|
Plagegeister aller Art und deren Bekämpfung: Seuche nach codec download auf Windows 7 PC / Acronis backup bricht abWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
02.10.2015, 00:45 | #1 |
| Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Hallo Trojaner Eliminierer, habe gestern einen codec runtergeladen um einen Film zu streamen. sonst schau ich ja immer was das web so meint bevor ich etwas runterlade - aber gestern ab ich leider nicht gemacht und nun habe ich den Schlamassel. Installiert ist Windows 7 Proffesional ( 4 Kern 3,1 GHz , 16 MB RAMM) G-Data Total Protection Ad-Blocker acronis (backup von C: nach aufsetzen des Sytems und tools von 2012 vorhanden) Wenn ich nun die Möhre hochfahren lasse - dauert es ewig nach dem Windowsstartfenster. Erst sind beide Bildschirme schwarz und erst nachdem ich den Taskmanager aufgerufen habe und über ""Neuer Task" durchsuchen angeklickt habe erscheinen die icons auf dem Desktop und kann "durchsuchen abbrechen. Virenprüfung mit GData läuft gerade ( 216 Fundstücke meist junk ) Ein Backup mit Acronis der C: Partionion habe ich , aber das lässt sich nicht aufspielen - kurz vor Ende des "zurückspulens" bricht es ab. Bevor ich mir das System zerschiesse was ärgerlich wäre, frage ich lieber hier. Wie soll ich am Besten vorgehen? Danke Geändert von ALT F4 (02.10.2015 um 00:51 Uhr) |
02.10.2015, 11:19 | #2 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Hallo und
__________________Zitat:
Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
02.10.2015, 12:48 | #3 |
| Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Hallo Cosinus,
__________________Danke das Dur Dir Zeit genommen hast. Mein depperter download war in der Nacht vom 30.9 zum 01.10. vllcht hilft es ja das Zeitfenster einzukreisen. hier die gewünschten Angaben: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:30-09-2015 durchgeführt von Mister X (Administrator) auf ALEX (02-10-2015 13:00:20) Gestartet von C:\Users\Mister X\Downloads Geladene Profile: Mister X (Verfügbare Profile: Mister X) Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ Code:
ATTFilter ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe (G Data Software AG) C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKWCtlx64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe () C:\Program Files (x86)\Lexware\AAVUpdateManager\aavus.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKService.exe (G Data Software AG) C:\Program Files (x86)\G Data\TotalProtection\AVKBackup\AVKBackupService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe () C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe () C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Search Module Ltd.) C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (G Data Software AG) C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFwSvcx64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe () C:\ProgramData\AppMgr3.32.9611035\AppMgr.exe () C:\ProgramData\AppMgr3.32.9611035\1\plugin.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (G Data Software AG) C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe () C:\ProgramData\AppMgr3.32.9611035\1\plugin.exe (G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe () C:\Users\Mister X\AppData\Local\dply_en_036020102\updply_en_036020102.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (G DATA Software AG) C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7560296 2011-12-12] (Realtek Semiconductor) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation) HKLM-x32\...\Run: [VirtualCloneDrive] => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [89456 2011-03-07] (Elaborate Bytes AG) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] () HKLM-x32\...\Run: [mbot_de_014010102] => [X] HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G DATA\TotalProtection\Firewall\GDFirewallTray.exe [1864312 2015-06-16] (G DATA Software AG) HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G DATA\TotalProtection\DelayLoader\AutorunDelayLoader.exe [434296 2015-02-20] (G Data Software AG) HKLM-x32\...\RunOnce: [updply_en_036020102.exe] => C:\Users\Mister X\AppData\Local\dply_en_036020102\updply_en_036020102.exe [3323536 2015-09-30] () HKLM-x32\...\RunOnce: [upgmsd_de_005010102.exe] => C:\Users\Mister X\AppData\Local\gmsd_de_005010102\upgmsd_de_005010102.exe [3323536 2015-09-30] () HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G DATA\TotalProtection\AVKTray\AVKTray.exe,c:\program files (x86)\g data\totalprotection\avkkid\avkcks.exe HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ACHTUNG HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ACHTUNG HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd) HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\MountPoints2: J - J:\AutoRun.exe HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\MountPoints2: {318b9887-2782-11e2-814d-c86000c30044} - J:\AutoRun.exe HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\MountPoints2: {9058760a-4b66-11e2-8aef-c86000c30044} - K:\AutoRun.exe HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\MountPoints2: {a752c730-9622-11e1-b90b-806e6f6e6963} - E:\Msetup4.exe HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\MountPoints2: {b36d0e50-96de-11e1-8a8d-c86000c30044} - J:\setup.exe HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\MountPoints2: {d187480a-dd8c-11e2-a55a-c86000c30044} - K:\AutoRun.exe HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\MountPoints2: {e5c6eb87-a8c5-11e4-9095-c86000c30044} - K:\HiSuiteDownLoader.exe HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ACHTUNG HKU\S-1-5-18\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2011-02-25] (Microsoft Corporation) <==== ACHTUNG Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2012-05-09] ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2012-05-09] ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-10-01] ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Keine Datei) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{31DF2DD1-A247-4D88-9574-B2FB0AE44936}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{6E65FAC2-F0D6-4794-9894-CBD23B57D8C9}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{F20986D3-1877-45B0-95E7-3AB1F72CBDEE}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hp&ts=1443665561&z=e3acbb3cbe990deb3687d14gdz9z4c4qfq0wcw6q5g&from=amt&uid=st500dm002-1bd142_z2anklvcxxxxz2anklvc HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp URLSearchHook: HKLM-x32 - Vgrabber v1 Toolbar - {7f7f82f1-7c95-47cd-814f-950b56d58fc3} - C:\Users\Mister X\AppData\LocalLow\Vgrabber_v1\prxtbVgra.dll Keine Datei URLSearchHook: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 - Vgrabber v1 Toolbar - {7f7f82f1-7c95-47cd-814f-950b56d58fc3} - C:\Users\Mister X\AppData\LocalLow\Vgrabber_v1\prxtbVgra.dll Keine Datei SearchScopes: HKLM -> {EC55E2D9-B1BF-45FB-88B8-AA5D4D625EA4} URL = hxxp://www-searching.com/search.aspx?s=FA1zftpbl02,146cc652-503f-4480-9b48-1cfd0130ad6c,&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> DefaultScope {EC55E2D9-B1BF-45FB-88B8-AA5D4D625EA4} URL = hxxp://www-searching.com/search.aspx?s=FA1zftpbl02,146cc652-503f-4480-9b48-1cfd0130ad6c,&q={searchTerms} SearchScopes: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> {2A3B7528-9D3C-4548-AF0B-12B561738488} URL = hxxp://www-searching.com/search.aspx?s=FA1zftpbl02,146cc652-503f-4480-9b48-1cfd0130ad6c&site=shyosie&prd=set&q={searchTerms} SearchScopes: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> {5E8E91AA-C727-4D8E-BC67-79FAC1AF7860} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE453D20140727&p={searchTerms} SearchScopes: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> {7F4EFF06-7032-458e-AE16-1C1D8255C28A} URL = hxxp://www-searching.com/search.aspx?s=FA1zftpbl02,146cc652-503f-4480-9b48-1cfd0130ad6c,&q={searchTerms} SearchScopes: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = SearchScopes: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> {EC55E2D9-B1BF-45FB-88B8-AA5D4D625EA4} URL = hxxp://www-searching.com/search.aspx?s=FA1zftpbl02,146cc652-503f-4480-9b48-1cfd0130ad6c,&q={searchTerms} SearchScopes: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> {F2049AFB-85C7-42AD-8D7B-B6A6EB68329A} URL = hxxp://search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=bl-bir-dd__alt__ddc_dss_bd_com&p={searchTerms} SearchScopes: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> {FA31CB18-8FDF-42B6-8F14-34868922BF24} URL = hxxp://www.search.ask.com/web?tpid=ATU4SP-MED&o=APN11391&pf=V7&p2=^BAY^YYYYYY^CA^US&gct=&itbv=12.33.2.2031&apn_uid=1E6EB90A-1578-44EE-BB23-3EC99A3DAB71&apn_ptnrs=^BAY&apn_dtid=^YYYYYY^CA^US&apn_dbr=firefox.exe_0_40.0.2.5702&doi=2015-08-24&trgb=IE&q={searchTerms}&psv=&pt=tb BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-23] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-23] (Oracle Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO-x32: Kein Name -> {4f93c386-c677-4212-9bc8-47814de68c52} -> Keine Datei BHO-x32: Kein Name -> {567dbf58-4713-45f4-a623-e7b41f898209} -> Keine Datei BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-21] (Oracle Corporation) BHO-x32: Vgrabber v1 Toolbar -> {7f7f82f1-7c95-47cd-814f-950b56d58fc3} -> C:\Users\Mister X\AppData\LocalLow\Vgrabber_v1\prxtbVgra.dll Keine Datei BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-21] (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKLM-x32 - Vgrabber v1 Toolbar - {7f7f82f1-7c95-47cd-814f-950b56d58fc3} - C:\Users\Mister X\AppData\LocalLow\Vgrabber_v1\prxtbVgra.dll Keine Datei Toolbar: HKU\S-1-5-21-1723568181-2914276131-4058959280-1000 -> Kein Name - {7F7F82F1-7C95-47CD-814F-950B56D58FC3} - Keine Datei Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Keine Datei FireFox: ======== FF ProfilePath: C:\Users\Mister X\AppData\Roaming\Mozilla\Firefox\Profiles\nahs90qw.default-1443709621769 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-24] () FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-23] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-23] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-24] () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-21] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-21] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-07] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-07] (NVIDIA Corporation) FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Keine Datei] FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2015-06-23] FF Extension: Adblock Plus - C:\Users\Mister X\AppData\Roaming\Mozilla\Firefox\Profiles\nahs90qw.default-1443709621769\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-01] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2012-05-05] FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\Mister X\AppData\Roaming\Mozilla\Firefox\Profiles\uwxhfpc7.default-1426356840965\extensions\deskCutv2@gmail.com => nicht gefunden FF HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Mister X\AppData\Roaming\Mozilla\Firefox\Profiles\ataaeees.default\extensions\cliqz@cliqz.com => nicht gefunden Chrome: ======= CHR HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jlcgehabolcakkjhgmgpkagpolbjlhfa] - hxxps://clients2.google.com/service/update2/crx Opera: ======= OPR Extension: (CinemaPlus_1.3dV01.10) - C:\Users\Mister X\AppData\Roaming\Opera Software\Opera Stable\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2015-10-01] OPR Extension: (CinePlus-1.44V30.09) - C:\Users\Mister X\AppData\Roaming\Opera Software\Opera Stable\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-10-01] StartMenuInternet: (HKLM) Opera - C:\Program Files (x86)\Opera\Opera.exe hxxp://www.delta-homes.com/?type=sc&ts=1432124839&z=4b52d05ba395147f0d71ad4g2z0c8o6gdodz9bez2c&from=wpm05203&uid=ST500DM002-1BD142_Z2ANKLVCXXXXZ2ANKLVC ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AAV UpdateService; C:\Program Files (x86)\Lexware\AAVUpdateManager\aavus.exe [128296 2008-10-24] () R2 AppMgr3.32.9611035; C:\ProgramData\AppMgr3.32.9611035\AppMgr.exe [488696 2015-10-02] () R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2558072 2015-06-19] (G Data Software AG) R2 AVKService; C:\Program Files (x86)\G DATA\TotalProtection\AVK\AVKService.exe [966776 2015-06-16] (G Data Software AG) R2 AVKWCtl; C:\Program Files (x86)\G DATA\TotalProtection\AVK\AVKWCtlx64.exe [3711712 2015-06-16] (G Data Software AG) S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243464 2013-09-25] (CyberLink) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Datei ist nicht signiert] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Datei ist nicht signiert] R2 GDBackupSvc; C:\Program Files (x86)\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe [3894392 2015-06-19] (G Data Software AG) R3 GDFwSvc; C:\Program Files (x86)\G DATA\TotalProtection\Firewall\GDFwSvcx64.exe [3202368 2015-06-19] (G Data Software AG) R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [789624 2015-06-16] (G Data Software AG) S3 GDTunerSvc; C:\Program Files (x86)\G DATA\TotalProtection\AVKTuner\AVKTunerService.exe [2235512 2015-06-16] (G Data Software AG) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155192 2015-08-27] (NVIDIA Corporation) R2 HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [138272 2014-09-05] () R2 HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [219680 2014-09-05] () R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2013-06-28] () R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2014-03-16] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 SMUpd; C:\Program Files\Common Files\Goobzo\GBUpdate\smu.exe [4160000 2015-09-06] (Search Module Ltd.) [Datei ist nicht signiert] S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert] S3 TSNxGService; C:\Program Files (x86)\G DATA\TotalProtection\TSNxG\TSNxGService.exe [255608 2014-07-01] (G DATA Software) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R1 Eve; C:\Windows\System32\DRIVERS\eve.sys [41304 2014-04-10] () R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [158720 2015-10-02] (G Data Software AG) R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [27648 2015-10-01] (G Data Software AG) R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [20992 2015-10-01] (G Data Software AG) R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [230912 2015-10-02] (G Data Software AG) R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [76288 2015-10-02] (G Data Software AG) R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [65024 2015-10-02] (G Data Software AG) R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2015-10-01] (G Data Software) R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [125952 2015-10-02] (G Data Software AG) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2014-07-29] (Huawei Technologies Co., Ltd.) R2 npf; C:\Windows\System32\drivers\npf.sys [36600 2014-04-18] (Riverbed Technology, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation) S3 RTL8187B; C:\Windows\System32\DRIVERS\RTL8187B.sys [450048 2010-03-31] (Realtek Semiconductor Corporation ) R3 SMUpdd; C:\Program Files\Common Files\Goobzo\GBUpdate\smw.sys [41632 2015-09-06] () R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-05-05] (Acronis) R0 TS4NT; C:\Windows\System32\Drivers\TS4nt.sys [98760 2015-10-02] (G Data Software) R0 viamrx64; C:\Windows\System32\DRIVERS\viamrx64.sys [167424 2007-12-09] (VIA Technologies inc,.ltd) S3 ewusbmbb; system32\DRIVERS\ewusbwwan.sys [X] S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X] S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X] S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] S1 swsedrvr_vt_1_10_0_25; system32\drivers\swsedrvr_vt_1_10_0_25.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-02 13:00 - 2015-10-02 13:00 - 00026802 _____ C:\Users\Mister X\Downloads\FRST.txt 2015-10-02 12:58 - 2015-10-02 13:00 - 00000000 ____D C:\FRST 2015-10-02 12:58 - 2015-10-02 12:58 - 02192384 _____ (Farbar) C:\Users\Mister X\Downloads\FRST64.exe 2015-10-02 03:55 - 2015-10-02 03:55 - 00000000 _RSHD C:\acroldr 2015-10-02 02:40 - 2015-10-02 02:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA TOTAL PROTECTION 2015-10-02 01:39 - 2015-10-02 01:46 - 00001006 _____ C:\Users\Mister X\Desktop\Neues Textdokument.txt 2015-10-01 23:28 - 2015-10-01 23:28 - 00106272 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys 2015-10-01 23:14 - 2015-10-01 23:14 - 00000000 _____ C:\Windows\GDDevCtrl.INI 2015-10-01 20:47 - 2015-10-02 02:40 - 00001973 _____ C:\Users\Public\Desktop\G DATA TOTAL PROTECTION.lnk 2015-10-01 20:46 - 2015-10-02 02:40 - 00098760 _____ (G Data Software) C:\Windows\system32\Drivers\TS4nt.sys 2015-10-01 20:46 - 2015-10-01 20:46 - 00027648 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys 2015-10-01 20:46 - 2015-10-01 20:46 - 00020992 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys 2015-10-01 20:46 - 2015-10-01 20:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_GDKBFlt64_01007.Wdf 2015-10-01 20:46 - 2015-10-01 20:46 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_GDKBB64_01007.Wdf 2015-10-01 20:45 - 2015-10-02 02:40 - 00076288 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys 2015-10-01 20:45 - 2015-10-02 02:39 - 00230912 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys 2015-10-01 20:45 - 2015-10-02 02:39 - 00158720 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys 2015-10-01 20:45 - 2015-10-02 02:39 - 00125952 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys 2015-10-01 20:45 - 2015-10-02 02:39 - 00065024 _____ (G Data Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys 2015-10-01 20:45 - 2015-10-01 20:45 - 00000000 _____ C:\Users\Mister X\AppData\Roaming\gdfw.log 2015-10-01 20:44 - 2015-10-02 02:39 - 00004018 _____ C:\Windows\DPINST.LOG 2015-10-01 20:44 - 2015-10-01 20:44 - 00000779 _____ C:\Users\Mister X\AppData\Roaming\gdscan.log 2015-10-01 20:44 - 2015-10-01 20:44 - 00000000 ____D C:\ProgramData\G DATA Software 2015-10-01 20:34 - 2015-10-01 20:36 - 265261840 _____ (G Data Software AG) C:\Users\Mister X\Downloads\INT_R_BASE_TP.exe 2015-10-01 20:25 - 2015-10-01 20:25 - 00000000 ____D C:\Program Files (x86)\System NotifierV01.10 2015-10-01 20:23 - 2015-10-02 12:48 - 00000000 ____D C:\Users\Mister X\AppData\Local\gmsd_de_005010102 2015-10-01 20:23 - 2015-10-02 01:29 - 00000000 ____D C:\Program Files (x86)\gmsd_de_005010102 2015-10-01 20:22 - 2015-10-02 01:30 - 00000000 ____D C:\Users\Mister X\AppData\Local\SmartWeb 2015-10-01 20:22 - 2015-10-01 20:22 - 00004038 _____ C:\Windows\System32\Tasks\SmartWeb Upgrade Trigger Task 2015-10-01 18:16 - 2015-10-01 18:16 - 00003364 _____ C:\Windows\System32\Tasks\autostart 2015-10-01 17:45 - 2015-10-01 17:45 - 00000000 ____D C:\Program Files (x86)\predm 2015-10-01 17:37 - 2015-10-01 17:37 - 00000000 ____D C:\Users\Mister X\Documents\ProcAlyzer Dumps 2015-10-01 17:37 - 2015-10-01 17:26 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts.20151001-173733.backup 2015-10-01 17:26 - 2015-10-01 16:58 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts.20151001-172615.backup 2015-10-01 16:58 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20151001-165808.backup 2015-10-01 15:53 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe 2015-10-01 15:46 - 2015-10-01 17:49 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2015-10-01 15:46 - 2015-10-01 16:10 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2015-10-01 15:46 - 2015-10-01 15:46 - 00001357 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2015-10-01 15:46 - 2015-10-01 15:46 - 00001345 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2015-10-01 15:46 - 2015-10-01 15:46 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2015-10-01 15:46 - 2015-10-01 15:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2015-10-01 15:46 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2015-10-01 15:45 - 2015-10-01 15:45 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Mister X\Downloads\spybot-2.4.40.exe 2015-10-01 15:23 - 2015-10-01 15:27 - 00000163 _____ C:\Users\Mister X\Desktop\Trojaner.txt 2015-10-01 15:21 - 2015-10-01 16:27 - 00000000 ____D C:\Users\Mister X\Desktop\Alte Firefox-Daten 2015-10-01 15:03 - 2015-10-01 15:03 - 00058136 _____ C:\Users\Mister X\Documents\cc_20151001_150302.reg 2015-10-01 14:46 - 2015-10-01 14:46 - 00001427 _____ C:\Users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2015-10-01 14:45 - 2015-10-02 02:41 - 00008870 _____ C:\Windows\PFRO.log 2015-10-01 04:34 - 2015-10-01 04:34 - 00000000 ____D C:\Users\Mister X\AppData\Local\10800 2015-10-01 04:25 - 2015-10-02 12:48 - 00005190 _____ C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-11.job 2015-10-01 04:25 - 2015-10-02 12:48 - 00004500 _____ C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-4.job 2015-10-01 04:25 - 2015-10-02 12:48 - 00003480 _____ C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-1-7.job 2015-10-01 04:25 - 2015-10-02 12:48 - 00003144 _____ C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-1-6.job 2015-10-01 04:25 - 2015-10-02 12:48 - 00002452 _____ C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-5_user.job 2015-10-01 04:25 - 2015-10-02 12:48 - 00002452 _____ C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-5.job 2015-10-01 04:25 - 2015-10-02 12:48 - 00002118 _____ C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-10_user.job 2015-10-01 04:25 - 2015-10-02 12:47 - 00000000 ____D C:\ProgramData\AppMgr3.32.9611035 2015-10-01 04:25 - 2015-10-01 04:30 - 00000000 ____D C:\ProgramData\AppMgr1.95.3587003 2015-10-01 04:25 - 2015-10-01 04:25 - 00008220 _____ C:\Windows\System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-11 2015-10-01 04:25 - 2015-10-01 04:25 - 00007530 _____ C:\Windows\System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-4 2015-10-01 04:25 - 2015-10-01 04:25 - 00006510 _____ C:\Windows\System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-1-7 2015-10-01 04:25 - 2015-10-01 04:25 - 00006172 _____ C:\Windows\System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-1-6 2015-10-01 04:25 - 2015-10-01 04:25 - 00005482 _____ C:\Windows\System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-5 2015-10-01 04:25 - 2015-10-01 04:25 - 00003512 _____ C:\Windows\System32\Tasks\IBUpd 2015-10-01 04:25 - 2015-10-01 04:25 - 00002050 _____ C:\Users\Mister X\Desktop\punkte.lnk 2015-10-01 04:24 - 2015-10-02 12:52 - 00000000 ____D C:\Users\Mister X\AppData\Local\dply_en_036020102 2015-10-01 04:24 - 2015-10-02 12:48 - 00001054 _____ C:\Windows\Tasks\MyBrowser.job 2015-10-01 04:24 - 2015-10-01 04:25 - 00002777 _____ C:\Users\Public\Desktop\MyBrowser.lnk 2015-10-01 04:24 - 2015-10-01 04:25 - 00000000 ____D C:\Users\Mister X\AppData\Local\BrowserAir 2015-10-01 04:24 - 2015-10-01 04:24 - 00004244 _____ C:\Windows\System32\Tasks\SMW_UpdateTask_Time_3731373337353235312d5a4a6c414a34572a506c415a 2015-10-01 04:24 - 2015-10-01 04:24 - 00004078 _____ C:\Windows\System32\Tasks\MyBrowser 2015-10-01 04:24 - 2015-10-01 04:24 - 00003838 _____ C:\Windows\System32\Tasks\Smp 2015-10-01 04:24 - 2015-10-01 04:24 - 00000000 ____D C:\Users\Mister X\AppData\Local\MyBrowser 2015-10-01 04:24 - 2015-10-01 04:24 - 00000000 ____D C:\ProgramData\SearchModule 2015-10-01 04:24 - 2015-10-01 04:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DESKTOPPLAY 2015-10-01 04:24 - 2015-10-01 04:24 - 00000000 ____D C:\Program Files\Common Files\Goobzo 2015-10-01 04:17 - 2015-10-01 04:17 - 00000000 ____D C:\Users\Mister X\AppData\Local\Crossbrowse 2015-10-01 04:16 - 2015-10-02 12:48 - 00004496 _____ C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-4.job 2015-10-01 04:16 - 2015-10-02 12:48 - 00003476 _____ C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-1-7.job 2015-10-01 04:16 - 2015-10-02 12:48 - 00003140 _____ C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-1-6.job 2015-10-01 04:16 - 2015-10-02 12:48 - 00002448 _____ C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-5_user.job 2015-10-01 04:16 - 2015-10-02 12:48 - 00002448 _____ C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-5.job 2015-10-01 04:16 - 2015-10-02 12:48 - 00002114 _____ C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-10_user.job 2015-10-01 04:16 - 2015-10-02 12:48 - 00001062 _____ C:\Windows\Tasks\Crossbrowse.job 2015-10-01 04:16 - 2015-10-01 04:17 - 00004086 _____ C:\Windows\System32\Tasks\Crossbrowse 2015-10-01 04:16 - 2015-10-01 04:16 - 00007526 _____ C:\Windows\System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-4 2015-10-01 04:16 - 2015-10-01 04:16 - 00006506 _____ C:\Windows\System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-1-7 2015-10-01 04:16 - 2015-10-01 04:16 - 00006168 _____ C:\Windows\System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-1-6 2015-10-01 04:16 - 2015-10-01 04:16 - 00005478 _____ C:\Windows\System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-5 2015-10-01 04:15 - 2015-10-02 12:48 - 00005190 _____ C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-11.job 2015-10-01 04:15 - 2015-10-02 12:48 - 00004500 _____ C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-4.job 2015-10-01 04:15 - 2015-10-02 12:48 - 00003480 _____ C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-7.job 2015-10-01 04:15 - 2015-10-02 12:48 - 00003144 _____ C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-6.job 2015-10-01 04:15 - 2015-10-02 12:48 - 00002452 _____ C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-5_user.job 2015-10-01 04:15 - 2015-10-02 12:48 - 00002452 _____ C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-5.job 2015-10-01 04:15 - 2015-10-02 12:48 - 00002118 _____ C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-10_user.job 2015-10-01 04:15 - 2015-10-02 12:48 - 00001000 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job 2015-10-01 04:15 - 2015-10-02 04:19 - 00001004 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job 2015-10-01 04:15 - 2015-10-01 04:25 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7 2015-10-01 04:15 - 2015-10-01 04:15 - 00008220 _____ C:\Windows\System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-11 2015-10-01 04:15 - 2015-10-01 04:15 - 00007530 _____ C:\Windows\System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-4 2015-10-01 04:15 - 2015-10-01 04:15 - 00006510 _____ C:\Windows\System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-7 2015-10-01 04:15 - 2015-10-01 04:15 - 00006172 _____ C:\Windows\System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-6 2015-10-01 04:15 - 2015-10-01 04:15 - 00005482 _____ C:\Windows\System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-5 2015-10-01 04:15 - 2015-10-01 04:15 - 00004002 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA 2015-10-01 04:15 - 2015-10-01 04:15 - 00003748 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore 2015-10-01 04:15 - 2015-10-01 04:15 - 00000000 ____D C:\Users\Mister X\AppData\Local\globalUpdate 2015-10-01 04:15 - 2015-10-01 04:15 - 00000000 ____D C:\Program Files (x86)\globalUpdate 2015-10-01 04:14 - 2015-10-02 04:15 - 00000000 ____D C:\Users\Mister X\AppData\Local\2ACCAEA0-1443672899-11DD-8D6F-C86000C30044 2015-10-01 04:14 - 2015-10-01 23:36 - 00000000 ____D C:\Program Files (x86)\2ACCAEA0-1443665648-11DD-8D6F-C86000C30044 2015-10-01 04:14 - 2015-10-01 04:14 - 00003094 _____ C:\Windows\System32\Tasks\ngs3012 2015-10-01 04:14 - 2015-10-01 04:14 - 00000000 ____D C:\Users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage 2015-10-01 04:14 - 2015-10-01 04:14 - 00000000 ____D C:\Users\Mister X\AppData\Roaming\ASPackage 2015-10-01 04:14 - 2009-06-10 23:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hp.bak 2015-10-01 04:12 - 2015-10-01 04:13 - 00000000 ____D C:\Users\Mister X\AppData\Roaming\oursurfing 2015-09-30 02:53 - 2015-09-30 02:53 - 00000227 _____ C:\Users\Mister X\Desktop\*.URL 2015-09-29 22:57 - 2015-09-29 22:57 - 00160148 _____ C:\Users\Mister X\Desktop\4k.ai 2015-09-29 18:30 - 2015-10-02 12:45 - 00005012 _____ C:\Windows\setupact.log 2015-09-29 18:30 - 2015-09-29 18:30 - 00156864 _____ C:\Users\Mister X\AppData\Local\GDIPFONTCACHEV1.DAT 2015-09-29 18:30 - 2015-09-29 18:30 - 00000000 _____ C:\Windows\setuperr.log 2015-09-29 18:29 - 2015-10-01 23:32 - 05131464 _____ C:\Windows\system32\FNTCACHE.DAT 2015-09-29 16:01 - 2015-09-29 16:06 - 00000000 ____D C:\Users\Mister X\farbsite 2015-09-29 15:56 - 2015-09-29 16:18 - 00000000 ____D C:\Users\Mister X\Desktop\28.08.2015_site 2015-09-29 15:44 - 2015-09-29 15:45 - 00004652 _____ C:\Users\Mister X\Downloads\slider-timeline-menu-12.2.13.zip 2015-09-29 02:42 - 2015-09-29 02:42 - 00215756 _____ C:\Users\Mister X\Documents\rad.ai 2015-09-29 01:06 - 2015-09-29 01:06 - 00000000 ____D C:\Users\Mister X\Desktop\roboto-fontfacekit 2015-09-29 01:03 - 2015-09-29 01:03 - 01457952 _____ C:\Users\Mister X\Downloads\Font Pack Top 10 Kinofilme - CHIP-Installer.exe 2015-09-29 00:52 - 2015-09-29 00:52 - 03424541 _____ C:\Users\Mister X\Downloads\roboto-fontfacekit(1).zip 2015-09-29 00:49 - 2015-09-29 00:49 - 03424541 _____ C:\Users\Mister X\Desktop\roboto-fontfacekit.zip 2015-09-29 00:43 - 2015-09-29 00:43 - 01501372 _____ C:\Users\Mister X\Downloads\roboto.zip 2015-09-20 18:20 - 2015-09-05 18:41 - 00000248 _____ C:\Users\Mister X\Desktop\pw.txt 2015-09-20 09:50 - 2015-09-20 09:51 - 00000000 ____D C:\Users\Mister X\Desktop\camkarte19092015 2015-09-19 17:27 - 2015-09-19 17:27 - 00005922 _____ C:\Users\Mister X\Documents\cc_20150919_172723.reg 2015-09-18 00:39 - 2015-09-18 10:38 - 00000000 ____D C:\ProgramData\3929cb63-cbbd-4b9c-8b92-a50fbd04e656 2015-09-18 00:39 - 2015-09-18 10:19 - 00000000 ____D C:\Program Files (x86)\Results Hub 2015-09-18 00:39 - 2015-09-18 00:39 - 00000000 ____D C:\Users\Mister X\Documents\Any Video Converter 2015-09-18 00:39 - 2015-09-18 00:39 - 00000000 ____D C:\Users\Mister X\AppData\Roaming\Anvsoft 2015-09-18 00:39 - 2015-09-18 00:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft 2015-09-18 00:39 - 2015-09-18 00:39 - 00000000 ____D C:\Program Files (x86)\Anvsoft 2015-09-18 00:38 - 2015-09-18 00:38 - 37939336 _____ (Any-Video-Converter.com ) C:\Users\Mister X\Downloads\avc-free.exe 2015-09-17 19:38 - 2015-09-17 19:39 - 47104564 _____ C:\Users\Mister X\Downloads\Jandi1.zip 2015-09-17 19:35 - 2015-09-17 19:36 - 30963524 _____ C:\Users\Mister X\Downloads\Girlie5.zip 2015-09-17 19:33 - 2015-09-17 19:33 - 16287656 _____ C:\Users\Mister X\Downloads\Win.zip 2015-09-11 06:47 - 2015-09-11 06:48 - 00004258 _____ C:\Users\Mister X\Documents\cc_20150911_064755.reg 2015-09-11 06:38 - 2015-09-11 14:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2015-09-11 01:44 - 2015-09-11 01:44 - 00000000 ____D C:\Users\Mister X\Documents\QuickSteuer 2015-09-11 01:44 - 2015-09-11 01:44 - 00000000 ____D C:\Users\Mister X\AppData\Local\HL 2015-09-11 01:32 - 2015-09-11 01:32 - 00000000 ____D C:\ProgramData\AAV 2015-09-11 01:27 - 2015-09-11 01:27 - 00000000 ____D C:\ProgramData\HL 2015-09-11 00:06 - 2015-09-11 00:06 - 00097331 _____ C:\Windows\unins000.dat 2015-09-11 00:06 - 2015-09-11 00:06 - 00000000 ____D C:\Users\Mister X\AppData\Local\Tbccint 2015-09-11 00:06 - 2015-09-11 00:06 - 00000000 ____D C:\ProgramData\Tbccint 2015-09-11 00:06 - 2015-09-11 00:05 - 01169609 _____ C:\Windows\unins000.exe 2015-09-10 19:48 - 2015-09-10 19:48 - 02004808 _____ (Link64 GmbH) C:\Users\Mister X\Downloads\VDU_install.exe 2015-09-10 02:29 - 2015-09-10 02:29 - 29654131 _____ (DownloadHelper ) C:\Users\Mister X\Downloads\ConvertHelper3Setup.exe 2015-09-10 02:29 - 2015-09-10 02:29 - 00000000 ____D C:\Program Files\ConvertHelper3 2015-09-09 13:47 - 2015-09-09 13:47 - 00001267 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk 2015-09-09 13:47 - 2015-09-09 13:47 - 00000000 ____D C:\Windows\de 2015-09-09 13:44 - 2015-09-09 13:45 - 142602520 _____ (Microsoft Corporation) C:\Users\Mister X\Downloads\wlsetup-all_16.4.3508.0205.exe 2015-09-09 12:12 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2015-09-09 12:12 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2015-09-09 12:12 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2015-09-09 12:12 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2015-09-09 12:12 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll 2015-09-09 12:12 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2015-09-09 12:12 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll 2015-09-09 12:12 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll 2015-09-09 12:12 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-09-09 12:12 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2015-09-09 12:12 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2015-09-09 12:12 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2015-09-09 12:12 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2015-09-09 12:12 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll 2015-09-09 12:12 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2015-09-09 12:12 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2015-09-09 12:12 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2015-09-09 12:12 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll 2015-09-09 12:12 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2015-09-09 12:12 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-09-09 12:12 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-09-09 12:12 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-09-09 12:12 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-09-09 12:12 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-09-09 12:12 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-09-09 12:12 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-09-09 12:12 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-09-09 12:12 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-09-09 12:12 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-09-09 12:12 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-09-09 12:12 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-09-09 12:12 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-09-09 12:12 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-09-09 12:12 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-09-09 12:12 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-09-09 12:12 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-09-09 12:12 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-09-09 12:12 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-09-09 12:12 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-09-09 12:12 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-09-09 12:12 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-09-09 12:12 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-09-09 12:12 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-09-09 12:12 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-09-09 12:12 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-09-09 12:12 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-09-09 12:12 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-09-09 12:12 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-09-09 12:12 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-09-09 12:12 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-09-09 12:12 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-09-09 12:12 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-09-09 12:12 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-09-09 12:12 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-09-09 12:12 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-09-09 12:12 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-09-09 12:12 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-09-09 12:12 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-09-09 12:12 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-09-09 12:12 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-09-09 12:12 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-09-09 12:12 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-09-09 12:12 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-09-09 12:12 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-09-09 12:12 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-09-09 12:12 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-09-09 12:12 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-09-09 12:12 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-09-09 12:12 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-09-09 12:12 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-09-09 12:12 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-09-09 12:12 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-09-09 12:12 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-09-09 12:12 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-09-09 12:12 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-09-09 12:12 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-09-09 12:12 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-09-09 12:12 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-09-09 12:12 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-09-09 12:12 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-09-09 12:12 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-09-09 12:12 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-09-09 12:12 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-09-09 12:12 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-09-09 12:12 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-09-09 12:12 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-09-09 12:12 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-09-09 12:12 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-09-09 12:12 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-09-09 12:12 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-09-09 12:12 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-09-09 12:12 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-09-09 12:12 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-09-09 12:12 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-09-09 12:12 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-09-09 12:12 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll 2015-09-09 12:12 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-09-09 12:12 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2015-09-09 12:12 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2015-09-09 12:12 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2015-09-09 12:12 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2015-09-09 12:12 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2015-09-09 12:12 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2015-09-09 12:12 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2015-09-09 12:12 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2015-09-09 12:12 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2015-09-09 12:12 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2015-09-09 12:12 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2015-09-09 00:16 - 2015-09-09 00:16 - 00006390 _____ C:\Users\Mister X\Documents\cc_20150909_001639.reg 2015-09-04 21:42 - 2015-09-04 21:42 - 00000000 ____D C:\Users\Mister X\AppData\Roaming\WebApp 2015-09-04 21:41 - 2015-09-04 21:41 - 00000000 ____D C:\Users\Mister X\AppData\Local\Packages 2015-09-04 21:38 - 2015-09-04 21:38 - 00002172 _____ C:\Users\Public\Desktop\CyberLink PowerDVD 10.lnk 2015-09-04 21:38 - 2015-09-04 21:38 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 10 2015-09-04 21:33 - 2015-09-04 21:33 - 00000000 ____D C:\ProgramData\install_clap 2015-09-03 22:58 - 2015-09-03 22:58 - 00000000 ___HD C:\ProgramData\CanonIJMIG 2015-09-02 23:36 - 2015-09-09 23:36 - 00000000 ____D C:\Users\Mister X\AppData\Roaming\Canon 2015-09-02 23:36 - 2015-09-02 23:36 - 00000000 ___HD C:\ProgramData\CanonIJQuickMenu 2015-09-02 23:17 - 2015-09-02 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2900 series Benutzerregistrierung 2015-09-02 23:17 - 2015-09-02 23:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2900 series 2015-09-02 23:17 - 2014-03-18 05:00 - 00408576 _____ (CANON INC.) C:\Windows\system32\CNMXLMCB.DLL 2015-09-02 23:17 - 2014-01-21 13:15 - 00336896 _____ (CANON INC.) C:\Windows\SysWOW64\CNC_CBL.dll 2015-09-02 23:17 - 2013-12-02 09:57 - 00088320 _____ C:\Windows\SysWOW64\CNC1780D.TBL 2015-09-02 23:17 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\Windows\SysWOW64\CNHMCA.dll 2015-09-02 23:16 - 2015-09-02 23:16 - 00000000 ____D C:\ProgramData\CanonIJWSpt 2015-09-02 23:14 - 2015-09-02 23:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG2900 series Manual 2015-09-02 23:09 - 2014-03-18 05:00 - 00406016 _____ (CANON INC.) C:\Windows\system32\CNMLMCB.DLL 2015-09-02 23:09 - 2014-02-04 15:29 - 00316928 _____ (CANON INC.) C:\Windows\system32\CNC_CBC.dll 2015-09-02 23:09 - 2014-02-04 15:29 - 00105984 _____ (CANON INC.) C:\Windows\system32\CNC_CBI.dll 2015-09-02 23:09 - 2014-01-21 13:16 - 00369664 _____ (CANON INC.) C:\Windows\system32\CNC_CBL.dll 2015-09-02 23:09 - 2013-12-02 09:57 - 00088320 _____ C:\Windows\system32\CNC1780D.TBL 2015-09-02 23:09 - 2008-08-25 18:02 - 00017920 _____ (CANON INC.) C:\Windows\system32\CNHMCA6.dll 2015-09-02 19:13 - 2015-09-03 02:55 - 00188751 _____ C:\Users\Mister X\Documents\kmw_site_uebersicht.ai 2015-09-02 17:34 - 2015-09-02 19:08 - 00179297 _____ C:\Users\Mister X\Documents\kmw_site.ai ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2015-10-02 12:55 - 2015-08-26 13:20 - 01302548 _____ C:\Windows\WindowsUpdate.log 2015-10-02 12:54 - 2009-07-14 06:45 - 00031504 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-10-02 12:54 - 2009-07-14 06:45 - 00031504 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-10-02 12:53 - 2013-10-11 16:45 - 00003926 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{4E6C006F-4833-4395-AC19-BDED3A2B2B1B} 2015-10-02 12:53 - 2013-06-14 01:39 - 00002427 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2015-10-02 12:53 - 2012-05-05 00:36 - 00002027 _____ C:\Users\Public\Desktop\Opera.lnk 2015-10-02 12:53 - 2012-05-04 21:58 - 00002618 _____ C:\Users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet-Explorer.lnk 2015-10-02 12:52 - 2010-11-21 08:50 - 00710502 _____ C:\Windows\system32\perfh007.dat 2015-10-02 12:52 - 2010-11-21 08:50 - 00154832 _____ C:\Windows\system32\perfc007.dat 2015-10-02 12:52 - 2009-07-14 07:13 - 01651750 _____ C:\Windows\system32\PerfStringBackup.INI 2015-10-02 12:45 - 2012-05-05 19:13 - 00000000 ____D C:\ProgramData\NVIDIA 2015-10-02 12:45 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-10-02 04:03 - 2012-05-04 21:58 - 00001627 _____ C:\Users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet-Explorer (64-bit).lnk 2015-10-02 03:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\TAPI 2015-10-02 03:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\zh-HK 2015-10-02 03:36 - 2012-05-04 23:19 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\uk-UA 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\tr-TR 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\th-TH 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sr-Latn-CS 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sppui 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sl-SI 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\sk-SK 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\ro-RO 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Recovery 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\ras 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\manifeststore 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\lv-LV 2015-10-02 03:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\lt-LT 2015-10-02 03:35 - 2010-11-21 08:49 - 00000000 ____D C:\Windows\SysWOW64\de 2015-10-02 03:35 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\InstallShield 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\icsxml 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\hr-HR 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\he-IL 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\et-EE 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\bg-BG 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\ar-SA 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\AdvancedInstallers 2015-10-02 03:35 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\zh-HK 2015-10-02 03:34 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\restore 2015-10-02 03:34 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\uk-UA 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\tr-TR 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\th-TH 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sr-Latn-CS 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sppui 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sl-SI 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sk-SK 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ro-RO 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Recovery 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ras 2015-10-02 03:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe 2015-10-02 03:33 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar 2015-10-02 03:33 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Portable Devices 2015-10-02 03:33 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2015-10-02 03:33 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender 2015-10-02 03:33 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker 2015-10-02 03:33 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System 2015-10-02 03:33 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Services 2015-10-02 03:28 - 2012-05-05 11:49 - 00000000 ____D C:\Program Files (x86)\lg_fwupdate 2015-10-02 03:26 - 2012-05-05 00:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-10-02 03:23 - 2012-05-05 14:18 - 00000000 ____D C:\Program Files (x86)\OpenOffice.org 3 2015-10-02 03:22 - 2012-05-05 14:24 - 00000000 ____D C:\Users\Mister X\AppData\Local\Nero 2015-10-02 03:22 - 2012-05-05 14:19 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice.org 3.3 2015-10-02 03:22 - 2012-05-05 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia 2015-10-02 03:22 - 2012-05-05 13:46 - 00000000 ___HD C:\ProgramData\CanonIJSolutionMenu 2015-10-02 03:22 - 2012-05-05 13:44 - 00000000 ___HD C:\ProgramData\CanonIJMyPrinter 2015-10-02 03:22 - 2012-05-05 13:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP4600 series Benutzerregistrierung 2015-10-02 03:22 - 2012-05-05 13:44 - 00000000 ____D C:\ProgramData\CanonIJPLM 2015-10-02 03:22 - 2012-05-05 13:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CD-LabelPrint 2015-10-02 03:22 - 2012-05-05 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP4600 series Manual 2015-10-02 03:22 - 2012-05-05 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP4600 series 2015-10-02 03:22 - 2012-05-05 11:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LG Tool Kit 2015-10-02 03:22 - 2012-05-05 11:26 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Blu-ray Disc Suite 2015-10-02 03:22 - 2012-05-05 11:24 - 00000000 ____D C:\ProgramData\CyberLink 2015-10-02 03:22 - 2012-05-05 00:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-10-02 03:22 - 2012-05-05 00:36 - 00000000 ____D C:\Program Files (x86)\Opera 2015-10-02 03:22 - 2012-05-05 00:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MailStore Home 2015-10-02 03:22 - 2012-05-05 00:35 - 00000000 ____D C:\ProgramData\firebird 2015-10-02 03:22 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-10-02 03:22 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar 2015-10-02 03:22 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2015-10-02 03:22 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2015-10-02 03:22 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2015-10-02 03:22 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-02 03:22 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-02 03:22 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-02 03:22 - 2009-07-14 05:20 - 00000000 ___RD C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-02 03:22 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-02 03:22 - 2009-07-14 05:20 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-02 03:21 - 2012-05-05 00:35 - 00000000 ____D C:\Users\Mister X\Documents\MailStore Home 2015-10-02 03:21 - 2012-05-04 21:58 - 00000000 ___RD C:\Users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-10-02 03:21 - 2012-05-04 21:58 - 00000000 ___RD C:\Users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-10-02 03:21 - 2012-05-04 21:58 - 00000000 ____D C:\Users\Mister X 2015-10-02 03:21 - 2010-11-21 09:00 - 00000000 ___RD C:\Users\Public\Recorded TV 2015-10-02 03:21 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\addins 2015-10-02 03:21 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Public\Libraries 2015-10-02 03:20 - 2012-05-04 23:19 - 00000000 ____D C:\Windows\Chipset 2015-10-02 03:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME 2015-10-02 03:20 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Cursors 2015-10-02 03:19 - 2012-05-04 22:51 - 00000000 ____D C:\Windows\Panther 2015-10-02 03:19 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages 2015-10-02 03:19 - 2009-07-14 05:20 - 00000000 __RSD C:\Windows\Media 2015-10-02 03:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing 2015-10-02 03:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Registration 2015-10-02 03:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-10-02 03:19 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\L2Schemas 2015-10-02 03:18 - 2010-11-21 09:00 - 00000000 ____D C:\Windows\ShellNew 2015-10-02 03:16 - 2010-11-21 08:49 - 00000000 ____D C:\Windows\system32\de 2015-10-02 03:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism 2015-10-02 03:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com 2015-10-02 03:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\bg-BG 2015-10-02 03:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ar-SA 2015-10-02 03:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Msdtc 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\manifeststore 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\lv-LV 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\lt-LT 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\icsxml 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\ias 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\hr-HR 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\he-IL 2015-10-02 03:14 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\et-EE 2015-10-01 23:28 - 2012-06-16 20:48 - 00018160 _____ (G Data Software) C:\Windows\system32\Drivers\GdPhyMem.sys 2015-10-01 22:29 - 2014-01-25 19:24 - 00000000 ____D C:\Program Files (x86)\McAfee 2015-10-01 22:29 - 2014-01-25 19:15 - 00000000 ____D C:\ProgramData\McAfee 2015-10-01 22:28 - 2014-01-25 19:16 - 00000000 ____D C:\Program Files\Common Files\McAfee 2015-10-01 20:54 - 2012-05-06 03:50 - 00000000 ____D C:\ProgramData\G DATA 2015-10-01 20:43 - 2012-05-06 03:50 - 00000000 ____D C:\Program Files (x86)\G Data 2015-10-01 14:46 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk 2015-10-01 04:20 - 2013-02-06 04:03 - 00000000 ____D C:\Windows\pss 2015-10-01 02:01 - 2015-04-18 23:24 - 00000000 ____D C:\Users\Mister X\AppData\Roaming\vlc 2015-09-30 03:40 - 2012-06-03 20:24 - 00000132 _____ C:\Users\Mister X\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen 2015-09-29 13:24 - 2013-01-04 02:25 - 00000000 ____D C:\ProgramData\VSO 2015-09-25 23:05 - 2013-06-13 02:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-09-25 15:06 - 2013-06-13 02:15 - 00003824 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-09-25 15:06 - 2012-05-05 14:31 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-09-25 15:06 - 2012-05-05 14:31 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-09-19 17:31 - 2014-12-22 19:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexware 2015-09-19 17:29 - 2015-08-24 02:42 - 00000049 _____ C:\Windows\SysWOW64\ScrRecX.log 2015-09-19 13:37 - 2013-06-16 22:56 - 00000028 _____ C:\Windows\Robota.INI 2015-09-17 17:08 - 2014-11-02 16:34 - 00000000 ____D C:\Users\Mister X\Documents\VSO Downloader 2015-09-11 05:36 - 2014-03-25 20:39 - 00000000 ____D C:\Users\Mister X\AppData\Local\Thunderbird 2015-09-11 01:32 - 2014-12-22 19:58 - 00000000 ____D C:\Program Files (x86)\Lexware 2015-09-09 13:49 - 2014-03-03 17:06 - 00000000 ____D C:\Users\Mister X\AppData\Local\Windows Live 2015-09-09 13:48 - 2014-03-03 18:13 - 00000000 ____D C:\Users\Mister X\Tracing 2015-09-09 13:47 - 2014-03-03 17:07 - 00002496 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk 2015-09-09 13:47 - 2014-03-03 17:07 - 00001452 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk 2015-09-09 13:47 - 2014-03-03 17:07 - 00001336 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk 2015-09-09 13:47 - 2014-03-03 17:07 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live 2015-09-09 13:46 - 2014-03-03 17:07 - 00000000 ____D C:\Program Files\Windows Live 2015-09-09 13:46 - 2014-03-03 17:07 - 00000000 ____D C:\Program Files (x86)\Windows Live 2015-09-09 12:26 - 2014-01-26 02:02 - 00000000 ____D C:\Windows\system32\MRT 2015-09-09 00:11 - 2012-07-15 13:24 - 00000000 ____D C:\Users\Mister X\AppData\Roaming\Skype 2015-09-09 00:11 - 2012-07-15 13:24 - 00000000 ____D C:\ProgramData\Skype 2015-09-08 21:22 - 2012-05-17 19:10 - 00000069 _____ C:\Windows\NeroDigital.ini 2015-09-04 21:36 - 2012-05-05 11:32 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2015-09-04 21:36 - 2012-05-05 11:32 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2015-09-04 21:36 - 2012-05-05 11:32 - 00029480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll 2015-09-03 08:49 - 2012-05-18 12:59 - 00001456 _____ C:\Users\Mister X\AppData\Local\Adobe Für Web speichern 13.0 Prefs 2015-09-03 03:11 - 2015-08-23 05:04 - 00022451 _____ C:\Users\Mister X\Documents\keramikmuseum.odt ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2012-10-29 00:36 - 2015-07-09 12:59 - 0000030 _____ () C:\Program Files (x86)\Exiferupdate.ini 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Mister X\AppData\Roaming\05EXr5QVrjd 2013-01-24 14:21 - 2013-01-24 14:21 - 0000132 _____ () C:\Users\Mister X\AppData\Roaming\Adobe CS6-GIF-Format - Voreinstellungen 2012-06-03 20:24 - 2015-09-30 03:40 - 0000132 _____ () C:\Users\Mister X\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen 2015-10-01 20:45 - 2015-10-01 20:45 - 0000000 _____ () C:\Users\Mister X\AppData\Roaming\gdfw.log 2015-10-01 20:44 - 2015-10-01 20:44 - 0000779 _____ () C:\Users\Mister X\AppData\Roaming\gdscan.log 2013-01-04 02:25 - 2013-01-04 02:25 - 0099384 _____ () C:\Users\Mister X\AppData\Roaming\inst.exe 2013-01-04 02:25 - 2013-01-04 02:25 - 0007859 _____ () C:\Users\Mister X\AppData\Roaming\pcouffin.cat 2013-01-04 02:25 - 2013-01-04 02:25 - 0001167 _____ () C:\Users\Mister X\AppData\Roaming\pcouffin.inf 2013-01-04 02:25 - 2013-01-04 02:25 - 0000055 _____ () C:\Users\Mister X\AppData\Roaming\pcouffin.log 2013-01-04 02:25 - 2013-01-04 02:25 - 0082816 _____ (VSO Software) C:\Users\Mister X\AppData\Roaming\pcouffin.sys 2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\Mister X\AppData\Roaming\yWkxaghNYzI35bJqSRoqpdGi7lZ 2012-05-18 12:59 - 2015-09-03 08:49 - 0001456 _____ () C:\Users\Mister X\AppData\Local\Adobe Für Web speichern 13.0 Prefs 2012-12-18 21:35 - 2014-01-30 03:48 - 0032256 _____ () C:\Users\Mister X\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2014-03-17 09:39 - 2014-03-17 09:39 - 0000096 _____ () C:\Users\Mister X\AppData\Local\fusioncache.dat 2014-04-12 03:24 - 2014-04-12 03:24 - 0007608 _____ () C:\Users\Mister X\AppData\Local\Resmon.ResmonCfg 2015-01-25 02:10 - 2015-01-25 02:10 - 0000003 _____ () C:\Users\Mister X\AppData\Local\updater.log 2015-01-25 02:10 - 2015-04-24 01:01 - 0000424 _____ () C:\Users\Mister X\AppData\Local\UserProducts.xml Einige Dateien in TEMP: ==================== C:\Users\Mister X\AppData\Local\Temp\4824.exe C:\Users\Mister X\AppData\Local\Temp\McCSPInstall.dll C:\Users\Mister X\AppData\Local\Temp\mccspuninstall.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2015-09-24 11:06 ==================== Ende von FRST.txt ============================ |
02.10.2015, 12:48 | #4 |
| Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab und Addition.txt Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:30-09-2015 durchgeführt von Mister X (2015-10-02 13:01:11) Gestartet von C:\Users\Mister X\Downloads Windows 7 Professional Service Pack 1 (X64) (2012-05-04 19:58:15) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-1723568181-2914276131-4058959280-500 - Administrator - Disabled) ASPNET (S-1-5-21-1723568181-2914276131-4058959280-1004 - Limited - Enabled) Gast (S-1-5-21-1723568181-2914276131-4058959280-501 - Limited - Disabled) Mister X (S-1-5-21-1723568181-2914276131-4058959280-1000 - Administrator - Enabled) => C:\Users\Mister X ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: G DATA TOTAL PROTECTION (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0} AS: G DATA TOTAL PROTECTION (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} FW: G DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH) Acronis True Image Home (HKLM-x32\...\{C2F1F96A-057E-5819-B52E-FEA1D1D2933B}) (Version: 13.0.5055 - Acronis) Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated) Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated) Adobe Illustrator 10 (HKLM-x32\...\{412033BC-44CF-48D9-B813-4B835101F4D3}) (Version: 10 - Adobe Systems, Inc.) Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version: 3.0 - Adobe Systems, Inc.) AIDA64 Extreme Edition v2.20 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 2.20 - FinalWire Ltd.) Any Video Converter 5.8.3 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com) AnySend (HKLM-x32\...\ASPackage) (Version: - CMI Limited) <==== ACHTUNG Call of Duty Black Ops GERMAN Uncut 1.00 (HKLM-x32\...\Call of Duty Black Ops GERMAN Uncut 1.00) (Version: - ) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.6.0.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.10.15 - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.2.0 - Canon Inc.) Canon MG2900 series Benutzerregistrierung (HKLM-x32\...\Canon MG2900 series Benutzerregistrierung) (Version: - *Canon Inc.) Canon MG2900 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG2900_series) (Version: 1.00 - Canon Inc.) Canon MG2900 series On-screen Manual (HKLM-x32\...\Canon MG2900 series On-screen Manual) (Version: 7.7.1 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.0.0 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.0.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.2.1 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.4.0 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5143 - CDBurnerXP) ConvertHelper 3.1.1 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF52}}_is1) (Version: - DownloadHelper) CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5509.52 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DreamMail 4.6 (HKLM-x32\...\DreamMail 4.6) (Version: 4.6.9.2 - DreamStudio) Exifer (HKLM-x32\...\Exifer_is1) (Version: - Friedemann Schmidt) FileZilla Client 3.11.0.2 (HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\FileZilla Client) (Version: 3.11.0.2 - Tim Kosse) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.2.4.1230 - DVDVideoSoft Ltd.) G DATA TOTAL PROTECTION (HKLM-x32\...\{2A1FF304-D778-49F1-B340-E4BF4CDA2EB0}) (Version: 25.1.0.8 - G DATA Software AG) GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy) globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ACHTUNG GNU Backgammon (MAIN branch, 20121023 code) (HKLM-x32\...\GNU Backgammon_is1) (Version: - Free Software Foundation) High-Definition Video Playback (x32 Version: 7.1.13900.47.0 - Nero AG) Hidden HiSuite (HKLM-x32\...\Hi Suite) (Version: 32.610.28.00.06 - Huawei Technologies Co.,Ltd) InovisionViewer (HKLM-x32\...\InovisionViewer) (Version: - NEXUS_INOVIT_GmbH) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation) Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation) Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation) Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Lexware Info Service (HKLM-x32\...\{85BF9FDB-BD5B-407C-9CAE-3542E5164783}) (Version: 4.00.00.0075 - Haufe-Lexware GmbH & Co.KG) LG Burning Tool (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.2.6009 - CyberLink Corp.) LG Burning Tool (x32 Version: 6.2.6009 - CyberLink Corp.) Hidden LG CyberLink BD Advisor (HKLM-x32\...\{2D2D8FE2-605C-4D3C-B706-36E981E7EEF0}) (Version: 2.0.4606 - CyberLink Corp.) LG CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3624 - CyberLink Corp.) LG CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden LG CyberLink Media Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2820 - CyberLink Corp.) LG CyberLink Media Suite (x32 Version: 8.0.2820 - CyberLink Corp.) Hidden LG CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1622_37397b - CyberLink Corp.) LG CyberLink MediaEspresso (x32 Version: 6.5.1622_37397b - CyberLink Corp.) Hidden LG CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.2820a - CyberLink Corp.) LG CyberLink PowerProducer (x32 Version: 5.0.2.2820a - CyberLink Corp.) Hidden LG Tool Kit (HKLM-x32\...\{6179550A-3E7C-499E-BCC9-9E8113E0A285}) (Version: 10.01.0712.01 - ) Lightshot-5.2.1.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.1.1 - Skillbrains) Macromedia Dreamweaver 8 (HKLM-x32\...\{44025BD7-AD10-4769-99AE-6378FD0303D6}) (Version: 8.0.0.2751 - Macromedia) Macromedia Extension Manager (HKLM-x32\...\{0F022A2E-7022-497D-90A5-0F46746D8275}) (Version: 1.7.270 - Ihr Firmenname) MAGIX Goya burnR (MSI) (HKLM-x32\...\MAGIX_{A5473280-7202-4688-81AB-9B31BAAEE3AE}) (Version: 4.3.2.0 - MAGIX AG) MAGIX Goya burnR (MSI) (Version: 4.3.2.0 - MAGIX AG) Hidden MAGIX Music Maker MX (HKLM-x32\...\MAGIX_{41A982A3-9841-4E71-BBF0-0464C7932AD5}) (Version: 18.0.4.1 - MAGIX AG) MAGIX Music Maker MX (Version: 18.0.4.1 - MAGIX AG) Hidden MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{7B140F3C-CAC0-45A4-99F4-14CF62B515BD}) (Version: 7.0.2.6 - MAGIX AG) MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden MAGIX Video deluxe MX (HKLM-x32\...\MAGIX_{DA38EC64-4D83-4E46-83CA-C0D1175921DC}) (Version: 11.0.6.0 - MAGIX AG) MAGIX Video deluxe MX (Version: 11.0.6.0 - MAGIX AG) Hidden MailStore Home 5.0.1.6919 (HKLM-x32\...\MailStore Home_universal1) (Version: 5.0.1.6919 - deepinvent Software GmbH) Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\...\OneDriveSetup.exe) (Version: 17.3.1171.0714 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation) Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 41.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla) Mozilla Thunderbird 38.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.2.0 (x86 de)) (Version: 38.2.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Nero 10 Movie ThemePack 1 (HKLM-x32\...\{43FBAB46-5969-4200-9958-1FF81FEE506F}) (Version: 10.2.10000.11.0 - Nero AG) Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.2.10500.1.102 - Nero AG) Nero CoverDesigner 10 (HKLM-x32\...\{FCF00A6E-FB58-477A-ABE9-232907105521}) (Version: 5.2.11400.11.100 - Nero AG) Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.2.10500.2.100 - Nero AG) Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.11900.20.100 - Nero AG) Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.2.10400.5.100 - Nero AG) Nero MediaHub 10 (HKLM-x32\...\{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}) (Version: 1.2.13200.33.100 - Nero AG) Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{ADEF1F0B-635E-4041-B50F-A510C1B4D2C5}) (Version: 10.5.10400 - Nero AG) Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.2.10800.9.100 - Nero AG) Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG) Noticeboard Renew (HKLM-x32\...\SoftwareUpdater) (Version: 1.0.0.0 - Noticeboard Renew) NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.82 - NVIDIA Corporation) NVIDIA GeForce Experience 2.5.13.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.13.6 - NVIDIA Corporation) NVIDIA Grafiktreiber 353.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.82 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Update 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 2.5.14.5 - NVIDIA Corporation) OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation) Opera 12.16 (HKLM-x32\...\Opera 12.16.1860) (Version: 12.16.1860 - Opera Software ASA) oursurfing (HKLM-x32\...\oursurfing) (Version: 1.0.0.1 - ) PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden QuarkXPress Passport 5.01 (HKLM-x32\...\{A7BF5297-3E74-11D5-B00F-00104B398D77}) (Version: 5.01.0000 - Quark Inc.) QuickSteuer 2015 (HKLM-x32\...\{49E0E0CA-C817-49C8-861B-B766599BCB96}) (Version: 20.38.173 - Haufe-Lexware GmbH & Co.KG) Ralink RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.31.3 - Ralink) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6526 - Realtek Semiconductor Corp.) Results Hub (HKLM-x32\...\Results Hub) (Version: 2.0.5738.22871 - Results Hub) <==== ACHTUNG RICOH SP 100SU/100SF TWAIN/WIA (HKLM-x32\...\{2BCAAC31-7AE8-4412-AD17-4804F58929FD}) (Version: 1.00.0000 - RICOH) Serif DrawPlus X3 (HKLM-x32\...\{FD1B2E34-D0B7-4E8C-8CB9-435F545C776C}) (Version: 10.0.4.023 - Serif (Europe) Ltd) Setup (HKLM-x32\...\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}) (Version: - ) SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden Smart Organizing Monitor (HKLM-x32\...\{E4094BC9-2554-4E57-B4A0-8584DC433895}) (Version: 1.00.0000 - RICOH) Splash PRO EX (HKLM-x32\...\Mirillis Splash PRO EX) (Version: 1.13.2 - Mirillis) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) StreamTransport version: 1.0.2.2171 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version: - ) Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden Vgrabber v1 Toolbar for IE (HKLM-x32\...\IECT3268926) (Version: 6.23.0.9 - Vgrabber v1) <==== ACHTUNG Video Downloader version 2.0 (HKLM-x32\...\Video Downloader_is1) (Version: 2.0 - ) VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: - Elaborate Bytes) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.0.0.30 - VSO-Software SARL) VSO Downloader 4.2.1.1 (HKLM-x32\...\{A0D0BA9E-F1A6-44FF-AA14-03ED96B3D56D}_is1) (Version: 4.2.1.1 - VSO Software) VSO EVE Network Driver version 1.0.0.27 (HKLM-x32\...\{AC0AFDC9-4FB1-44FE-B3E1-82300BF3D756}_is1) (Version: 1.0.0.27 - VSO Software) Webocton - Scriptly 0.8.95.6 (HKLM-x32\...\Webocton - Scriptly_is1) (Version: 0.8.95.6 - Webocton) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - CACE Technologies) Xaldon WebSpider2 (HKLM-x32\...\WebSpider2) (Version: - ) XMedia Recode Version 3.1.8.8 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.8.8 - XMedia Recode) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Wiederherstellungspunkte ========================= 02-10-2015 12:51:33 Windows Update ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2015-10-01 17:37 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 www.007guard.com 127.0.0.1 007guard.com 127.0.0.1 008i.com 127.0.0.1 www.008k.com 127.0.0.1 008k.com 127.0.0.1 www.00hq.com 127.0.0.1 00hq.com 127.0.0.1 010402.com 127.0.0.1 www.032439.com 127.0.0.1 032439.com 127.0.0.1 www.0scan.com 127.0.0.1 0scan.com 127.0.0.1 1000gratisproben.com 127.0.0.1 www.1000gratisproben.com 127.0.0.1 1001namen.com 127.0.0.1 www.1001namen.com 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 www.1-2005-search.com 127.0.0.1 1-2005-search.com 127.0.0.1 123fporn.info 127.0.0.1 www.123fporn.info 127.0.0.1 123haustiereundmehr.com 127.0.0.1 www.123haustiereundmehr.com 127.0.0.1 123moviedownload.com Da befinden sich 1000 zusätzliche Einträge. ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0D2BC335-1F22-4882-BD61-3CA20396C638} - System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-5 => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-5.exe <==== ACHTUNG Task: {113C62C4-97C4-4B0A-809D-A4EED66BC62E} - System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-5_user => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-5.exe <==== ACHTUNG Task: {1B63AC1C-8054-4C3E-A683-B8861C0E4E81} - System32\Tasks\elbyExecuteWithUAC => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ExecuteWithUAC.exe [2008-06-27] () Task: {242736D0-BF5E-4F92-9885-8EF166620C15} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.) Task: {2EE10827-39ED-4368-A5CC-9ADAAF17646D} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ACHTUNG Task: {341A83D8-8615-4F8A-9452-4D5BAC25E17E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {360D4109-90CE-41F9-B6EF-DA54B2097A08} - System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-5 => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-5.exe <==== ACHTUNG Task: {4038FC99-BD04-42C5-A0D1-53C51E4B0530} - System32\Tasks\AdobeAAMUpdater-1.0-MisterX-PC-Mister X => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated) Task: {403A2E0C-1F98-4A02-B834-ADB3A6552A27} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd) Task: {42A4285B-BC38-4C10-ABFC-9CBAA3E1DA4D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.) Task: {46CECD4A-BB44-4692-BBDD-52F69D0ADBD2} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo) Task: {471494A0-8218-4EA1-B093-3841B42001D4} - System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-10_user => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-10.exe <==== ACHTUNG Task: {4CF4FA2F-FF75-4617-853C-83D368E31B8F} - System32\Tasks\MyBrowser => C:\Program Files (x86)\MyBrowser\MyBrowser\Application\utility.exe Task: {4E3ADC8E-3CFD-4D8C-806F-4BF0478DA186} - System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-5_user => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-5.exe <==== ACHTUNG Task: {510FDCF3-BBD1-4D45-AC81-76770E4ADD1E} - System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-7 => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-7.exe <==== ACHTUNG Task: {529CFDA2-09A3-41C3-B106-B4A7D6130D4D} - System32\Tasks\{F70F554E-823F-4846-A16C-E146FA9FED4D} => C:\Users\Mister X\Downloads\webcam1051enu.exe Task: {5C378F61-58D3-493C-A799-406525102C11} - System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-11 => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-11.exe <==== ACHTUNG Task: {60C87FAA-270F-4176-BAAE-686BFA8627E9} - System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-10_user => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-10.exe <==== ACHTUNG Task: {6188C386-D76F-4C56-8463-E0B0998520F9} - System32\Tasks\{67FD7477-B332-45BB-8F37-1CC8789B3E8A} => pcalua.exe -a "C:\Users\Mister X\Downloads\streamtransport_setup(1).exe" -d "C:\Users\Mister X\Downloads" Task: {6188FE5A-26C7-4637-858C-6346BE63E195} - System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-4 => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-4.exe <==== ACHTUNG Task: {7264527B-0F41-406D-9609-3E8769436F50} - System32\Tasks\{7048A1FA-4661-40AE-A65F-374C3454CF42} => C:\Users\Mister X\Downloads\webcam1051enu.exe Task: {7CEE1A2F-05E8-4052-BF2B-9FE482357E57} - System32\Tasks\{E6F6D793-9989-4E1E-9F76-A486E3261E6F} => pcalua.exe -a "C:\Users\Mister X\Desktop\wace22.exe" -d "C:\Users\Mister X\Desktop" Task: {7EE58A64-6B80-479E-865B-200B1C09AAE7} - System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-5 => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-5.exe <==== ACHTUNG Task: {88BF3F99-B3D0-4CD6-94E8-9C5EB056D348} - System32\Tasks\{EAE53864-7C71-4BEB-9A86-D8761662C3D8} => D:\KNIE_Re_MRT_2012\w9xpopen.exe [2008-12-23] () Task: {8C540E9E-75AE-405E-8314-F7E3A8C6862C} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ACHTUNG Task: {8FE5184E-7152-430A-9401-5A9181CE6BFB} - System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-5_user => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-5.exe <==== ACHTUNG Task: {933EF218-F00F-4A68-B6CA-EED7C8A6365C} - System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-1-6 => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-1-6.exe <==== ACHTUNG Task: {98A88145-DA75-49CB-8B5B-7A9B91AF850A} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {A1187065-2244-4484-AA08-2A8439A77D69} - System32\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-6 => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-6.exe <==== ACHTUNG Task: {A5FE5E48-F494-4768-9D15-B9B2CFE9B2AB} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser Task: {A8E9AA4D-5DCB-42D3-8FB8-EE18E0CDDD9B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated) Task: {AE1B3EFF-4ADF-4279-BAF5-48E113315CFD} - System32\Tasks\autostart => C:\Program Files\McAfee.com\Agent\mcagent.exe Task: {B7735622-002B-4FB6-980E-597D4CABFA85} - System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-10_user => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-10.exe <==== ACHTUNG Task: {BBDCD530-08DC-43ED-8C7F-701F4B1AE690} - System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-1-6 => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-1-6.exe <==== ACHTUNG Task: {C147CEE6-BD4E-4299-929D-AB1FDB3F9C84} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ACHTUNG Task: {C316E537-BC56-455F-BB95-5EA5853C4D01} - System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-11 => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-11.exe <==== ACHTUNG Task: {C93B961C-B2BD-4692-929E-35A90173C959} - System32\Tasks\{3565F33F-597C-4DF4-A68D-C8A2BCA6E195} => pcalua.exe -a E:\Windows\SETUP.EXE -d E:\Windows Task: {CD0227F5-2509-4FB3-83C4-55BDA29E788C} - System32\Tasks\SMW_UpdateTask_Time_3731373337353235312d5a4a6c414a34572a506c415a => Wscript.exe //B "C:\ProgramData\SearchModule\smhe.js" smu.exe /invoke /f:check_services /l:0 <==== ACHTUNG Task: {CE29351E-C32C-4ADD-865C-CEDE9C9802B0} - System32\Tasks\SmartWeb Upgrade Trigger Task => C:\Users\Mister X\AppData\Local\SmartWeb\SmartWebHelper.exe <==== ACHTUNG Task: {CE82FCAB-09F7-4A78-954D-95040D2F6005} - System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-1-7 => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-1-7.exe <==== ACHTUNG Task: {D0289931-028F-4453-A1F4-7A66C67A208A} - System32\Tasks\{56029DB7-743F-464E-8204-F38B71E89A3F} => C:\Users\Mister X\Downloads\webcam1051enu.exe Task: {D8E13938-0D32-4066-B648-9BA2D365B125} - System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-1-7 => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-1-7.exe <==== ACHTUNG Task: {D92E1671-986F-4169-A056-57CB4F1444CD} - System32\Tasks\IBUpd => C:\Users\Mister Task: {DA9F1424-58A4-445D-B2F5-BE7799D2353E} - System32\Tasks\Smp => C:\Program Files\Common Files\Goobzo\GBUpdate\smp.exe [2015-09-06] () <==== ACHTUNG Task: {DBFC60DF-86E6-4B88-B470-FD09013AD693} - System32\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-4 => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-4.exe <==== ACHTUNG Task: {DD575A9B-EFD3-4D0E-BC71-6966620466FC} - System32\Tasks\{37241BDB-B7C3-4E13-B2C4-3C9AF655C05D} => C:\Users\Mister X\Downloads\webcam1051enu.exe Task: {E3223DB5-A272-4DCB-83E5-BA0A2AA7663D} - System32\Tasks\{5138BED0-3D20-4629-81A1-D476CE726F83} => pcalua.exe -a "C:\Users\Mister X\AppData\Roaming\webssearches\UninstallManager.exe" -c -ptid=amt -simple=0 <==== ACHTUNG Task: {E85E3411-C034-448B-AE4B-DBDAA4A2BA53} - System32\Tasks\{16804AF4-1515-407C-88C4-C6C142494945} => pcalua.exe -a "N:\Wolfenstein The Old Blood German Subbed Edition\WOLF.TOB.GSE.exe" -d "N:\Wolfenstein The Old Blood German Subbed Edition" Task: {EE4171D5-DF29-4D27-9D17-8A6D861DEE37} - System32\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-4 => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-4.exe <==== ACHTUNG Task: {F803DAD4-DA3C-44EE-B457-0BAD78EF3DDD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-25] (Adobe Systems Incorporated) Task: {FFE9CEC6-6AA5-4922-9B9D-F75CBB8E3930} - System32\Tasks\ngs3012 => C:\PROGRA~2\FAST-S~1\ngs3012.exe (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-6.job => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-6.exe <==== ACHTUNG Task: C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-7.job => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-1-7.exe <==== ACHTUNG Task: C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-10_user.job => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-10.exe <==== ACHTUNG Task: C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-11.job => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-11.exe <==== ACHTUNG Task: C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-4.job => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-4.exe <==== ACHTUNG Task: C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-5.job => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-5.exe <==== ACHTUNG Task: C:\Windows\Tasks\2d2ac014-d1e2-430f-bc88-2981c665d09a-5_user.job => C:\Program Files (x86)\CinemaPlus_1.3dV01.10\2d2ac014-d1e2-430f-bc88-2981c665d09a-5.exe <==== ACHTUNG Task: C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-1-6.job => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-1-6.exe <==== ACHTUNG Task: C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-1-7.job => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-1-7.exe <==== ACHTUNG Task: C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-10_user.job => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-10.exe <==== ACHTUNG Task: C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-4.job => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-4.exe <==== ACHTUNG Task: C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-5.job => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-5.exe <==== ACHTUNG Task: C:\Windows\Tasks\80bb841b-2be1-42ab-834a-19b84176cf26-5_user.job => C:\Program Files (x86)\CinePlus-1.44V30.09\80bb841b-2be1-42ab-834a-19b84176cf26-5.exe <==== ACHTUNG Task: C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-1-6.job => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-1-6.exe <==== ACHTUNG Task: C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-1-7.job => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-1-7.exe <==== ACHTUNG Task: C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-10_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-10.exe <==== ACHTUNG Task: C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-11.job => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-11.exe <==== ACHTUNG Task: C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-4.job => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-4.exe <==== ACHTUNG Task: C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-5.job => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-5.exe <==== ACHTUNG Task: C:\Windows\Tasks\9fb50a12-a890-4a72-983e-de779a23976f-5_user.job => C:\Program Files (x86)\CinemaPlus-3.2cV30.09\9fb50a12-a890-4a72-983e-de779a23976f-5.exe <==== ACHTUNG Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ACHTUNG Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ACHTUNG Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ACHTUNG Task: C:\Windows\Tasks\MyBrowser.job => C:\Program Files (x86)\MyBrowser\MyBrowser\Application\utility.exe ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2012-05-05 19:12 - 2015-08-07 02:44 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2008-10-24 16:35 - 2008-10-24 16:35 - 00128296 _____ () C:\Program Files (x86)\Lexware\AAVUpdateManager\aavus.exe 2015-01-31 00:51 - 2014-09-05 09:40 - 00138272 _____ () C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe 2015-01-31 00:51 - 2014-09-05 09:40 - 00219680 _____ () C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe 2012-05-05 13:44 - 2013-06-28 17:28 - 00084616 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2014-03-16 19:56 - 2014-03-16 19:56 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2015-06-16 11:17 - 2015-06-16 11:17 - 00382584 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll 2015-10-01 03:17 - 2015-10-02 12:46 - 00488696 _____ () C:\ProgramData\AppMgr3.32.9611035\AppMgr.exe 2015-10-01 22:45 - 2015-10-01 22:45 - 00309496 _____ () C:\ProgramData\AppMgr3.32.9611035\1\plugin.exe 2015-06-02 17:18 - 2015-06-02 17:18 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll 2015-10-01 04:24 - 2015-09-30 12:36 - 03323536 _____ () C:\Users\Mister X\AppData\Local\dply_en_036020102\updply_en_036020102.exe 2015-04-08 21:53 - 2015-04-08 21:53 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll 2015-10-01 15:46 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-10-01 15:46 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2015-10-01 15:46 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2015-10-01 15:46 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2015-10-01 15:46 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2015-04-14 14:17 - 2015-08-27 02:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-09-24 09:38 - 2015-09-24 09:38 - 17592008 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com Da befinden sich 7868 mehr eingeschränkte Seiten. ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-1723568181-2914276131-4058959280-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mister X\Pictures\computer-is-on-5403.bmp DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) mpsdrv Firewall Dienst läuft nicht. MpsSvc Firewall Dienst läuft nicht. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\startupfolder: C:^Users^Mister X^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^crossbrowse.lnk => C:\Windows\pss\crossbrowse.lnk.Startup MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin MSCONFIG\startupreg: BDRegion => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon MSCONFIG\startupreg: ccleaner => "C:\Program Files\CCleaner\CCleaner64.exe" /AUTO MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: Comrade.exe => C:\Program Files (x86)\GameSpy\Comrade\Comrade.exe MSCONFIG\startupreg: G Data ASM => "C:\Program Files (x86)\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe" /autostart MSCONFIG\startupreg: LexwareInfoService => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe /autostart MSCONFIG\startupreg: LGODDFU => "C:\Program Files (x86)\lg_fwupdate\lgfw.exe" blrun MSCONFIG\startupreg: LicenseValidator => C:\Users\Mister X\AppData\Roaming\Macromedia\{EE92A787-13E4-4019-8F77-738386231E98}\LicenseValidator.exe MSCONFIG\startupreg: LightScribe Control Panel => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden MSCONFIG\startupreg: qihu.exe => "C:\Users\Mister X\AppData\Roaming\Ukdene\qihu.exe" MSCONFIG\startupreg: RemoteControl10 => "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe MSCONFIG\startupreg: TrayServer => C:\Program Files (x86)\MAGIX\Video_deluxe_MX\TrayServer_de.exe MSCONFIG\startupreg: TrueImageMonitor.exe => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe MSCONFIG\startupreg: UpdateP2GoShortCut => "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{59F44AC0-6CF8-484F-8CAC-1560935A9091}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{4C06B1AC-27B5-4004-BAB6-F42EA0A19110}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: swsedrvr_vt_1_10_0_25 Description: swsedrvr_vt_1_10_0_25 Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: swsedrvr_vt_1_10_0_25 Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Konnte Geräte nicht auflisten. Überprüfen Sie den "winmgmt" Dienst oder reparieren Sie den WMI. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (10/02/2015 12:46:38 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/02/2015 04:54:32 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/02/2015 04:44:40 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/02/2015 04:14:41 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/02/2015 03:59:49 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/02/2015 02:43:29 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/01/2015 11:32:51 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/01/2015 11:23:57 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/01/2015 10:32:38 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (10/01/2015 10:10:46 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Systemfehler: ============= Error: (10/02/2015 12:49:00 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Der Dienst "Heimnetzgruppen-Listener" wurde mit folgendem dienstspezifischem Fehler beendet: %%-2147023143. Error: (10/02/2015 12:48:01 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/02/2015 12:47:31 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/02/2015 12:47:30 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/02/2015 12:47:28 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/02/2015 12:47:26 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: 490@01010004 Error: (10/02/2015 12:47:25 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {7D1933CB-86F6-4A98-8628-01BE94C9A575} Error: (10/02/2015 12:46:39 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (10/02/2015 12:46:39 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 Error: (10/02/2015 12:46:38 PM) (Source: VDS Basic Provider) (EventID: 1) (User: ) Description: Unerwarteter Fehler. Fehlercode: D@01010004 CodeIntegrity: =================================== Date: 2015-09-20 00:48:23.220 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:23.216 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:23.212 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:23.156 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_96f694b33cfd42bf\werfault.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:22.189 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:22.183 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:22.177 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:22.070 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\x86_microsoft-windows-errorreportingcore_31bf3856ad364e35_10.0.10074.1_none_47662a2706182d6f\wermgr.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:19.037 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. Date: 2015-09-20 00:48:19.033 Description: Die Integrität der Datei "\Device\HarddiskVolume2\$Windows.~BT\Updates\Critical\8e08ca47-f6ba-409d-82de-698e324c0004\amd64_microsoft-windows-errorreportingfaults_31bf3856ad364e35_10.0.10074.1_none_f3153036f55ab3f5\werfault.exe" kann nicht geprüft werden, da das Signaturzertifikat gesperrt wurde. Erkundigen Sie sich beim Herausgeber, ob eine neue signierte Version des Kernelmoduls verfügbar ist. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i5-3450 CPU @ 3.10GHz Prozentuale Nutzung des RAM: 21% Installierter physikalischer RAM: 16339.59 MB Verfügbarer physikalischer RAM: 12795.95 MB Summe virtueller Speicher: 40913.79 MB Verfügbarer virtueller Speicher: 37025.63 MB ==================== Laufwerke ================================ Drive c: (os) (Fixed) (Total:142.68 GB) (Free:12.83 GB) NTFS Drive d: (daten) (Fixed) (Total:322.98 GB) (Free:202.03 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)] Drive e: (CANON_IJ) (CDROM) (Total:0.47 GB) (Free:0 GB) CDFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: CAFD5A7C) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=142.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=323 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ |
02.10.2015, 13:02 | #5 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Randvoll mit Müll Dann bitte jetzt Combofix ausführen: Scan mit Combofix
__________________ Logfiles bitte immer in CODE-Tags posten |
02.10.2015, 13:50 | #6 |
| Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Hallo Cosinus, - habe firewall und protection von GData ausgeschaltet - combofix gestartet -> gemeckert hat GData trotzdem über combofix? - nach der Meldung in der hier nach spybot gesucht und nichtz gefunden ? - Daraufhin habe ich über den Taskmanager combofix abgebrochen , lies sich nicht so wie gewohnt abbrechen (Kreuz oben rechts) PC lasse ich an - muss wegen dem Feiertag noch einkaufen und schaue das ich Spybot finde und deinstalliere , wird aber Abend werden. |
02.10.2015, 14:05 | #7 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Spybot ist eh völliger Murks. Runter damit...
__________________ Logfiles bitte immer in CODE-Tags posten |
02.10.2015, 20:48 | #8 |
| Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab hmmm... combifix ist durchgerannt PC ist automatisch neu gestartet combofix.txt Code:
ATTFilter ComboFix 15-10-01.01 - Mister X 02.10.2015 20:24:54.1.4 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.16340.13096 [GMT 2:00] ausgeführt von:: C:\Users\Mister X\Downloads\ComboFix.exe AV: G DATA TOTAL PROTECTION *Disabled/Updated* {545C8713-0744-B079-87F8-349A6D5C8CF0} FW: G DATA Personal Firewall *Disabled* {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} SP: G DATA TOTAL PROTECTION *Disabled/Updated* {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} SP: Spybot - Search and Destroy *Disabled/Updated* {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} folgender Dialog erscheint dann (musste den abtippen da mspaint.exe auch streikt) Der Datei ist kein Programm zu Ausführen dieser Aktion zugeordnet. Installieren Sie ein entsprechendes Programm, oder erstellen Sie in der Systemsteuerung unter Standardprogramme" ein Zuordnung, wenn bereits ein Programm installiert ist. Bei Installationen weigert sich der PC die *.exe auszuführen - hatte Opera angetestet. nach einer Zuordnung in der Systemsteuerung habe ich vergeblich gesucht. |
03.10.2015, 12:36 | #9 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Entweder lief cf nicht richtig durch oder du hast das Log nicht vollständig gepostet...
__________________ Logfiles bitte immer in CODE-Tags posten |
03.10.2015, 13:08 | #10 |
| Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Hallo Cosinus mehr logtext aus combofix habe ich leider nicht. Wenn ich combofix nochmal starten soll, wird es warscheinlich nicht starten und die Fehlermeldung "Der Datei ist kein Programm zu Ausführen dieser Aktion zugeordnet. Installieren Sie ein entsprechendes Programm, oder erstellen Sie in der Systemsteuerung unter Standardprogramme" ein Zuordnung, wenn bereits ein Programm installiert ist." ausspucken. Netscape habe ich irgendwie ausgetrickst, direkt starten geht nicht. Aber eine Index.html von HD aufrufen geht - und firefox startet wäre sonst garnicht online gekommen. Wenn ich combofix, nochmal starten soll - wie kann ich die Programm-Start-Probleme umgehen? folgendes ploppt auf bei Startversuchen von Programmen (mspaint.exe habe ich wie netscape über den Umweg einer Bilddatei geöffnet) |
03.10.2015, 13:11 | #11 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Rechner neustarten, cf neu runterladen und nochmal durchlaufen lassen
__________________ Logfiles bitte immer in CODE-Tags posten |
03.10.2015, 14:04 | #12 |
| Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab konnte combifix über Rechtscklick als "Admin ausführen" starten. ist durchgelaufen , die txt Datei ist 37,3KB groß; siehe unten Netscapes firefox ist liess sich ohne Umwege starten, andere Programme habe ich noch nicht angetestet. Combofix Logfile: Code:
ATTFilter ComboFix 15-10-01.01 - Mister X 03.10.2015 14:24:21.2.4 - x64 Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.16340.13838 [GMT 2:00] ausgeführt von:: c:\users\Mister X\Desktop\ComboFix.exe AV: G DATA TOTAL PROTECTION *Disabled/Updated* {545C8713-0744-B079-87F8-349A6D5C8CF0} FW: G*DATA Personal Firewall *Disabled* {6C670636-4D2B-B121-ACA7-9DAF938FCB8B} SP: G DATA TOTAL PROTECTION *Disabled/Updated* {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\Mister X\AppData\Roaming\Help\coredb\storage c:\users\Mister X\AppData\Roaming\inst.exe c:\windows\wininit.ini . ---- Vorheriger Suchlauf ------- . c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe c:\programdata\Tbccint c:\programdata\Tbccint\IE\CT3268926\configutaion.json c:\programdata\Tbccint\IE\CT3268926\SetupIcon.ico c:\programdata\Tbccint\IE\CT3268926\UninstallerUI.exe c:\programdata\Tbccint\Multi\CT3268926\configutaion.json c:\programdata\Tbccint\Multi\CT3268926\SetupIcon.ico c:\programdata\Tbccint\Multi\CT3268926\UninstallerUI.exe C:\uninstall.exe c:\users\Mister X\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini~ULIC41N5 c:\users\Mister X\AppData\Local\SmartWeb c:\users\Mister X\AppData\Local\SmartWeb\uninst.lnk c:\users\Mister X\AppData\Local\Tbccint c:\users\Mister X\AppData\Local\Tbccint\CT3268926\Vgrabber_v1AutoUpdateHelper.exe c:\users\Mister X\AppData\Local\Tbccint\CT3268926\Vgrabber_v1ToolbarHelper.exe c:\users\Mister X\AppData\Roaming\Esqo c:\users\Mister X\AppData\Roaming\Esqo\vowee.zuy c:\users\Mister X\AppData\Roaming\Gamo c:\users\Mister X\AppData\Roaming\Gamo\cyixa.xuo c:\users\Mister X\AppData\Roaming\Mysito c:\users\Mister X\AppData\Roaming\Mysito\opnea.isb c:\users\Mister X\AppData\Roaming\Neyq c:\users\Mister X\AppData\Roaming\Neyq\nuiki.ypi c:\users\Mister X\AppData\Roaming\Otpyyt c:\users\Mister X\AppData\Roaming\Otpyyt\orom.udd c:\users\Mister X\AppData\Roaming\Pegi c:\users\Mister X\AppData\Roaming\Pegi\econ.uwy c:\users\Mister X\AppData\Roaming\Ukmoa c:\users\Mister X\AppData\Roaming\Ukmoa\qeyv.tmp c:\users\Mister X\AppData\Roaming\Xoupa c:\users\Mister X\AppData\Roaming\Xoupa\xunob.xad c:\users\Mister X\AppData\Roaming\Zuuxu c:\users\Mister X\AppData\Roaming\Zuuxu\liuxy.deh c:\windows\IsUn0407.exe c:\windows\msdownld.tmp c:\windows\security\Database\tmp.edb c:\windows\SysWow64\Packet.dll c:\windows\SysWow64\pthreadVC.dll c:\windows\SysWow64\wpcap.dll . . ((((((((((((((((((((((((((((((((((((((( Treiber/Dienste ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_NPF -------\Service_npf . . ((((((((((((((((((((((( Dateien erstellt von 2015-09-03 bis 2015-10-03 )))))))))))))))))))))))))))))) . . 2015-10-03 12:35 . 2015-10-03 12:35 -------- d-----w- c:\users\Default\AppData\Local\temp 2015-10-03 12:28 . 2015-10-03 12:28 75888 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{297EFB6A-907C-4CB5-A444-84FF56A40165}\offreg.3220.dll 2015-10-02 12:31 . 2015-10-02 12:31 -------- d-----w- c:\users\Mister X\AppData\Roaming\OpenCandy 2015-10-02 10:58 . 2015-10-02 11:01 -------- d-----w- C:\FRST 2015-10-02 10:52 . 2015-08-31 22:45 11062400 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{297EFB6A-907C-4CB5-A444-84FF56A40165}\mpengine.dll 2015-10-02 01:55 . 2015-10-02 01:55 -------- d-----r- C:\acroldr 2015-10-01 21:28 . 2015-10-01 21:28 106272 ----a-w- c:\windows\system32\drivers\GRD.sys 2015-10-01 18:46 . 2015-10-02 00:40 98760 ----a-w- c:\windows\system32\drivers\TS4nt.sys 2015-10-01 18:46 . 2015-10-01 18:46 27648 ----a-w- c:\windows\system32\drivers\GDKBB64.sys 2015-10-01 18:46 . 2015-10-01 18:46 20992 ----a-w- c:\windows\system32\drivers\GDKBFlt64.sys 2015-10-01 18:45 . 2015-10-02 00:40 76288 ----a-w- c:\windows\system32\drivers\PktIcpt.sys 2015-10-01 18:45 . 2015-10-02 00:39 65024 ----a-w- c:\windows\system32\drivers\gdwfpcd64.sys 2015-10-01 18:45 . 2015-10-02 00:39 230912 ----a-w- c:\windows\system32\drivers\MiniIcpt.sys 2015-10-01 18:45 . 2015-10-02 00:39 125952 ----a-w- c:\windows\system32\drivers\HookCentre.sys 2015-10-01 18:45 . 2015-10-02 00:39 158720 ----a-w- c:\windows\system32\drivers\GDBehave.sys 2015-10-01 18:44 . 2015-10-01 18:44 -------- d-----w- c:\programdata\G DATA Software 2015-10-01 18:25 . 2015-10-01 18:25 -------- d-----w- c:\program files (x86)\System NotifierV01.10 2015-10-01 18:23 . 2015-10-02 18:16 -------- d-----w- c:\users\Mister X\AppData\Local\gmsd_de_005010102 2015-10-01 18:23 . 2015-10-01 23:29 -------- d-----w- c:\program files (x86)\gmsd_de_005010102 2015-10-01 15:45 . 2015-10-01 15:45 -------- d-----w- c:\program files (x86)\predm 2015-10-01 13:46 . 2015-10-02 12:32 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2015-10-01 13:46 . 2015-10-02 18:15 -------- d-----w- c:\program files (x86)\Spybot - Search & Destroy 2 2015-10-01 02:34 . 2015-10-01 02:34 -------- d-----w- c:\users\Mister X\AppData\Local\10800 2015-10-01 02:25 . 2015-10-03 12:18 -------- d-----w- c:\programdata\AppMgr3.32.9611035 2015-10-01 02:25 . 2015-10-01 02:30 -------- d-----w- c:\programdata\AppMgr1.95.3587003 2015-10-01 02:24 . 2015-10-01 02:25 -------- d-----w- c:\users\Mister X\AppData\Local\BrowserAir 2015-10-01 02:24 . 2015-10-02 18:19 -------- d-----w- c:\users\Mister X\AppData\Local\dply_en_036020102 2015-10-01 02:24 . 2015-10-01 02:24 -------- d-----w- c:\programdata\SearchModule 2015-10-01 02:24 . 2015-10-01 02:24 -------- d-----w- c:\program files\Common Files\Goobzo 2015-10-01 02:24 . 2015-10-01 02:24 -------- d-----w- c:\users\Mister X\AppData\Local\MyBrowser 2015-10-01 02:24 . 2015-10-01 02:24 -------- d-----w- c:\users\Mister X\AppData\Local\Installer 2015-10-01 02:17 . 2015-10-01 02:17 -------- d-----w- c:\users\Mister X\AppData\Local\Crossbrowse 2015-10-01 02:15 . 2015-10-01 02:15 -------- d-----w- c:\users\Mister X\AppData\Local\globalUpdate 2015-10-01 02:15 . 2015-10-01 02:15 -------- d-----w- c:\program files (x86)\globalUpdate 2015-10-01 02:14 . 2015-10-02 02:15 -------- d-----w- c:\users\Mister X\AppData\Local\2ACCAEA0-1443672899-11DD-8D6F-C86000C30044 2015-10-01 02:14 . 2015-10-01 21:36 -------- d-----w- c:\program files (x86)\2ACCAEA0-1443665648-11DD-8D6F-C86000C30044 2015-10-01 02:14 . 2015-10-01 02:14 -------- d-----w- c:\users\Mister X\AppData\Roaming\ASPackage 2015-10-01 02:12 . 2015-10-01 02:13 -------- d-----w- c:\users\Mister X\AppData\Roaming\oursurfing 2015-09-29 14:01 . 2015-09-29 14:06 -------- d-----w- c:\users\Mister X\farbsite 2015-09-17 22:39 . 2015-09-18 08:38 -------- d-----w- c:\programdata\3929cb63-cbbd-4b9c-8b92-a50fbd04e656 2015-09-17 22:39 . 2015-09-18 08:19 -------- d-----w- c:\program files (x86)\Results Hub 2015-09-17 22:39 . 2015-09-17 22:39 -------- d-----w- c:\users\Mister X\AppData\Roaming\Anvsoft 2015-09-17 22:39 . 2015-09-17 22:39 -------- d-----w- c:\program files (x86)\Anvsoft 2015-09-11 04:38 . 2015-09-11 12:32 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird 2015-09-10 23:44 . 2015-09-10 23:44 -------- d-----w- c:\users\Mister X\AppData\Local\HL 2015-09-10 23:32 . 2015-09-10 23:32 -------- d-----w- c:\programdata\AAV 2015-09-10 23:27 . 2015-09-10 23:27 -------- d-----w- c:\programdata\HL 2015-09-10 22:06 . 2015-09-10 22:05 1169609 ----a-w- c:\windows\unins000.exe 2015-09-10 00:29 . 2015-09-10 00:29 -------- d-----w- c:\program files\ConvertHelper3 2015-09-09 11:47 . 2015-09-09 11:47 -------- d-----w- c:\windows\de 2015-09-04 19:42 . 2015-09-04 19:42 -------- d-----w- c:\users\Mister X\AppData\Roaming\WebApp 2015-09-04 19:41 . 2015-09-04 19:41 -------- d-----w- c:\users\Mister X\AppData\Local\Packages 2015-09-04 19:33 . 2015-09-04 19:33 -------- d-----w- c:\programdata\install_clap 2015-09-03 20:58 . 2015-09-03 20:58 -------- d--h--w- c:\programdata\CanonIJMIG Code:
ATTFilter (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2015-10-01 21:28 . 2012-06-16 18:48 18160 ----a-w- c:\windows\system32\drivers\GdPhyMem.sys 2015-09-25 13:06 . 2012-05-05 12:31 780488 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2015-09-25 13:06 . 2012-05-05 12:31 142536 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2015-09-04 19:36 . 2012-05-05 09:32 499712 ----a-w- c:\windows\SysWow64\msvcp71.dll 2015-09-04 19:36 . 2012-05-05 09:32 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll 2015-09-04 19:36 . 2012-05-05 09:32 29480 ----a-w- c:\windows\SysWow64\msxml3a.dll 2015-08-26 16:37 . 2012-05-05 13:00 134753440 ----a-w- c:\windows\system32\MRT.exe 2015-08-21 12:48 . 2015-07-18 05:37 97888 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2015-08-17 23:30 . 2014-06-04 11:47 1316184 ----a-w- c:\windows\SysWow64\nvspbridge.dll 2015-08-17 23:30 . 2014-02-24 00:37 1423120 ----a-w- c:\windows\SysWow64\nvspcap.dll 2015-08-17 23:29 . 2014-06-04 11:47 1756608 ----a-w- c:\windows\system32\nvspbridge64.dll 2015-08-17 23:29 . 2014-02-24 00:37 1710568 ----a-w- c:\windows\system32\nvspcap64.dll 2015-08-11 04:52 . 2015-08-24 16:43 69416 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll 2015-08-11 04:52 . 2015-08-24 16:43 50472 ----a-w- c:\windows\system32\drivers\nvvad64v.sys 2015-08-11 04:52 . 2013-08-05 06:23 72504 ----a-w- c:\windows\system32\nvaudcap64v.dll 2015-08-10 23:08 . 2015-08-10 23:08 17625848 ----a-w- c:\windows\system32\nvwgf2umx.dll 2015-08-10 23:08 . 2015-04-14 12:18 15139256 ----a-w- c:\windows\SysWow64\nvwgf2um.dll 2015-08-10 23:08 . 2015-08-24 17:34 1110768 ----a-w- c:\windows\system32\nvumdshimx.dll 2015-08-10 23:08 . 2015-08-10 23:08 948832 ----a-w- c:\windows\SysWow64\nvumdshim.dll 2015-08-10 23:08 . 2015-08-10 23:08 30497920 ----a-w- c:\windows\system32\nvoglv64.dll 2015-08-10 23:08 . 2015-08-10 23:08 22960768 ----a-w- c:\windows\SysWow64\nvoglv32.dll 2015-08-10 23:08 . 2015-08-10 23:08 16160424 ----a-w- c:\windows\system32\nvopencl.dll 2015-08-10 23:08 . 2015-08-10 23:08 13277448 ----a-w- c:\windows\SysWow64\nvopencl.dll 2015-08-10 23:08 . 2015-08-10 23:08 11063440 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys 2015-08-10 23:08 . 2015-08-10 23:08 991888 ----a-w- c:\windows\SysWow64\NvIFR.dll 2015-08-10 23:08 . 2015-08-10 23:08 185632 ----a-w- c:\windows\system32\nvinitx.dll 2015-08-10 23:08 . 2015-08-10 23:08 164192 ----a-w- c:\windows\SysWow64\nvinit.dll 2015-08-10 23:08 . 2015-08-10 23:08 160896 ----a-w- c:\windows\system32\nvoglshim64.dll 2015-08-10 23:08 . 2015-08-10 23:08 137424 ----a-w- c:\windows\SysWow64\nvoglshim32.dll 2015-08-10 23:08 . 2015-08-10 23:08 1071416 ----a-w- c:\windows\system32\NvIFR64.dll 2015-08-10 23:08 . 2015-08-10 23:08 985232 ----a-w- c:\windows\SysWow64\NvFBC.dll 2015-08-10 23:08 . 2015-08-10 23:08 48992 ----a-w- c:\windows\system32\nvhdap64.dll 2015-08-10 23:08 . 2015-08-10 23:08 213360 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2015-08-10 23:08 . 2015-08-10 23:08 1906832 ----a-w- c:\windows\system32\nvdispco6435382.dll 2015-08-10 23:08 . 2015-08-10 23:08 15902640 ----a-w- c:\windows\system32\nvd3dumx.dll 2015-08-10 23:08 . 2015-08-10 23:08 1577808 ----a-w- c:\windows\system32\nvhdagenco6420103.dll 2015-08-10 23:08 . 2015-08-10 23:08 1568056 ----a-w- c:\windows\system32\nvdispgenco6435382.dll 2015-08-10 23:08 . 2015-08-10 23:08 1063040 ----a-w- c:\windows\system32\NvFBC64.dll 2015-08-10 23:08 . 2013-01-09 00:25 12885072 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2015-08-10 23:08 . 2015-08-10 23:08 42740536 ----a-w- c:\windows\system32\nvcompiler.dll 2015-08-10 23:08 . 2015-08-10 23:08 37757584 ----a-w- c:\windows\SysWow64\nvcompiler.dll 2015-08-10 23:08 . 2015-08-10 23:08 2942280 ----a-w- c:\windows\system32\nvcuvid.dll 2015-08-10 23:08 . 2015-08-10 23:08 2609480 ----a-w- c:\windows\SysWow64\nvcuvid.dll 2015-08-10 23:08 . 2015-08-10 23:08 14512608 ----a-w- c:\windows\system32\nvcuda.dll 2015-08-10 23:08 . 2015-08-10 23:08 11845224 ----a-w- c:\windows\SysWow64\nvcuda.dll 2015-08-10 23:08 . 2012-02-09 20:43 3417208 ----a-w- c:\windows\system32\nvapi64.dll 2015-08-10 23:08 . 2015-04-14 12:18 3019128 ----a-w- c:\windows\SysWow64\nvapi.dll 2015-08-07 11:06 . 2015-08-24 17:34 1898104 ----a-w- c:\windows\system32\nvdispco6435560.dll 2015-08-07 11:06 . 2015-08-24 17:34 1558832 ----a-w- c:\windows\system32\nvdispgenco6435560.dll 2015-08-07 00:44 . 2012-05-05 17:12 937592 ----a-w- c:\windows\system32\nvvsvc.exe 2015-08-07 00:44 . 2012-05-05 17:12 62584 ----a-w- c:\windows\system32\nvshext.dll 2015-08-07 00:44 . 2012-05-05 17:12 385328 ----a-w- c:\windows\system32\nvmctray.dll 2015-08-07 00:44 . 2012-05-05 17:12 2558768 ----a-w- c:\windows\system32\nvsvcr.dll 2015-08-07 00:44 . 2012-05-05 17:12 6873904 ----a-w- c:\windows\system32\nvcpl.dll 2015-08-07 00:44 . 2012-05-05 17:12 3492984 ----a-w- c:\windows\system32\nvsvc64.dll 2015-08-07 00:04 . 2015-08-28 20:52 572024 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2015-08-06 23:10 . 2015-08-06 23:10 188104 ----a-w- C:\ods.exe 2015-08-03 13:07 . 2012-05-05 17:12 5133709 ----a-w- c:\windows\system32\nvcoproc.bin 2015-07-30 18:06 . 2015-08-12 14:09 1648128 ----a-w- c:\windows\system32\DWrite.dll 2015-07-30 18:06 . 2015-08-12 14:09 1180160 ----a-w- c:\windows\system32\FntCache.dll 2015-07-30 18:06 . 2015-08-12 14:09 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2015-07-30 17:57 . 2015-08-12 14:09 1251328 ----a-w- c:\windows\SysWow64\DWrite.dll 2015-07-30 17:57 . 2015-08-12 14:09 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll 2015-07-30 13:13 . 2015-08-12 23:45 103120 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll 2015-07-30 13:13 . 2015-08-12 23:45 124624 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-07-28 20:09 . 2015-08-12 14:10 17344 ----a-w- c:\windows\system32\CompatTelRunner.exe 2015-07-28 20:05 . 2015-08-12 14:10 774656 ----a-w- c:\windows\system32\invagent.dll 2015-07-28 20:05 . 2015-08-12 14:10 743424 ----a-w- c:\windows\system32\generaltel.dll 2015-07-28 20:05 . 2015-08-12 14:10 437760 ----a-w- c:\windows\system32\devinv.dll 2015-07-28 20:05 . 2015-08-12 14:10 1116672 ----a-w- c:\windows\system32\appraiser.dll 2015-07-28 20:05 . 2015-08-12 14:10 69120 ----a-w- c:\windows\system32\acmigration.dll 2015-07-28 20:05 . 2015-08-12 14:10 227328 ----a-w- c:\windows\system32\aepdu.dll 2015-07-28 19:55 . 2015-08-12 14:10 1148416 ----a-w- c:\windows\system32\aeinv.dll 2015-07-23 20:20 . 2014-02-24 00:33 110688 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll 2015-07-23 00:06 . 2015-08-28 20:49 5568960 ----a-w- c:\windows\system32\ntoskrnl.exe 2015-07-23 00:06 . 2015-08-28 20:49 95680 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2015-07-23 00:06 . 2015-08-28 20:49 155584 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2015-07-23 00:03 . 2015-08-28 20:49 1730496 ----a-w- c:\windows\system32\ntdll.dll 2015-07-23 00:03 . 2015-08-28 20:49 243712 ----a-w- c:\windows\system32\wow64.dll 2015-07-23 00:03 . 2015-08-28 20:49 362496 ----a-w- c:\windows\system32\wow64win.dll 2015-07-23 00:03 . 2015-08-28 20:49 13312 ----a-w- c:\windows\system32\wow64cpu.dll 2015-07-23 00:03 . 2015-08-28 20:49 215040 ----a-w- c:\windows\system32\winsrv.dll 2015-07-23 00:02 . 2015-08-28 20:49 1390592 ----a-w- c:\windows\system32\diagtrack.dll 2015-07-23 00:02 . 2015-08-28 20:49 210944 ----a-w- c:\windows\system32\wdigest.dll 2015-07-23 00:02 . 2015-08-28 20:49 879104 ----a-w- c:\windows\system32\tdh.dll 2015-07-23 00:02 . 2015-08-28 20:49 86528 ----a-w- c:\windows\system32\TSpkg.dll 2015-07-23 00:02 . 2015-08-28 20:49 136192 ----a-w- c:\windows\system32\sspicli.dll 2015-07-23 00:02 . 2015-08-28 20:49 29184 ----a-w- c:\windows\system32\sspisrv.dll 2015-07-23 00:02 . 2015-08-28 20:49 503808 ----a-w- c:\windows\system32\srcore.dll 2015-07-23 00:02 . 2015-08-28 20:49 50176 ----a-w- c:\windows\system32\srclient.dll 2015-07-23 00:02 . 2015-08-28 20:49 342016 ----a-w- c:\windows\system32\schannel.dll 2015-07-23 00:02 . 2015-08-28 20:49 28160 ----a-w- c:\windows\system32\secur32.dll 2015-07-23 00:02 . 2015-08-28 20:49 1216512 ----a-w- c:\windows\system32\rpcrt4.dll 2015-07-23 00:02 . 2015-08-28 20:49 309760 ----a-w- c:\windows\system32\ncrypt.dll 2015-07-23 00:02 . 2015-08-28 20:49 16384 ----a-w- c:\windows\system32\ntvdm64.dll 2015-07-23 00:02 . 2015-08-28 20:49 315392 ----a-w- c:\windows\system32\msv1_0.dll 2015-07-23 00:02 . 2015-08-28 20:49 1163264 ----a-w- c:\windows\system32\kernel32.dll 2015-07-23 00:02 . 2015-08-28 20:49 424448 ----a-w- c:\windows\system32\KernelBase.dll 2015-07-23 00:02 . 2015-08-28 20:49 729088 ----a-w- c:\windows\system32\kerberos.dll 2015-07-23 00:02 . 2015-08-28 20:49 1461760 ----a-w- c:\windows\system32\lsasrv.dll 2011-02-25 05:30 2616320 --shatr- c:\windows\SysWOW64\explorer.exe . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2014-08-10 20:56 233128 ----a-w- c:\users\Mister X\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2014-08-10 20:56 233128 ----a-w- c:\users\Mister X\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2014-08-10 20:56 233128 ----a-w- c:\users\Mister X\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\SkyDriveShell.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584] "CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-04-23 8204056] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "VirtualCloneDrive"="c:\program files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" [2011-03-07 89456] "Lightshot"="c:\program files (x86)\Skillbrains\lightshot\Lightshot.exe" [2014-11-18 226560] "GDFirewallTray"="c:\program files (x86)\G DATA\TotalProtection\Firewall\GDFirewallTray.exe" [2015-06-16 1864312] "G Data ASM"="c:\program files (x86)\G DATA\TotalProtection\DelayLoader\AutorunDelayLoader.exe" [2015-02-20 434296] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ desktop.ini~EA4LH6O2 [2009-7-14 174] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean64.exe . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" . R1 swsedrvr_vt_1_10_0_25;swsedrvr_vt_1_10_0_25;c:\windows\system32\drivers\swsedrvr_vt_1_10_0_25.sys;c:\windows\SYSNATIVE\drivers\swsedrvr_vt_1_10_0_25.sys [x] R2 CLKMSVC10_38F51D56;CyberLink Product - 2015/09/04 21:38;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 BthAudioHF;BthAudioHF-Dienst;c:\windows\system32\DRIVERS\BthAudioHF.sys;c:\windows\SYSNATIVE\DRIVERS\BthAudioHF.sys [x] R3 BthAvrcp;Bluetooth-AVRCP-Profil;c:\windows\system32\DRIVERS\BthAvrcp.sys;c:\windows\SYSNATIVE\DRIVERS\BthAvrcp.sys [x] R3 csr_a2dp;Bluetooth-AV-Profil;c:\windows\system32\drivers\bthav.sys;c:\windows\SYSNATIVE\drivers\bthav.sys [x] R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x] R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys;c:\windows\SYSNATIVE\DRIVERS\ew_hwusbdev.sys [x] R3 ewusbmbb;HUAWEI USB-WWAN miniport;c:\windows\system32\DRIVERS\ewusbwwan.sys;c:\windows\SYSNATIVE\DRIVERS\ewusbwwan.sys [x] R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [x] R3 GDTunerSvc;G*DATA Tuner Service;c:\program files (x86)\G DATA\TotalProtection\AVKTuner\AVKTunerService.exe;c:\program files (x86)\G DATA\TotalProtection\AVKTuner\AVKTunerService.exe [x] R3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys;c:\windows\SYSNATIVE\DRIVERS\ew_jubusenum.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe;c:\program files (x86)\Nero\Update\NASvc.exe [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187B.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8187B.sys [x] R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x] R3 TSNxGService;G DATA Datensafe Service;c:\program files (x86)\G DATA\TotalProtection\TSNxG\TSNxGService.exe;c:\program files (x86)\G DATA\TotalProtection\TSNxG\TSNxGService.exe [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S0 GDBehave;GDBehave;c:\windows\system32\drivers\GDBehave.sys;c:\windows\SYSNATIVE\drivers\GDBehave.sys [x] S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x] S0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251);c:\windows\system32\DRIVERS\tdrpm251.sys;c:\windows\SYSNATIVE\DRIVERS\tdrpm251.sys [x] S0 TS4NT;TS4nt driver;c:\windows\System32\Drivers\TS4nt.sys;c:\windows\SYSNATIVE\Drivers\TS4nt.sys [x] S0 viamrx64;viamrx64;c:\windows\system32\DRIVERS\viamrx64.sys;c:\windows\SYSNATIVE\DRIVERS\viamrx64.sys [x] S1 Eve;EVE Protocol Driver;c:\windows\system32\DRIVERS\eve.sys;c:\windows\SYSNATIVE\DRIVERS\eve.sys [x] S1 GDMnIcpt;GDMnIcpt;c:\windows\system32\drivers\MiniIcpt.sys;c:\windows\SYSNATIVE\drivers\MiniIcpt.sys [x] S1 gdwfpcd;G Data WFP CD;c:\windows\system32\drivers\gdwfpcd64.sys;c:\windows\SYSNATIVE\drivers\gdwfpcd64.sys [x] S1 GRD;G Data Rootkit Detector Driver;c:\windows\system32\drivers\GRD.sys;c:\windows\SYSNATIVE\drivers\GRD.sys [x] S1 HookCentre;HookCentre;c:\windows\system32\drivers\HookCentre.sys;c:\windows\SYSNATIVE\drivers\HookCentre.sys [x] S2 AAV UpdateService;AAV UpdateService;c:\program files (x86)\Lexware\AAVUpdateManager\aavus.exe;c:\program files (x86)\Lexware\AAVUpdateManager\aavus.exe [x] S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x] S2 AppMgr3.32.9611035;Application Manager 3.32.9611035;c:\programdata\AppMgr3.32.9611035\AppMgr.exe;c:\programdata\AppMgr3.32.9611035\AppMgr.exe [x] S2 AVKProxy;G*DATA*ANTIVIRUS Proxy;c:\program files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe;c:\program files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [x] S2 AVKService;G*DATA Scheduler;c:\program files (x86)\G DATA\TotalProtection\AVK\AVKService.exe;c:\program files (x86)\G DATA\TotalProtection\AVK\AVKService.exe [x] S2 AVKWCtl;G*DATA Dateisystem Wächter;c:\program files (x86)\G DATA\TotalProtection\AVK\AVKWCtlx64.exe;c:\program files (x86)\G DATA\TotalProtection\AVK\AVKWCtlx64.exe [x] S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x] S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [x] S2 GDBackupSvc;G*DATA Backup Service;c:\program files (x86)\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe;c:\program files (x86)\G DATA\TotalProtection\AVKBackup\AVKBackupService.exe [x] S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x] S2 HFGService;Handsfree Headset Service;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x] S2 HiSuiteOuc64.exe;HiSuiteOuc64.exe;c:\programdata\HiSuiteOuc\HiSuiteOuc64.exe;c:\programdata\HiSuiteOuc\HiSuiteOuc64.exe [x] S2 HuaweiHiSuiteService64.exe;HuaweiHiSuiteService64.exe;c:\programdata\HandSetService\HuaweiHiSuiteService64.exe;c:\programdata\HandSetService\HuaweiHiSuiteService64.exe [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [x] S2 SMUpd;Search Module Update;c:\program files\Common Files\Goobzo\GBUpdate\smu.exe;c:\program files\Common Files\Goobzo\GBUpdate\smu.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x] S3 GDFwSvc;G*DATA Personal Firewall;c:\program files (x86)\G DATA\TotalProtection\Firewall\GDFwSvcx64.exe;c:\program files (x86)\G DATA\TotalProtection\Firewall\GDFwSvcx64.exe [x] S3 GDKBB;G Data GDKBB Driver;c:\windows\system32\drivers\GDKBB64.sys;c:\windows\SYSNATIVE\drivers\GDKBB64.sys [x] S3 GDKBFlt;G Data GDKBFlt Driver;c:\windows\system32\drivers\GDKBFlt64.sys;c:\windows\SYSNATIVE\drivers\GDKBFlt64.sys [x] S3 GDPkIcpt;GDPkIcpt;c:\windows\system32\drivers\PktIcpt.sys;c:\windows\SYSNATIVE\drivers\PktIcpt.sys [x] S3 GDScan;G*DATA Scanner;c:\program files (x86)\Common Files\G Data\GDScan\GDScan.exe;c:\program files (x86)\Common Files\G Data\GDScan\GDScan.exe [x] S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x] S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x] S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 SMUpdd;Search Module UpdateD;c:\program files\Common Files\Goobzo\GBUpdate\smw.sys;c:\program files\Common Files\Goobzo\GBUpdate\smw.sys [x] Code:
ATTFilter --- Andere Dienste/Treiber im Speicher --- . *Deregistered* - CLKMDRV10_38F51D56 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}] 2015-07-03 05:09 285368 ----a-w- c:\program files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll . Inhalt des "geplante Tasks" Ordners . 2015-09-25 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-05 13:06] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2014-08-10 20:56 260776 ----a-w- c:\users\Mister X\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2014-08-10 20:56 260776 ----a-w- c:\users\Mister X\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2014-08-10 20:56 260776 ----a-w- c:\users\Mister X\AppData\Local\Microsoft\SkyDrive\17.3.1171.0714\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2011-12-12 7560296] "ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-08-17 1710568] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-08-27 2634872] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x0 . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = about:blank mStart Page = about:blank mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyServer = localhost:8080 uSearchAssistant = hxxp://www.google.com Trusted Zone: localhost Trusted Zone: webcompanion.com TCP: DhcpNameServer = 192.168.0.1 FF - ProfilePath - c:\users\Mister X\AppData\Roaming\Mozilla\Firefox\Profiles\nahs90qw.default-1443709621769\ . . ------- Dateityp-Verknüpfung ------- . inifile="%SystemRoot%\system32\NOTEPAD.EXE" %1 txtfile="%SystemRoot%\system32\NOTEPAD.EXE" %1 . - - - - Entfernte verwaiste Registrierungseinträge - - - - . URLSearchHooks-{7f7f82f1-7c95-47cd-814f-950b56d58fc3} - c:\users\Mister X\AppData\LocalLow\Vgrabber_v1\prxtbVgra.dll BHO-{4f93c386-c677-4212-9bc8-47814de68c52} - (no file) BHO-{567dbf58-4713-45f4-a623-e7b41f898209} - (no file) BHO-{7f7f82f1-7c95-47cd-814f-950b56d58fc3} - c:\users\Mister X\AppData\LocalLow\Vgrabber_v1\prxtbVgra.dll Toolbar-{7f7f82f1-7c95-47cd-814f-950b56d58fc3} - c:\users\Mister X\AppData\LocalLow\Vgrabber_v1\prxtbVgra.dll Wow6432Node-HKLM-Run-<NO NAME> - (no file) Wow6432Node-HKLM-Run-mbot_de_014010102 - (no file) c:\users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe c:\users\Mister X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk - c:\program files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk - c:\program files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe HKLM_Wow6432Node-ActiveSetup-installed components - c:\program files (x86)\MyBrowser\MyBrowser\Application\39.5.2171.95\Installer\chrmstp.exe HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start WebBrowser-{7F7F82F1-7C95-47CD-814F-950B56D58FC3} - (no file) AddRemove-IECT3268926 - c:\programdata\Tbccint\IE\CT3268926\UninstallerUI.exe Code:
ATTFilter --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_19_0_0_185_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_19_0_0_185_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}] @Denied: (A 2) (Everyone) @="IFlashBroker6" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_19_0_0_185_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_19_0_0_185_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_19_0_0_185.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.19" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_19_0_0_185.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_19_0_0_185.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_19_0_0_185.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}] @Denied: (A 2) (Everyone) @="IFlashBroker6" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2015-10-03 14:46:02 ComboFix-quarantined-files.txt 2015-10-03 12:46 . Vor Suchlauf: 14 Verzeichnis(se), 12.993.236.992 Bytes frei Nach Suchlauf: 19 Verzeichnis(se), 12.856.377.344 Bytes frei . - - End Of File - - 9D71DA5F8A3D3E5E53059E6CC43349CA --- --- --- --- --- --- A36C5E4F47E84449FF07ED3517B43A31 Geändert von ALT F4 (03.10.2015 um 14:13 Uhr) |
03.10.2015, 14:08 | #13 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Bitte die CODE-Tags korrigieren
__________________ Logfiles bitte immer in CODE-Tags posten |
03.10.2015, 14:16 | #14 |
| Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab just done - hatte nen copyandpaste-Fehler irgendwie beim BBCode |
03.10.2015, 22:13 | #15 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab Danke Adware/Junkware/Toolbars entfernen 1. Schritt: Malwarebytes Downloade Dir bitte Malwarebytes Anti-Malware
(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!) 2. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
3. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
4. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Seuche nach codec download auf Windows 7 PC / Acronis backup bricht ab |
acronis, aufspielen, backup, beste, besten, dauert, desktop, download, film, gdata, gestern, hochfahren, icons, lieber, neuer, prüfung, schwarz, system, taskmanager, total, trojaner, web, windows, windows 7, ärgerlich |