Computer langsam, Internet viel zulangsam, Echtzeitscanner nicht aktivierbar(avira)

Combofix Logfile:

	
Code: 

Alles auswählenAufklappen 
ATTFilter

  
	
ComboFix 15-09-07.01 - Focke 20.09.2015  10:24:00.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8191.5552 [GMT 2:00]
ausgeführt von:: c:\users\Focke\Desktop\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Focke\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\windows\IsUn0407.exe
c:\windows\SysWow64\Avira_Launcher_1_Id.Avira.OE.Setup.Msi.log
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-08-20 bis 2015-09-20  ))))))))))))))))))))))))))))))
.
.
2015-09-18 17:37 . 2015-09-18 17:55	--------	d-----w-	c:\programdata\Malwarebytes' Anti-Malware (portable)
2015-09-18 17:37 . 2015-09-18 17:41	192216	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-09-18 17:27 . 2015-09-18 17:39	109272	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2015-09-18 16:59 . 2015-09-18 17:03	--------	d-----w-	C:\FRST
2015-09-10 10:13 . 2015-09-10 10:13	--------	d-----w-	c:\program files (x86)\Microsoft ASP.NET
2015-09-09 15:28 . 2015-08-25 14:08	574072	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2015-09-09 15:12 . 2015-05-23 01:47	1316000	----a-w-	c:\windows\SysWow64\nvspbridge.dll
2015-09-09 15:12 . 2015-05-23 01:47	1756424	----a-w-	c:\windows\system32\nvspbridge64.dll
2015-09-09 15:11 . 2015-09-09 15:11	--------	d-----w-	c:\programdata\boost_interprocess
2015-09-09 09:42 . 2015-08-04 18:00	616360	----a-w-	c:\windows\system32\winresume.efi
2015-09-09 09:41 . 2015-07-15 03:17	2048	----a-w-	c:\windows\system32\tzres.dll
2015-09-09 09:41 . 2015-07-15 02:54	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2015-09-09 09:41 . 2015-07-09 17:58	82944	----a-w-	c:\windows\system32\dwmapi.dll
2015-09-09 09:41 . 2015-07-09 17:58	1632256	----a-w-	c:\windows\system32\dwmcore.dll
2015-09-09 09:41 . 2015-07-09 17:42	67584	----a-w-	c:\windows\SysWow64\dwmapi.dll
2015-09-09 09:41 . 2015-07-09 17:42	1372160	----a-w-	c:\windows\SysWow64\dwmcore.dll
2015-09-09 09:41 . 2015-06-25 10:06	115136	----a-w-	c:\windows\system32\consent.exe
2015-09-09 09:41 . 2015-06-25 10:01	1941504	----a-w-	c:\windows\system32\authui.dll
2015-09-09 09:41 . 2015-06-25 10:01	70656	----a-w-	c:\windows\system32\appinfo.dll
2015-09-09 09:41 . 2015-06-25 09:44	1805824	----a-w-	c:\windows\SysWow64\authui.dll
2015-09-09 09:39 . 2015-08-26 18:07	98304	----a-w-	c:\windows\system32\wudriver.dll
2015-08-22 05:22 . 2015-08-22 05:22	3010240	----a-w-	c:\program files\Common Files\Microsoft Shared\OFFICE15\1031\MSOINTL.DLL
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-08-26 16:37 . 2013-11-16 11:29	134753440	----a-w-	c:\windows\system32\MRT.exe
2015-08-25 18:46 . 2013-11-18 13:20	112760	----a-w-	c:\windows\system32\OpenCL.dll
2015-08-25 18:46 . 2013-11-18 13:20	105264	----a-w-	c:\windows\SysWow64\OpenCL.dll
2015-08-25 18:46 . 2013-10-27 08:12	17082392	----a-w-	c:\windows\system32\nvwgf2umx.dll
2015-08-25 18:46 . 2013-10-27 08:12	14635792	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2015-08-25 18:46 . 2013-10-27 08:12	15512888	----a-w-	c:\windows\system32\nvd3dumx.dll
2015-08-25 18:46 . 2013-10-27 08:12	12515016	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2015-08-25 18:46 . 2013-10-27 08:12	3527696	----a-w-	c:\windows\system32\nvapi64.dll
2015-08-25 18:46 . 2013-10-27 08:12	3112904	----a-w-	c:\windows\SysWow64\nvapi.dll
2015-08-25 14:24 . 2013-11-18 13:07	62584	----a-w-	c:\windows\system32\nvshext.dll
2015-08-25 14:24 . 2013-11-18 13:07	3496752	----a-w-	c:\windows\system32\nvsvc64.dll
2015-08-25 14:24 . 2013-11-18 13:07	937776	----a-w-	c:\windows\system32\nvvsvc.exe
2015-08-25 14:24 . 2013-11-18 13:07	385144	----a-w-	c:\windows\system32\nvmctray.dll
2015-08-25 14:24 . 2013-11-18 13:07	2558584	----a-w-	c:\windows\system32\nvsvcr.dll
2015-08-25 14:24 . 2013-11-18 13:07	6884984	----a-w-	c:\windows\system32\nvcpl.dll
2015-08-25 12:35 . 2013-11-18 13:07	5165808	----a-w-	c:\windows\system32\nvcoproc.bin
2015-07-30 18:06 . 2015-08-12 10:23	1648128	----a-w-	c:\windows\system32\DWrite.dll
2015-07-30 18:06 . 2015-08-12 10:23	1180160	----a-w-	c:\windows\system32\FntCache.dll
2015-07-30 18:06 . 2015-08-12 10:22	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2015-07-30 17:57 . 2015-08-12 10:23	1251328	----a-w-	c:\windows\SysWow64\DWrite.dll
2015-07-30 17:57 . 2015-08-12 10:22	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2015-07-30 13:13 . 2015-08-12 14:00	103120	----a-w-	c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 13:13 . 2015-08-12 14:00	124624	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-28 20:09 . 2015-08-12 10:27	17344	----a-w-	c:\windows\system32\CompatTelRunner.exe
2015-07-28 20:05 . 2015-08-12 10:27	774656	----a-w-	c:\windows\system32\invagent.dll
2015-07-28 20:05 . 2015-08-12 10:27	743424	----a-w-	c:\windows\system32\generaltel.dll
2015-07-28 20:05 . 2015-08-12 10:27	437760	----a-w-	c:\windows\system32\devinv.dll
2015-07-28 20:05 . 2015-08-12 10:27	1116672	----a-w-	c:\windows\system32\appraiser.dll
2015-07-28 20:05 . 2015-08-12 10:27	69120	----a-w-	c:\windows\system32\acmigration.dll
2015-07-28 20:05 . 2015-08-12 10:27	227328	----a-w-	c:\windows\system32\aepdu.dll
2015-07-28 19:55 . 2015-08-12 10:27	1148416	----a-w-	c:\windows\system32\aeinv.dll
2015-07-28 11:14 . 2013-11-16 16:48	162528	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2015-07-28 11:14 . 2013-11-16 16:48	141416	----a-w-	c:\windows\system32\drivers\avipbb.sys
2015-07-22 17:53 . 2015-09-09 09:42	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-07-16 19:12 . 2015-08-12 10:27	856064	----a-w-	c:\windows\SysWow64\rdvidcrl.dll
2015-07-16 19:12 . 2015-08-12 10:27	53248	----a-w-	c:\windows\SysWow64\tsgqec.dll
2015-07-16 19:12 . 2015-08-12 10:27	6131200	----a-w-	c:\windows\SysWow64\mstscax.dll
2015-07-16 19:11 . 2015-08-12 10:27	62976	----a-w-	c:\windows\system32\tsgqec.dll
2015-07-16 19:11 . 2015-08-12 10:27	7077376	----a-w-	c:\windows\system32\mstscax.dll
2015-07-16 19:11 . 2015-08-12 10:27	1057792	----a-w-	c:\windows\system32\rdvidcrl.dll
2015-07-15 18:15 . 2015-08-12 10:27	94656	----a-w-	c:\windows\system32\drivers\mountmgr.sys
2015-07-15 18:10 . 2015-08-12 10:27	1743360	----a-w-	c:\windows\system32\sysmain.dll
2015-07-15 18:10 . 2015-08-12 10:27	11264	----a-w-	c:\windows\system32\msmmsp.dll
2015-07-15 03:19 . 2015-08-12 10:27	52736	----a-w-	c:\windows\system32\basesrv.dll
2015-07-15 01:12 . 2015-07-28 09:23	12222168	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{5C9D77F2-5B6F-4807-B257-287C34D5857A}\mpengine.dll
2015-07-11 13:15 . 2015-08-12 10:27	429568	----a-w-	c:\windows\system32\wksprt.exe
2015-07-10 17:51 . 2015-08-12 09:38	14177280	----a-w-	c:\windows\system32\shell32.dll
2015-07-09 17:57 . 2015-08-12 10:17	193536	----a-w-	c:\windows\system32\notepad.exe
2015-07-09 17:57 . 2015-08-12 10:17	193536	----a-w-	c:\windows\notepad.exe
2015-07-09 17:42 . 2015-08-12 10:17	179712	----a-w-	c:\windows\SysWow64\notepad.exe
2015-07-04 18:07 . 2015-07-15 15:12	2087424	----a-w-	c:\windows\system32\ole32.dll
2015-07-04 17:48 . 2015-07-15 15:12	1414656	----a-w-	c:\windows\SysWow64\ole32.dll
2015-07-01 20:49 . 2015-08-12 10:23	260096	----a-w-	c:\windows\system32\WebClnt.dll
2015-07-01 20:48 . 2015-08-12 10:23	102912	----a-w-	c:\windows\system32\davclnt.dll
2015-07-01 20:30 . 2015-08-12 10:23	206848	----a-w-	c:\windows\SysWow64\WebClnt.dll
2015-07-01 20:30 . 2015-08-12 10:23	82432	----a-w-	c:\windows\SysWow64\davclnt.dll
2015-07-01 13:26 . 2015-07-28 16:26	81920	----a-w-	c:\windows\SysWow64\devolopacket.dll
2015-07-01 13:26 . 2015-07-28 16:26	34048	----a-w-	c:\windows\SysWow64\drivers\npf_devolo.sys
2015-07-01 13:26 . 2015-07-28 16:26	221184	----a-w-	c:\windows\SysWow64\devolopcap.dll
2015-06-23 11:30 . 2013-11-16 11:02	300704	------w-	c:\windows\system32\MpSigStub.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2015-07-14 11:03	1729752	----a-w-	c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2015-07-14 11:03	1729752	----a-w-	c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2015-07-14 11:03	1729752	----a-w-	c:\progra~2\MICROS~1\Office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"rfxsrvtray"="f:\tobit radio.fx\Client\rfx-tray.exe" [2013-02-07 1838872]
"DAEMON Tools Lite"="f:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2013-10-28 3675352]
"HP Officejet Pro 8600 (NET)"="c:\program files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe" [2012-10-17 2573416]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Six Engine"="c:\program files (x86)\ASUS\EPU\EPU.exe" [2010-06-14 5309056]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-08-26 782008]
"RUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\rusb3mon.exe" [2011-09-20 115048]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-10-01 640376]
"Cisco AnyConnect Secure Mobility Agent for Windows"="c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe" [2014-10-16 707472]
"HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2013-05-30 96056]
"PDFPrint"="f:\program files (x86)\PDF24\pdf24.exe" [2014-11-28 193568]
"Avira SystrayStartTrigger"="c:\program files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe" [2015-08-13 66936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux7"=wdmaud.drv
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 chromoting;Chrome Remote Desktop Service;c:\program files (x86)\Google\Chrome Remote Desktop\46.0.2490.13\remoting_host.exe;c:\program files (x86)\Google\Chrome Remote Desktop\46.0.2490.13\remoting_host.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 acsock;acsock;c:\windows\system32\DRIVERS\acsock64.sys;c:\windows\SYSNATIVE\DRIVERS\acsock64.sys [x]
R3 Andbus;LGE Android Platform Composite USB Device;c:\windows\system32\DRIVERS\lgandbus64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandbus64.sys [x]
R3 AndDiag;LGE Android Platform USB Serial Port;c:\windows\system32\DRIVERS\lganddiag64.sys;c:\windows\SYSNATIVE\DRIVERS\lganddiag64.sys [x]
R3 AndGps;LGE Android Platform USB GPS NMEA Port;c:\windows\system32\DRIVERS\lgandgps64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandgps64.sys [x]
R3 ANDModem;LGE Android Platform USB Modem;c:\windows\system32\DRIVERS\lgandmodem64.sys;c:\windows\SYSNATIVE\DRIVERS\lgandmodem64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Origin Client Service;Origin Client Service;f:\program files (x86)\Origin\OriginClientService.exe;f:\program files (x86)\Origin\OriginClientService.exe [x]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R4 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 DevoloNetworkService;devolo Network Service;c:\program files (x86)\devolo\dlan\devolonetsvc.exe;c:\program files (x86)\devolo\dlan\devolonetsvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe;c:\program files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [x]
S2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\sysWOW64\drivers\npf_devolo.sys;c:\windows\sysWOW64\drivers\npf_devolo.sys [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Radio.fx;Radio.fx Server;f:\tobit radio.fx\Server\rfx-server.exe;f:\tobit radio.fx\Server\rfx-server.exe [x]
S2 SkypeUpdate;Skype Updater;f:\program files (x86)\Skype\Updater\Updater.exe;f:\program files (x86)\Skype\Updater\Updater.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 vpnagent;Cisco AnyConnect Secure Mobility Agent;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe;c:\program files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [x]
S3 AiCharger;ASUS Charger Driver;c:\windows\system32\DRIVERS\AiCharger.sys;c:\windows\SYSNATIVE\DRIVERS\AiCharger.sys [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 rusb3hub;Renesas Electronics USB 3.0 Hub Driver (Version 3.0);c:\windows\system32\DRIVERS\rusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\rusb3hub.sys [x]
S3 rusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver (Version 3.0);c:\windows\system32\DRIVERS\rusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\rusb3xhc.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-09-17 10:48	997704	----a-w-	c:\program files (x86)\Google\Chrome\Application\45.0.2454.93\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-09-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-16 09:33]
.
2015-09-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-11-16 09:33]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-07-06 11057768]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-05-23 1571696]
"XboxStat"="c:\program files\Microsoft Xbox 360 Accessories\XboxStat.exe" [2009-10-01 825184]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-05-23 2754704]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MIF5BA~1\Office15\EXCEL.EXE/3000
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
TCP: Interfaces\{5106847D-DE4D-42E7-B412-70C6749C3042}: NameServer = 192.168.178.1,8.8.8.8
Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - c:\program files (x86)\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL
FF - ProfilePath - c:\users\Focke\AppData\Roaming\Mozilla\Firefox\Profiles\itehphy2.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
ShellIconOverlayIdentifiers-{8BA85C75-763B-4103-94EB-9470F12FE0F7} - c:\program files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
ShellIconOverlayIdentifiers-{CD55129A-B1A1-438E-A425-CEBC7DC684EE} - c:\program files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
ShellIconOverlayIdentifiers-{E768CD3B-BDDC-436D-9C13-E1B39CA257B1} - c:\program files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
AddRemove-Opel-Tech2 - f:\programme\OpelTech2\\uninstall.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1307189488-569850603-555512856-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.Email.1"
.
[HKEY_USERS\S-1-5-21-1307189488-569850603-555512856-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="WindowsLiveMail.VCard.1"
.
[HKEY_USERS\S-1-5-21-1307189488-569850603-555512856-1000\Software\SecuROM\License information*]
"datasecu"=hex:21,6b,00,48,95,ba,ae,59,f0,ff,17,cc,ba,d2,37,6d,65,8e,d6,35,f9,
   ff,de,93,e6,35,64,f9,a1,16,33,21,7a,c6,79,53,32,f2,78,20,6b,39,e2,62,f0,20,\
"rkeysecu"=hex:f6,26,ee,00,3b,23,cf,0e,37,ff,14,fd,74,65,c5,7e
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files\ASUS\GPU Boost Driver\GpuBoostServer.exe
c:\program files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
c:\program files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
c:\users\Focke\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-09-20  10:30:03 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-09-20 08:30
.
Vor Suchlauf: 12 Verzeichnis(se), 135.439.650.816 Bytes frei
Nach Suchlauf: 17 Verzeichnis(se), 135.438.704.640 Bytes frei
.
- - End Of File - - 942D0B058EDC397A3F895AA8906262BD
         
 
--- --- ---
A36C5E4F47E84449FF07ED3517B43A31