-03-27] (Qualcomm Atheros, Inc.) R3 keycrypt; C:\Windows\System32\DRIVERS\KeyCrypt64.sys [76520 2014-12-30] (Zemana Ltd.) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [29616 2012-07-27] (Kaspersky Lab) R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [150536 2015-01-25] (Kaspersky Lab ZAO) R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [247480 2014-08-12] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [800440 2015-03-11] (Kaspersky Lab ZAO) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\system32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [68616 2015-01-25] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [77512 2015-01-25] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO) S3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation) S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-08-01] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [64216 2015-04-14] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-17] (Intel Corporation) R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI) R3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [14136 2010-10-22] (MSI) R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI) S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI) S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\NTIOLib_X64.sys [13368 2012-11-19] (MSI) S3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI) S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI) S3 NTIOLib_MSIFrequency_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2012-11-20] (MSI) S3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\Command Center\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI) S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI) S3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI) R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation) R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2013-08-14] (Synaptics Incorporated) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation) S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X] S3 MSICDSetup; \??\E:\CDriver64.sys [X] S3 NTIOLib_1_0_1; \??\C:\MSI\Super RAID\NTIOLib_X64.sys [X] S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X] S3 VMSMP; \SystemRoot\system32\DRIVERS\vmswitch.sys [X] S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-01 15:46 - 2015-08-01 15:47 - 00000000 ____D C:\FRST 2015-08-01 13:14 - 2015-08-01 13:14 - 00136408 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys 2015-08-01 13:14 - 2015-08-01 13:14 - 00001124 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-08-01 13:14 - 2015-08-01 13:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-08-01 13:14 - 2015-08-01 13:14 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-08-01 13:14 - 2015-04-14 09:38 - 00064216 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys 2015-08-01 13:14 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys 2015-08-01 13:14 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys 2015-07-31 23:33 - 2015-07-31 23:33 - 00001413 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2015-07-31 23:33 - 2015-07-31 23:33 - 00001401 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2015-07-31 23:33 - 2015-07-31 23:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2015-07-31 23:33 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\windows\system32\sdnclean64.exe 2015-07-31 23:31 - 2015-08-01 13:50 - 00003492 _____ C:\windows\PFRO.log 2015-07-31 23:30 - 2015-07-31 23:30 - 00000085 _____ C:\windows\wininit.ini 2015-07-31 18:59 - 2015-07-31 19:01 - 00000000 ____D C:\ProgramData\Killer 2015-07-31 18:59 - 2015-07-31 18:59 - 00002801 _____ C:\Users\Public\Desktop\Killer Network Manager.lnk 2015-07-31 18:59 - 2015-07-31 18:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Killer Networking 2015-07-31 18:59 - 2015-07-31 18:59 - 00000000 ____D C:\Program Files\Killer Networking 2015-07-31 18:54 - 2015-07-31 18:54 - 00000000 ____D C:\Users\Andreas\Desktop\killer treiber 2015-07-31 18:54 - 2015-07-31 18:54 - 00000000 ____D C:\Users\Andreas\Desktop\killer ony treiber 2015-07-31 18:27 - 2015-07-31 18:27 - 00000000 ____D C:\Users\Andreas\Desktop\Neuer Ordner (5) 2015-07-31 18:02 - 2015-07-25 15:34 - 01084928 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll 2015-07-31 16:46 - 2015-07-31 17:06 - 00000946 _____ C:\Users\Andreas\Desktop\anleitung.txt 2015-07-31 16:03 - 2015-08-01 15:38 - 00013194 _____ C:\windows\setupact.log 2015-07-31 16:03 - 2015-07-31 16:03 - 00000000 _____ C:\windows\setuperr.log 2015-07-30 23:51 - 2015-07-30 23:51 - 00000000 ____D C:\Users\Andreas\AppData\Local\CEF 2015-07-29 23:21 - 2015-07-29 23:21 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET 2015-07-29 02:20 - 2015-07-29 02:20 - 00016932 _____ C:\Users\Andreas\Downloads\[kickass-torrent.ytsre.eu]giantess.fan.the.biggest.strip.1.4.adult.comics.almerias.torrent 2015-07-28 23:48 - 2015-07-28 23:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-07-28 23:48 - 2015-07-28 23:48 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-07-28 23:48 - 2015-07-28 23:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-07-28 22:29 - 2015-07-28 23:16 - 13161184 _____ (Microsoft Corporation) C:\Users\Andreas\Downloads\Silverlight_x64.exe 2015-07-27 00:24 - 2015-07-27 00:37 - 00000000 ____D C:\Users\Andreas\Desktop\DI_Data 2015-07-27 00:23 - 2015-05-23 20:45 - 11537920 _____ C:\Users\Andreas\Desktop\DI.exe 2015-07-27 00:12 - 2015-07-27 00:16 - 238163593 _____ C:\Users\Andreas\Downloads\Update 05.23.7z 2015-07-21 21:03 - 2015-07-14 16:14 - 00358912 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll 2015-07-21 21:03 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll 2015-07-21 21:03 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll 2015-07-21 21:03 - 2015-07-14 16:13 - 00044032 _____ (Adobe Systems) C:\windows\system32\atmlib.dll 2015-07-14 22:36 - 2015-06-30 00:43 - 00026288 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe 2015-07-14 22:36 - 2015-06-29 17:07 - 01145856 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll 2015-07-14 22:36 - 2015-06-29 17:07 - 00764928 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll 2015-07-14 22:36 - 2015-06-29 17:07 - 00433152 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll 2015-07-14 22:36 - 2015-06-29 17:07 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll 2015-07-14 22:36 - 2015-06-27 01:21 - 00726528 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll 2015-07-14 22:36 - 2015-06-27 01:21 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll 2015-07-14 22:36 - 2015-06-25 04:31 - 04177920 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys 2015-07-14 22:36 - 2015-05-07 19:50 - 22292672 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll 2015-07-14 22:36 - 2015-05-07 19:00 - 03109376 _____ (Microsoft Corporation) C:\windows\system32\ExplorerFrame.dll 2015-07-14 22:36 - 2015-05-07 18:53 - 19734960 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll 2015-07-14 22:36 - 2015-05-07 18:12 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\ExplorerFrame.dll 2015-07-14 22:36 - 2015-05-07 17:21 - 00522240 _____ (Microsoft Corporation) C:\windows\system32\GeofenceMonitorService.dll 2015-07-14 22:36 - 2015-05-07 17:05 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\GeofenceMonitorService.dll 2015-07-14 22:36 - 2015-05-03 02:39 - 00227328 _____ (Microsoft Corporation) C:\windows\system32\profsvc.dll 2015-07-14 22:36 - 2015-04-30 01:22 - 00130048 _____ (Microsoft Corporation) C:\windows\system32\WiFiDisplay.dll 2015-07-14 22:36 - 2014-11-04 21:25 - 00059712 ____C (Microsoft Corporation) C:\windows\system32\Drivers\kbdclass.sys 2015-07-14 22:36 - 2014-11-04 21:25 - 00051008 ____C (Microsoft Corporation) C:\windows\system32\Drivers\mouclass.sys 2015-07-14 22:36 - 2014-11-04 08:55 - 00026112 ____C (Microsoft Corporation) C:\windows\system32\Drivers\sermouse.sys 2015-07-14 22:36 - 2014-11-04 08:54 - 00108544 ____C (Microsoft Corporation) C:\windows\system32\Drivers\i8042prt.sys 2015-07-14 22:36 - 2014-11-04 08:54 - 00032256 ____C (Microsoft Corporation) C:\windows\system32\Drivers\kbdhid.sys 2015-07-14 22:36 - 2014-11-04 08:54 - 00030208 ____C (Microsoft Corporation) C:\windows\system32\Drivers\mouhid.sys 2015-07-14 22:35 - 2015-07-09 21:51 - 00136904 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe 2015-07-14 22:35 - 2015-07-09 20:40 - 00359936 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll 2015-07-14 22:35 - 2015-07-09 18:03 - 03701760 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll 2015-07-14 22:35 - 2015-07-09 17:54 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe 2015-07-14 22:35 - 2015-07-09 17:53 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll 2015-07-14 22:35 - 2015-07-09 17:50 - 00409088 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll 2015-07-14 22:35 - 2015-07-09 17:50 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll 2015-07-14 22:35 - 2015-07-09 17:48 - 00891904 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll 2015-07-14 22:35 - 2015-07-09 17:46 - 02229248 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll 2015-07-14 22:35 - 2015-07-09 17:38 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe 2015-07-14 22:35 - 2015-07-09 17:37 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll 2015-07-14 22:35 - 2015-07-09 17:35 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll 2015-07-14 22:35 - 2015-07-09 17:34 - 00721920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll 2015-07-14 22:35 - 2015-07-02 00:08 - 05923840 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll 2015-07-14 22:35 - 2015-07-01 23:14 - 04520448 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll 2015-07-14 22:35 - 2015-06-28 07:07 - 00442712 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll 2015-07-14 22:35 - 2015-06-28 07:07 - 00178008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys 2015-07-14 22:35 - 2015-06-28 07:06 - 01311960 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll 2015-07-14 22:35 - 2015-06-28 07:06 - 00332120 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll 2015-07-14 22:35 - 2015-06-27 18:42 - 00747520 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll 2015-07-14 22:35 - 2015-06-27 05:13 - 00202240 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys 2015-07-14 22:35 - 2015-06-27 05:12 - 00401408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys 2015-07-14 22:35 - 2015-06-27 05:12 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys 2015-07-14 22:35 - 2015-06-27 05:08 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\wups.dll 2015-07-14 22:35 - 2015-06-27 05:08 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll 2015-07-14 22:35 - 2015-06-27 04:40 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll 2015-07-14 22:35 - 2015-06-27 04:14 - 00027136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll 2015-07-14 22:35 - 2015-06-27 04:05 - 01441792 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll 2015-07-14 22:35 - 2015-06-27 04:00 - 00989184 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll 2015-07-14 22:35 - 2015-06-27 03:53 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll 2015-07-14 22:35 - 2015-06-27 03:26 - 00802816 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll 2015-07-14 22:35 - 2015-06-16 00:41 - 00065024 _____ (Microsoft Corporation) C:\windows\system32\msiexec.exe 2015-07-14 22:35 - 2015-06-16 00:24 - 03320320 _____ (Microsoft Corporation) C:\windows\system32\msi.dll 2015-07-14 22:35 - 2015-06-15 23:16 - 00059904 _____ (Microsoft Corporation) C:\windows\SysWOW64\msiexec.exe 2015-07-14 22:35 - 2015-06-15 23:09 - 03607552 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll 2015-07-14 22:35 - 2015-06-15 22:50 - 02774528 _____ (Microsoft Corporation) C:\windows\system32\authui.dll 2015-07-14 22:35 - 2015-06-15 21:57 - 02460160 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll 2015-07-14 22:35 - 2015-05-30 23:18 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\werdiagcontroller.dll 2015-07-14 22:35 - 2015-05-30 21:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\AudioEndpointBuilder.dll 2015-07-14 22:35 - 2015-05-30 21:35 - 00911360 _____ (Microsoft Corporation) C:\windows\system32\audiosrv.dll 2015-07-14 22:35 - 2015-05-03 17:09 - 00274944 _____ (Microsoft Corporation) C:\windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-14 22:35 - 2015-05-03 16:58 - 00210944 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2015-07-14 22:35 - 2015-05-03 16:55 - 00971776 _____ (Microsoft Corporation) C:\windows\system32\WSShared.dll 2015-07-14 22:35 - 2015-05-03 16:49 - 00811008 _____ (Microsoft Corporation) C:\windows\SysWOW64\WSShared.dll 2015-07-14 22:35 - 2015-04-25 04:25 - 00020992 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usb8023.sys 2015-07-14 22:35 - 2015-03-09 04:02 - 00067584 _____ (Microsoft Corporation) C:\windows\system32\Drivers\storvsp.sys 2015-07-14 22:34 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll 2015-07-14 22:34 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll 2015-07-14 22:34 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll 2015-07-14 22:34 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll 2015-07-14 22:34 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll 2015-07-14 22:34 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll 2015-07-14 22:34 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll 2015-07-14 22:34 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll 2015-07-14 22:34 - 2015-06-16 07:36 - 01661576 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll 2015-07-14 22:34 - 2015-06-16 07:36 - 01212248 _____ (Microsoft Corporation) C:\windows\SysWOW64\ole32.dll 2015-07-14 22:34 - 2015-06-16 00:39 - 00584192 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll 2015-07-14 22:34 - 2015-06-16 00:38 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll 2015-07-14 22:34 - 2015-06-16 00:26 - 00633856 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll 2015-07-14 22:34 - 2015-06-16 00:24 - 00816640 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll 2015-07-14 22:34 - 2015-06-16 00:02 - 00087552 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx 2015-07-14 22:34 - 2015-06-15 23:58 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll 2015-07-14 22:34 - 2015-06-15 23:57 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll 2015-07-14 22:34 - 2015-06-15 23:56 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll 2015-07-14 22:34 - 2015-06-15 23:55 - 00316928 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll 2015-07-14 22:34 - 2015-06-15 23:49 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll 2015-07-14 22:34 - 2015-06-15 23:41 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll 2015-07-14 22:34 - 2015-06-15 23:38 - 00801280 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll 2015-07-14 22:34 - 2015-06-15 23:36 - 02125824 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl 2015-07-14 22:34 - 2015-06-15 23:17 - 02880000 _____ (Microsoft Corporation) C:\windows\system32\actxprxy.dll 2015-07-14 22:34 - 2015-06-15 23:16 - 02427392 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll 2015-07-14 22:34 - 2015-06-15 23:15 - 00504320 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll 2015-07-14 22:34 - 2015-06-15 23:13 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll 2015-07-14 22:34 - 2015-06-15 23:04 - 00478208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll 2015-07-14 22:34 - 2015-06-15 23:03 - 00664064 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll 2015-07-14 22:34 - 2015-06-15 22:52 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll 2015-07-14 22:34 - 2015-06-15 22:47 - 00073216 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx 2015-07-14 22:34 - 2015-06-15 22:44 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll 2015-07-14 22:34 - 2015-06-15 22:43 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll 2015-07-14 22:34 - 2015-06-15 22:42 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll 2015-07-14 22:34 - 2015-06-15 22:41 - 00285696 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll 2015-07-14 22:34 - 2015-06-15 22:37 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll 2015-07-14 22:34 - 2015-06-15 22:32 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll 2015-07-14 22:34 - 2015-06-15 22:31 - 00689152 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll 2015-07-14 22:34 - 2015-06-15 22:30 - 02052608 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl 2015-07-14 22:34 - 2015-06-15 22:30 - 00327168 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll 2015-07-14 22:34 - 2015-06-15 22:17 - 01048576 _____ (Microsoft Corporation) C:\windows\SysWOW64\actxprxy.dll 2015-07-14 22:34 - 2015-06-15 22:07 - 01951232 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll 2015-07-14 22:34 - 2015-06-15 22:02 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll 2015-07-14 22:34 - 2015-06-11 05:49 - 01380600 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll 2015-07-14 22:34 - 2015-06-10 18:13 - 01097216 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll 2015-07-14 22:34 - 2015-05-12 15:19 - 00294912 _____ (Microsoft Corporation) C:\windows\system32\SystemEventsBrokerServer.dll 2015-07-14 22:34 - 2015-05-02 01:33 - 00410739 _____ C:\windows\system32\ApnDatabase.xml 2015-07-14 22:34 - 2015-04-28 15:13 - 00513480 _____ C:\windows\SysWOW64\locale.nls 2015-07-14 22:34 - 2015-04-28 15:13 - 00513480 _____ C:\windows\system32\locale.nls 2015-07-14 22:33 - 2015-05-11 18:34 - 00332800 _____ (Microsoft Corporation) C:\windows\system32\fhcpl.dll 2015-07-14 22:33 - 2015-05-07 18:47 - 00564224 _____ (Microsoft Corporation) C:\windows\system32\apphelp.dll 2015-07-14 22:33 - 2015-05-03 17:07 - 07784448 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll 2015-07-14 22:33 - 2015-05-03 16:57 - 05264384 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll 2015-07-14 22:33 - 2015-04-23 17:47 - 03084288 _____ (Microsoft Corporation) C:\windows\system32\msftedit.dll 2015-07-14 22:33 - 2015-04-23 17:16 - 02471424 _____ (Microsoft Corporation) C:\windows\SysWOW64\msftedit.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-08-01 15:47 - 2015-02-15 02:39 - 01833637 _____ C:\windows\WindowsUpdate.log 2015-08-01 15:45 - 2013-11-05 12:34 - 01776918 _____ C:\windows\system32\PerfStringBackup.INI 2015-08-01 15:45 - 2013-08-23 01:24 - 00764340 _____ C:\windows\system32\perfh007.dat 2015-08-01 15:45 - 2013-08-23 01:24 - 00159160 _____ C:\windows\system32\perfc007.dat 2015-08-01 15:38 - 2014-01-24 22:39 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2015-08-01 15:38 - 2013-12-23 14:36 - 00000000 __RDO C:\Users\Andreas\SkyDrive 2015-08-01 15:38 - 2013-12-18 18:33 - 00000000 ____D C:\ProgramData\NVIDIA 2015-08-01 15:38 - 2013-08-22 16:45 - 00000006 ____H C:\windows\Tasks\SA.DAT 2015-08-01 15:37 - 2013-08-22 15:25 - 00524288 ___SH C:\windows\system32\config\BBI 2015-08-01 15:34 - 2013-12-23 18:36 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job 2015-08-01 15:07 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\NDF 2015-08-01 13:24 - 2013-12-23 14:41 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1891406950-2737956948-3480474048-1002 2015-08-01 13:18 - 2013-12-23 15:46 - 00003962 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{C13392E2-A9C6-4282-B63C-44DD2C02713F} 2015-07-31 23:33 - 2014-10-09 11:03 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2015-07-31 23:33 - 2014-10-09 11:03 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2015-07-31 19:00 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\sru 2015-07-31 18:56 - 2014-11-15 00:55 - 00000000 _____ C:\Users\Andreas\AppData\Local\Driver_LOM_8161Present.flag 2015-07-31 18:56 - 2013-12-24 02:55 - 00000000 ____D C:\ProgramData\Downloaded Installations 2015-07-31 18:18 - 2013-08-22 17:20 - 00000000 ____D C:\windows\CbsTemp 2015-07-31 17:55 - 2013-12-23 14:36 - 00000000 ____D C:\Users\Andreas 2015-07-31 17:54 - 2015-04-08 17:39 - 00000000 ___SD C:\windows\system32\GWX 2015-07-31 17:54 - 2014-11-17 00:02 - 00000000 ___HD C:\MSIServiceCfg_CC 2015-07-31 17:54 - 2014-07-19 00:30 - 00000000 ___HD C:\SuperChargerProfile 2015-07-31 17:54 - 2013-08-22 17:36 - 00000000 ____D C:\windows\SysWOW64\WinMetadata 2015-07-31 17:54 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\WinMetadata 2015-07-31 17:54 - 2013-08-22 17:36 - 00000000 ____D C:\windows\registration 2015-07-31 17:54 - 2013-08-22 15:36 - 00000000 ____D C:\windows\system32\Sysprep 2015-07-29 12:22 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppReadiness 2015-07-24 19:53 - 2013-08-22 16:44 - 00346960 _____ C:\windows\system32\FNTCACHE.DAT 2015-07-18 17:57 - 2013-08-22 17:36 - 00000000 ____D C:\windows\rescache 2015-07-18 17:56 - 2015-04-08 17:39 - 00000000 ___SD C:\windows\SysWOW64\GWX 2015-07-15 22:50 - 2013-12-23 18:39 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2015-07-15 22:49 - 2015-05-31 22:01 - 00003886 _____ C:\windows\System32\Tasks\Adobe Acrobat Update Task 2015-07-15 22:22 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ToastData 2015-07-15 22:22 - 2013-08-22 17:36 - 00000000 ____D C:\windows\PolicyDefinitions 2015-07-15 22:10 - 2015-04-17 23:37 - 00000000 ____D C:\windows\system32\appraiser 2015-07-15 22:10 - 2015-03-09 23:44 - 00000000 ___SD C:\windows\system32\CompatTel 2015-07-15 22:10 - 2013-12-23 21:01 - 00000000 ____D C:\windows\system32\MRT 2015-07-15 22:10 - 2013-08-22 17:36 - 00000000 ____D C:\windows\WinStore 2015-07-15 00:34 - 2013-12-23 18:36 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater 2015-07-13 23:10 - 2013-08-22 17:38 - 00792568 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe 2015-07-13 23:10 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-05 23:25 - 2013-12-23 19:10 - 00000000 ____D C:\Users\Andreas\AppData\Roaming\vlc 2015-07-03 08:43 - 2013-12-23 21:01 - 130333168 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2014-03-14 13:47 - 2014-07-25 18:14 - 0004608 _____ () C:\Users\Andreas\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-11-15 00:55 - 2015-07-31 18:56 - 0000000 _____ () C:\Users\Andreas\AppData\Local\Driver_LOM_8161Present.flag ==================== Bamital & volsnap Check ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\System32\winlogon.exe => Datei ist digital signiert C:\Windows\System32\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\System32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\System32\services.exe => Datei ist digital signiert C:\Windows\System32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\System32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\System32\rpcss.dll => Datei ist digital signiert C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-07-26 14:48 ==================== Ende von log ============================ |
01.08.2015, 15:00 | #4 |
| Internet nur eingeschränkt möglich dns antwortet nicht und noch die toolbox Code:
ATTFilter MiniToolBox by Farbar Version: 25-07-2015 01 Ran by Andreas (administrator) on 01-08-2015 at 15:50:06 Running from "F:\Neuer Ordner" Microsoft Windows 8.1 Pro (X64) Model: MS-7845 Manufacturer: MSI Boot Mode: Normal *************************************************************************** ========================= Flush DNS: =================================== Windows-IP-Konfiguration Der DNS-Aufl�sungscache wurde geleert. ========================= IE Proxy Settings: ============================== Proxy is not enabled. No Proxy Server is set. "Reset IE Proxy Settings": IE Proxy Settings were reset. ========================= FF Proxy Settings: ============================== ========================= Hosts content: ================================= 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com There are 15472 more lines starting with "127.0.0.1" ========================= IP Configuration: ================================ Killer e2200 Gigabit Ethernet Controller (NDIS 6.30) = Ethernet (Connected) # ---------------------------------- # IPv4-Konfiguration # ---------------------------------- pushd interface ipv4 reset set global icmpredirects=enabled set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled popd # Ende der IPv4-Konfiguration Windows-IP-Konfiguration Hostname . . . . . . . . . . . . : AndreasPC Prim�res DNS-Suffix . . . . . . . : Knotentyp . . . . . . . . . . . . : Hybrid IP-Routing aktiviert . . . . . . : Nein WINS-Proxy aktiviert . . . . . . : Nein DNS-Suffixsuchliste . . . . . . . : speedport.ip Ethernet-Adapter Ethernet: Verbindungsspezifisches DNS-Suffix: speedport.ip Beschreibung. . . . . . . . . . . : Killer e2200 Gigabit Ethernet Controller (NDIS 6.30) Physische Adresse . . . . . . . . : D4-3D-7E-F3-75-F3 DHCP aktiviert. . . . . . . . . . : Ja Autokonfiguration aktiviert . . . : Ja IPv6-Adresse. . . . . . . . . . . : 2003:62:5f5b:2c01:614d:dc35:db4b:92b1(Bevorzugt) Tempor�re IPv6-Adresse. . . . . . : 2003:62:5f5b:2c01:acd6:b4bf:1fb6:d83e(Bevorzugt) Verbindungslokale IPv6-Adresse . : fe80::614d:dc35:db4b:92b1%6(Bevorzugt) IPv4-Adresse . . . . . . . . . . : 192.168.2.100(Bevorzugt) Subnetzmaske . . . . . . . . . . : 255.255.255.0 Lease erhalten. . . . . . . . . . : Samstag, 1. August 2015 15:38:31 Lease l�uft ab. . . . . . . . . . : Samstag, 22. August 2015 15:38:30 Standardgateway . . . . . . . . . : fe80::1%6 192.168.2.1 DHCP-Server . . . . . . . . . . . : 192.168.2.1 DHCPv6-IAID . . . . . . . . . . . : 114572670 DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-1A-43-E6-0D-D4-3D-7E-F3-75-F3 DNS-Server . . . . . . . . . . . : fe80::1%6 192.168.2.1 NetBIOS �ber TCP/IP . . . . . . . : Aktiviert Tunneladapter isatap.speedport.ip: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: speedport.ip Beschreibung. . . . . . . . . . . : Microsoft-ISATAP-Adapter #2 Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja Tunneladapter Teredo Tunneling Pseudo-Interface: Medienstatus. . . . . . . . . . . : Medium getrennt Verbindungsspezifisches DNS-Suffix: Beschreibung. . . . . . . . . . . : Teredo Tunneling Pseudo-Interface Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0 DHCP aktiviert. . . . . . . . . . : Nein Autokonfiguration aktiviert . . . : Ja Server: speedport.ip Address: fe80::1 Name: google.com Addresses: 2a00:1450:4001:808::1001 173.194.113.0 173.194.113.1 173.194.113.6 173.194.113.14 173.194.113.4 173.194.113.9 173.194.113.5 173.194.113.8 173.194.113.2 173.194.113.3 173.194.113.7 Ping wird ausgef�hrt f�r google.com [2a00:1450:4001:808::1001] mit 32 Bytes Daten: Zeit�berschreitung der Anforderung. Zeit�berschreitung der Anforderung. Ping-Statistik f�r 2a00:1450:4001:808::1001: Pakete: Gesendet = 2, Empfangen = 0, Verloren = 2 (100% Verlust), Server: speedport.ip Address: fe80::1 Name: yahoo.com Addresses: 2001:4998:58:c02::a9 2001:4998:c:a06::2:4008 2001:4998:44:204::a7 98.139.183.24 206.190.36.45 98.138.253.109 Ping wird ausgef�hrt f�r yahoo.com [2001:4998:58:c02::a9] mit 32 Bytes Daten: Zeit�berschreitung der Anforderung. Zeit�berschreitung der Anforderung. Ping-Statistik f�r 2001:4998:58:c02::a9: Pakete: Gesendet = 2, Empfangen = 0, Verloren = 2 (100% Verlust), Ping wird ausgef�hrt f�r 127.0.0.1 mit 32 Bytes Daten: Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128 Antwort von 127.0.0.1: Bytes=32 Zeit<1ms TTL=128 Ping-Statistik f�r 127.0.0.1: Pakete: Gesendet = 2, Empfangen = 2, Verloren = 0 (0% Verlust), Ca. Zeitangaben in Millisek.: Minimum = 0ms, Maximum = 0ms, Mittelwert = 0ms =========================================================================== Schnittstellenliste 6...d4 3d 7e f3 75 f3 ......Killer e2200 Gigabit Ethernet Controller (NDIS 6.30) 1...........................Software Loopback Interface 1 3...00 00 00 00 00 00 00 e0 Microsoft-ISATAP-Adapter #2 4...00 00 00 00 00 00 00 e0 Teredo Tunneling Pseudo-Interface =========================================================================== IPv4-Routentabelle =========================================================================== Aktive Routen: Netzwerkziel Netzwerkmaske Gateway Schnittstelle Metrik 0.0.0.0 0.0.0.0 192.168.2.1 192.168.2.100 20 127.0.0.0 255.0.0.0 Auf Verbindung 127.0.0.1 306 127.0.0.1 255.255.255.255 Auf Verbindung 127.0.0.1 306 127.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306 192.168.2.0 255.255.255.0 Auf Verbindung 192.168.2.100 276 192.168.2.100 255.255.255.255 Auf Verbindung 192.168.2.100 276 192.168.2.255 255.255.255.255 Auf Verbindung 192.168.2.100 276 224.0.0.0 240.0.0.0 Auf Verbindung 127.0.0.1 306 224.0.0.0 240.0.0.0 Auf Verbindung 192.168.2.100 276 255.255.255.255 255.255.255.255 Auf Verbindung 127.0.0.1 306 255.255.255.255 255.255.255.255 Auf Verbindung 192.168.2.100 276 =========================================================================== St�ndige Routen: Keine IPv6-Routentabelle =========================================================================== Aktive Routen: If Metrik Netzwerkziel Gateway 6 36 ::/0 fe80::1 1 306 ::1/128 Auf Verbindung 6 36 2003:62:5f5b:2c01::/64 Auf Verbindung 6 276 2003:62:5f5b:2c01:614d:dc35:db4b:92b1/128 Auf Verbindung 6 276 2003:62:5f5b:2c01:acd6:b4bf:1fb6:d83e/128 Auf Verbindung 6 276 fe80::/64 Auf Verbindung 6 276 fe80::614d:dc35:db4b:92b1/128 Auf Verbindung 1 306 ff00::/8 Auf Verbindung 6 276 ff00::/8 Auf Verbindung =========================================================================== St�ndige Routen: Keine ========================= Winsock entries ===================================== Catalog5 01 C:\windows\SysWOW64\napinsp.dll [55296] (Microsoft Corporation) Catalog5 02 C:\windows\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation) Catalog5 03 C:\windows\SysWOW64\pnrpnsp.dll [70144] (Microsoft Corporation) Catalog5 04 C:\windows\SysWOW64\NLAapi.dll [65536] (Microsoft Corporation) Catalog5 05 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog5 06 C:\windows\SysWOW64\winrnr.dll [23040] (Microsoft Corporation) Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704] (Apple Inc.) Catalog9 01 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 02 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 03 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 04 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 05 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 06 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 07 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 08 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 09 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) Catalog9 10 C:\windows\SysWOW64\mswsock.dll [286208] (Microsoft Corporation) x64-Catalog5 01 C:\Windows\System32\napinsp.dll [69120] (Microsoft Corporation) x64-Catalog5 02 C:\Windows\System32\pnrpnsp.dll [88576] (Microsoft Corporation) x64-Catalog5 03 C:\Windows\System32\pnrpnsp.dll [88576] (Microsoft Corporation) x64-Catalog5 04 C:\Windows\System32\NLAapi.dll [86016] (Microsoft Corporation) x64-Catalog5 05 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog5 06 C:\Windows\System32\winrnr.dll [30720] (Microsoft Corporation) x64-Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [132968] (Apple Inc.) x64-Catalog9 01 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 02 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 03 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 04 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 05 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 06 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 07 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 08 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 09 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) x64-Catalog9 10 C:\Windows\System32\mswsock.dll [339456] (Microsoft Corporation) ========================= Event log errors: =============================== Application errors: ================== Error: (08/01/2015 03:39:57 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT) Description: -2143485946 Error: (08/01/2015 03:39:36 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT) Description: -2147024883 Error: (08/01/2015 03:17:35 PM) (Source: Microsoft-Windows-LocationProvider) (User: ANDREASPC) Description: -2143485936 Error: (08/01/2015 03:17:35 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (User: ANDREASPC) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT) Description: -2147024883 Error: (08/01/2015 02:33:28 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT) Description: -2143485946 Error: (08/01/2015 02:17:52 PM) (Source: Perflib) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (08/01/2015 01:59:48 PM) (Source: Microsoft-Windows-LocationProvider) (User: NT-AUTORITÄT) Description: -2143485946 System errors: ============= Error: (08/01/2015 03:17:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%2147952449 Error: (08/01/2015 03:17:06 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Funktionssuche-Ressourcenveröffentlichung" wurde mit folgendem Fehler beendet: %%2147952449 Error: (08/01/2015 03:17:01 PM) (Source: Tcpip) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.1 mit dem Computer mit der Netzwerkhardwareadresse F4-9F-F3-A2-F9-37 ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (08/01/2015 03:09:38 PM) (Source: Tcpip) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.1 mit dem Computer mit der Netzwerkhardwareadresse F4-9F-F3-A2-F9-37 ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (08/01/2015 02:54:47 PM) (Source: Tcpip) (User: ) Description: Das System hat einen Adressenkonflikt der IP-Adresse 192.168.2.1 mit dem Computer mit der Netzwerkhardwareadresse F4-9F-F3-A2-F9-37 ermittelt. Netzwerkvorgänge könnten daher auf diesem System unterbrochen werden. Error: (08/01/2015 02:07:29 PM) (Source: EventLog) (User: ) Description: Das System wurde zuvor am 01.08.2015 um 14:03:08 unerwartet heruntergefahren. Error: (08/01/2015 02:07:22 PM) (Source: Microsoft-Windows-Kernel-Boot) (User: NT-AUTORITÄT) Description: 32212256844723192716379896 Error: (08/01/2015 02:02:42 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst Diagnostics Tracking Service konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden. Error: (08/01/2015 01:51:56 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst NlaSvc erreicht. Error: (08/01/2015 01:51:32 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Microsoft Office Sessions: ========================= Error: (08/01/2015 03:39:57 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT) Description: -2143485946 Error: (08/01/2015 03:39:36 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT) Description: -2147024883 Error: (08/01/2015 03:17:35 PM) (Source: Microsoft-Windows-LocationProvider)(User: ANDREASPC) Description: -2143485936 Error: (08/01/2015 03:17:35 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider)(User: ANDREASPC) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT) Description: -2143485936 Error: (08/01/2015 03:14:23 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT) Description: -2147024883 Error: (08/01/2015 02:33:28 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT) Description: -2143485946 Error: (08/01/2015 02:17:52 PM) (Source: Perflib)(User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (08/01/2015 01:59:48 PM) (Source: Microsoft-Windows-LocationProvider)(User: NT-AUTORITÄT) Description: -2143485946 CodeIntegrity Errors: =================================== Date: 2015-07-31 19:56:41.996 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\services.exe) attempted to load \Device\HarddiskVolume2\Program Files\Windows Defender\NisSrv.exe that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-07-31 19:56:33.444 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-07-31 19:56:29.733 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2015-07-31 19:55:26.154 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. =========================== Installed Programs ============================ Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated) Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.) Amazon Music (HKCU\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC) AntiLogger Free version 1.8.2.198 (HKLM-x32\...\{A80DB23D-0618-405B-89D9-28F99814E287}_is1) (Version: 1.8.2.198 - Zemana Ltd.) Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.) Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 2.0.8.000 - Asmedia Technology) Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft) AutoHotkey 1.1.14.03 (HKLM\...\AutoHotkey) (Version: 1.1.14.03 - Lexikos) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform) ClipGrab 3.4.4 (HKLM-x32\...\{8A1033B0-EF33-4FB5-97A1-C47A7DCDD7E6}_is1) (Version: - Philipp Schmieder Medien) CyberLink BD_3D Advisor 2.0 (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.5425 - CyberLink Corp.) CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.) CyberLink PowerProducer 5.5 (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.5.3.4118 - CyberLink Corp.) DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version: - FromSoftware, Inc) Druckerdeinstallation für EPSON BX320FW Series (HKLM\...\EPSON BX320FW Series) (Version: - SEIKO EPSON Corporation) EXPERTool v8.9 (HKLM-x32\...\{551D9481-9487-4D0C-9A1D-6BC3E7B6D991}_is1) (Version: 8.9.8.5 - Gainward Co. Ltd.) Fraps (HKLM-x32\...\Fraps) (Version: - ) GN - The Playing Room (HKLM\...\UDK-6d4c630d-d131-4c09-9e35-bba646adf04f) (Version: - Epic Games, Inc.) Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games) Intel(R) Driver Update Utility 2.0 (HKLM-x32\...\{59DB38EB-F864-4E10-841D-38CFBCF864B0}) (Version: 2.0.0.29 - Intel) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation) Intel(R) Smart Connect Technology (HKLM\...\{94A137EA-92EF-441C-A7E2-6757CC08EA82}) (Version: 5.0.10.2907 - Intel Corporation) Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{d370215a-d003-43ae-a3b6-1028af64d5a1}) (Version: 10.0.20 - Intel(R) Corporation) Hidden Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel) Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\3FD0C489-0F02-481a-A3E1-9754CD396761) (Version: - Intel Corporation) IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.37 - Irfan Skiljan) iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.) Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.550 - Oracle) Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Kaspersky Password Manager (HKLM-x32\...\{E522EB0E-20CC-42A9-82EA-50968D01E7A2}) (Version: 8.0.1.1315 - Kaspersky Lab) Hidden Kaspersky Password Manager (HKLM-x32\...\InstallWIX_{E522EB0E-20CC-42A9-82EA-50968D01E7A2}) (Version: 8.0.1.1315 - Kaspersky Lab) Kaspersky Total Security (HKLM-x32\...\{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab) Hidden Kaspersky Total Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab) KeePass Password Safe 2.28 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.28 - Dominik Reichl) Killer Bandwidth Control Filter Driver (HKLM\...\{671617FB-AE42-426F-BF5F-D3B58135A950}) (Version: 1.1.52.1085 - Rivet Networks) Hidden Killer E220x Drivers (HKLM\...\{8E0CB62E-4012-4E8E-A134-E78916E119BE}) (Version: 1.1.52.1085 - Rivet Networks) Hidden Killer Network Manager (HKLM\...\{9154740B-D529-4CD4-A8C5-3C10B80D4225}) (Version: 1.1.52.1085 - Rivet Networks) Hidden Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.52.1085 - Qualcomm Atheros) LG ODD Auto Firmware Update (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - ) Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40620.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version: - Monolith Productions, Inc.) Mozilla Firefox 39.0 (x86 de) (HKCU\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla) MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 1.0.0.84 - MSI) MSI Fast Boot (HKLM-x32\...\{0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1) (Version: 1.0.1.5 - MSI) MSI Intel Extreme Tuning Utility (HKLM-x32\...\{BF51EEA5-56A0-4AC8-BCE5-0E3E20C1516F}) (Version: 4.4.0.103 - Intel Corporation) Hidden MSI Intel Extreme Tuning Utility (HKLM-x32\...\{fbd55c4e-e884-4210-a79b-5f158834b133}) (Version: 4.4.0.103 - Intel Corporation) MSI Live Update (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.0.011 - MSI) MSI Smart Utilities (HKLM-x32\...\{009E5DF2-3F97-480B-89DA-F2D5E672E14A}_is1) (Version: 2.0.0.06 - MSI) MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.025 - MSI) NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation) NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation) NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation) NVIDIA Miracast Virtueller Ton 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.1.10.2728 - Electronic Arts, Inc.) ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7293 - Realtek Semiconductor Corp.) ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version: - Roccat GmbH) ROCCAT Kone[+] Mouse Driver (HKLM-x32\...\{B99CB207-4704-4C51-9309-0FA90AA26DD4}) (Version: - Roccat GmbH) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.3.0 - Samsung Electronics) SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 4.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.4.5.28 - NVIDIA Corporation) Hidden Sound Blaster Cinema (HKLM-x32\...\{8801CA65-921A-4CCC-9D63-879D1D0BAA97}) (Version: 1.00.05 - Creative Technology Limited) Spotify (HKCU\...\Spotify) (Version: 1.0.7.157.g2a6526f9 - Spotify AB) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) SpyHunter 4 (HKLM-x32\...\SpyHunter) (Version: 4.19.13.4482 - Enigma Software Group, LLC) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Trend Micro SafeSync (HKLM\...\HFRS_is1) (Version: 5.1.0.1173 - Trend Micro) Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft) VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.8 - MSI) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) WinRAR 5.10 beta 4 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH) ========================= Memory info: =================================== Percentage of memory in use: 21% Total physical RAM: 8135.93 MB Available physical RAM: 6417.73 MB Total Virtual: 9415.93 MB Available Virtual: 7284.89 MB ========================= Partitions: ===================================== 1 Drive c: (OSDisk) (Fixed) (Total:117.93 GB) (Free:64.52 GB) NTFS 2 Drive d: (Sicherung) (Fixed) (Total:384.64 GB) (Free:277.83 GB) NTFS 4 Drive f: () (Removable) (Total:1.89 GB) (Free:1.52 GB) FAT 5 Drive g: (Games) (Fixed) (Total:400.39 GB) (Free:182.94 GB) NTFS 6 Drive p: (Programme) (Fixed) (Total:146.48 GB) (Free:145.46 GB) NTFS 7 Drive s: (Spiele) (Fixed) (Total:114.46 GB) (Free:113.5 GB) NTFS ========================= Users: ======================================== Benutzerkonten fr \\ANDREASPC Administrator Andreas Gast Der Befehl wurde erfolgreich ausgefhrt. ========================= Minidump Files ================================== No minidump file found |
02.08.2015, 11:25 | #5 | |
/// the machine /// TB-Ausbilder | Internet nur eingeschränkt möglich dns antwortet nichtZitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
02.08.2015, 13:00 | #6 |
| Internet nur eingeschränkt möglich dns antwortet nicht ja hallo also ich habs jetz irgendiwe wieder zum laufen gekriegt habe 3 sachen gemacht nochmal und zwar router auf Werkseinstellung dann nochmal Netzwerkkartentreiber installiert (wo ich schonmal gemacht habe und nichts brachte) und zum schluss den rechner neugestartet und ihn in einem boot menü hochgefahen was jetz von den 3 sachen zum erfolg verhalf weis ich nicht komisch ist nur das die fehlermeldung immer noch da ist aber jetzt wieder alles läuft. an was kann das den gelegen haben? und danke trotzdem für ihre zeit mfg master |
02.08.2015, 19:01 | #7 |
/// the machine /// TB-Ausbilder | Internet nur eingeschränkt möglich dns antwortet nicht Kann ich so schlecht sagen. DIe Fehlermeldung bleibt auch da, wichtig ist der TimeStamp. Beobachte mal ob neue Meldungen gleicher Art mit aktueller Zeit im Eventviewer geschrieben werden.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Internet nur eingeschränkt möglich dns antwortet nicht |
andere, anderen, computer, dns, eingeschränkt, google, guten, hybrid, interne, internet, internet-geht-nicht-dns-server-fehler, internetseite, kaspersky, lädt, mas, nicht mehr, probleme, programme, schöne, schönen, seite, seiten, system, windows, worte, youtube |