| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Internetverbindung wird stark ausgebremst...Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.10.2015, 16:44
| #1 |
| |  Internetverbindung wird stark ausgebremst... Hallo, seit zwei Tagen wird mein Internet extrem ausgebremst. An meinem zweiten Rechner funktioniert es wie vorher. Also gehe ich davon aus, dass irgend etwas den Rechner ausbremst. Könnte das ein Trojaner, Virus oder Maleware sein? Der Rechner funktioniert sonst sehr gut, nur das Internet ist stark verlangsamt. Wie kann ich das prüfen? Beste Grüße Tom |
|
13.10.2015, 17:10
| #2 |
| /// the machine /// TB-Ausbilder    | Internetverbindung wird stark ausgebremst... hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
13.10.2015, 18:00
| #3 |
| | Internetverbindung wird stark ausgebremst... vielen Dank für deine Antwort! Hier das Ergebnis:
__________________FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:12-10-2015
durchgeführt von christoph (Administrator) auf JONGO (13-10-2015 18:54:23)
Gestartet von C:\Users\christoph\Downloads
Geladene Profile: christoph (Verfügbare Profile: christoph & Administrator)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AVAST Software) C:\Program Files\Avast-antivir\AvastSvc.exe
(AVAST Software) C:\Program Files\Avast-antivir\afwServ.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\spd.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(cFos Software GmbH) C:\Program Files\ASRock\XFast LAN\cfosspeed.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
(Dropbox, Inc.) C:\Users\christoph\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.15\GoogleCrashHandler64.exe
(Avast Software) C:\Program Files\Avast-antivir\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\Avast-antivir\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [XFast LAN] => C:\Program Files\ASRock\XFast LAN\cFosSpeed.exe [1441152 2011-10-19] (cFos Software GmbH)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2710856 2009-11-01] (CANON INC.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284480 2012-05-30] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-19] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-20] (Intel Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [140640 2009-09-28] (CANON INC.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [186408 2013-12-12] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Avast-antivir\AvastUI.exe [6111824 2015-08-31] (AVAST Software)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\Run: [DAEMON Tools Lite] => C:\Programme\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22344224 2015-07-29] (Google)
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\Run: [Dropbox Update] => C:\Users\christoph\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-17] (Dropbox, Inc.)
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\Run: [GoogleChromeAutoLaunch_34070300CD0203239D221BAE9BAE039E] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [815944 2015-09-24] (Google Inc.)
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\RunOnce: [Uninstall C:\Users\christoph\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\christoph\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-07-29] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast-antivir\ashShA64.dll [2015-08-31] (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-10-02] (Dropbox, Inc.)
Startup: C:\Users\christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2013-04-18]
ShortcutTarget: Dropbox.lnk -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
ProxyServer: [S-1-5-21-3340911722-3289926983-4188380793-1000] => 72.162.36.14:8080
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{0D6C4B15-8FAC-4557-8749-01B2E966ED97}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Avast-antivir\aswWebRepIE64.dll [2015-08-31] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05] (Adobe Systems Incorporated)
BHO-x32: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll [2011-08-11] (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\IPS\IPSBHO.DLL [2011-07-25] (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-25] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Avast-antivir\aswWebRepIE.dll [2015-08-31] (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-25] (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\coIEPlg.dll [2011-08-11] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei
FireFox:
========
FF ProfilePath: C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8lmw0ygf.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-3340911722-3289926983-4188380793-1000: @citrixonline.com/appdetectorplugin -> C:\Users\christoph\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2013-11-08] (Citrix Online)
FF Extension: FireFTP - C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8lmw0ygf.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2015-10-09]
FF Extension: Adblock Plus - C:\Users\christoph\AppData\Roaming\Mozilla\Firefox\Profiles\8lmw0ygf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-02-14]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFFPlgn
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\IPSFFPlgn [2013-03-01]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\coFFPlgn
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\coFFPlgn [2015-10-13]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Avast-antivir\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Avast-antivir\WebRep\FF [2013-04-16]
Chrome:
=======
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-03-01]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-03-01]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-03-01]
CHR Extension: (Google-Suche) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-03-01]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2015-08-25]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-05]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-24]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-06-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR Extension: (Google Mail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-03-01]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-11]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2013-08-14]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-05]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-02]
CHR Extension: (SISTRIX_Toolbar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\igmcaceagildfabpjdmbppfbgjlihfge [2013-10-19]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-06-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10
CHR Extension: (Google Präsentationen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-11]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-11]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-11]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-11]
CHR Extension: (Google-Suche) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-11]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2015-07-09]
CHR Extension: (Google Tabellen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-11]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-05-11]
CHR Extension: („Pin it“-Button) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2015-08-10]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-11]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-06-17]
CHR Extension: (Norton Security Toolbar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2015-05-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-11]
CHR Extension: (Google Mail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-11]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12
CHR Extension: (Google Slides) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-29]
CHR Extension: (FoxyDeal) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\aiennapmieppnpfhhogglccgepbdajan [2015-06-29]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-29]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-29]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-06-29]
CHR Extension: (Google Search) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-29]
CHR Extension: (Google Sheets) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-29]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-06-29]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-29]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-06-29]
CHR Extension: (Norton Security Toolbar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2015-06-29]
CHR Extension: (Google Wallet) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-06-29]
CHR Extension: (Gmail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-29]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13
CHR Extension: (Google Präsentationen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-16]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-16]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-16]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-16]
CHR Extension: (Google-Suche) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-09-16]
CHR Extension: (Google Tabellen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-16]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-16]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-09-16]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-09-16]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-09-16]
CHR Extension: (Norton Security Toolbar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk [2015-09-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-16]
CHR Extension: (Google Mail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-16]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2
CHR Extension: (FoxyDeal) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aiennapmieppnpfhhogglccgepbdajan [2013-09-23]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-14]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-06-26]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-14]
CHR Extension: (Google Search) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-14]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2013-08-14]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-20]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-30]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-06-26]
CHR Extension: (Google Wallet) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-14]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3
CHR Extension: (FoxyDeal) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aiennapmieppnpfhhogglccgepbdajan [2013-09-27]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2013-08-14]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-08-14]
CHR Extension: (Google Search) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-08-14]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-20]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-14]
CHR Extension: (Google Wallet) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Extension: (Gmail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-08-14]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4
CHR Extension: (FoxyDeal) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aiennapmieppnpfhhogglccgepbdajan [2014-01-23]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-23]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-23]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-23]
CHR Extension: (Google Search) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-23]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2014-01-23]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-01-20]
CHR Extension: (Seerobots) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\hnljoiodjfgpnddiekagpbblnjedcnfp [2014-01-23]
CHR Extension: (SISTRIX_Toolbar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\igmcaceagildfabpjdmbppfbgjlihfge [2014-01-23]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-14]
CHR Extension: (IP Address and Domain Information) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lhgkegeccnckoiliokondpaaalbhafoa [2014-06-20]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-06-24]
CHR Extension: (Google Wallet) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-23]
CHR Extension: (Gmail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-23]
CHR Extension: (Linkparser) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\pmghbmgeolancmmnklifafgooobplifn [2014-01-23]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-31]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-31]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-31]
CHR Extension: (Google-Suche) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-31]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2015-10-02]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-08]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-14]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-06-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-31]
CHR Extension: (Google Mail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-31]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6
CHR Extension: (FoxyDeal) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aiennapmieppnpfhhogglccgepbdajan [2014-05-16]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-16]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-16]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-16]
CHR Extension: (Google Search) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-16]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2014-05-16]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-24]
CHR Extension: (SISTRIX_Toolbar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\igmcaceagildfabpjdmbppfbgjlihfge [2014-05-16]
CHR Extension: (KGen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\jkpcelefglapiahikhocfdcigfpaagcl [2014-05-16]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-31]
CHR Extension: (Google Wallet) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-16]
CHR Extension: (Gmail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-16]
CHR Extension: (Majestic Backlink Analyzer) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\pnmjaflneibolacpepklokkjnakmikmg [2014-05-16]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7
CHR Extension: (FoxyDeal) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aiennapmieppnpfhhogglccgepbdajan [2014-08-08]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-08]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-08]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-08]
CHR Extension: (Google Search) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-08]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2014-11-28]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-04]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-31]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-07-06]
CHR Extension: (Google Wallet) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-08]
CHR Extension: (Gmail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-08]
CHR Profile: C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8
CHR Extension: (Google Präsentationen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-12]
CHR Extension: (Google Docs) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\aohghmighlieiainnegkcijnfilokake [2014-09-12]
CHR Extension: (Google Drive) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-12]
CHR Extension: (YouTube) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-12]
CHR Extension: (Google-Suche) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-12]
CHR Extension: (MozBar) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2015-01-14]
CHR Extension: (Google Tabellen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-12]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-04]
CHR Extension: (Avast Online Security) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-10-02]
CHR Extension: („Pin it“-Button) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2015-09-07]
CHR Extension: (Tag Assistant (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2015-07-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-16]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-06-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-12]
CHR Extension: (Google Mail) - C:\Users\christoph\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-12]
CHR HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\CHRIST~1\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2015-06-11]
CHR HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Avast-antivir\WebRep\Chrome\aswWebRepChrome.crx [2015-06-02]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\Extensions\Chrome.crx [2013-03-01]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avast! Antivirus; C:\Program Files\Avast-antivir\AvastSvc.exe [146600 2015-08-31] (AVAST Software)
R2 avast! Firewall; C:\Program Files\Avast-antivir\afwServ.exe [109008 2015-08-31] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\Avast-antivir\ng\vbox\AvastVBoxSVC.exe [4047768 2015-08-31] (Avast Software)
R2 cFosSpeedS; C:\Program Files\ASRock\XFast LAN\spd.exe [395136 2011-10-19] (cFos Software GmbH)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-09-08] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-07-19] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [133632 2012-02-09] ()
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [178312 2015-09-25] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-19] (Intel Corporation)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\ccSvcHst.exe [138760 2011-08-10] (Symantec Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R0 asahci64; C:\Windows\System32\DRIVERS\asahci64.sys [49760 2011-09-21] (Asmedia Technology)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [31016 2012-01-13] (ASRock Inc.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-31] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-08-31] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-31] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [454016 2015-08-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-31] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048344 2015-08-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-31] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-31] (AVAST Software)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\BASHDefs\20110723.001\BHDrvx64.sys [1151096 2011-07-25] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1301000.01C\ccSetx64.sys [167048 2011-08-08] (Symantec Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-09-23] (DT Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\IPSDefs\20110726.001\IDSVia64.sys [488568 2011-07-20] (Symantec Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [25536 2012-02-09] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [25536 2012-02-09] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [44992 2012-02-09] ()
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20110810.019\ENG64.SYS [117880 2011-08-10] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_19.1.0.28\Definitions\VirusDefs\20110810.019\EX64.SYS [2048632 2011-08-10] (Symantec Corporation)
R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [115152 2015-08-31] (AVAST Software)
S3 SRTSP; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSP64.SYS [729720 2011-08-02] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1301000.01C\SRTSPX64.SYS [37496 2011-08-02] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1301000.01C\SYMDS64.SYS [451192 2011-07-25] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1301000.01C\SYMEFA64.SYS [1084536 2011-07-28] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2013-03-01] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1301000.01C\Ironx64.SYS [189560 2011-07-25] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NISx64\1301000.01C\SYMNETS.SYS [401016 2011-07-25] (Symantec Corporation)
R2 VBoxAswDrv; C:\Program Files\Avast-antivir\ng\vbox\VBoxAswDrv.sys [273824 2015-08-31] (Avast Software)
R3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2015-10-13] ()
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-13 18:54 - 2015-10-13 18:54 - 00047469 _____ C:\Users\christoph\Downloads\FRST.txt
2015-10-13 18:54 - 2015-10-13 18:54 - 00000000 ____D C:\FRST
2015-10-13 18:53 - 2015-10-13 18:53 - 02196480 _____ (Farbar) C:\Users\christoph\Downloads\FRST64.exe
2015-10-13 17:16 - 2015-10-13 17:16 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\HandBrake
2015-10-13 16:53 - 2015-10-13 17:58 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem.tmp
2015-10-13 16:46 - 2015-08-31 09:22 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-10-13 16:43 - 2015-10-13 16:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-10-13 16:43 - 2015-08-31 09:22 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswAB78.tmp
2015-10-13 15:41 - 2015-10-13 15:41 - 04109276 _____ C:\Users\christoph\Desktop\Präsentation Fach und Blogbeiträge.pptx
2015-10-13 15:39 - 2015-10-13 15:39 - 01845349 _____ C:\Users\christoph\Desktop\easy-media-gallery.1.3.55.zip
2015-10-12 17:15 - 2015-10-12 17:32 - 00000000 ____D C:\Users\christoph\Desktop\2015_10_12
2015-10-05 07:38 - 2015-10-13 16:45 - 00000000 ____D C:\Users\christoph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-02 10:37 - 2015-10-02 10:37 - 00002702 _____ C:\Users\christoph\Downloads\www-blumenversand-edelweiss-de_20151002T083714Z_SearchAnalytics.csv
2015-10-02 10:23 - 2015-10-05 07:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2015-10-02 07:40 - 2015-10-02 07:40 - 00011748 _____ C:\Users\christoph\Downloads\sample (3).xlsx
2015-10-02 07:34 - 2015-10-02 07:34 - 00031955 _____ C:\Users\christoph\Downloads\bve-bestellungen-mails (3).csv
2015-10-01 08:05 - 2015-10-02 07:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-25 11:11 - 2015-09-25 11:11 - 00197742 _____ C:\Users\christoph\Downloads\cutting-pliers-225063.zip
2015-09-25 11:08 - 2015-09-25 11:08 - 00063720 _____ C:\Users\christoph\Downloads\tools-211392.zip
2015-09-25 11:05 - 2015-09-25 11:05 - 00182168 _____ C:\Users\christoph\Downloads\metal-gear-cog-192817.zip
2015-09-25 10:22 - 2015-09-25 10:23 - 07541437 _____ C:\Users\christoph\Downloads\wordpress-4.3.1-de_DE.zip
2015-09-23 14:00 - 2015-09-23 14:01 - 06521184 _____ (Tim Kosse) C:\Users\christoph\Downloads\FileZilla_3.14.0_win64-setup.exe
2015-09-22 14:25 - 2015-09-23 11:22 - 00186870 _____ C:\Users\christoph\Desktop\url_profile_results_150922104151.xlsx
2015-09-22 11:21 - 2015-09-22 11:23 - 00003652 _____ C:\Users\christoph\Downloads\wp-config.php
2015-09-21 17:44 - 2015-09-22 12:39 - 00160949 _____ C:\Users\christoph\Desktop\url_profile_results_BVE.xlsx
2015-09-21 16:10 - 2015-09-21 16:10 - 00024975 _____ C:\Users\christoph\Desktop\besuchten Seiten BVE.csv
2015-09-21 16:07 - 2015-09-21 16:07 - 00025275 _____ C:\Users\christoph\Downloads\www-blumenversand-edelweiss-de_20150921T140744Z_SearchAnalytics.csv
2015-09-21 15:49 - 2015-09-21 15:49 - 00000085 _____ C:\Users\christoph\Downloads\BingSiteAuth (1).xml
2015-09-21 15:32 - 2015-10-02 13:32 - 00012817 _____ C:\Users\christoph\Desktop\vorschläge für Anfragen zu Veröffentlichung von Fachartikeln.xlsx
2015-09-18 10:52 - 2015-09-18 10:52 - 00000053 _____ C:\Users\christoph\Downloads\google5d6ea260e47b9c6b.html
2015-09-15 08:23 - 2015-09-15 08:23 - 00003952 _____ C:\Users\christoph\Downloads\Keyword-Bericht (1).csv
2015-09-15 07:47 - 2015-09-15 07:47 - 00022786 _____ C:\Users\christoph\Downloads\www-blumenversand-edelweiss-de_20150915T054753Z_SearchAnalytics.csv
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-13 18:47 - 2013-04-16 13:58 - 00000000 ___HD C:\Users\christoph\AppData\Roaming\FileZilla
2015-10-13 18:47 - 2013-03-01 20:38 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-13 18:45 - 2013-08-16 10:08 - 00000000 ____D C:\Users\christoph\AppData\Local\CrashDumps
2015-10-13 18:44 - 2013-02-28 20:50 - 01141525 ____N C:\Windows\WindowsUpdate.log
2015-10-13 18:25 - 2015-06-17 09:36 - 00001240 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3340911722-3289926983-4188380793-1000UA.job
2015-10-13 18:10 - 2013-08-14 10:17 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-10-13 18:06 - 2009-07-14 06:45 - 00021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-13 18:06 - 2009-07-14 06:45 - 00021680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-13 18:04 - 2011-04-12 09:43 - 00699432 _____ C:\Windows\system32\perfh007.dat
2015-10-13 18:04 - 2011-04-12 09:43 - 00149572 _____ C:\Windows\system32\perfc007.dat
2015-10-13 18:04 - 2009-07-14 07:13 - 01620684 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-13 17:58 - 2015-06-11 08:28 - 00000000 ___RD C:\Users\christoph\Google Drive
2015-10-13 17:58 - 2013-04-18 11:21 - 00000000 ___RD C:\Users\christoph\Dropbox
2015-10-13 17:58 - 2013-04-18 11:19 - 00000000 ____D C:\Users\christoph\AppData\Roaming\Dropbox
2015-10-13 17:58 - 2013-03-01 20:38 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-13 17:58 - 2013-03-01 20:05 - 00034752 _____ C:\Windows\system32\Drivers\WPRO_41_2001.sys
2015-10-13 17:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-13 17:57 - 2013-08-21 20:12 - 00000000 ____D C:\AdwCleaner
2015-10-13 17:16 - 2013-04-19 22:48 - 00000000 ____D C:\Users\Administrator\AppData\Local\Thunderbird
2015-10-13 17:00 - 2013-04-16 14:06 - 00004168 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-10-13 16:53 - 2014-06-27 15:56 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-10-13 16:48 - 2015-06-02 07:28 - 00001798 _____ C:\Users\Public\Desktop\Avast Premier.lnk
2015-10-13 16:48 - 2015-06-02 07:21 - 00001858 _____ C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-10-13 16:46 - 2013-04-16 14:05 - 00000000 ____D C:\Program Files\Avast-antivir
2015-10-13 16:45 - 2015-05-20 18:03 - 00000000 ____D C:\ProgramData\CanonIJ
2015-10-13 16:45 - 2015-04-06 00:54 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-13 16:45 - 2015-04-06 00:54 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-13 16:45 - 2015-03-31 10:41 - 00000000 ____D C:\Users\christoph\.ScreamingFrogSEOSpider
2015-10-13 16:45 - 2013-12-27 12:54 - 00000000 ___HD C:\ProgramData\CanonIJScan
2015-10-13 16:45 - 2013-10-31 16:34 - 00000000 ____D C:\Program Files (x86)\Taxpool-Buchhalter
2015-10-13 16:45 - 2013-08-19 18:01 - 00000000 ____D C:\Users\christoph\AppData\Roaming\Skype
2015-10-13 16:45 - 2013-04-19 22:56 - 00000000 ____D C:\Users\christoph\Desktop\Webdesign
2015-10-13 16:45 - 2013-04-19 22:47 - 00000000 ____D C:\Users\Administrator
2015-10-13 16:45 - 2013-03-01 20:09 - 00000000 ____D C:\ProgramData\Norton
2015-10-13 16:45 - 2013-03-01 19:55 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2015-10-13 16:45 - 2013-03-01 19:54 - 00000000 ____D C:\ProgramData\Intel
2015-10-13 16:45 - 2013-02-28 20:50 - 00000000 ___HD C:\Users\christoph
2015-10-13 16:45 - 2011-08-11 13:07 - 00000000 ____D C:\Users\christoph\Documents\Taxpool-Buchhalter
2015-10-13 16:45 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2015-10-13 16:41 - 2015-09-10 07:36 - 00094656 _____ (CACE Technologies) C:\Windows\system32\WPRO_41_2001woem(28).tmp
2015-10-13 16:36 - 2013-08-24 14:53 - 00000000 ____D C:\Windows\Minidump
2015-10-13 08:07 - 2013-08-14 15:12 - 00000000 ____D C:\Users\christoph\AppData\Roaming\CuteRank
2015-10-12 17:14 - 2013-10-23 19:13 - 00000000 ____D C:\ProgramData\CanonIJPLM
2015-10-09 23:52 - 2015-01-05 18:57 - 00000000 ____D C:\Users\christoph\Desktop\Steffi
2015-10-07 15:39 - 2013-11-07 20:04 - 00000132 _____ C:\Users\christoph\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-10-07 00:26 - 2015-09-04 07:22 - 00000000 ____D C:\Users\christoph\Desktop\CityNews-04-09
2015-10-05 19:12 - 2013-04-16 14:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-10-05 07:27 - 2014-05-13 22:16 - 00003722 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2015-10-05 07:27 - 2014-05-13 22:16 - 00003476 _____ C:\Windows\System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon
2015-10-05 07:25 - 2015-06-17 09:36 - 00001188 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3340911722-3289926983-4188380793-1000Core.job
2015-09-26 17:14 - 2015-06-30 08:07 - 00000000 ____D C:\Users\christoph\Desktop\korrektur_ivan
2015-09-26 14:49 - 2013-03-01 20:39 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-09-22 19:11 - 2013-08-14 10:17 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-09-22 19:11 - 2013-08-14 10:17 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-22 19:11 - 2013-08-14 10:17 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-09-22 12:41 - 2015-09-12 13:02 - 00000000 ____D C:\Users\christoph\AppData\Roaming\Webmaster.Auth.Store
2015-09-21 16:12 - 2015-09-12 13:01 - 00000000 ____D C:\Users\christoph\AppData\Roaming\Analytics.Auth.Store
2015-09-16 15:13 - 2015-09-08 11:04 - 00000000 ____D C:\Users\christoph\Desktop\ruhlamat_chipkarten
2015-09-16 13:38 - 2013-04-16 13:58 - 00001729 _____ C:\Users\Public\Desktop\FileZilla Client.lnk
2015-09-16 13:38 - 2013-04-16 13:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2015-09-16 13:38 - 2013-04-16 13:58 - 00000000 ____D C:\Program Files\FileZilla FTP Client
2015-09-15 07:42 - 2013-03-01 20:38 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-15 07:42 - 2013-03-01 20:38 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-11-07 20:04 - 2015-10-07 15:39 - 0000132 _____ () C:\Users\christoph\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-05-04 23:27 - 2014-05-04 23:37 - 0001456 _____ () C:\Users\christoph\AppData\Local\Adobe Für Web speichern 12.0 Prefs
2013-03-01 20:06 - 2013-03-01 20:06 - 0000003 ____H () C:\Users\christoph\AppData\Local\user_data.ini
Einige Dateien in TEMP:
====================
C:\Users\Administrator\AppData\Local\Temp\7z920.exe
C:\Users\Administrator\AppData\Local\Temp\BI_RunOnce.exe
C:\Users\Administrator\AppData\Local\Temp\bundlesweetimsetup.exe
C:\Users\Administrator\AppData\Local\Temp\DeltaTB.exe
C:\Users\Administrator\AppData\Local\Temp\dp.exe
C:\Users\Administrator\AppData\Local\Temp\pricepeep_130001_0101.exe
C:\Users\Administrator\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\christoph\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp56ipre.dll
C:\Users\christoph\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-10-12 13:37
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:12-10-2015
durchgeführt von christoph (2015-10-13 18:54:49)
Gestartet von C:\Users\christoph\Downloads
Windows 7 Professional Service Pack 1 (X64) (2013-02-28 18:50:11)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3340911722-3289926983-4188380793-500 - Administrator - Enabled) => C:\Users\Administrator
christoph (S-1-5-21-3340911722-3289926983-4188380793-1000 - Administrator - Enabled) => C:\Users\christoph
Gast (S-1-5-21-3340911722-3289926983-4188380793-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3340911722-3289926983-4188380793-1002 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
AS: Norton Internet Security (Disabled - Out of date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
1.56 (HKLM-x32\...\URL Profiler_is1) (Version: - Evolution Internet Marketing LLP)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Master Collection (HKLM-x32\...\{1BBD8D70-721A-41AD-AC8F-7308A0C8FA92}) (Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 19 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.3.1.000 - Asmedia Technology)
ASRock App Charger v1.0.5 (HKLM\...\ASRock App Charger_is1) (Version: - ASRock Inc.)
ASRock eXtreme Tuner v0.1.268 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version: - )
ASRock InstantBoot v1.29 (HKLM-x32\...\ASRock InstantBoot_is1) (Version: - )
ASRock XFast RAM v2.0.9 (HKLM\...\ASRock XFast RAM_is1) (Version: - ASRock Inc.)
Avast Premier (HKLM-x32\...\avast) (Version: 10.3.2225 - AVAST Software)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
Canon IJ Network Scan Utility (HKLM-x32\...\Canon_IJ_Network_Scan_UTILITY) (Version: - )
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: - )
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - )
Canon MP Navigator EX 3.1 (HKLM-x32\...\MP Navigator EX 3.1) (Version: - )
Canon MX870 series Benutzerregistrierung (HKLM-x32\...\Canon MX870 series Benutzerregistrierung) (Version: - )
Canon MX870 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX870_series) (Version: - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 4.01 - Piriform)
CuteRank 3.5.2 (HKLM-x32\...\CuteRank) (Version: 3.5.2 - CuteRank.Net)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Dropbox (HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\Dropbox) (Version: 3.10.7 - Dropbox, Inc.)
Easy Thumbnails (Remove only) (HKLM-x32\...\Easy Thumbnails_is1) (Version: 3.0 - Fookes Software)
FileZilla Client 3.13.1 (HKLM-x32\...\FileZilla Client) (Version: 3.13.1 - Tim Kosse)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free Monitor for Google 2.5 (HKLM-x32\...\Free Monitor for Google_is1) (Version: - CleverStat)
Free YouTube to MP3 Converter version 3.12.49.1022 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.49.1022 - DVDVideoSoft Ltd.)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.1 - )
Google Auto Suggest Keyword Tool (HKLM-x32\...\{8A96AFF3-582E-4A24-ACE1-9A7305D49498}) (Version: 1.0.23 - Up Spin Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.101 - Google Inc.)
Google Drive (HKLM-x32\...\{12ADFB82-D5A3-43E4-B2F4-FCD9B690315B}) (Version: 1.24.9931.5480 - Google, Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
HandBrake 0.10.2 (HKLM-x32\...\HandBrake) (Version: 0.10.2 - )
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2761 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.2.0.1006 - Intel Corporation)
Intel(R) Smart Connect Technology 2.0 x64 (HKLM\...\{54F8B6C7-9B25-4E85-A1E0-26CFB80DE787}) (Version: 2.0.1083.0 - Intel)
Intel(R) Update Manager (HKLM-x32\...\{B991A1BC-DE0F-41B3-9037-B2F948F706EC}) (Version: 3.1.1228 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.670 - Oracle)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 41.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0.1 (x86 de)) (Version: 41.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.1.5750 - Mozilla)
Mozilla Thunderbird 38.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.2.0 (x86 de)) (Version: 38.2.0 - Mozilla)
Mozilla Thunderbird 38.3.0 (x86 de) (HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\...\Mozilla Thunderbird 38.3.0 (x86 de)) (Version: 38.3.0 - Mozilla)
MyDriveConnect 4.0.2.2123 (HKLM-x32\...\MyDriveConnect) (Version: 4.0.2.2123 - TomTom)
Norton Internet Security (HKLM-x32\...\NIS) (Version: 19.1.0.28 - Symantec Corporation)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 6.2.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.48.823.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6690 - Realtek Semiconductor Corp.)
Screaming Frog SEO Spider (HKLM-x32\...\Screaming Frog SEO Spider) (Version: 5.0 - Screaming Frog Ltd)
SeoDev Synonymizer (HKLM-x32\...\{B08ABBC4-52E5-46B0-A3AA-FBE4EFEF14FC}) (Version: 1.2.0 - SeoDevGroup)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Taxpool-Buchhalter EÜR 8.00 (HKLM-x32\...\Taxpool-Buchhalter EÜR) (Version: 8.00 - psynetic® Software)
Taxpool-Buchhalter Mini 7.03 (HKLM-x32\...\Taxpool-Buchhalter Mini) (Version: 7.03 - psynetic® Software)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.45862 - TeamViewer)
TomTom HOME (HKLM-x32\...\{99072AB4-D795-44D5-9D65-E3C9F8322C97}) (Version: 2.9.7 - Ihr Firmenname)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TP-LINK Wireless Client Utility (HKLM-x32\...\{1E58B969-9BB4-4012-8D8B-D06005D1CD24}) (Version: 7.0 - TP-LINK)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132 - TuneUp Software) Hidden
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 2.1.0 (HKLM-x32\...\VLC media player) (Version: 2.1.0 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
XAMPP (HKLM-x32\...\xampp) (Version: 5.6.3-0 - Bitnami)
Xenu's Link Sleuth (HKLM-x32\...\Xenu's Link Sleuth) (Version: 1.3.8 - Tilman Hausherr)
XFast LAN v6.61 (HKLM\...\XFast LAN) (Version: 6.61 - cFos Software GmbH, Bonn)
Yahoo Community Smartbar (HKLM-x32\...\{B9836F26-C6BF-4BAA-9D03-6F12CE443A5A}) (Version: 1.6.1.828 - Linkury Inc.) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3340911722-3289926983-4188380793-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\christoph\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
==================== Wiederherstellungspunkte =========================
13-10-2015 16:47:47 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
13-10-2015 17:06:20 Windows-Sicherung
13-10-2015 18:07:40 Windows-Sicherung
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2015-03-06 21:17 - 00000855 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {25FC4C68-0CA7-4573-824D-B5E520B6B36F} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {266F641D-CC6D-486D-B465-0BB4178BF2E1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: {41DAE8DC-BE7E-44A2-B3C2-D38EF9ACA025} - \EPUpdater -> Keine Datei <==== ACHTUNG
Task: {45EEDEAC-010F-4847-B1FD-0CC8CE2A15E5} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\WSCStub.exe [2011-08-13] (Symantec Corporation)
Task: {506FDE81-4936-4D71-B65A-FE13F06ABD8A} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [2015-09-25] (Intel Corporation)
Task: {5F5F7EB6-C4E3-41E5-AE5A-6698B6F23D82} - System32\Tasks\avastBCLRestart_chrome.exe => Chrome.exe
Task: {6805744F-F94A-4962-80FE-D73B2C075D41} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3340911722-3289926983-4188380793-1000UA => C:\Users\christoph\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-17] (Dropbox, Inc.)
Task: {7454F19C-601B-437E-BF29-185DE58758D3} - System32\Tasks\avast! Emergency Update => C:\Program Files\Avast-antivir\AvastEmUpdate.exe [2015-08-31] (AVAST Software)
Task: {768B22E3-79DF-4E99-9EF3-22485E25C2DD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22] (Adobe Systems Incorporated)
Task: {776E2BE8-7E43-4745-8444-81FDEA89DF51} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {7B97285D-D7F2-4068-97F5-920C43123601} - System32\Tasks\AdobeAAMUpdater-1.0-JONGO-christoph => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {A93ABCF7-D04F-434E-AE73-89FC3F70E7E4} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\SymErr.exe [2011-08-11] (Symantec Corporation)
Task: {B6E2B555-CD80-422F-9CFA-784AEAC7D16F} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\19.1.0.28\SymErr.exe [2011-08-11] (Symantec Corporation)
Task: {BB317B69-FA70-4E98-8FDC-5620830805E6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {E31520AA-8CF8-4DA4-BB07-E30260D21A40} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3340911722-3289926983-4188380793-1000Core => C:\Users\christoph\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-17] (Dropbox, Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3340911722-3289926983-4188380793-1000Core.job => C:\Users\christoph\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3340911722-3289926983-4188380793-1000UA.job => C:\Users\christoph\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2013-10-23 19:13 - 2009-09-08 14:12 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2012-02-09 17:26 - 2012-02-09 17:26 - 00133632 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2012-02-09 17:26 - 2012-02-09 17:26 - 00048128 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2012-02-09 17:26 - 2012-02-09 17:26 - 00036864 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetDetect.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2013-03-01 19:53 - 2012-05-21 04:38 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-08-31 09:22 - 2015-08-31 09:22 - 00102864 _____ () C:\Program Files\Avast-antivir\log.dll
2015-08-31 09:22 - 2015-08-31 09:22 - 00123976 _____ () C:\Program Files\Avast-antivir\JsonRpcServer.dll
2015-10-13 16:59 - 2015-10-13 16:59 - 02994544 _____ () C:\Program Files\Avast-antivir\defs\15101300\algo.dll
2015-04-28 19:53 - 2015-04-28 19:53 - 00140288 _____ () C:\Program Files (x86)\MyDrive Connect\quazip.dll
2014-09-11 17:06 - 2014-09-11 17:06 - 00878592 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\platforms\qwindows.dll
2014-09-11 17:05 - 2014-09-11 17:05 - 00036352 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qgenericbearer.dll
2014-09-11 17:06 - 2014-09-11 17:06 - 00038912 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qnativerwifibearer.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00032256 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qdds.dll
2014-09-11 17:05 - 2014-09-11 17:05 - 00021504 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qgif.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00027648 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qicns.dll
2014-09-11 17:05 - 2014-09-11 17:05 - 00021504 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qico.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00381952 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjp2.dll
2014-09-11 17:05 - 2014-09-11 17:05 - 00204800 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjpeg.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00218112 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qmng.dll
2014-09-11 17:08 - 2014-09-11 17:08 - 00015872 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qsvg.dll
2014-09-11 17:14 - 2014-09-11 17:14 - 00015360 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtga.dll
2014-09-11 17:15 - 2014-09-11 17:15 - 00307712 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtiff.dll
2014-09-11 17:15 - 2014-09-11 17:15 - 00014848 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwbmp.dll
2014-09-11 17:15 - 2014-09-11 17:15 - 00252928 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwebp.dll
2015-10-13 17:58 - 2015-10-13 17:58 - 00071168 _____ () c:\Users\christoph\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp56ipre.dll
2015-03-04 23:45 - 2015-09-24 01:07 - 00012800 _____ () C:\Users\christoph\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 23:45 - 2015-09-24 01:07 - 00779776 _____ () C:\Users\christoph\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-31 08:33 - 2015-09-24 01:07 - 00056320 _____ () C:\Users\christoph\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 23:45 - 2015-09-24 01:07 - 00012288 _____ () C:\Users\christoph\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2015-06-02 07:21 - 2015-06-02 07:21 - 40540672 _____ () C:\Program Files\Avast-antivir\libcef.dll
2014-10-16 08:17 - 2014-10-16 08:17 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\2dace9622c68c6ce58d55a6950eeaa95\IsdiInterop.ni.dll
2013-03-01 19:55 - 2012-05-30 14:55 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-03-01 19:58 - 2012-07-18 20:55 - 01198912 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-10-02 10:23 - 2015-10-02 10:24 - 00153768 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2015-10-02 10:23 - 2015-10-02 10:24 - 00023208 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-09-26 14:49 - 2015-09-24 04:34 - 01501512 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\libglesv2.dll
2015-09-26 14:49 - 2015-09-24 04:34 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\libegl.dll
2015-09-26 14:49 - 2015-09-24 04:34 - 16487752 _____ () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.101\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\christoph\Cookies:LotgN495moN7laHWy3RTgj0AaYedq
AlternateDataStreams: C:\Users\christoph\Desktop\url_struktur_angepasst_auf_keywords_BVE.xlsx:com.dropbox.attributes
AlternateDataStreams: C:\Users\christoph\Desktop\vorschläge für Anfragen zu Veröffentlichung von Fachartikeln.xlsx:com.dropbox.attributes
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3340911722-3289926983-4188380793-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\christoph\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupreg: AdobeCS4ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: MyDriveConnect.exe => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{4A46DB03-B0DB-4CA8-A09E-2C9BA9D983BE}] => (Allow) C:\Users\christoph\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{46D92454-2686-4BB9-89E1-EA18B0CBF752}] => (Allow) C:\Users\christoph\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{F32AE586-59A0-4B5D-BBF6-B176B375A8C5}C:\programmexampp\apache\bin\httpd.exe] => (Allow) C:\programmexampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{5165E2A1-182C-4CF6-9BF3-7C805F27035E}C:\programmexampp\apache\bin\httpd.exe] => (Allow) C:\programmexampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{3E4033C6-BB89-4A4A-B2C3-63C9CA15971D}C:\programmexampp\mysql\bin\mysqld.exe] => (Allow) C:\programmexampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{65A0289E-9F9F-40EC-B2ED-C5A8A630EE5C}C:\programmexampp\mysql\bin\mysqld.exe] => (Allow) C:\programmexampp\mysql\bin\mysqld.exe
FirewallRules: [{3EA8C38B-56EC-42B7-9540-5A8580B9AC2F}] => (Allow) LPort=5353
FirewallRules: [{D1A6D241-6D38-4249-9CAC-EBB11E681D1B}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{BDC732D6-4679-4397-B812-FF720AF96A18}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{C9B135FF-2E96-4DB1-9FD1-AEFE4B691F2C}] => (Allow) LPort=7000
FirewallRules: [{2567C965-9716-4195-9990-512EDD15D631}] => (Allow) LPort=7000
FirewallRules: [{F0303EEE-8A04-4766-AC95-0D35C9C5704C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{C22BB209-B889-474D-952A-B230185678E7}C:\programmexampp\apache\bin\httpd.exe] => (Allow) C:\programmexampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{6238D4AA-FADD-4923-80C7-B72A874A1C04}C:\programmexampp\apache\bin\httpd.exe] => (Allow) C:\programmexampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{5A787136-999D-4C48-A513-3B9E34B812A0}C:\programmexampp\mysql\bin\mysqld.exe] => (Allow) C:\programmexampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{CC05FDDE-421D-4C5E-913F-AC1343077F84}C:\programmexampp\mysql\bin\mysqld.exe] => (Allow) C:\programmexampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{55B775AA-BCCC-4BDA-97C8-ACE2A78D5033}C:\users\christoph\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\christoph\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{E8E20BFE-E7B3-4C91-9800-A654E3E8E213}C:\users\christoph\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\christoph\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{799DCE59-DC36-44C5-999C-17A0321605B7}] => (Block) %ProgramFiles% (x86)\Common Files\Adobe\OOBE\PDApp\P6\adobe_licutil.exe
FirewallRules: [{05AB8BEF-5CE6-4741-B9F0-5A5C8D593749}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{FD48B5FC-1DF6-40B2-8F89-255D64AADCE9}] => (Allow) LPort=2869
FirewallRules: [{0D81A9AF-3070-42EE-B713-5094BAF667A5}] => (Allow) LPort=1900
FirewallRules: [{94D5DC94-8F67-4CF5-8A06-CA44CD20FA91}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DA3DC595-57B4-49D3-B543-BD2E91892729}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{389DAC9D-ADAB-499B-8ACB-0001765929FB}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{25A08C76-E516-4F67-972D-6A9FBEFB30CD}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{18E82371-E283-45FB-B89E-D9823F517B3B}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{91788E22-BA42-479D-B2CB-E620D09452E2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{488BF6AC-5636-47AC-BCD8-8275A082EAA2}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{C0A855EC-1DDF-42A1-9791-C554AD90A07C}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{74273CA9-34C9-416D-98E5-20A4D6718D65}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{587B12EF-ACC2-4C33-86F6-DDFB50FDB0A9}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{A6677D08-625D-4353-8AFB-42EDE6F7F73D}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [UDP Query User{4D429AEE-7043-4DE5-970F-20D42719E417}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [TCP Query User{415C9EB8-B02F-407C-8EA2-BDC2CC5E18CE}C:\xampp\mercurymail\mercury.exe] => (Allow) C:\xampp\mercurymail\mercury.exe
FirewallRules: [UDP Query User{D67264A3-50F4-454E-BF16-B0C9A1FBB54C}C:\xampp\mercurymail\mercury.exe] => (Allow) C:\xampp\mercurymail\mercury.exe
FirewallRules: [TCP Query User{572C6833-9EF7-4FF4-87F6-ED13682739AA}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{A31273FB-F16F-4B05-9931-16D7DCBD5C15}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [TCP Query User{0F10D80B-2D1D-491D-88C4-29C0414198CD}C:\programmexampp\filezillaftp\filezillaserver.exe] => (Allow) C:\programmexampp\filezillaftp\filezillaserver.exe
FirewallRules: [UDP Query User{D30787B0-E2C1-4A54-B4FF-5815158C9ECC}C:\programmexampp\filezillaftp\filezillaserver.exe] => (Allow) C:\programmexampp\filezillaftp\filezillaserver.exe
FirewallRules: [{36B532A4-A695-45CA-BDBB-136918578A8D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{40000850-2737-4510-8AF8-7EA5E18A6B1E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{B9EBAF3D-54E5-405F-9722-C3CAADA44DDB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{649439C0-C7A1-4731-AEA3-3F6491E6F8CB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{AC040415-5084-4C33-AD05-1C3A95A41E33}] => (Allow) C:\Program Files\Avast-antivir\ng\vbox\aswFe.exe
FirewallRules: [{0E0F172E-E767-485C-935F-AAE4A37C2675}] => (Allow) C:\Program Files\Avast-antivir\ng\vbox\aswFe.exe
FirewallRules: [{15FE7E72-0C0C-419E-A506-79AD6489F396}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/13/2015 05:58:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/13/2015 05:58:21 PM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2
Error: (10/13/2015 05:56:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/13/2015 05:56:12 PM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2
Error: (10/13/2015 04:53:36 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/13/2015 04:53:31 PM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2
Error: (10/13/2015 04:47:31 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (10/13/2015 04:46:13 PM) (Source: System Restore) (EventID: 8210) (User: )
Description: Unbekannter Fehler bei der Systemwiederherstellung: (Windows Update). Zusätzliche Informationen: 0xc0000022.
Error: (10/13/2015 04:46:08 PM) (Source: ISCT Agent) (EventID: 1003) (User: )
Description: CAgentState::DoPeriodicSuspendResume ****Error in initialize NetDetect, status = 0x2
Error: (10/13/2015 04:42:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Systemfehler:
=============
Error: (10/13/2015 04:53:32 PM) (Source: NetBT) (EventID: 4307) (User: )
Description: Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen der Anfangsadressen verweigerte.
Error: (10/13/2015 04:53:30 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "IKE- und AuthIP IPsec-Schlüsselerstellungsmodule" wurde mit folgendem Fehler beendet:
%%13876
Error: (10/13/2015 04:52:52 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/13/2015 04:52:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/13/2015 04:52:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/13/2015 04:52:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/13/2015 04:52:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/13/2015 04:52:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/13/2015 04:52:47 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068
Error: (10/13/2015 04:52:47 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 20%
Installierter physikalischer RAM: 16072.79 MB
Verfügbarer physikalischer RAM: 12820.88 MB
Summe virtueller Speicher: 32143.79 MB
Verfügbarer virtueller Speicher: 28685.64 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:223.47 GB) (Free:24.31 GB) NTFS
Drive e: () (Fixed) (Total:465.76 GB) (Free:242.9 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 20413723)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223.5 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 360837C5)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
14.10.2015, 19:09
| #4 |
| /// the machine /// TB-Ausbilder | Internetverbindung wird stark ausgebremst... Lade Dir bitte von hier  Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
16.10.2015, 06:38
| #5 |
| | Internetverbindung wird stark ausgebremst... Danke, werde ich durchführen und Dir Bescheid geben! |
|
16.10.2015, 19:33
| #6 |
| /// the machine /// TB-Ausbilder | Internetverbindung wird stark ausgebremst... ok.
__________________ --> Internetverbindung wird stark ausgebremst... |
|
| Themen zu Internetverbindung wird stark ausgebremst... |
| extrem, funktionier, funktioniert, inter, interne, internet, internetverbindung, irgend, maleware, meinem, prüfen, rechner, stark, tagen, troja, trojaner, verbindung, virus |
dann auf 
und dann auf 
. 
Linear-Darstellung
