Windows 7: Automatische blockierte Tabs in Chrome, Best Results entfernen. Logs als Antwort!

Tessy1993 · 29.10.2015, 16:17

Servus zusammen,

ich habe seit einiger Zeit das Problem, dass Chrome beim Surfen verschiedene Tabs automatisch öffnet. Diese Seiten habe ich aber schon mit Hilfe des "Webseite Blocher (Beta)" geblockt. Allerdings werden mir die Tabs weiterhin geöffnet, mit dem Sperrvermerk des Blochers. Einen Screenshot füge ich im Anhang bei. Jetzt tauchen auch noch Tabs auf, die von Avira geblockt werden auf. Davon einen Screenshot auch im Anhang.

Weitherhin habe ich mir bei einem Freeware Download wohl etwas eingfangen: Auf verschiedenen Seiten werde ich mit "Best Results" Ergebnissen bombardiert.

Wegen den Problemen habe ich schon etwas recherchiert. So habe ich schon Suchläufe mit Avira, Adwcleaner, FRST & GMER gemacht. Auch habe ich Defogger benutzt. Die Textdateien muss ich als Antwort auf meinen Beitrag schreiben, da sonst der Text zu lang ist.

Ansonsten dürfte es das für das Erste sein. Sollte doch noch etwas in den Dateien und Anhängen zu finden sein, dann bitte ich auch dort um Hilfe.

Vielen Dank im voraus!

Grüße aus Schnepfenbach

Niklas

Tessy1993 · 29.10.2015, 16:44

Defogger:

Code:

ATTFilter

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 14:52 on 28/10/2015 (Niklas)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

GMER:

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-10-29 01:03:28
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.GS00 596,17GB
Running: Gmer-19357.exe; Driver: C:\Users\Niklas\AppData\Local\Temp\kfldapow.sys


---- Registry - GMER 2.1 ----

Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}                                                       
Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}@iaecpkhfpoldifjela                                    0x6A 0x61 0x70 0x65 ...
Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}@haobkeonjjlheche                                      0x6B 0x61 0x61 0x66 ...
Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}@iaadefaeljpbepiocm                                    0x63 0x61 0x66 0x66 ...
Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}@dbefckonladmbppfjoalcinmfpcbgplegdlljinl              0x68 0x61 0x6A 0x64 ...
Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}@jbefckonladmbppfjoalfjjjihogefagekoapiiconidpcfcnoog  0x68 0x61 0x6A 0x64 ...
Reg  HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}@dbefckonladmbppfjoaldjanmogjoggmgjjoegbd              0x6A 0x61 0x6F 0x64 ...

---- EOF - GMER 2.1 ----

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-10-2015 02
durchgeführt von Niklas (Administrator) auf DER-PC (28-10-2015 14:58:04)
Gestartet von C:\Users\Niklas\Desktop\Trojaner Board Dateien\FRST
Geladene Profile: UpdatusUser & Niklas & Robert & Lauritz (Verfügbare Profile: UpdatusUser & Niklas & Robert & Lauritz)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Spotify Ltd) C:\Users\Niklas\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Dropbox, Inc.) C:\Users\Niklas\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Microsoft® Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Works Shared\WkCalRem.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Zedge.net) C:\Users\Niklas\AppData\Local\Apps\2.0\ZQ0TNN4V.A6N\3AQPA2Z7.QR9\zedg..tion_4cd56dcfd1799009_0001.0002_ea3f01849f5e16c3\ZedgeTonesync.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
() C:\Program Files (x86)\Microsoft Office\OfficeAdRemover.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(DivX, LLC) C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-05] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [OOTag] => C:\Program Files (x86)\Acer\OOBEOffer\ootag.exe [13856 2010-02-23] (Microsoft)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [341360 2011-09-20] (Egis Technology Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-24] (NTI Corporation)
HKLM-x32\...\Run: [OOTag] => C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe [13856 2010-02-23] (Microsoft)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [177448 2011-08-26] (CyberLink Corp.)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [Microsoft Works Portfolio] => C:\Program Files (x86)\Microsoft Works\WksSb.exe [331830 2001-10-04] (Microsoft® Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782520 2015-10-07] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [295072 2012-12-29] (RealNetworks, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-03] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1045720 2015-09-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [433160 2015-09-04] (DivX, LLC)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-08-28] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861640 2015-06-26] (DivX, LLC)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [220704 2015-09-14] (Geek Software GmbH)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [ZedgeToneSync] => C:\Users\Niklas\AppData\Local\Apps\2.0\Data\5J40E04R.DMV\JMNQMW8A.15V\zedg..tion_4cd56dcfd1799009_0001.0002_ea3f01849f5e16c3\Data\ZedgeToneSync.appref-ms -startup
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [AppleIEDAV] => C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [1326408 2013-11-15] (Apple Inc.)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [WatchMyCam] => C:\WatchMyCam\WatchMyCam.exe [8249856 2013-07-18] (www.WatchMyCam.de)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [Spotify Web Helper] => C:\Users\Niklas\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2017848 2015-07-30] (Spotify Ltd)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [Dropbox Update] => C:\Users\Niklas\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-20] (Dropbox, Inc.)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2899136 2015-08-19] (Valve Corporation)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [55349888 2015-09-04] (Skype Technologies S.A.)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-19] (Piriform Ltd)
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Run: [Microsoft Works Update Detection] => C:\Program Files (x86)\Microsoft Works\WkDetect.exe
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\Run: [Microsoft Works Update Detection] => C:\Program Files (x86)\Microsoft Works\WkDetect.exe
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\Run: [radio ffn RekorderTimer] => "C:\Program Files (x86)\radio ffn Rekorder\phonostarTimer.exe"
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\Run: [Facebook Update] => "C:\Users\Robert\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\Run: [radio ffn Rekorder] => C:\Program Files (x86)\radio ffn Rekorder\phonostarStarter.exe
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\MountPoints2: F - F:\Startme.exe
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\MountPoints2: {5d845098-a1e4-11e2-9f32-b870f4a6d40f} - F:\Startme.exe
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3696339184-2483942939-123780382-1005\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [450048 2011-09-13] ()
HKU\S-1-5-18\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [55349888 2015-09-04] (Skype Technologies S.A.)
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-10-13] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Erinnerungen in Microsoft Works-Kalender.lnk [2012-09-07]
ShortcutTarget: Erinnerungen in Microsoft Works-Kalender.lnk -> C:\Program Files (x86)\Common Files\Microsoft Shared\Works Shared\WkCalRem.exe (Microsoft® Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2012-09-07]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-03]
ShortcutTarget: Dropbox.lnk -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Office2010AdRemover.lnk [2014-06-16]
ShortcutTarget: Office2010AdRemover.lnk -> C:\Program Files (x86)\Microsoft Office\OfficeAdRemover.exe ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{803FAD05-B54E-4B2C-8FE1-9620673CBF64}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{A8CAEBFC-E3D5-4FA7-91A9-612DA3EA7AED}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{D96F033D-6611-4122-9CE5-55DD09ABEC26}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{F2BFE686-0E4A-44EB-85FE-1E0A5D4A387B}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3696339184-2483942939-123780382-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com/search?q={searchTerms}
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3696339184-2483942939-123780382-1001 -> {B68DE1A2-4354-417A-A6A4-9F34D9723C37} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2012-11-29] (RealDownloader)
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-24] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-24] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} -  Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\w5o7vqrp.default
FF Homepage: hxxps://www.facebook.com/
FF NetworkProxy: "http", "111.13.46.99"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-06-28] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2015-09-02] (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-24] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-24] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2012-12-29] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2012-11-29] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2012-11-29] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2012-11-29] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2012-12-29] (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2012-11-29] (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3696339184-2483942939-123780382-1001: @phonostar.de/radio ffn Rekorder -> C:\Program Files (x86)\radio ffn Rekorder\npphonostarDetectNP.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3696339184-2483942939-123780382-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Niklas\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3696339184-2483942939-123780382-1004: @phonostar.de/radio ffn Rekorder -> C:\Program Files (x86)\radio ffn Rekorder\npphonostarDetectNP.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3696339184-2483942939-123780382-1004: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Robert\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [Keine Datei]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\w5o7vqrp.default\Extensions\abs@avira.com [2015-10-13] [ist nicht signiert]
FF Extension: iCloud Bookmarks - C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\w5o7vqrp.default\Extensions\firefoxdav@icloud.com [2015-06-08]
FF Extension: Proxy-Listen.de - Proxyswitcher - C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\w5o7vqrp.default\Extensions\admin@proxy-listen.de.xpi [2015-07-03]
FF Extension: FILSH.net - C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\w5o7vqrp.default\Extensions\plugin@filsh.net.xpi [2013-07-26] [ist nicht signiert]
FF Extension: Download YouTube Videos as MP4 - C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\w5o7vqrp.default\Extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi [2015-06-08]
FF Extension: Adblock Plus - C:\Users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\w5o7vqrp.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-13]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-09-07] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2012-12-29] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR StartupUrls: Default -> "hxxps://www.facebook.com/","hxxp://www.plusnetwork.com/?publisher=MessengerPlus&dpid=pb2&co=TJ&userid=agentfc1e34bf-facb-4ebf-b5a3-ad8515e15f60&sp=hp&searchtype=hp&t=c0127&uid=fc1e34bf-facb-4ebf-b5a3-ad8515e15f60","hxxp://www.istartsurf.com/?type=hp&ts=1442956305&z=debb564c0ca48fbe7661dccg7z1zbo7t1w8q8edt2g&from=face&uid=TOSHIBAXMK6476GSX_529CP06KTXX529CP06KT"
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-08]
CHR Extension: (Google Drive) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Google-Suche) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-07]
CHR Extension: (iCloud-Lesezeichen) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2015-07-25]
CHR Extension: (Avira Browserschutz) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-10-21]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]
CHR Extension: (Webseite Blocher (Beta)) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\hclgegipaehbigmbhdpfapmjadbaldib [2015-09-30]
CHR Extension: (RealDownloader) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-04-28]
CHR Extension: (Easy Block Ads) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ipgbmlpgdekplafhfgjofbhfiajkleem [2015-09-19]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-28]
CHR Extension: (Google Mail) - C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-01]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2012-11-29]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-25] (Adobe Systems Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [932912 2015-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-10-07] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-10-07] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1147720 2015-10-14] (Avira Operations GmbH & Co. KG)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2010-09-17] (Firebird Project) [Datei ist nicht signiert]
R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3735552 2010-09-17] (Firebird Project) [Datei ist nicht signiert]
S2 gupdate1cf79c886f01d6b; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)
S3 gupdatem1cf79c886fd640c; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [163544 2015-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [74952 2015-10-07] (Avira Operations GmbH & Co. KG)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)
R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation)
R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation)
R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation)
R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-28 14:57 - 2015-10-28 14:58 - 00000000 ____D C:\FRST
2015-10-28 14:52 - 2015-10-28 14:52 - 00000000 _____ C:\Users\Niklas\defogger_reenable
2015-10-28 14:45 - 2015-10-28 14:54 - 00000000 ____D C:\Users\Niklas\Desktop\Trojaner Board Dateien
2015-10-25 23:57 - 2015-10-28 01:04 - 00000280 _____ C:\Windows\setupact.log
2015-10-25 23:57 - 2015-10-25 23:57 - 00000000 _____ C:\Windows\setuperr.log
2015-10-17 00:42 - 2015-10-17 00:42 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-10-14 15:08 - 2015-10-14 15:08 - 00000191 _____ C:\Users\Niklas\Desktop\Funchat Family Stream.asx
2015-10-14 13:37 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 13:37 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-12 22:21 - 2015-10-12 22:22 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-12 22:21 - 2015-10-12 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-10-12 22:21 - 2015-10-12 22:21 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-10-12 22:21 - 2015-06-18 07:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-12 22:21 - 2015-06-18 07:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-12 22:21 - 2015-06-18 07:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-10-08 01:02 - 2015-10-08 01:03 - 00000000 ____D C:\Users\Niklas\Desktop\Seggebruch
2015-10-07 23:49 - 2015-10-07 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-28 14:54 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-28 14:54 - 2009-07-14 05:45 - 00016752 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-28 14:52 - 2012-09-04 18:31 - 00000000 ____D C:\Users\Niklas
2015-10-28 14:51 - 2012-08-31 13:58 - 01082032 _____ C:\Windows\WindowsUpdate.log
2015-10-28 03:31 - 2012-09-04 19:51 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Skype
2015-10-28 03:30 - 2013-08-15 22:39 - 00000000 ____D C:\Windows\system32\MRT
2015-10-28 03:13 - 2012-09-08 00:29 - 143481208 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-10-28 01:32 - 2012-09-04 23:39 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Mp3tag
2015-10-28 01:23 - 2012-10-25 00:22 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\vlc
2015-10-28 01:09 - 2014-05-27 17:27 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-10-26 00:04 - 2012-08-31 23:51 - 00700134 _____ C:\Windows\system32\perfh007.dat
2015-10-26 00:04 - 2012-08-31 23:51 - 00149984 _____ C:\Windows\system32\perfc007.dat
2015-10-26 00:04 - 2009-07-14 06:13 - 01622300 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-26 00:01 - 2015-08-11 22:10 - 00000000 ____D C:\Program Files (x86)\Steam
2015-10-26 00:00 - 2014-06-10 22:17 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Dropbox
2015-10-25 23:59 - 2014-02-08 23:15 - 00000000 ____D C:\Users\Niklas\AppData\Local\Deployment
2015-10-25 23:58 - 2012-09-04 22:08 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2015-10-25 23:56 - 2013-01-11 15:39 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\SoftGrid Client
2015-10-20 22:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2015-10-18 01:15 - 2012-09-06 23:12 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\TS3Client
2015-10-17 19:11 - 2012-09-06 23:12 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2015-10-16 23:20 - 2013-05-20 15:15 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\FoozKids
2015-10-15 19:28 - 2013-04-01 23:32 - 00000000 ____D C:\Users\Niklas\AppData\Local\Spotify
2015-10-15 19:22 - 2013-04-01 23:32 - 00000000 ____D C:\Users\Niklas\AppData\Roaming\Spotify
2015-10-14 16:50 - 2014-03-25 23:51 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-10-14 16:00 - 2015-01-24 18:43 - 00000558 _____ C:\Windows\Tasks\Adobe Acrobat Update Task.job
2015-10-14 15:54 - 2012-06-21 20:49 - 00000000 ____D C:\Windows\sk
2015-10-13 22:59 - 2015-02-09 19:18 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-13 18:24 - 2012-09-04 18:33 - 00086584 _____ C:\Users\Niklas\AppData\Local\GDIPFONTCACHEV1.DAT
2015-10-12 22:21 - 2013-09-15 01:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-10-12 17:10 - 2013-12-08 18:03 - 00000000 ____D C:\Users\Lauritz
2015-10-12 17:10 - 2012-11-18 00:01 - 00000000 ____D C:\Users\Robert
2015-10-09 16:29 - 2015-04-14 22:41 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-10-09 16:29 - 2015-04-14 22:41 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-07 23:47 - 2013-05-07 17:39 - 00074952 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-10-07 23:47 - 2013-03-30 12:41 - 00163544 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-10-03 13:39 - 2014-04-08 20:04 - 00000000 ____D C:\Program Files (x86)\DivX
2015-10-03 13:39 - 2014-04-08 19:46 - 00000000 ____D C:\ProgramData\DivX
2015-10-03 00:11 - 2012-06-21 20:33 - 00000000 ____D C:\ProgramData\Skype
2015-10-01 12:53 - 2014-12-09 16:32 - 00001047 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-12-14 02:47 - 2013-12-14 02:47 - 0000017 _____ () C:\Users\Niklas\AppData\Local\resmon.resmoncfg
2012-08-31 14:32 - 2012-08-31 14:34 - 0015230 _____ () C:\ProgramData\ArcadeDeluxe5.log
2012-09-07 17:16 - 2012-09-07 17:20 - 0000813 _____ () C:\ProgramData\hpzinstall.log
2013-11-23 01:31 - 2013-11-23 01:31 - 0000032 _____ () C:\ProgramData\Temp.log
2015-09-22 22:00 - 2015-09-22 22:12 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
C:\Windows\Tasks\{2F30B804-8FED-4427-A580-06EACEAA7E27}.job
C:\Windows\Tasks\{39813253-D53E-4F49-B904-3211210020BE}.job
C:\Windows\Tasks\{3BB5EF68-1F88-4A0D-A747-2F0157525F44}.job
C:\Windows\Tasks\{4C15085C-EF41-481E-B06F-531E86806560}.job
C:\Windows\Tasks\{81A5F1D3-9173-4C90-9AC5-7E011B9062F2}.job
C:\Windows\Tasks\{C0E2E969-B239-43B7-8386-B68CA859C338}.job
C:\Windows\Tasks\{C549AB83-6923-4AC4-A1D3-CCB8AEA181FA}.job
C:\Windows\Tasks\{CEBCD1CE-9FDF-4E2E-BC16-F09D763897AD}.job


Einige Dateien in TEMP:
====================
C:\Users\Lauritz\AppData\Local\Temp\avgnt.exe
C:\Users\Niklas\AppData\Local\Temp\avgnt.exe
C:\Users\Niklas\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvitbxd.dll
C:\Users\Robert\AppData\Local\Temp\skype.dll
C:\Users\Robert\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2013-09-01 14:05

==================== Ende von FRST.txt ============================

Tessy1993 · 29.10.2015, 16:46

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-10-2015 02
durchgeführt von Niklas (2015-10-28 14:59:41)
Gestartet von C:\Users\Niklas\Desktop\Trojaner Board Dateien\FRST
Windows 7 Home Premium Service Pack 1 (X64) (2012-09-04 17:31:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3696339184-2483942939-123780382-500 - Administrator - Disabled)
Gast (S-1-5-21-3696339184-2483942939-123780382-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3696339184-2483942939-123780382-1007 - Limited - Enabled)
Lauritz (S-1-5-21-3696339184-2483942939-123780382-1005 - Limited - Enabled) => C:\Users\Lauritz
Niklas (S-1-5-21-3696339184-2483942939-123780382-1001 - Administrator - Enabled) => C:\Users\Niklas
Robert (S-1-5-21-3696339184-2483942939-123780382-1004 - Limited - Enabled) => C:\Users\Robert
UpdatusUser (S-1-5-21-3696339184-2483942939-123780382-1000 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.3018.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.3018.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3504 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0913.2011 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3502 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.8.800.94 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop Elements 12 (HKLM-x32\...\Adobe Photoshop Elements 12) (Version: 12.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.13) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.13.210 - Avira Operations GmbH & Co. KG)
AxySnake version 1.17 (HKLM-x32\...\AxySnake_is1) (Version:  - )
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.8.2.2 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.8.4.1 - Broadcom Corporation)
Brother MFL-Pro Suite DCP-J925DW (HKLM-x32\...\{A1B36B88-AF90-43A3-8906-6DBEE89B4FBD}) (Version: 1.1.6.0 - Brother Industries, Ltd.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.)
clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 1.0.2024.00 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8026 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.93 - DivX, LLC)
DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
Dojotech Spotify Recorder (HKLM-x32\...\{461179FC-E2AC-4CC8-AA95-82D35FB3E7EA}) (Version: 3.3 - Dojotech Software)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Dropbox (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
Elements 12 Organizer (x32 Version: 12.0 - Ihr Firmenname) Hidden
ETDWare PS/2-X64 8.0.6.3_WHQL (HKLM\...\Elantech) (Version: 8.0.6.3 - ELAN Microelectronic Corp.)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.)
F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
Facebook Video Calling 1.2.0.287 (HKLM-x32\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Fiesta Online DE (HKLM-x32\...\Fiesta Online DE) (Version: 1.05.041 - Gamigo games)
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Firebird 2.5.0.26074 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.0.26074 - Firebird Project)
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free Screen Video Recorder version 2.5.34.605 (HKLM-x32\...\Free Screen Video Recorder_is1) (Version: 2.5.34.605 - DVDVideoSoft Ltd.)
Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.4.0.1022 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
ICQ7M (HKLM-x32\...\{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}) (Version: 7.8 - ICQ)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2418 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.6137.5006 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{6F29F195-B11C-3EAD-B883-997BB29DFA17}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works 2002-Setup-Start (HKLM-x32\...\Works2002Setup) (Version:  - )
Microsoft Works 6.0 (HKLM-x32\...\{ED5EDCD0-5745-4B13-8061-58C9833FD06D}) (Version: 06.00.0000 - Microsoft Corporation)
Microsoft Works Suite-Add-Ins für Microsoft Word (HKLM-x32\...\{25F60491-F5AB-4985-9354-37C146783F35}) (Version: 2.0.0.0000 - Microsoft Corporation)
Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MP3jam 1.1.1.4 (HKLM-x32\...\MP3jam_is1) (Version: 1.1.1.4 - MP3jam)
Mp3tag v2.60 (HKLM-x32\...\Mp3tag) (Version: v2.60 - Florian Heidenreich)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{EBFC96E5-4409-426E-88B7-650ADB342E78}) (Version: 8.0.50727.42 - The Firebird Project)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
Nero 9 Essentials (HKLM-x32\...\{392b04ee-d95a-41c3-86dd-f7feb5fbfa9a}) (Version:  - Nero AG)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9002 - NTI Corporation) Hidden
Nur Entfernen der CopyTrans Suite möglich (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}) (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PDF24 Creator 7.3.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Pixelmon Launcher (HKLM-x32\...\Pixelmon Launcher 1.1.31) (Version: 1.1.31 - Ikara Software Limited)
Pixelmon Launcher (x32 Version: 1.1.31 - Ikara Software Limited) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PSE12 STI Installer (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
RadioSure (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\RadioSure) (Version:  - )
RealDownloader (x32 Version: 1.3.0 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
SAM Broadcaster (remove only) (HKLM-x32\...\SAM3) (Version:  - )
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 7.10 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.10.101 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SoftMaker-Software (HKLM-x32\...\SoftMaker-Software) (Version:  - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Spotify (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Spotify) (Version: 1.0.10.107.gd0dfca3a - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
stepnova (HKLM-x32\...\{892560AA-4F1F-46C6-95D1-0BEA659D62CB}) (Version: 1.80 - ergovia GmbH)
Strike Solitiare (x32 Version: 3.0.2.48 - WildTangent) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
ToneSync for Windows (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\c2c9648a374f64d1) (Version: 1.2.3.309 - Zedge Europe AS)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Trove (HKLM-x32\...\Steam App 304050) (Version:  - Trion Worlds)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
VirtualDJ Home FREE (HKLM-x32\...\{B515962D-C979-44AC-9912-F7BB499B4B2C}) (Version: 7.3 - Atomix Productions)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
WatchMyCam - Live Video Streaming (HKLM-x32\...\WatchMyCam_is1) (Version: 1.15.33.362 - hepasoft oHG, Germany)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Works Suite-Betriebssystem-Pack (x32 Version: 1.0.0.0000 - Microsoft Corporation) Hidden
Works-Synchronisierung (x32 Version: 1.0.0.0000 - Firmenname) Hidden
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

==================== Wiederherstellungspunkte =========================

06-10-2015 18:33:07 Windows Update
09-10-2015 16:28:51 Windows Update
13-10-2015 12:56:14 Windows Update
17-10-2015 20:00:25 Windows Update
21-10-2015 12:43:05 Windows Update
24-10-2015 17:10:52 Installiert Acer Updater
24-10-2015 17:19:40 Windows Update
28-10-2015 03:00:32 Windows Update

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2015-09-23 00:10 - 00450834 ____R C:\Windows\system32\Drivers\etc\hosts

127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	www.10sek.com
127.0.0.1	10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	www.123fporn.info
127.0.0.1	123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com
127.0.0.1	www.123moviedownload.com

Da befinden sich 15464 zusätzliche Einträge.


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {076FB1A9-384B-4EF6-80FD-17A8290A4C48} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1004 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {258B9B9D-0DEB-49C7-85AB-5F8CBF3184F1} - System32\Tasks\Works Update Detect => C:\Program Files (x86)\Microsoft Works\WkDetect.exe
Task: {2E2562F0-66DC-488F-B3A9-EE57B6FF59EE} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
Task: {3C52F16D-43ED-4A30-BEB4-5A38A5C22008} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3696339184-2483942939-123780382-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {3E84AD36-D7DE-4D84-8CEB-435534BFADB1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1001Core => C:\Users\Niklas\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {43C70473-1420-4A8F-90BC-651DD912B0B8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {4EA9F65E-C813-4DA1-917C-356E775A6F7B} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-05-10] (Hewlett-Packard)
Task: {55B5C6A5-05E5-4FEC-A241-3E5BC44AB94C} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {76FC2444-5161-49D2-895A-956CC5A517E8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1004UA => C:\Users\Robert\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {8564B9AE-84F0-42B5-A3CC-DEBAEEA1B184} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3696339184-2483942939-123780382-1004 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {92337B37-82F6-4B45-9FEF-E31FB9CA47B7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-19] (Piriform Ltd)
Task: {95C9F1DB-96A5-4AE1-AD54-9396DA852238} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1004 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {A47019EE-E5B7-4D61-961C-C746CD2FE870} - System32\Tasks\{735DF766-132D-49CA-B89F-0B9F1C71B6FC} => pcalua.exe -a C:\Users\Niklas\Desktop\QuickTimeInstaller.exe -d C:\Users\Niklas\Desktop
Task: {A77C8300-739D-492A-B1BA-84049BEE8633} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {ACD63A61-045A-40BA-BA09-66CDB3ABC42C} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {AE83F9D3-D20B-47E2-B7D3-5380F88699F4} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17] (Oracle Corporation)
Task: {B6FCBEA3-53E2-478D-9288-4E2D789E2E1C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1001UA => C:\Users\Niklas\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {B743D1BC-7DB0-418E-A599-A91F57CB5DB9} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3696339184-2483942939-123780382-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {BFE1C280-63D8-4612-B9B3-4CEEDEEFCEF1} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-08-24] (CyberLink Corp.)
Task: {D2F78784-3DBC-4C88-8705-7B7E72658D2A} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-08-24] (Acer Incorporated)
Task: {D913FEAF-F24C-4D37-95FA-157C5D48759F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1004Core => C:\Users\Robert\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {DAED3D6E-0F82-4F59-A88A-1E71A743CFBE} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3696339184-2483942939-123780382-1004 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {E970B63A-36A3-46CD-9A6F-FBA5A778A5AB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FB8B9595-D1EB-47D1-A27C-6B450D136BFC} - System32\Tasks\Works Update Find => C:\Program Files (x86)\Common Files\Microsoft Shared\Works Shared\WkUFind.exe [2001-10-04] (Microsoft® Corporation)
Task: {FBF1CD52-477A-41DE-A244-C2504003ABF8} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {FE577482-67AF-4068-B8C6-A70F4B47CD7F} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-08-24] (CyberLink)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Acrobat Update Task.job => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AdobeAAMUpdater-1.0-DER-PC-Niklas.job => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
Task: C:\Windows\Tasks\AdobeAAMUpdater-1.0-Niklas-PC-Niklas.job => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
Task: C:\Windows\Tasks\Apple Diagnostics.job => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1001Core1d0c2ed7ff8372.job => C:\Users\Niklas\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1004Core.job => C:\Users\Robert\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1004UA.job => C:\Users\Robert\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf8d48a6358f0b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfec38a3504081.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cffea853be9f1.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0426d4441e82f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0923fa120a728.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0c2eb3dba2a34.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0e403775249fc.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0f0c8130d34a0.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1001.job => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe
Task: C:\Windows\Tasks\RunOW.job => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe
Task: C:\Windows\Tasks\{2F30B804-8FED-4427-A580-06EACEAA7E27}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{39813253-D53E-4F49-B904-3211210020BE}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{3BB5EF68-1F88-4A0D-A747-2F0157525F44}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{4C15085C-EF41-481E-B06F-531E86806560}.job => c:\program files (x86)\google\chrome\application\chrome.exeKhxxp:/ui.skype.com/ui/0/7.8.0.102/de/go/
Task: C:\Windows\Tasks\{81A5F1D3-9173-4C90-9AC5-7E011B9062F2}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{C0E2E969-B239-43B7-8386-B68CA859C338}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{C549AB83-6923-4AC4-A1D3-CCB8AEA181FA}.job => c:\program files (x86)\mozilla firefox\firefox.exeMhxxp:/ui.skype.com/ui/0/6.9.73.106.456/de/
Task: C:\Windows\Tasks\{CEBCD1CE-9FDF-4E2E-BC16-F09D763897AD}.job => C:\Program Files (x86)\Skype\Phone\Skype.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2012-08-31 14:04 - 2013-08-29 23:43 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-11-29 20:31 - 2012-11-29 20:31 - 00038608 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2014-07-12 21:41 - 2005-04-22 05:36 - 00143360 _____ () C:\Windows\system32\BrSNMP64.dll
2012-06-21 20:35 - 2011-06-10 18:36 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-06-16 09:26 - 2012-04-13 20:00 - 06915951 _____ () C:\Program Files (x86)\Microsoft Office\OfficeAdRemover.exe
2015-08-19 18:10 - 2015-08-19 18:10 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2011-04-24 02:29 - 2011-04-24 02:29 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 02:29 - 2011-04-24 02:29 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 02:29 - 2011-04-24 02:29 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-07-12 21:41 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-04-02 15:45 - 2015-09-14 14:56 - 00074272 _____ () C:\Program Files (x86)\PDF24\zlib.dll
2013-04-02 15:45 - 2015-09-14 14:56 - 00051744 _____ () C:\Program Files (x86)\PDF24\OperationUI.dll
2014-10-16 19:44 - 2014-10-16 19:44 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\c152a64e30c5b94894d75ac86aa7aad2\IsdiInterop.ni.dll
2012-08-31 14:06 - 2011-04-29 23:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-10-28 01:08 - 2015-10-20 15:08 - 01532744 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libglesv2.dll
2015-10-28 01:08 - 2015-10-20 15:08 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\46.0.2490.80\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.

IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.

IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.

IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.

IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3696339184-2483942939-123780382-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3696339184-2483942939-123780382-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Lauritz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: TeamViewer9 => 2
MSCONFIG\startupreg: GoogleChromeAutoLaunch_17B538142C689CA6298E80C28D1C2356 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4
MSCONFIG\startupreg: MessengerPlusForSkypeService => "C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"
MSCONFIG\startupreg: PlusService => C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Niklas\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Niklas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{BB9D900C-0431-418E-8C0A-C231DDCD4601}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{32049F24-47B1-4DD3-8444-C00D6AD61B16}] => (Allow) LPort=2869
FirewallRules: [{F75F9F29-02E8-4A68-8A28-54916E467F3D}] => (Allow) LPort=1900
FirewallRules: [{7C12433D-E695-482E-AC41-B404C9C612A8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{17AC6D61-999B-492A-B0F8-A187266C3F9A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{A0DEB6CF-C009-49A9-9225-DFA4FFFE208A}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
FirewallRules: [{5387279B-A475-4A39-A4B6-06BDFC3C0017}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
FirewallRules: [{AA765051-3912-43BE-84DA-1D8E031CFDC4}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\CLML\CLMLSvc.exe
FirewallRules: [{14300777-AE22-4662-B6A4-37C92F8B8F88}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{026D91D9-93FA-4F0D-8741-F0C6913E0D8D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{CFE5FB46-B4C8-4337-B57D-DF6B8C069CDF}] => (Block) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [TCP Query User{6FB75837-BF91-430B-878A-D9AEA94E7263}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{D27C781B-2F85-42A6-9411-66D06567DE49}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{76C03AB0-6898-4F00-A1B0-34CA72571CA3}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{85C82862-9D6F-4E83-B8BC-B302572406D0}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{813FAA50-B182-4118-B4E9-48FFDAB5D0F6}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{717F9B8D-5B61-42AA-A46B-38F75C1E6D2B}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{2411A16C-1C89-498D-B2AA-6393E9B063DD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{C87BF8F0-AB51-4232-BFF0-A488F87B40A7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{48CDC15E-87D3-443A-BAA5-E453E7663EC8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{11217F62-93AE-4DA7-A316-0711A8839530}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{F27C19E5-1DF0-49E7-BE1C-3F2DCD478E63}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{95A1B355-2831-4F92-A9DE-D9270C12CC74}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{A85A9EBA-FDEE-4774-82C7-00DFB9C7440D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{8EBC74DA-2159-48AB-9178-C2A67C6ED05A}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{44B270C7-20AF-4865-82D1-1CE0EFA76CB0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{55CF6113-5426-44AC-8D25-6C535CD8EEFA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{C3873571-B983-4512-8D2A-875B889DB96F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{3EAAE64A-9AA6-4D43-A0AD-31DA0012F736}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{EF655BAE-31B7-4F6D-B09B-49743C03CA52}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{116E419E-E47C-40CA-A133-1A59832FF582}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{FF9FD340-4EDE-4167-8629-CF947B583FE5}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{105A3EC6-24DE-4483-A261-E2297F2E2605}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{B980FF7E-2E6B-46D0-BD99-A2F4D46544CE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{226C699B-4C55-426B-972E-680756DB9775}C:\program files (x86)\icq7m\icq.exe] => (Allow) C:\program files (x86)\icq7m\icq.exe
FirewallRules: [UDP Query User{37513782-2F2E-4A1F-9ECF-23E1A9C81049}C:\program files (x86)\icq7m\icq.exe] => (Allow) C:\program files (x86)\icq7m\icq.exe
FirewallRules: [TCP Query User{CCA8AF8A-4943-4C10-A6DC-B9E491FFF01D}C:\program files (x86)\real\realplayer\realplay.exe] => (Block) C:\program files (x86)\real\realplayer\realplay.exe
FirewallRules: [UDP Query User{C5FA3A53-7B9F-4F1C-99C7-DE7A65FA8122}C:\program files (x86)\real\realplayer\realplay.exe] => (Block) C:\program files (x86)\real\realplayer\realplay.exe
FirewallRules: [TCP Query User{5AEFC15F-F366-4015-88F6-1EF0D9AC78C8}C:\users\niklas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\niklas\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F908C96-126A-4DEA-92B8-1B3FD4A53199}C:\users\niklas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\niklas\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{8415AABF-723F-4C49-BF47-3A2E9C6F8028}C:\users\niklas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\niklas\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{BCAAB17C-B050-4675-8B5A-06E7A0D53C3B}C:\users\niklas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\niklas\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F3C230E1-7AC8-49E1-8105-CAA540AD2896}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9277D5AD-5AC6-4E13-98E8-648CEFCF3CA4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2B49D824-756A-478E-B7E3-504E6685D1DC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{23F9D13E-0913-4E8D-BA8A-BE461499FD1B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{72487EA3-4409-4136-A157-D76BDC9F5FF4}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [UDP Query User{05B64D99-1A36-45F1-8DA1-66A01F2659D8}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [TCP Query User{2DE18A98-D49E-44FB-A160-A45CFEA43F12}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [UDP Query User{60499776-5028-4251-A4BF-6028A06A1267}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [TCP Query User{21B4C9BD-8248-4E74-B4C3-61772D6B774E}C:\watchmycam\watchmycam.exe] => (Allow) C:\watchmycam\watchmycam.exe
FirewallRules: [UDP Query User{C4A31F50-0C95-4FB9-912E-7551B9CA9D95}C:\watchmycam\watchmycam.exe] => (Allow) C:\watchmycam\watchmycam.exe
FirewallRules: [{9E4CAD37-A4E1-44E7-83C5-083A6EDF3112}] => (Allow) LPort=54925
FirewallRules: [{C77F2156-2B0B-49B3-BEE7-2DF815C14620}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{08CD1220-CF35-4A86-B408-7A72886C070E}] => (Allow) C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{36C05870-880A-4DCA-A54E-4B67108D7F05}] => (Allow) C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{367E0977-966A-448C-BC7F-AB0892409750}] => (Allow) C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{2FA63972-5804-4BC0-96B9-E5762E72088E}] => (Allow) C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{35F82333-6216-46E2-B056-8E110E34B4F9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{8BF3DA07-3822-4FC7-9AFA-171CFDECC827}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{CE2C5266-5108-4C07-969F-E37AA817EF1D}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{E6CA2B34-472D-489C-B20C-B39774C6B224}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{D4DD2C73-B1BA-40B7-B7FD-350470DB923E}] => (Allow) C:\ProgramData\stepnova\Support\DeskShare.exe
FirewallRules: [{709802EE-31DA-473D-9369-E37AAEBDFDC1}] => (Allow) C:\ProgramData\stepnova\FirefoxPortable\stepnova.exe
FirewallRules: [TCP Query User{74F4B7D3-5FB4-45E5-AE39-D51E26F5F50F}D:\eigene dateien\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\eigene dateien\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{5F0687F3-2955-4959-8CC1-5572D5519B7F}D:\eigene dateien\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\eigene dateien\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{F03D48A6-2096-4628-B801-CE84E2465B45}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{64A7511C-C4F9-492B-ABB8-1355ADDA6D20}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{F421641D-20DE-4BA8-B726-C8CCA4FB9F4E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C979598C-698C-49DB-AFA9-96D7578943D4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B20BDCDF-DF02-41F4-96F2-3D476FEB73F7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E1DF32EA-0994-4940-8A5B-1631604B8D9F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{9CFD00CE-9863-435D-BF2B-9221B7ED223D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trove\GlyphClient.exe
FirewallRules: [{D875BA63-E53B-4C6B-B6A0-13291B13340F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Trove\GlyphClient.exe
FirewallRules: [TCP Query User{37158244-32AC-4257-B614-F88761FC4428}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{55C9ACED-06A4-4F15-AB81-06EDC2A91156}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{12D1972B-D1A1-4490-930E-7833643738B3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AD67A416-A364-4287-BE3F-19B097DEA9B0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E7765EB9-0FD1-41BA-9CE6-3BBCEAF1BC8E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{07D568A0-D637-4C7E-B947-A85C0C96C847}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{95C5DBC7-FBC2-448A-B46F-AB67F78EA871}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{723FF5D0-BB3E-43FC-BD67-C396F074FEA4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 19

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 18

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 17

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 16

Error: (10/28/2015 01:30:21 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 15


Systemfehler:
=============
Error: (10/21/2015 05:10:04 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 10.8.85.72
registriert werden. Der Computer mit IP-Adresse 10.8.85.86 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/15/2015 09:19:15 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/15/2015 09:19:15 PM) (Source: Schannel) (EventID: 4120) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 10. Der interne Fehlerstatus lautet: 10.

Error: (10/15/2015 08:46:01 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 10.8.85.79
registriert werden. Der Computer mit IP-Adresse 10.8.85.47 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/15/2015 08:40:51 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 10.8.85.79
registriert werden. Der Computer mit IP-Adresse 10.8.85.47 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/15/2015 08:35:41 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 10.8.85.79
registriert werden. Der Computer mit IP-Adresse 10.8.85.47 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/15/2015 08:30:31 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 10.8.85.79
registriert werden. Der Computer mit IP-Adresse 10.8.85.47 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/15/2015 08:25:21 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 10.8.85.79
registriert werden. Der Computer mit IP-Adresse 10.8.85.47 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/15/2015 08:20:06 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 10.8.85.79
registriert werden. Der Computer mit IP-Adresse 10.8.85.47 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.

Error: (10/15/2015 08:14:56 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 10.8.85.79
registriert werden. Der Computer mit IP-Adresse 10.8.85.47 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.


CodeIntegrity:
===================================
  Date: 2012-09-09 01:32:59.509
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Niklas\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-09 01:32:59.497
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Niklas\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-09 01:32:59.471
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-09 01:32:59.456
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 42%
Installierter physikalischer RAM: 8043.86 MB
Verfügbarer physikalischer RAM: 4585.15 MB
Summe virtueller Speicher: 16085.92 MB
Verfügbarer virtueller Speicher: 11823.81 MB

==================== Laufwerke ================================

Drive c: (Acer) (Fixed) (Total:288.23 GB) (Free:182.4 GB) NTFS
Drive d: (DATA) (Fixed) (Total:288.31 GB) (Free:156.29 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: C65AF392)
Partition 1: (Not Active) - (Size=19.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=288.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=288.3 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

schrauber · 30.10.2015, 20:18

hi,

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Downloade dir bitte

TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt

Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Tessy1993 · 31.10.2015, 01:10

Hallo schrauber,
vielen Dank für Deine Hilfe. Hier schon einmal die Logfile von Malwarebytes Anti-Rootkit im Anhang. Bei dem Scan wurde keine Malware gefunden.
Die Logfile zum TDSSKiller dann später.

schrauber · 31.10.2015, 18:55

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Tessy1993 · 01.11.2015, 01:31

Hey.
hier nun der LOG als CODE-Tag:

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.10.30.07
  rootkit: v2015.10.28.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18059
Niklas :: DER-PC [administrator]

30.10.2015 22:47:01
mbar-log-2015-10-30 (22-47-01).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 504484
Time elapsed: 1 hour(s), 36 minute(s), 21 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Hatte leider noch keine Zeit den TDSSKiller scannen zu lassen. Werde es aber schnellstmöglich nachholen und hier posten.
Einen schönen Sonntag!

schrauber · 01.11.2015, 07:35

ok

Tessy1993 · 01.11.2015, 14:02

Hallo Schrauber,
hier der Scan mit TDSSKiller. Dieser ist 1 mal fündig geworden. Habe Skip ausgewählt und mit Continue geschlossen:

Code:

ATTFilter

13:49:13.0873 0x0dec  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
13:49:34.0179 0x0dec  ============================================================
13:49:34.0179 0x0dec  Current date / time: 2015/11/01 13:49:34.0179
13:49:34.0179 0x0dec  SystemInfo:
13:49:34.0179 0x0dec  
13:49:34.0180 0x0dec  OS Version: 6.1.7601 ServicePack: 1.0
13:49:34.0180 0x0dec  Product type: Workstation
13:49:34.0180 0x0dec  ComputerName: DER-PC
13:49:34.0180 0x0dec  UserName: Niklas
13:49:34.0180 0x0dec  Windows directory: C:\Windows
13:49:34.0180 0x0dec  System windows directory: C:\Windows
13:49:34.0180 0x0dec  Running under WOW64
13:49:34.0180 0x0dec  Processor architecture: Intel x64
13:49:34.0180 0x0dec  Number of processors: 4
13:49:34.0180 0x0dec  Page size: 0x1000
13:49:34.0180 0x0dec  Boot type: Normal boot
13:49:34.0180 0x0dec  ============================================================
13:49:34.0646 0x0dec  KLMD registered as C:\Windows\system32\drivers\15038410.sys
13:49:35.0648 0x0dec  System UUID: {FA8280E3-C458-0D53-C5B0-3FCCBE9DDAC3}
13:49:36.0986 0x0dec  Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 ( 596.17 Gb ), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
13:49:36.0999 0x0dec  ============================================================
13:49:36.0999 0x0dec  \Device\Harddisk0\DR0:
13:49:36.0999 0x0dec  MBR partitions:
13:49:36.0999 0x0dec  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x2710800, BlocksNum 0x32000
13:49:36.0999 0x0dec  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x2742800, BlocksNum 0x24078000
13:49:36.0999 0x0dec  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x267BA800, BlocksNum 0x2409D000
13:49:36.0999 0x0dec  ============================================================
13:49:37.0039 0x0dec  C: <-> \Device\Harddisk0\DR0\Partition2
13:49:37.0099 0x0dec  D: <-> \Device\Harddisk0\DR0\Partition3
13:49:37.0202 0x0dec  ============================================================
13:49:37.0203 0x0dec  Initialize success
13:49:37.0203 0x0dec  ============================================================
13:51:03.0528 0x2044  ============================================================
13:51:03.0528 0x2044  Scan started
13:51:03.0528 0x2044  Mode: Manual; SigCheck; TDLFS; 
13:51:03.0528 0x2044  ============================================================
13:51:03.0528 0x2044  KSN ping started
13:51:06.0235 0x2044  KSN ping finished: true
13:51:07.0631 0x2044  ================ Scan system memory ========================
13:51:07.0631 0x2044  System memory - ok
13:51:07.0633 0x2044  ================ Scan services =============================
13:51:08.0009 0x2044  [ A87D604AEA360176311474C87A63BB88, B1507868C382CD5D2DBC0D62114FCFBF7A780904A2E3CA7C7C1DD0844ADA9A8F ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
13:51:08.0478 0x2044  1394ohci - ok
13:51:08.0556 0x2044  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2, FDAAB7E23012B4D31537C5BDEF245BB0A12FA060A072C250E21C68E18B22E002 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
13:51:08.0611 0x2044  ACPI - ok
13:51:08.0674 0x2044  [ 99F8E788246D495CE3794D7E7821D2CA, F91615463270AD2601F882CAED43B88E7EDA115B9FD03FC56320E48119F15F76 ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
13:51:08.0790 0x2044  AcpiPmi - ok
13:51:09.0101 0x2044  [ 430C19CB511FD6E0DDCD44B42B1810DA, 2EE9FFB0B6DEC653327D8932EC731D81FF86C64A67CD37AABD2022CF04AA487C ] AdobeActiveFileMonitor12.0 C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
13:51:09.0195 0x2044  AdobeActiveFileMonitor12.0 - ok
13:51:09.0378 0x2044  [ F6CEFEF46986DE02A3AE5D93AE32B5DC, 903EC5A7B40F4F6B2F3378EFFE8DF28667B88061CDF681C44F2E4FE39B62959E ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
13:51:09.0422 0x2044  AdobeARMservice - ok
13:51:09.0632 0x2044  [ 9B3355B29942AF67F014EA90CE1EA960, FBB155F72984045BCD99CC2059B9EDAABD3A52104C3864A290D8A355991F94D3 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
13:51:09.0674 0x2044  AdobeFlashPlayerUpdateSvc - ok
13:51:09.0771 0x2044  [ 2F6B34B83843F0C5118B63AC634F5BF4, 43E3F5FBFB5D33981AC503DEE476868EC029815D459E7C36C4ABC2D2F75B5735 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
13:51:09.0837 0x2044  adp94xx - ok
13:51:09.0928 0x2044  [ 597F78224EE9224EA1A13D6350CED962, DA7FD99BE5E3B7B98605BF5C13BF3F1A286C0DE1240617570B46FE4605E59BDC ] adpahci         C:\Windows\system32\drivers\adpahci.sys
13:51:09.0981 0x2044  adpahci - ok
13:51:10.0043 0x2044  [ E109549C90F62FB570B9540C4B148E54, E804563735153EA00A00641814244BC8A347B578E7D63A16F43FB17566EE5559 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
13:51:10.0084 0x2044  adpu320 - ok
13:51:10.0122 0x2044  [ 83BFCCAC53795E8A5055A93672D0C46C, B2B03473D950A5BA9DE59D81E7B14C1FAFF17B2A4D8A5808588F5CC21D63B291 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
13:51:10.0324 0x2044  AeLookupSvc - ok
13:51:10.0440 0x2044  [ FA886682CFC5D36718D3E436AACF10B9, F80AB4F91AA6B5C7ECCB000D8E1BC2CF776DC3D69B3D9EBC2558C19035A6B3AB ] AFD             C:\Windows\system32\drivers\afd.sys
13:51:10.0611 0x2044  AFD - ok
13:51:10.0726 0x2044  [ 608C14DBA7299D8CB6ED035A68A15799, 45360F89640BF1127C82A32393BD76205E4FA067889C40C491602F370C09282A ] agp440          C:\Windows\system32\drivers\agp440.sys
13:51:10.0758 0x2044  agp440 - ok
13:51:10.0828 0x2044  [ 3290D6946B5E30E70414990574883DDB, 0E9294E1991572256B3CDA6B031DB9F39CA601385515EE59F1F601725B889663 ] ALG             C:\Windows\System32\alg.exe
13:51:10.0945 0x2044  ALG - ok
13:51:11.0042 0x2044  [ 5812713A477A3AD7363C7438CA2EE038, A7316299470D2E57A11499C752A711BF4A71EB11C9CBA731ED0945FF6A966721 ] aliide          C:\Windows\system32\drivers\aliide.sys
13:51:11.0071 0x2044  aliide - ok
13:51:11.0114 0x2044  [ 1FF8B4431C353CE385C875F194924C0C, 3EA3A7F426B0FFC2461EDF4FDB4B58ACC9D0730EDA5B728D1EA1346EA0A02720 ] amdide          C:\Windows\system32\drivers\amdide.sys
13:51:11.0142 0x2044  amdide - ok
13:51:11.0197 0x2044  [ 7024F087CFF1833A806193EF9D22CDA9, E7F27E488C38338388103D3B7EEDD61D05E14FB140992AEE6F492FFC821BF529 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
13:51:11.0259 0x2044  AmdK8 - ok
13:51:11.0292 0x2044  [ 1E56388B3FE0D031C44144EB8C4D6217, E88CA76FD47BA0EB427D59CB9BE040DE133D89D4E62D03A8D622624531D27487 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
13:51:11.0338 0x2044  AmdPPM - ok
13:51:11.0404 0x2044  [ D4121AE6D0C0E7E13AA221AA57EF2D49, 626F43C099BD197BE56648C367B711143C2BCCE96496BBDEF19F391D52FA01D0 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
13:51:11.0439 0x2044  amdsata - ok
13:51:11.0475 0x2044  [ F67F933E79241ED32FF46A4F29B5120B, D6EF539058F159CC4DD14CA9B1FD924998FEAC9D325C823C7A2DD21FEF1DC1A8 ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
13:51:11.0518 0x2044  amdsbs - ok
13:51:11.0561 0x2044  [ 540DAF1CEA6094886D72126FD7C33048, 296578572A93F5B74E1AD443E000B79DC99D1CBD25082E02704800F886A3065F ] amdxata         C:\Windows\system32\drivers\amdxata.sys
13:51:11.0584 0x2044  amdxata - ok
13:51:11.0895 0x2044  [ 6B31C215750CD41567E962D22839EE44, FF0B92807296B88DE37F9F2EB27FF7B73AA998B98074AA54A949A2B79690AFE5 ] AntiVirMailService C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
13:51:12.0015 0x2044  AntiVirMailService - ok
13:51:12.0192 0x2044  [ 18B0643B3B504E0FDCFCE0C8743B29C7, 1D4C004AD5066F52A4AA039F5364814F8F6B04EC1F704A5A3110172AD465661C ] AntiVirSchedulerService C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
13:51:12.0252 0x2044  AntiVirSchedulerService - ok
13:51:12.0413 0x2044  [ 18B0643B3B504E0FDCFCE0C8743B29C7, 1D4C004AD5066F52A4AA039F5364814F8F6B04EC1F704A5A3110172AD465661C ] AntiVirService  C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
13:51:12.0469 0x2044  AntiVirService - ok
13:51:12.0661 0x2044  [ D84E576299C73B0B1DC477D2B99958C4, D6703C2B63B9FA87C2DA009CC7B6DF76C3603C6A9874B152D685A1B92EE2DF28 ] AntiVirWebService C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
13:51:12.0773 0x2044  AntiVirWebService - ok
13:51:12.0828 0x2044  [ 27DABFB4A6B0140C34DBEC713469592B, A355170D353AFBF0DE4EF53282F8404788FBBD0E2A1B7282B1B2925923E83141 ] AppID           C:\Windows\system32\drivers\appid.sys
13:51:12.0999 0x2044  AppID - ok
13:51:13.0036 0x2044  [ ABC373B9C6275D45F17DB559408FFD1B, 12B355393BEBE2D1D24D7A9DA5E69E03E334899407503BC1CADCF7BE39828223 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
13:51:13.0084 0x2044  AppIDSvc - ok
13:51:13.0165 0x2044  [ 3EA5DA3F459F6ED19E10166965F6892F, F5618A5FA72C5E57BCFA6F2ECB840B1AEC60C72840AF3C1D94D5FCDB5ED2BF5E ] Appinfo         C:\Windows\System32\appinfo.dll
13:51:13.0250 0x2044  Appinfo - ok
13:51:13.0388 0x2044  [ 6B73E94F9FE82D45781B8C8A09483082, C35EEAE7457168387A7C77A315524A3703ABDE49D9F23F59057315D9249D3473 ] Apple Mobile Device C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
13:51:13.0409 0x2044  Apple Mobile Device - ok
13:51:13.0460 0x2044  [ C484F8CEB1717C540242531DB7845C4E, C507CE26716EB923B864ED85E8FA0B24591E2784A2F4F0E78AEED7E9953311F6 ] arc             C:\Windows\system32\drivers\arc.sys
13:51:13.0487 0x2044  arc - ok
13:51:13.0515 0x2044  [ 019AF6924AEFE7839F61C830227FE79C, 5926B9DDFC9198043CDD6EA0B384C83B001EC225A8125628C4A45A3E6C42C72A ] arcsas          C:\Windows\system32\drivers\arcsas.sys
13:51:13.0544 0x2044  arcsas - ok
13:51:13.0752 0x2044  [ F15AB80B867D3332D5DDFB0A05B9CE04, 5A16577106246AB5DCC04FE0A0B00B7C5702557B75F958721E4C00383AB99809 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
13:51:13.0785 0x2044  aspnet_state - ok
13:51:13.0844 0x2044  [ 769765CE2CC62867468CEA93969B2242, 0D8F19D49869DF93A3876B4C2E249D12E83F9CE11DAE8917D368E292043D4D26 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
13:51:14.0046 0x2044  AsyncMac - ok
13:51:14.0110 0x2044  [ 02062C0B390B7729EDC9E69C680A6F3C, 0261683C6DC2706DCE491A1CDC954AC9C9E649376EC30760BB4E225E18DC5273 ] atapi           C:\Windows\system32\drivers\atapi.sys
13:51:14.0135 0x2044  atapi - ok
13:51:14.0218 0x2044  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
13:51:14.0368 0x2044  AudioEndpointBuilder - ok
13:51:14.0426 0x2044  [ 6968D02DC38757C3FBE7ED7C2F9670AA, C8B3115DDB32EFBE8C56C5AA78EEA05BBB77DF3F75CC2A04532EB32327E4735A ] AudioSrv        C:\Windows\System32\Audiosrv.dll
13:51:14.0479 0x2044  AudioSrv - ok
13:51:14.0553 0x2044  [ 03C6DEB5C74C8140C2167677DBE2F79A, D5C727B007C5B486DECE1A1B83D8155299DD7CB46DC8208CE9185C5BAE5CC33A ] avgntflt        C:\Windows\system32\DRIVERS\avgntflt.sys
13:51:14.0582 0x2044  avgntflt - ok
13:51:14.0651 0x2044  [ 043E5F34C3878C844568658B79B3E55C, D13D8FC5205562E02F252C0EE1AB2236C9212445D6EC3715041EBDF993CB467F ] avipbb          C:\Windows\system32\DRIVERS\avipbb.sys
13:51:14.0677 0x2044  avipbb - ok
13:51:14.0713 0x2044  [ 390184FAD8FCC1B6DA25AEBAE928C3B6, 537B0E0FAE080B55D70E990BBA0F7F22903CA340F6A42039BAD617A8ECF59119 ] avkmgr          C:\Windows\system32\DRIVERS\avkmgr.sys
13:51:14.0733 0x2044  avkmgr - ok
13:51:14.0793 0x2044  [ 080860E03F0219AF0A0377A02292741F, F0A151509BFEBFE639CC15388847EB2EDA298CFAE0AC4A1358A1472F42320249 ] avnetflt        C:\Windows\system32\DRIVERS\avnetflt.sys
13:51:14.0814 0x2044  avnetflt - ok
13:51:14.0873 0x2044  [ A6BF31A71B409DFA8CAC83159E1E2AFF, CBB83F73FFD3C3FB4F96605067739F8F7A4A40B2B05417FA49E575E95628753F ] AxInstSV        C:\Windows\System32\AxInstSV.dll
13:51:14.0981 0x2044  AxInstSV - ok
13:51:15.0053 0x2044  [ 3E5B191307609F7514148C6832BB0842, DE011CB7AA4A2405FAF21575182E0793A1D83DFFC44E9A7864D59F3D51D8D580 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
13:51:15.0130 0x2044  b06bdrv - ok
13:51:15.0187 0x2044  [ B5ACE6968304A3900EEB1EBFD9622DF2, 1DAA118D8CA3F97B34DF3D3CDA1C78EAB2ED225699FEABE89D331AE0CB7679FA ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
13:51:15.0256 0x2044  b57nd60a - ok
13:51:15.0306 0x2044  [ A424CB46A145E5AABF15621550976DF2, B6CA183FD5ED72237D2DC1F599FD04A066C06A717A2CF63AF08D3AA0A227D7BA ] b57xdbd         C:\Windows\system32\DRIVERS\b57xdbd.sys
13:51:15.0325 0x2044  b57xdbd - ok
13:51:15.0345 0x2044  [ BE4E6FD5A898812B85D5817AD9754A9F, 46A7C80283BE53F43A0D73DA3338461024DD002A7CF43660F9C7D640E0C72876 ] b57xdmp         C:\Windows\system32\DRIVERS\b57xdmp.sys
13:51:15.0361 0x2044  b57xdmp - ok
13:51:15.0717 0x2044  [ 11F844B46B631337395651ABE9C4167B, 98771B4D9DABEE4C485D718E3BB7D4EF365CA1D7CF043BE12431BC08F6D16EFD ] BCM43XX         C:\Windows\system32\DRIVERS\bcmwl664.sys
13:51:16.0042 0x2044  BCM43XX - ok
13:51:16.0144 0x2044  [ FDE360167101B4E45A96F939F388AEB0, 8D1457E866BBD645C4B9710DFBFF93405CC1193BF9AE42326F2382500B713B82 ] BDESVC          C:\Windows\System32\bdesvc.dll
13:51:16.0200 0x2044  BDESVC - ok
13:51:16.0247 0x2044  [ 16A47CE2DECC9B099349A5F840654746, 77C008AEDB07FAC66413841D65C952DDB56FE7DCA5E9EF9C8F4130336B838024 ] Beep            C:\Windows\system32\drivers\Beep.sys
13:51:16.0320 0x2044  Beep - ok
13:51:16.0412 0x2044  [ 82974D6A2FD19445CC5171FC378668A4, 075D25F47C0D2277E40AF8615571DAA5EB16B1824563632A9A7EC62505C29A4A ] BFE             C:\Windows\System32\bfe.dll
13:51:16.0614 0x2044  BFE - ok
13:51:16.0751 0x2044  [ 1EA7969E3271CBC59E1730697DC74682, D511A34D63A6E0E6E7D1879068E2CD3D87ABEAF4936B2EA8CDDAD9F79D60FA04 ] BITS            C:\Windows\System32\qmgr.dll
13:51:17.0163 0x2044  BITS - ok
13:51:17.0223 0x2044  [ 61583EE3C3A17003C4ACD0475646B4D3, 17E4BECC309C450E7E44F59A9C0BBC24D21BDC66DFBA65B8F198A00BB47A9811 ] blbdrive        C:\Windows\system32\drivers\blbdrive.sys
13:51:17.0261 0x2044  blbdrive - ok
13:51:17.0406 0x2044  [ EBBCD5DFBB1DE70E8F4AF8FA59E401FD, 17BFFC5DF609CE3B2F0CAB4BD6C118608C66A3AD86116A47E90B2BB7D8954122 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
13:51:17.0452 0x2044  Bonjour Service - ok
13:51:17.0482 0x2044  [ 6C02A83164F5CC0A262F4199F0871CF5, AD4632A6A203CB40970D848315D8ADB9C898349E20D8DF4107C2AE2703A2CF28 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
13:51:17.0589 0x2044  bowser - ok
13:51:17.0628 0x2044  [ F09EEE9EDC320B5E1501F749FDE686C8, 66691114C42E12F4CC6DC4078D4D2FA4029759ACDAF1B59D17383487180E84E3 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
13:51:17.0678 0x2044  BrFiltLo - ok
13:51:17.0696 0x2044  [ B114D3098E9BDB8BEA8B053685831BE6, 0ED23C1897F35FA00B9C2848DE4ED200E18688AA7825674888054BBC3A3EB92C ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
13:51:17.0749 0x2044  BrFiltUp - ok
13:51:17.0786 0x2044  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694, 40011138869F5496A3E78D38C9900B466B6F3877526AC22952DCD528173F4645 ] Browser         C:\Windows\System32\browser.dll
13:51:17.0858 0x2044  Browser - ok
13:51:17.0912 0x2044  [ 43BEA8D483BF1870F018E2D02E06A5BD, 4E6F5A5FD8C796A110B0DC9FF29E31EA78C04518FC1C840EF61BABD58AB10272 ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
13:51:17.0994 0x2044  Brserid - ok
13:51:18.0018 0x2044  [ A6ECA2151B08A09CACECA35C07F05B42, E2875BB7768ABAF38C3377007AA0A3C281503474D1831E396FB6599721586B0C ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
13:51:18.0065 0x2044  BrSerWdm - ok
13:51:18.0116 0x2044  [ B79968002C277E869CF38BD22CD61524, 50631836502237AF4893ECDCEA43B9031C3DE97433F594D46AF7C3C77F331983 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
13:51:18.0162 0x2044  BrUsbMdm - ok
13:51:18.0169 0x2044  [ A87528880231C54E75EA7A44943B38BF, 4C8BBB29FDA76A96840AA47A8613C15D4466F9273A13941C19507008629709C9 ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
13:51:18.0199 0x2044  BrUsbSer - ok
13:51:18.0321 0x2044  [ DB109DA005B6FE2A350C5DD7CA768DFD, 241A0BFAEFB1B165C00EE75E8CA382B5935F5DF447DAD5AE9022B2B78317668E ] BrYNSvc         C:\Program Files (x86)\Browny02\BrYNSvc.exe
13:51:18.0353 0x2044  BrYNSvc - detected UnsignedFile.Multi.Generic ( 1 )
13:51:21.0035 0x2044  Detect skipped due to KSN trusted
13:51:21.0036 0x2044  BrYNSvc - ok
13:51:21.0071 0x2044  [ 0970D8B7151E9113BF8D44CE2E954DF7, D467DFFA1668F3BE29620154A13867568C25211ED823BE6A220D2DEE7E3A1278 ] bScsiMSa        C:\Windows\system32\DRIVERS\bScsiMSa.sys
13:51:21.0099 0x2044  bScsiMSa - ok
13:51:21.0149 0x2044  [ 0C1EEE5AF32402D306874B110DE237EC, B0FE0F3B6A1E2C003E6F4B6330601C43126881262B328D7DD93AC2C0B714DC86 ] bScsiSDa        C:\Windows\system32\DRIVERS\bScsiSDa.sys
13:51:21.0180 0x2044  bScsiSDa - ok
13:51:21.0225 0x2044  [ 9DA669F11D1F894AB4EB69BF546A42E8, B498B8B6CEF957B73179D1ADAF084BBB57BB3735D810F9BE2C7B1D58A4FD25A4 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
13:51:21.0290 0x2044  BTHMODEM - ok
13:51:21.0351 0x2044  [ 95F9C2976059462CBBF227F7AAB10DE9, 2797AE919FF7606B070FB039CECDB0707CD2131DCAC09C5DF14F443D881C9F34 ] bthserv         C:\Windows\system32\bthserv.dll
13:51:21.0444 0x2044  bthserv - ok
13:51:21.0474 0x2044  [ B8BD2BB284668C84865658C77574381A, 6C55BA288B626DF172FDFEA0BD7027FAEBA1F44EF20AB55160D7C7DC6E717D65 ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
13:51:21.0565 0x2044  cdfs - ok
13:51:21.0623 0x2044  [ F036CE71586E93D94DAB220D7BDF4416, BD07AAD9E20CEAF9FC84E4977C55EA2C45604A2C682AC70B9B9A2199B6713D5B ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
13:51:21.0713 0x2044  cdrom - ok
13:51:21.0770 0x2044  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] CertPropSvc     C:\Windows\System32\certprop.dll
13:51:21.0852 0x2044  CertPropSvc - ok
13:51:21.0917 0x2044  [ D7CD5C4E1B71FA62050515314CFB52CF, 513B5A849899F379F0BC6AB3A8A05C3493C2393C95F036612B96EC6E252E1C64 ] circlass        C:\Windows\system32\drivers\circlass.sys
13:51:21.0995 0x2044  circlass - ok
13:51:22.0088 0x2044  [ 404B7DF9CA4D1CB675045AF220FF3285, 91FFADE2ABE5C48849E63134D5FFD20671FE0D1720F7D486F904391B3D142C96 ] CLFS            C:\Windows\system32\CLFS.sys
13:51:22.0135 0x2044  CLFS - ok
13:51:22.0216 0x2044  [ F13EC8A783E0CB0D6DC26A3CA848B7B8, 0809E3B71709F1343086EEB6C820543C1A7119E74EEF8AC1AEE1F81093ABEC66 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
13:51:22.0244 0x2044  clr_optimization_v2.0.50727_32 - ok
13:51:22.0308 0x2044  [ B4D73F04E9BC076F7CDAC4327DF636BB, 1ADED20D5A0D0A76E2F85CB778FD06BAB814868D35F8532E17D67045FF4770C2 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
13:51:22.0336 0x2044  clr_optimization_v2.0.50727_64 - ok
13:51:22.0461 0x2044  [ F5AB4D2E36625F355E81539239765107, 48E6AD65EEFD6C54F938F5753EF58377CDA77ADBB41CD8635F0040D61EFB92A4 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
13:51:22.0499 0x2044  clr_optimization_v4.0.30319_32 - ok
13:51:22.0521 0x2044  [ 9ACBE5EC13C2CC95833BFB7636CA8B1A, 6224DA9FB335D2A8374C60B8DEA539DD3A0E43230DB888B137B71A56EC57D6AF ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
13:51:22.0555 0x2044  clr_optimization_v4.0.30319_64 - ok
13:51:22.0591 0x2044  [ 0840155D0BDDF1190F84A663C284BD33, 696039FA63CFEB33487FAA8FD7BBDB220141E9C6E529355D768DFC87999A9C3A ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
13:51:22.0662 0x2044  CmBatt - ok
13:51:22.0691 0x2044  [ E19D3F095812725D88F9001985B94EDD, 46243C5CCC4981CAC6FA6452FFCEC33329BF172448F1852D52592C9342E0E18B ] cmdide          C:\Windows\system32\drivers\cmdide.sys
13:51:22.0716 0x2044  cmdide - ok
13:51:22.0826 0x2044  [ 27667A788130A7F7A5858DE27572E6D7, 5501D80BCCB7A811ECCED3828DFD0A5D948BBED8504E9BCC4A3BFB840DD41CBC ] CNG             C:\Windows\system32\Drivers\cng.sys
13:51:22.0903 0x2044  CNG - ok
13:51:23.0023 0x2044  [ 102DE219C3F61415F964C88E9085AD14, CD74CB703381F1382C32CF892FF2F908F4C9412E1BC77234F8FEA5D4666E1BF1 ] Compbatt        C:\Windows\system32\drivers\compbatt.sys
13:51:23.0045 0x2044  Compbatt - ok
13:51:23.0083 0x2044  [ 03EDB043586CCEBA243D689BDDA370A8, 0E4523AA332E242D5C2C61C5717DBA5AB6E42DADB5A7E512505FC2B6CC224959 ] CompositeBus    C:\Windows\system32\drivers\CompositeBus.sys
13:51:23.0251 0x2044  CompositeBus - ok
13:51:23.0274 0x2044  COMSysApp - ok
13:51:23.0312 0x2044  [ 1C827878A998C18847245FE1F34EE597, 41EF7443D8B2733AA35CAC64B4F5F74FAC8BB0DA7D3936B69EC38E2DC3972E60 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
13:51:23.0337 0x2044  crcdisk - ok
13:51:23.0383 0x2044  [ 7BC3E861F7E8EB543A630090FAE779E0, 52A538F25C853AAC9706CD0D4EBF80B1963391AA175895CFD9D44C8ABBFCFB74 ] CryptSvc        C:\Windows\system32\cryptsvc.dll
13:51:23.0505 0x2044  CryptSvc - ok
13:51:23.0697 0x2044  [ B4D1D62A09F09CB2DFD55628350CDAFB, 7DD3CE77D88B5AFAC4B6187F4CA6D50B7BD3398207163B2A1E4C76467801FF28 ] cvhsvc          C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
13:51:23.0787 0x2044  cvhsvc - ok
13:51:23.0887 0x2044  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] DcomLaunch      C:\Windows\system32\rpcss.dll
13:51:24.0037 0x2044  DcomLaunch - ok
13:51:24.0082 0x2044  [ 3CEC7631A84943677AA8FA8EE5B6B43D, 32061DAC9ED6C1EBA3B367B18D0E965AEEC2DF635DCF794EC39D086D32503AC5 ] defragsvc       C:\Windows\System32\defragsvc.dll
13:51:24.0183 0x2044  defragsvc - ok
13:51:24.0249 0x2044  [ 9BB2EF44EAA163B29C4A4587887A0FE4, 03667BC3EA5003F4236929C10F23D8F108AFCB29DB5559E751FB26DFB318636F ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
13:51:24.0432 0x2044  DfsC - ok
13:51:24.0501 0x2044  [ 43D808F5D9E1A18E5EEB5EBC83969E4E, C10D1155D71EABE4ED44C656A8F13078A8A4E850C4A8FBB92D52D173430972B8 ] Dhcp            C:\Windows\system32\dhcpcore.dll
13:51:24.0737 0x2044  Dhcp - ok
13:51:24.0929 0x2044  [ EC3F433D00365F1A9BC3411BCA7C7140, 0852D747359DE573504EBBDB99DA26D3BFA8B3C7A4836F8E3A5AD94B5571AD5C ] DiagTrack       C:\Windows\system32\diagtrack.dll
13:51:25.0112 0x2044  DiagTrack - ok
13:51:25.0135 0x2044  [ 13096B05847EC78F0977F2C0F79E9AB3, 1E44981B684F3E56F5D2439BB7FA78BD1BC876BB2265AE089AEC68F241B05B26 ] discache        C:\Windows\system32\drivers\discache.sys
13:51:25.0271 0x2044  discache - ok
13:51:25.0316 0x2044  [ 9819EEE8B5EA3784EC4AF3B137A5244C, 571BC886E87C888DA96282E381A746D273B58B9074E84D4CA91275E26056D427 ] Disk            C:\Windows\system32\drivers\disk.sys
13:51:25.0353 0x2044  Disk - ok
13:51:25.0400 0x2044  [ 16835866AAA693C7D7FCEBA8FFF706E4, 15891558F7C1F2BB57A98769601D447ED0D952354A8BB347312D034DC03E0242 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
13:51:25.0543 0x2044  Dnscache - ok
13:51:25.0592 0x2044  [ B1FB3DDCA0FDF408750D5843591AFBC6, AB6AD9C5E7BA2E3646D0115B67C4800D1CB43B4B12716397657C7ADEEE807304 ] dot3svc         C:\Windows\System32\dot3svc.dll
13:51:25.0721 0x2044  dot3svc - ok
13:51:25.0780 0x2044  [ B42ED0320C6E41102FDE0005154849BB, 4DB872E23AD049C3C9FDC0759FC58BFA60DA91B18BC82B611BFA300D26DDFC7A ] Dot4            C:\Windows\system32\DRIVERS\Dot4.sys
13:51:25.0844 0x2044  Dot4 - ok
13:51:25.0913 0x2044  [ E9F5969233C5D89F3C35E3A66A52A361, C4BD35795C78FB11E6022372CB25DEB570730EFDAD3DC1584368235FF622638C ] Dot4Print       C:\Windows\system32\DRIVERS\Dot4Prt.sys
13:51:25.0968 0x2044  Dot4Print - ok
13:51:25.0994 0x2044  [ FD05A02B0370BC3000F402E543CA5814, 089B1113E640F495F470E8F57060B89546270481B309DC8ED3C3D13A849076A3 ] dot4usb         C:\Windows\system32\DRIVERS\dot4usb.sys
13:51:26.0048 0x2044  dot4usb - ok
13:51:26.0092 0x2044  [ B26F4F737E8F9DF4F31AF6CF31D05820, 394BBBED4EC7FAD4110F62A43BFE0801D4AC56FFAC6C741C69407B26402311C7 ] DPS             C:\Windows\system32\dps.dll
13:51:26.0207 0x2044  DPS - ok
13:51:26.0259 0x2044  [ 9B19F34400D24DF84C858A421C205754, 967AF267B4124BADA8F507CEBF25F2192D146A4D63BE71B45BFC03C5DA7F21A7 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
13:51:26.0319 0x2044  drmkaud - ok
13:51:26.0439 0x2044  [ 9DD3A22F804697606C2B7FF9E912FF6B, BBE2FC0D554030BA9E3A96CC4A360D61DBCCAA1D81BD7547809F29A3AF0B3A25 ] DsiWMIService   C:\Program Files (x86)\Launch Manager\dsiwmis.exe
13:51:26.0479 0x2044  DsiWMIService - ok
13:51:26.0605 0x2044  [ 87CE5C8965E101CCCED1F4675557E868, 077D98F0F130B2FC710208BA34016EF2B2506EE2BD71740B228145E34A3046F1 ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
13:51:26.0714 0x2044  DXGKrnl - ok
13:51:26.0762 0x2044  [ EDC6E9C057C9D7F83EEA22B4CEF5DCAD, 967829CE37158020F6026C588260FCFC6F9852DDDACD622FAF7AB75121DF5B3D ] E1G60           C:\Windows\system32\DRIVERS\E1G6032E.sys
13:51:26.0834 0x2044  E1G60 - ok
13:51:26.0895 0x2044  [ E2DDA8726DA9CB5B2C4000C9018A9633, 0C967DBC3636A76A696997192A158AA92A1AF19F01E3C66D5BF91818A8FAEA76 ] EapHost         C:\Windows\System32\eapsvc.dll
13:51:27.0003 0x2044  EapHost - ok
13:51:27.0347 0x2044  [ DC5D737F51BE844D8C82C695EB17372F, 6D4022D9A46EDE89CEF0FAEADCC94C903234DFC460C0180D24FF9E38E8853017 ] ebdrv           C:\Windows\system32\drivers\evbda.sys
13:51:27.0647 0x2044  ebdrv - ok
13:51:27.0699 0x2044  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] EFS             C:\Windows\System32\lsass.exe
13:51:27.0801 0x2044  EFS - ok
13:51:27.0867 0x2044  [ 5332EC2BA1C112BD4BB1F38127848FEF, 156585CE4011546B20EDD20D04E639A0788B1DE6455B23B94E2CD31BA725FE3C ] EgisTec Ticket Service C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
13:51:27.0898 0x2044  EgisTec Ticket Service - ok
13:51:28.0034 0x2044  [ C4002B6B41975F057D98C439030CEA07, 3D2484FBB832EFB90504DD406ED1CF3065139B1FE1646471811F3A5679EF75F1 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
13:51:28.0138 0x2044  ehRecvr - ok
13:51:28.0172 0x2044  [ 4705E8EF9934482C5BB488CE28AFC681, 359E9EC5693CE0BE89082E1D5D8F5C5439A5B985010FF0CB45C11E3CFE30637D ] ehSched         C:\Windows\ehome\ehsched.exe
13:51:28.0223 0x2044  ehSched - ok
13:51:28.0303 0x2044  [ 0E5DA5369A0FCAEA12456DD852545184, 9A64AC5396F978C3B92794EDCE84DCA938E4662868250F8C18FA7C2C172233F8 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
13:51:28.0359 0x2044  elxstor - ok
13:51:28.0488 0x2044  [ 48425C93B6F36529707206E4FA680CF3, 328BD59DEDFAD359EF79CCFBC2AD3E9C95657EC616AE0611F5EFEB34B810692A ] ePowerSvc       C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
13:51:28.0564 0x2044  ePowerSvc - ok
13:51:28.0589 0x2044  [ 34A3C54752046E79A126E15C51DB409B, 7D5B5E150C7C73666F99CBAFF759029716C86F16B927E0078D77F8A696616D75 ] ErrDev          C:\Windows\system32\drivers\errdev.sys
13:51:28.0623 0x2044  ErrDev - ok
13:51:28.0711 0x2044  [ DBAA0C650C9549DC5C599D1E81DEDAAD, C8DF68CDACEF27C91CFD1FE8032A8DAF830D9E77C573C25DE5D41FC3DB824ABA ] ETD             C:\Windows\system32\DRIVERS\ETD.sys
13:51:28.0738 0x2044  ETD - ok
13:51:28.0790 0x2044  [ 4166F82BE4D24938977DD1746BE9B8A0, 24121751B7306225AD1C808442D7B030DEF377E9316AA0A3C5C7460E87317881 ] EventSystem     C:\Windows\system32\es.dll
13:51:28.0918 0x2044  EventSystem - ok
13:51:28.0971 0x2044  [ A510C654EC00C1E9BDD91EEB3A59823B, 76CD277730F7B08D375770CD373D786160F34D1481AF0536BA1A5D2727E255F5 ] exfat           C:\Windows\system32\drivers\exfat.sys
13:51:29.0065 0x2044  exfat - ok
13:51:29.0095 0x2044  [ 0ADC83218B66A6DB380C330836F3E36D, 798D6F83B5DBCC1656595E0A96CF12087FCCBE19D1982890D0CE5F629B328B29 ] fastfat         C:\Windows\system32\drivers\fastfat.sys
13:51:29.0173 0x2044  fastfat - ok
13:51:29.0257 0x2044  [ DBEFD454F8318A0EF691FDD2EAAB44EB, 7F52AE222FF28503B6FC4A5852BD0CAEAF187BE69AF4B577D3DE474C24366099 ] Fax             C:\Windows\system32\fxssvc.exe
13:51:29.0410 0x2044  Fax - ok
13:51:29.0446 0x2044  [ D765D19CD8EF61F650C384F62FAC00AB, 9F0A483A043D3BA873232AD3BA5F7BF9173832550A27AF3E8BD433905BD2A0EE ] fdc             C:\Windows\system32\drivers\fdc.sys
13:51:29.0484 0x2044  fdc - ok
13:51:29.0530 0x2044  [ 0438CAB2E03F4FB61455A7956026FE86, 6D4DDC2973DB25CE0C7646BC85EFBCC004EBE35EA683F62162AE317C6F1D8DFE ] fdPHost         C:\Windows\system32\fdPHost.dll
13:51:29.0611 0x2044  fdPHost - ok
13:51:29.0634 0x2044  [ 802496CB59A30349F9A6DD22D6947644, 52D59D3D628D5661F83F090F33F744F6916E0CC1F76E5A33983E06EB66AE19F8 ] FDResPub        C:\Windows\system32\fdrespub.dll
13:51:29.0712 0x2044  FDResPub - ok
13:51:29.0735 0x2044  [ 655661BE46B5F5F3FD454E2C3095B930, 549C8E2A2A37757E560D55FFA6BFDD838205F17E40561E67F0124C934272CD1A ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
13:51:29.0757 0x2044  FileInfo - ok
13:51:29.0781 0x2044  [ 5F671AB5BC87EEA04EC38A6CD5962A47, 6B61D3363FF3F9C439BD51102C284972EAE96ACC0683B9DC7E12D25D0ADC51B6 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
13:51:29.0872 0x2044  Filetrace - ok
13:51:29.0959 0x2044  [ 1A18EBD87AA9FBF6EFE8CFADA08D0275, 9D355F0F6826E1749341B4C8B7F17722C8C5BFE01EA7DA05D2416F964353C746 ] FirebirdGuardianDefaultInstance C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe
13:51:29.0969 0x2044  FirebirdGuardianDefaultInstance - detected UnsignedFile.Multi.Generic ( 1 )
13:51:32.0551 0x2044  Detect skipped due to KSN trusted
13:51:32.0552 0x2044  FirebirdGuardianDefaultInstance - ok
13:51:32.0955 0x2044  [ 53C740150C082AAF3C7D21C1D6A9FF98, 62FD4087EC719744D4D89C6C990331ADCC376C2D86D16D7D280B1DFA49E52381 ] FirebirdServerDefaultInstance C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe
13:51:33.0286 0x2044  FirebirdServerDefaultInstance - detected UnsignedFile.Multi.Generic ( 1 )
13:51:35.0888 0x2044  Detect skipped due to KSN trusted
13:51:35.0890 0x2044  FirebirdServerDefaultInstance - ok
13:51:35.0990 0x2044  [ BB0667B0171B632B97EA759515476F07, 07A123B2182D5813D2898928C231638353CF086606E9D5A5AF4A2A73E17CEC27 ] FLEXnet Licensing Service C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
13:51:36.0064 0x2044  FLEXnet Licensing Service - ok
13:51:36.0115 0x2044  [ C172A0F53008EAEB8EA33FE10E177AF5, 9175A95B323696D1B35C9EFEB7790DD64E6EE0B7021E6C18E2F81009B169D77B ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
13:51:36.0161 0x2044  flpydisk - ok
13:51:36.0203 0x2044  [ DA6B67270FD9DB3697B20FCE94950741, F621A4462C9F2904063578C427FAF22D7D66AE9967605C11C798099817CE5331 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
13:51:36.0247 0x2044  FltMgr - ok
13:51:36.0370 0x2044  [ D5A775990A7C202A037378FDBCDB6141, 27AD242914FAFB7A27B3045C0F0F6AFE6873FE331A51D8BB29A63B5D84C72EFB ] FontCache       C:\Windows\system32\FntCache.dll
13:51:36.0559 0x2044  FontCache - ok
13:51:36.0606 0x2044  [ A8B7F3818AB65695E3A0BB3279F6DCE6, 89FCF10F599767E67A1E011753E34DA44EAA311F105DBF69549009ED932A60F0 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
13:51:36.0629 0x2044  FontCache3.0.0.0 - ok
13:51:36.0653 0x2044  [ D43703496149971890703B4B1B723EAC, F06397B2EDCA61629249D2EF1CBB7827A8BEAB8488246BD85EF6AE1363C0DA6E ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
13:51:36.0678 0x2044  FsDepends - ok
13:51:36.0707 0x2044  [ 6BD9295CC032DD3077C671FCCF579A7B, 83622FBB0CB923798E7E584BF53CAAF75B8C016E3FF7F0FA35880FF34D1DFE33 ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
13:51:36.0729 0x2044  Fs_Rec - ok
13:51:36.0801 0x2044  [ 8F6322049018354F45F05A2FD2D4E5E0, 73BF0FB4EBD7887E992DDEBB79E906958D6678F8D1107E8C368F5A0514D80359 ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
13:51:36.0843 0x2044  fvevol - ok
13:51:36.0879 0x2044  [ 8C778D335C9D272CFD3298AB02ABE3B6, 85F0B13926B0F693FA9E70AA58DE47100E4B6F893772EBE4300C37D9A36E6005 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
13:51:36.0905 0x2044  gagp30kx - ok
13:51:36.0996 0x2044  [ C403C5DB49A0F9AAF4F2128EDC0106D8, 3C6948B63278022D8182F773C5FA15784514F76C1546118DDBADBA322B962D12 ] GamesAppService C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
13:51:37.0024 0x2044  GamesAppService - ok
13:51:37.0055 0x2044  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM     C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
13:51:37.0073 0x2044  GEARAspiWDM - ok
13:51:37.0153 0x2044  [ 277BBC7E1AA1EE957F573A10ECA7EF3A, 2EE60B924E583E847CC24E78B401EF95C69DB777A5B74E1EC963E18D47B94D24 ] gpsvc           C:\Windows\System32\gpsvc.dll
13:51:37.0284 0x2044  gpsvc - ok
13:51:37.0367 0x2044  [ C9B2D1D3F86FD3673EF847DEF73B6F9E, 9D3822A6464F685F770F8D02A8AE623A676888F135E8425C3BAF1CC077429A7F ] GREGService     C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
13:51:37.0385 0x2044  GREGService - ok
13:51:37.0539 0x2044  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate1cf79c886f01d6b C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
13:51:37.0566 0x2044  gupdate1cf79c886f01d6b - ok
13:51:37.0600 0x2044  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem1cf79c886fd640c C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
13:51:37.0625 0x2044  gupdatem1cf79c886fd640c - ok
13:51:37.0665 0x2044  [ 1E6438D4EA6E1174A3B3B1EDC4DE660B, F9995CFEC7BBFE10B06EEE04CA6B49658275C43096E57747BFF9C2C31A0F9011 ] hamachi         C:\Windows\system32\DRIVERS\hamachi.sys
13:51:37.0688 0x2044  hamachi - ok
13:51:37.0733 0x2044  [ F2523EF6460FC42405B12248338AB2F0, B2F3DE8DE1F512D871BC2BC2E8D0E33AB03335BFBC07627C5F88B65024928E19 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
13:51:37.0806 0x2044  hcw85cir - ok
13:51:37.0888 0x2044  [ 975761C778E33CD22498059B91E7373A, 8304E15FBE6876BE57263A03621365DA8C88005EAC532A770303C06799D915D9 ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
13:51:37.0949 0x2044  HdAudAddService - ok
13:51:37.0990 0x2044  [ 97BFED39B6B79EB12CDDBFEED51F56BB, 3CF981D668FB2381E52AF2E51E296C6CFB47B0D62249645278479D0111A47955 ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
13:51:38.0057 0x2044  HDAudBus - ok
13:51:38.0082 0x2044  [ 78E86380454A7B10A5EB255DC44A355F, 11F3ED7ACFFA3024B9BD504F81AC39F5B4CED5A8A425E8BADF7132EFEDB9BD64 ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
13:51:38.0134 0x2044  HidBatt - ok
13:51:38.0173 0x2044  [ 7FD2A313F7AFE5C4DAB14798C48DD104, 94CBFD4506CBDE4162CEB3367BAB042D19ACA6785954DC0B554D4164B9FCD0D4 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
13:51:38.0218 0x2044  HidBth - ok
13:51:38.0240 0x2044  [ 0A77D29F311B88CFAE3B13F9C1A73825, 8615DC6CEFB591505CE16E054A71A4F371B827DDFD5E980777AB4233DCFDA01D ] HidIr           C:\Windows\system32\drivers\hidir.sys
13:51:38.0282 0x2044  HidIr - ok
13:51:38.0314 0x2044  [ BD9EB3958F213F96B97B1D897DEE006D, 4D01CBF898B528B3A4E5A683DF2177300AFABD7D4CB51F1A7891B1B545499631 ] hidserv         C:\Windows\system32\hidserv.dll
13:51:38.0405 0x2044  hidserv - ok
13:51:38.0509 0x2044  [ 9592090A7E2B61CD582B612B6DF70536, FD11D5E02C32D658B28FCC35688AB66CCB5D3A0A0D74C82AE0F0B6C67B568A0F ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
13:51:38.0574 0x2044  HidUsb - ok
13:51:38.0616 0x2044  [ 387E72E739E15E3D37907A86D9FF98E2, 9935BE2E58788E79328293AF2F202CB0F6042441B176F75ACC5AEA93C8E05531 ] hkmsvc          C:\Windows\system32\kmsvc.dll
13:51:38.0709 0x2044  hkmsvc - ok
13:51:38.0742 0x2044  [ EFDFB3DD38A4376F93E7985173813ABD, 70402FA73A5A2A8BB557AAC8F531E373077D28DE5F40A1F3F14B940BE01CD2E1 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
13:51:38.0816 0x2044  HomeGroupListener - ok
13:51:38.0857 0x2044  [ 908ACB1F594274965A53926B10C81E89, 7D34A742AC486294D82676F8465A3EF26C8AC3317C32B63F62031CB007CFC208 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
13:51:38.0905 0x2044  HomeGroupProvider - ok
13:51:39.0062 0x2044  [ 1DAE5C46D42B02A6D5862E1482EFB390, 90B14E0A8376AE51872D89C141E88AE144B742805F94B4F7948E295322C78B9D ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
13:51:39.0115 0x2044  hpqcxs08 - detected UnsignedFile.Multi.Generic ( 1 )
13:51:41.0708 0x2044  Detect skipped due to KSN trusted
13:51:41.0708 0x2044  hpqcxs08 - ok
13:51:41.0797 0x2044  [ 99E8EEF42FE2F4AF29B08C3355DD7685, D57BC2148653DA5596FB49F1086D165B11C9F6C644608202C08305D3C8499CFE ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
13:51:41.0848 0x2044  hpqddsvc - detected UnsignedFile.Multi.Generic ( 1 )
13:51:44.0467 0x2044  Detect skipped due to KSN trusted
13:51:44.0467 0x2044  hpqddsvc - ok
13:51:44.0518 0x2044  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC, E9E6A1665740CFBC2DD321010007EF42ABA2102AEB9772EE8AA3354664B1E205 ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
13:51:44.0550 0x2044  HpSAMD - ok
13:51:44.0666 0x2044  [ F61634BEC53F73702A10DE69F6DCAF57, BBA7344CF3AB96A46D1A6F1D50F2758EA8D097FE558C38B4EF45C8C334AF96E1 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
13:51:44.0803 0x2044  HTTP - ok
13:51:44.0826 0x2044  [ A5462BD6884960C9DC85ED49D34FF392, 53E65841AF5B06A2844D0BB6FC4DD3923A323FFA0E4BFC89B3B5CAFB592A3D53 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
13:51:44.0859 0x2044  hwpolicy - ok
13:51:44.0910 0x2044  [ FA55C73D4AFFA7EE23AC4BE53B4592D3, 65CDDC62B89A60E942C5642C9D8B539EFB69DA8069B4A2E54978154B314531CD ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
13:51:44.0952 0x2044  i8042prt - ok
13:51:45.0063 0x2044  [ 26CF4275034214ECEDD8EC17B0A18A99, 95A08C63971C28F1BC97040C0ADA247E3B43DE7D937B14E33A394B955D0AC8B7 ] iaStor          C:\Windows\system32\DRIVERS\iaStor.sys
13:51:45.0130 0x2044  iaStor - ok
13:51:45.0213 0x2044  [ E79A8E33BD136D14BAE1FA20EB2EF124, 54AD784570282FEF21021BE76C57EE878EC6FF6423CE2FFC3A4372AF6C3112D4 ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
13:51:45.0245 0x2044  IAStorDataMgrSvc - ok
13:51:45.0312 0x2044  [ AAAF44DB3BD0B9D1FB6969B23ECC8366, 805AA4A9464002D1AB3832E4106B2AAA1331F4281367E75956062AAE99699385 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
13:51:45.0377 0x2044  iaStorV - ok
13:51:45.0497 0x2044  [ C98A5B9D932430AD8EEBD3EF73756EF7, DF7E1D391A0F3345AD61154363922C27BD557DEEACE395A6A8A8A16BFD1BB9A8 ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
13:51:45.0594 0x2044  idsvc - ok
13:51:45.0663 0x2044  IEEtwCollectorService - ok
13:51:46.0698 0x2044  [ 9937600A1584FF00565D5379EB4C9EDB, CF03333E9E7BD940B27194A9CF21ED8A6A10B698B545A898291976F650FC2675 ] igfx            C:\Windows\system32\DRIVERS\igdkmd64.sys
13:51:47.0866 0x2044  igfx - ok
13:51:47.0925 0x2044  [ 5C18831C61933628F5BB0EA2675B9D21, 5CD9DE2F8C0256623A417B5C55BF55BB2562BD7AB2C3C83BB3D9886C2FBDA4E4 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
13:51:47.0950 0x2044  iirsp - ok
13:51:48.0074 0x2044  [ 344789398EC3EE5A4E00C52B31847946, 3DA5F08E4B46F4E63456AA588D49E39A6A09A97D0509880C00F327623DB6122D ] IKEEXT          C:\Windows\System32\ikeext.dll
13:51:48.0152 0x2044  IKEEXT - ok
13:51:48.0385 0x2044  [ CB7DADEF3D83FE2C12655A0BDCBA99F2, AD55A578986F008ED01635D3BB26414D71F418640099BFA92D9CABAB6A88E01D ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHD64.sys
13:51:48.0606 0x2044  IntcAzAudAddService - ok
13:51:48.0698 0x2044  [ FC727061C0F47C8059E88E05D5C8E381, C7A3782F5D86C7FDE57AA1F2EE81638C5FC3072ACC6E572BA2EC7B3CFF389800 ] IntcDAud        C:\Windows\system32\DRIVERS\IntcDAud.sys
13:51:48.0740 0x2044  IntcDAud - ok
13:51:48.0773 0x2044  [ F00F20E70C6EC3AA366910083A0518AA, E2F3E9FFD82C802C8BAC309893A3664ACF16A279959C0FDECCA64C3D3C60FD22 ] intelide        C:\Windows\system32\drivers\intelide.sys
13:51:48.0793 0x2044  intelide - ok
13:51:48.0855 0x2044  [ ADA036632C664CAA754079041CF1F8C1, F2386CC09AC6DE4C54189154F7D91C1DB7AA120B13FAE8BA5B579ACF99FCC610 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
13:51:48.0897 0x2044  intelppm - ok
13:51:48.0936 0x2044  [ 098A91C54546A3B878DAD6A7E90A455B, 044CCE2A0DF56EBE1EFD99B4F6F0A5B9EE12498CA358CF4B2E3A1CFD872823AA ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
13:51:49.0022 0x2044  IPBusEnum - ok
13:51:49.0067 0x2044  [ C9F0E1BD74365A8771590E9008D22AB6, 728BC5A6AAE499FDC50EB01577AF16D83C2A9F3B09936DD2A89C01E074BA8E51 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
13:51:49.0130 0x2044  IpFilterDriver - ok
13:51:49.0218 0x2044  [ 08C2957BB30058E663720C5606885653, E13EDF6701512E2A9977A531454932CA5023087CB50E1D2F416B8BCDD92B67BE ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
13:51:49.0321 0x2044  iphlpsvc - ok
13:51:49.0345 0x2044  [ 0FC1AEA580957AA8817B8F305D18CA3A, 7161E4DE91AAFC3FA8BF24FAE4636390C2627DB931505247C0D52C75A31473D9 ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
13:51:49.0381 0x2044  IPMIDRV - ok
13:51:49.0399 0x2044  [ AF9B39A7E7B6CAA203B3862582E9F2D0, 67128BE7EADBE6BD0205B050F96E268948E8660C4BAB259FB0BE03935153D04E ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
13:51:49.0489 0x2044  IPNAT - ok
13:51:49.0653 0x2044  [ 835FC2EA0631B734BB06C12B0665F01D, B8A8B0148C6C3AFC40835B44E3D6508CB9EEE8AC430A7904711C8B51C2116A8D ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
13:51:49.0701 0x2044  iPod Service - ok
13:51:49.0753 0x2044  [ 3ABF5E7213EB28966D55D58B515D5CE9, A352BCC5B6B9A28805B15CAFB235676F1FAFF0D2394F88C03089EB157D6188AE ] IRENUM          C:\Windows\system32\drivers\irenum.sys
13:51:49.0797 0x2044  IRENUM - ok
13:51:49.0815 0x2044  [ 2F7B28DC3E1183E5EB418DF55C204F38, D40410A760965925D6F10959B2043F7BD4F68EAFCF5E743AF11AD860BD136548 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
13:51:49.0845 0x2044  isapnp - ok
13:51:49.0903 0x2044  [ 96BB922A0981BC7432C8CF52B5410FE6, 236C05509B1040059B15021CBBDBDAF3B9C0F00910142BE5887B2C7561BAAFBA ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
13:51:49.0951 0x2044  iScsiPrt - ok
13:51:50.0035 0x2044  [ 455B75C19BF3F1F2EE3AC10E1169826C, C8CE6DE48E0B4621F2851A994261FA787556A27F9868A8859E5E8A8354028257 ] k57nd60a        C:\Windows\system32\DRIVERS\k57nd60a.sys
13:51:50.0089 0x2044  k57nd60a - ok
13:51:50.0141 0x2044  [ BC02336F1CBA7DCC7D1213BB588A68A5, 450C5BAD54CCE2AFCDFF1B6E7F8E1A8446D9D3255DF9D36C29A8F848048AAD93 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
13:51:50.0172 0x2044  kbdclass - ok
13:51:50.0219 0x2044  [ 0705EFF5B42A9DB58548EEC3B26BB484, 86C6824ED7ED6FA8F306DB6319A0FD688AA91295AE571262F9D8E96A32225E99 ] kbdhid          C:\Windows\system32\DRIVERS\kbdhid.sys
13:51:50.0253 0x2044  kbdhid - ok
13:51:50.0278 0x2044  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] KeyIso          C:\Windows\system32\lsass.exe
13:51:50.0311 0x2044  KeyIso - ok
13:51:50.0349 0x2044  [ 3A8C03156C3E31E70EF84E48CA179B46, E25E43D53BB6EE1B5F34C95B4FAD111B37A36367B8D047B10FC614DEE13658E2 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
13:51:50.0382 0x2044  KSecDD - ok
13:51:50.0411 0x2044  [ C6330F7C2E92A00E6773E82F79078AFC, D8B851BF4FCE85F2A269F0B46BC7EC5A118FCFDACE8460E7B54C1A7CE306774A ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
13:51:50.0447 0x2044  KSecPkg - ok
13:51:50.0498 0x2044  [ 6869281E78CB31A43E969F06B57347C4, 866A23E69B32A78D378D6CB3B3DA3695FFDFF0FEC3C9F68C8C3F988DF417044B ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
13:51:50.0579 0x2044  ksthunk - ok
13:51:50.0655 0x2044  [ 6AB66E16AA859232F64DEB66887A8C9C, 5F2B579BEA8098A2994B0DECECDAE7B396E7B5DC5F09645737B9F28BEEA77FFF ] KtmRm           C:\Windows\system32\msdtckrm.dll
13:51:50.0781 0x2044  KtmRm - ok
13:51:50.0888 0x2044  [ D9F42719019740BAA6D1C6D536CBDAA6, 8757599D0AE5302C4CE50861BEBA3A8DD14D7B0DBD916FD5404133688CDFCC40 ] LanmanServer    C:\Windows\system32\srvsvc.dll
13:51:50.0975 0x2044  LanmanServer - ok
13:51:51.0037 0x2044  [ 851A1382EED3E3A7476DB004F4EE3E1A, B1C67F47DD594D092E6E258F01DF5E7150227CE3131A908A244DEE9F8A1FABF9 ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
13:51:51.0130 0x2044  LanmanWorkstation - ok
13:51:51.0233 0x2044  [ 93B73DED2BC688F140C6AE2FBAD45789, B6859BC5D309B99BCCDC3717108B714497AAE9C5B26CE5B201344A41FC4CFF9D ] Live Updater Service C:\Program Files\Acer\Acer Updater\UpdaterService.exe
13:51:51.0262 0x2044  Live Updater Service - ok
13:51:51.0336 0x2044  [ 1538831CF8AD2979A04C423779465827, E1729B0CC4CEEE494A0B8817A8E98FF232E3A32FB023566EF0BC71A090262C0C ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
13:51:51.0412 0x2044  lltdio - ok
13:51:51.0477 0x2044  [ C1185803384AB3FEED115F79F109427F, 0414FE73532DCAB17E906438A14711E928CECCD5F579255410C62984DD652700 ] lltdsvc         C:\Windows\System32\lltdsvc.dll
13:51:51.0590 0x2044  lltdsvc - ok
13:51:51.0611 0x2044  [ F993A32249B66C9D622EA5592A8B76B8, EE64672A990C6145DC5601E2B8CDBE089272A72732F59AF9865DCBA8B1717E70 ] lmhosts         C:\Windows\System32\lmhsvc.dll
13:51:51.0707 0x2044  lmhosts - ok
13:51:51.0790 0x2044  [ 50C7CE53EF461870410355F1F2E7D515, D6E84C63D74E4603D37FD7CC88BF51DE23CD17DB1D1AD4ADBED62F949F3C470C ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
13:51:51.0827 0x2044  LMS - ok
13:51:51.0892 0x2044  [ 1A93E54EB0ECE102495A51266DCDB6A6, DB6AA86AA36C3A7988BE96E87B5D3251BE7617C54EE8F894D9DC2E267FE3255B ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
13:51:51.0919 0x2044  LSI_FC - ok
13:51:51.0963 0x2044  [ 1047184A9FDC8BDBFF857175875EE810, F2251EDB7736A26D388A0C5CC2FE5FB9C5E109CBB1E3800993554CB21D81AE4B ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
13:51:51.0991 0x2044  LSI_SAS - ok
13:51:52.0014 0x2044  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93, 88D5740A4E9CC3FA80FA18035DAB441BDC5A039622D666BFDAA525CC9686BD06 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
13:51:52.0040 0x2044  LSI_SAS2 - ok
13:51:52.0064 0x2044  [ 0504EACAFF0D3C8AED161C4B0D369D4A, 4D272237C189646F5C80822FD3CBA7C2728E482E2DAAF7A09C8AEF811C89C54D ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
13:51:52.0093 0x2044  LSI_SCSI - ok
13:51:52.0105 0x2044  [ 43D0F98E1D56CCDDB0D5254CFF7B356E, 5BA498183B5C4996C694CB0A9A6B66CE6C7A460F6C91BEB9F305486FCC3B7B22 ] luafv           C:\Windows\system32\drivers\luafv.sys
13:51:52.0230 0x2044  luafv - ok
13:51:52.0319 0x2044  [ CFBC6C6D8A492697CABD1D353EE64933, DDAA844908324740C891EB8F08E2A8BB00457063B31C4A762745C1C2415FC12D ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
13:51:52.0340 0x2044  MBAMProtector - ok
13:51:52.0558 0x2044  [ 40C126CB15FAB7D6C66490DCA9C1AED2, B32CEE2D2409232C245427D5E9647FDF59AF1D8AB5E8A98EE2D1F1314599FD14 ] MBAMService     C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
13:51:52.0645 0x2044  MBAMService - ok
13:51:52.0692 0x2044  [ D61070CFAD43038DC56AEAD9BFE9CE2A, BD77AEF60E7FD2015CB14A464799304359547146C14A47F8D25274ACFA2E42D5 ] MBAMWebAccessControl C:\Windows\system32\drivers\mwac.sys
13:51:52.0714 0x2044  MBAMWebAccessControl - ok
13:51:52.0755 0x2044  [ 0BE09CD858ABF9DF6ED259D57A1A1663, 2FD28889B93C8E801F74C1D0769673A461671E0189D0A22C94509E3F0EEB7428 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
13:51:52.0787 0x2044  Mcx2Svc - ok
13:51:52.0824 0x2044  [ A55805F747C6EDB6A9080D7C633BD0F4, 2DA0E83BF3C8ADEF6F551B6CC1C0A3F6149CDBE6EC60413BA1767C4DE425A728 ] megasas         C:\Windows\system32\drivers\megasas.sys
13:51:52.0849 0x2044  megasas - ok
13:51:52.0899 0x2044  [ BAF74CE0072480C3B6B7C13B2A94D6B3, 85CBB4949C090A904464F79713A3418338753D20D7FB811E68F287FDAC1DD834 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
13:51:52.0943 0x2044  MegaSR - ok
13:51:52.0968 0x2044  [ A6518DCC42F7A6E999BB3BEA8FD87567, 8A9AE992F93F37E0723761EA271A7E1AA8172702C471041A17324474FC96B9BC ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
13:51:52.0995 0x2044  MEIx64 - ok
13:51:53.0032 0x2044  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] MMCSS           C:\Windows\system32\mmcss.dll
13:51:53.0120 0x2044  MMCSS - ok
13:51:53.0141 0x2044  [ 800BA92F7010378B09F9ED9270F07137, 94F9AF9E1BE80AE6AC39A2A74EF9FAB115DCAACC011D07DFA8D6A1DDC8A93342 ] Modem           C:\Windows\system32\drivers\modem.sys
13:51:53.0243 0x2044  Modem - ok
13:51:53.0299 0x2044  [ B03D591DC7DA45ECE20B3B467E6AADAA, 701FB0CAD8138C58507BE28845D3E24CE269A040737C29885944A0D851238732 ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
13:51:53.0342 0x2044  monitor - ok
13:51:53.0420 0x2044  [ 7D27EA49F3C1F687D357E77A470AEA99, 7FE7CAF95959F127C6D932C01D539C06D80273C49A09761F6E8331C05B1A7EE7 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
13:51:53.0444 0x2044  mouclass - ok
13:51:53.0470 0x2044  [ D3BF052C40B0C4166D9FD86A4288C1E6, 5E65264354CD94E844BF1838CA1B8E49080EFA34605A32CF2F6A47A2B97FC183 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
13:51:53.0508 0x2044  mouhid - ok
13:51:53.0575 0x2044  [ 67050452C0118BAF2883928E6FCCFE47, 335FC0AEB7B47DCC7CE0CF3F424EB60ACB1327D2FF6515F04D9AC03A10FF1E31 ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
13:51:53.0602 0x2044  mountmgr - ok
13:51:53.0659 0x2044  [ 707E98CC15C2224C078C9E71FF1889BC, 958416FE081436FDBF7F2BEBBB2795C54CC4F3F349D6DF463296A7BBA3404F13 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
13:51:53.0686 0x2044  MozillaMaintenance - ok
13:51:53.0725 0x2044  [ A44B420D30BD56E145D6A2BC8768EC58, B1E4DCA5A1008FA7A0492DC091FB2B820406AE13FD3D44F124E89B1037AF09B8 ] mpio            C:\Windows\system32\drivers\mpio.sys
13:51:53.0755 0x2044  mpio - ok
13:51:53.0795 0x2044  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F, 5A3FA2F110029CB4CC4384998EDB59203FDD65EC45E01B897FB684F8956EAD20 ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
13:51:53.0858 0x2044  mpsdrv - ok
13:51:53.0976 0x2044  [ 54FFC9C8898113ACE189D4AA7199D2C1, 65F585C87F3F710FD5793FDFA96B740AD8D4317B0C120F4435CCF777300EA4F2 ] MpsSvc          C:\Windows\system32\mpssvc.dll
13:51:54.0118 0x2044  MpsSvc - ok
13:51:54.0152 0x2044  [ AE3334958D8F631FF14A0AEB3D7EFB3A, F5FD6B61F896104C20DFC43FEE2FCE6930B73F78DF876BD19A333EABB9139C6D ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
13:51:54.0240 0x2044  MRxDAV - ok
13:51:54.0286 0x2044  [ ACB6782973BD93760D597FC7BB37E692, 9B6EC2858D236DCE61FD5E0247F4D947A5DC484C9C0AABFDAF8270ABA392E787 ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
13:51:54.0410 0x2044  mrxsmb - ok
13:51:54.0492 0x2044  [ 262BF7BB7D0E44CFAA9B12A1E0A6EDF1, CCC3A4CE929C7C8B07C1038BBE8425590CE14F5C37E1D5608978A3AD2F41519C ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
13:51:54.0554 0x2044  mrxsmb10 - ok
13:51:54.0584 0x2044  [ 8C0376974AA28398FF501E78C04ACB30, 81CE67BE933F67F760A72BF9B581F33BC151D98970765FE4425450A2EF450409 ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
13:51:54.0633 0x2044  mrxsmb20 - ok
13:51:54.0675 0x2044  [ C25F0BAFA182CBCA2DD3C851C2E75796, 643E158A0948DF331807AEAA391F23960362E46C0A0CF6D22A99020EAE7B10F8 ] msahci          C:\Windows\system32\drivers\msahci.sys
13:51:54.0704 0x2044  msahci - ok
13:51:54.0747 0x2044  [ DB801A638D011B9633829EB6F663C900, B34FD33A215ACCF2905F4B7D061686CDB1CB9C652147AF56AE14686C1F6E3C74 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
13:51:54.0784 0x2044  msdsm - ok
13:51:54.0856 0x2044  [ DE0ECE52236CFA3ED2DBFC03F28253A8, 2FBBEC4CACB5161F68D7C2935852A5888945CA0F107CF8A1C01F4528CE407DE3 ] MSDTC           C:\Windows\System32\msdtc.exe
13:51:54.0903 0x2044  MSDTC - ok
13:51:54.0956 0x2044  [ AA3FB40E17CE1388FA1BEDAB50EA8F96, 69F93E15536644C8FD679A20190CFE577F4985D3B1B4A4AA250A168615AE1E99 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
13:51:55.0073 0x2044  Msfs - ok
13:51:55.0115 0x2044  [ F9D215A46A8B9753F61767FA72A20326, 6F76642B45E0A7EF6BCAB8B37D55CCE2EAA310ED07B76D43FCB88987C2174141 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
13:51:55.0225 0x2044  mshidkmdf - ok
13:51:55.0266 0x2044  [ D916874BBD4F8B07BFB7FA9B3CCAE29D, B229DA150713DEDBC4F05386C9D9DC3BC095A74F44F3081E88311AB73BC992A1 ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
13:51:55.0296 0x2044  msisadrv - ok
13:51:55.0360 0x2044  [ 808E98FF49B155C522E6400953177B08, F873F5BFF0984C5165DF67E92874D3F6EB8D86F9B5AD17013A0091CA33A1A3D5 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
13:51:55.0482 0x2044  MSiSCSI - ok
13:51:55.0494 0x2044  msiserver - ok
13:51:55.0538 0x2044  [ 49CCF2C4FEA34FFAD8B1B59D49439366, E5752EA57C7BDAD5F53E3BC441A415E909AC602CAE56234684FB8789A20396C7 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
13:51:55.0617 0x2044  MSKSSRV - ok
13:51:55.0637 0x2044  [ BDD71ACE35A232104DDD349EE70E1AB3, 27464A66868513BE6A01B75D7FC5B0D6B71842E4E20CE3F76B15C071A0618BBB ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
13:51:55.0726 0x2044  MSPCLOCK - ok
13:51:55.0772 0x2044  [ 4ED981241DB27C3383D72092B618A1D0, E12F121E641249DB3491141851B59E1496F4413EDF58E863388F1C229838DFCC ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
13:51:55.0877 0x2044  MSPQM - ok
13:51:55.0931 0x2044  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D, 64E3BC613EC4872B1B344CBF71EE15BE195592E3244C1EE099C6F8B95A40F133 ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
13:51:55.0991 0x2044  MsRPC - ok
13:51:56.0035 0x2044  [ 0EED230E37515A0EAEE3C2E1BC97B288, B1D8F8A75006B6E99214CA36D27A8594EF8D952F315BEB201E9BAC9DE3E64D42 ] mssmbios        C:\Windows\system32\drivers\mssmbios.sys
13:51:56.0064 0x2044  mssmbios - ok
13:51:56.0109 0x2044  [ 2E66F9ECB30B4221A318C92AC2250779, DF175E1AB6962303E57F26DAE5C5C1E40B8640333F3E352A64F6A5F1301586CD ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
13:51:56.0217 0x2044  MSTEE - ok
13:51:56.0229 0x2044  [ 7EA404308934E675BFFDE8EDF0757BCD, 306CD02D89CFCFE576242360ED5F9EEEDCAFC43CD43B7D2977AE960F9AEC3232 ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
13:51:56.0278 0x2044  MTConfig - ok
13:51:56.0307 0x2044  [ F9A18612FD3526FE473C1BDA678D61C8, 32F7975B5BAA447917F832D9E3499B4B6D3E90D73F478375D0B70B36C524693A ] Mup             C:\Windows\system32\Drivers\mup.sys
13:51:56.0342 0x2044  Mup - ok
13:51:56.0367 0x2044  [ C009123B206C56854F4E88596035231D, 670403A40B425F77C90ECB048A0C8BC11FB19E40A8CECC2C3DCF79175B745863 ] mwlPSDFilter    C:\Windows\system32\DRIVERS\mwlPSDFilter.sys
13:51:56.0387 0x2044  mwlPSDFilter - ok
13:51:56.0430 0x2044  [ BF3739EEB9F008B1DEBAC115089A53F8, 8546AB69087656259BBE17D6F80F4AB164B04171673CE2BF9FFD1B5C9584E9A4 ] mwlPSDNServ     C:\Windows\system32\DRIVERS\mwlPSDNServ.sys
13:51:56.0450 0x2044  mwlPSDNServ - ok
13:51:56.0469 0x2044  [ 38DD143D95E7A01B86F219DDA9C28779, 5FA8C0595CCF835DBCE1CC5322E8FD4BFB6DFB6CF869BB7CB73F919445D469AA ] mwlPSDVDisk     C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys
13:51:56.0493 0x2044  mwlPSDVDisk - ok
13:51:56.0558 0x2044  [ 582AC6D9873E31DFA28A4547270862DD, BD540499F74E8F59A020D935D18E36A3A97C1A6EC59C8208436469A31B16B260 ] napagent        C:\Windows\system32\qagentRT.dll
13:51:56.0682 0x2044  napagent - ok
13:51:56.0757 0x2044  [ 1EA3749C4114DB3E3161156FFFFA6B33, 54C2E77BCE1037711A11313AC25B8706109098C10A31AA03AEB7A185E97800D7 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
13:51:56.0814 0x2044  NativeWifiP - ok
13:51:56.0915 0x2044  [ 760E38053BF56E501D562B70AD796B88, F856E81A975D44F8684A6F2466549CEEDFAEB3950191698555A93A1206E0A42D ] NDIS            C:\Windows\system32\drivers\ndis.sys
13:51:57.0000 0x2044  NDIS - ok
13:51:57.0046 0x2044  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC, D7E5446E83909AE25506BB98FBDD878A529C87963E3C1125C4ABAB25823572BC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
13:51:57.0132 0x2044  NdisCap - ok
13:51:57.0173 0x2044  [ 30639C932D9FEF22B31268FE25A1B6E5, 32873D95339600F6EEFA51847D12C563FF01F320DC59055B242FA2887C99F9D6 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
13:51:57.0256 0x2044  NdisTapi - ok
13:51:57.0272 0x2044  [ 136185F9FB2CC61E573E676AA5402356, BA3AD0A33416DA913B4242C6BE8C3E5812AD2B20BA6C11DD3094F2E8EB56E683 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
13:51:57.0342 0x2044  Ndisuio - ok
13:51:57.0385 0x2044  [ 53F7305169863F0A2BDDC49E116C2E11, 881E9346D3C02405B7850ADC37E720990712EC9C666A0CE96E252A487FD2CE77 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
13:51:57.0464 0x2044  NdisWan - ok
13:51:57.0512 0x2044  [ 015C0D8E0E0421B4CFD48CFFE2825879, 4242E2D42CCFC859B2C0275C5331798BC0BDA68E51CF4650B6E64B1332071023 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
13:51:57.0604 0x2044  NDProxy - ok
13:51:57.0792 0x2044  [ B90E093E7A7250906F1054418B5339C0, F9A0BAC5B4B29F14B5CACA1047F8928A495EFD56E485492BF71C856B296476D6 ] Nero BackItUp Scheduler 4.0 C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
13:51:57.0854 0x2044  Nero BackItUp Scheduler 4.0 - ok
13:51:57.0945 0x2044  [ 2334DC48997BA203B794DF3EE70521DB, 832F4EC1586C9669F2D54AB3B212943E43B87A33B24DCC8CDAD6A0264291EE2F ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
13:51:57.0991 0x2044  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
13:52:00.0570 0x2044  Detect skipped due to KSN trusted
13:52:00.0570 0x2044  Net Driver HPZ12 - ok
13:52:00.0608 0x2044  [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl         C:\Windows\system32\DRIVERS\netaapl64.sys
13:52:00.0698 0x2044  Netaapl - ok
13:52:00.0748 0x2044  [ 86743D9F5D2B1048062B14B1D84501C4, DBF6D6A60AB774FCB0F464FF2D285A7521D0A24006687B243AB46B17D8032062 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
13:52:00.0857 0x2044  NetBIOS - ok
13:52:00.0904 0x2044  [ 09594D1089C523423B32A4229263F068, 7426A9B8BA27D3225928DDEFBD399650ABB90798212F56B7D12158AC22CCCE37 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
13:52:01.0023 0x2044  NetBT - ok
13:52:01.0057 0x2044  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] Netlogon        C:\Windows\system32\lsass.exe
13:52:01.0088 0x2044  Netlogon - ok
13:52:01.0166 0x2044  [ 847D3AE376C0817161A14A82C8922A9E, 37AE692B3481323134125EF58F2C3CBC20177371AF2F5874F53DD32A827CB936 ] Netman          C:\Windows\System32\netman.dll
13:52:01.0272 0x2044  Netman - ok
13:52:01.0361 0x2044  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:52:01.0394 0x2044  NetMsmqActivator - ok
13:52:01.0407 0x2044  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:52:01.0439 0x2044  NetPipeActivator - ok
13:52:01.0498 0x2044  [ 5F28111C648F1E24F7DBC87CDEB091B8, 2E8645285921EDB98BB2173E11E57459C888D52E80D85791D169C869DE8813B9 ] netprofm        C:\Windows\System32\netprofm.dll
13:52:01.0615 0x2044  netprofm - ok
13:52:01.0650 0x2044  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:52:01.0682 0x2044  NetTcpActivator - ok
13:52:01.0694 0x2044  [ E58808846B62041BFB05395E1CED6499, 5387F2CE6B494337725D2BF3EB563912E6EE33918F2872C5FE07BEDBB0F761EE ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
13:52:01.0726 0x2044  NetTcpPortSharing - ok
13:52:01.0754 0x2044  [ 77889813BE4D166CDAB78DDBA990DA92, 2EF531AE502B943632EEC66A309A8BFCDD36120A5E1473F4AAF3C2393AD0E6A3 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
13:52:01.0779 0x2044  nfrd960 - ok
13:52:01.0840 0x2044  [ 8B301D474B478E9A92823BAB50A7BC49, 8181816035F41B1DABEC05E65E4F67BCD785F56760A61F1049E91BA39D42F01D ] NlaSvc          C:\Windows\System32\nlasvc.dll
13:52:01.0932 0x2044  NlaSvc - ok
13:52:01.0994 0x2044  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7, D8957EF7060A69DBB3CD6B2C45B1E4143592AB8D018471E17AC04668157DC67F ] Npfs            C:\Windows\system32\drivers\Npfs.sys
13:52:02.0098 0x2044  Npfs - ok
13:52:02.0135 0x2044  [ D54BFDF3E0C953F823B3D0BFE4732528, 497A1DCC5646EC22119273216DF10D5442D16F83E4363770F507518CF6EAA53A ] nsi             C:\Windows\system32\nsisvc.dll
13:52:02.0249 0x2044  nsi - ok
13:52:02.0273 0x2044  [ E7F5AE18AF4168178A642A9247C63001, 133023B7E4BA8049C4CAED3282BDD25571D1CC25FAC3B820C7F981D292689D76 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
13:52:02.0379 0x2044  nsiproxy - ok
13:52:02.0602 0x2044  [ 1A29A59A4C5BA6F8C85062A613B7E2B2, CC137F499A12C724D4166C2D85E9F447413419A0683DAC6F1A802B7F210C77F1 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
13:52:02.0788 0x2044  Ntfs - ok
13:52:02.0874 0x2044  [ 1873214666F6F0A883742DF91FBC48C9, DCF5382CE338D4B5B0C3A3B722A19B6C7BAB59EB7B266FEF04698B79070E2C4B ] NTI IScheduleSvc C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
13:52:02.0909 0x2044  NTI IScheduleSvc - ok
13:52:02.0959 0x2044  [ EE3BA1024594D5D09E314F206B94069E, 34C8EC3DF1C3088D8A0442CAA4F5506665AFB2DF016709457ED2AB7DA45F53A6 ] NTIDrvr         C:\Windows\system32\drivers\NTIDrvr.sys
13:52:02.0978 0x2044  NTIDrvr - ok
13:52:02.0995 0x2044  [ 9899284589F75FA8724FF3D16AED75C1, 181188599FD5D4DE33B97010D9E0CAEABAB9A3EF50712FE7F9AA0735CD0666D6 ] Null            C:\Windows\system32\drivers\Null.sys
13:52:03.0082 0x2044  Null - ok
13:52:04.0203 0x2044  [ 9B93CC9C70EDE60A9C486E7719DB9E8D, 8E31BE72797D3308D8AF136E9F4C6199BCF4592F88E9FEB361752FF768225EC9 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
13:52:04.0958 0x2044  nvlddmkm - ok
13:52:05.0029 0x2044  [ F76296368BB813E0C6996501A3271C7C, FA1C127F881C09C5066CB83A686AFD7A40D731922185EA4001A52ABA230FD812 ] nvpciflt        C:\Windows\system32\DRIVERS\nvpciflt.sys
13:52:05.0047 0x2044  nvpciflt - ok
13:52:05.0140 0x2044  [ 0A92CB65770442ED0DC44834632F66AD, 581327F07A68DBD5CC749214BE5F1211FC2CE41C7A4F0656B680AFB51A35ACE7 ] nvraid          C:\Windows\system32\drivers\nvraid.sys
13:52:05.0168 0x2044  nvraid - ok
13:52:05.0208 0x2044  [ DAB0E87525C10052BF65F06152F37E4A, AD9BFF0D5FD3FFB95C758B478E1F6A9FE45E7B37AEC71EB5070D292FEAAEDF37 ] nvstor          C:\Windows\system32\drivers\nvstor.sys
13:52:05.0233 0x2044  nvstor - ok
13:52:05.0339 0x2044  [ FB50E60564ED30DDC855F0CE435C8467, C9A56D74F58739B8A069336FF5456FC5F3CE89371B8CFE8144B8D06A9C79C6AB ] nvsvc           C:\Windows\system32\nvvsvc.exe
13:52:05.0402 0x2044  nvsvc - ok
13:52:05.0653 0x2044  [ C63E582366EAD77978BFFD959A66DBB8, BBAC11300AFED29291A08EEC8A740DA67C8C003AF89D06F9E0671CCF0E7908A0 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
13:52:05.0783 0x2044  nvUpdatusService - ok
13:52:05.0814 0x2044  [ 270D7CD42D6E3979F6DD0146650F0E05, 752489E54C9004EDCBE1F1F208FFD864DA5C83E59A2DDE6B3E0D63ECA996F76F ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
13:52:05.0858 0x2044  nv_agp - ok
13:52:05.0886 0x2044  [ 3589478E4B22CE21B41FA1BFC0B8B8A0, AD2469FC753FE552CB809FF405A9AB23E7561292FE89117E3B3B62057EFF0203 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
13:52:05.0939 0x2044  ohci1394 - ok
13:52:06.0037 0x2044  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
13:52:06.0072 0x2044  ose - ok
13:52:06.0587 0x2044  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
13:52:06.0979 0x2044  osppsvc - ok
13:52:07.0045 0x2044  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
13:52:07.0122 0x2044  p2pimsvc - ok
13:52:07.0169 0x2044  [ 927463ECB02179F88E4B9A17568C63C3, FEFD3447692C277D59EEC7BF218552C8BB6B8C98C26E973675549628408B94CE ] p2psvc          C:\Windows\system32\p2psvc.dll
13:52:07.0236 0x2044  p2psvc - ok
13:52:07.0285 0x2044  [ 0086431C29C35BE1DBC43F52CC273887, 0D116D49EF9ABB57DA005764F25E692622210627FC2048F06A989B12FA8D0A80 ] Parport         C:\Windows\system32\drivers\parport.sys
13:52:07.0326 0x2044  Parport - ok
13:52:07.0359 0x2044  [ E9766131EEADE40A27DC27D2D68FBA9C, 63C295EC96DBD25F1A8B908295CCB86B54F2A77A02AAA11E5D9160C2C1A492B6 ] partmgr         C:\Windows\system32\drivers\partmgr.sys
13:52:07.0386 0x2044  partmgr - ok
13:52:07.0426 0x2044  [ DB2D62AA2DF6B1F3D690A9EC9701AA2C, BEAC55E1AA0494565F1547DF5E6FE20FCEA66461764C016FCB68D8BFF0F0C375 ] PcaSvc          C:\Windows\System32\pcasvc.dll
13:52:07.0490 0x2044  PcaSvc - ok
13:52:07.0532 0x2044  [ 94575C0571D1462A0F70BDE6BD6EE6B3, 7139BAC653EA94A3DD3821CAB35FC5E22F4CCA5ACC2BAABDAA27E4C3C8B27FC9 ] pci             C:\Windows\system32\drivers\pci.sys
13:52:07.0567 0x2044  pci - ok
13:52:07.0589 0x2044  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA, F2A7CC645B96946CC65BF60E14E70DC09C848D27C7943CE5DEA0C01A6B863480 ] pciide          C:\Windows\system32\drivers\pciide.sys
13:52:07.0616 0x2044  pciide - ok
13:52:07.0644 0x2044  [ B2E81D4E87CE48589F98CB8C05B01F2F, 6763BEE7270A4873B3E131BFB92313E2750FCBD0AD73C23D1C4F98F7DF73DE14 ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
13:52:07.0680 0x2044  pcmcia - ok
13:52:07.0689 0x2044  [ D6B9C2E1A11A3A4B26A182FFEF18F603, BBA5FE08B1DDD6243118E11358FD61B10E850F090F061711C3CB207CE5FBBD36 ] pcw             C:\Windows\system32\drivers\pcw.sys
13:52:07.0714 0x2044  pcw - ok
13:52:07.0787 0x2044  [ ED6E75158D28D33A2E2A020AC5B2B59D, 0F364D9A88304C45F31318605C417A70A9D0E4CF087D73E949B42C12CC76CD6C ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
13:52:07.0863 0x2044  PEAUTH - ok
13:52:07.0980 0x2044  [ E495E408C93141E8FC72DC0C6046DDFA, 489B957DADA0DC128A09468F1AD082DCC657E86053208EA06A12937BE86FB919 ] PerfHost        C:\Windows\SysWow64\perfhost.exe
13:52:08.0021 0x2044  PerfHost - ok
13:52:08.0192 0x2044  [ C7CF6A6E137463219E1259E3F0F0DD6C, 08D7244F52AA17DD669AA6F77C291DAC88E7B2D1887DE422509C1F83EC85F3DD ] pla             C:\Windows\system32\pla.dll
13:52:08.0429 0x2044  pla - ok
13:52:08.0507 0x2044  [ 25FBDEF06C4D92815B353F6E792C8129, 57D9764AE6BCE33B242C399CDFC10DD405975BD6411CA8C75FBCD06EEB8442A9 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
13:52:08.0593 0x2044  PlugPlay - ok
13:52:08.0697 0x2044  [ AC78DF349F0E4CFB8B667C0CFFF83CCE, 7E635AA2E7350FCA0C954E697F1480A6204920AEFBCF06B90FFA02398DA82822 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
13:52:08.0730 0x2044  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
13:52:11.0441 0x2044  Detect skipped due to KSN trusted
13:52:11.0441 0x2044  Pml Driver HPZ12 - ok
13:52:11.0470 0x2044  [ 7195581CEC9BB7D12ABE54036ACC2E38, 9C4E5D6EA984148F2663DC529083408B2248DFF6DAAC85D9195F80A722782315 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
13:52:11.0519 0x2044  PNRPAutoReg - ok
13:52:11.0562 0x2044  [ 3EAC4455472CC2C97107B5291E0DCAFE, E51F373F2DBEAEE516B42BAE8C1B5BB68D00B881323E842CB6EDEC0A183CFFC3 ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
13:52:11.0617 0x2044  PNRPsvc - ok
13:52:11.0678 0x2044  [ 4F15D75ADF6156BF56ECED6D4A55C389, 2ADA3EA69A5D7EC2A4D2DD89178DB94EAFDDF95F07B0070D654D9F7A5C12A044 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
13:52:11.0807 0x2044  PolicyAgent - ok
13:52:11.0872 0x2044  [ 6BA9D927DDED70BD1A9CADED45F8B184, 66203CE70A5EDE053929A940F38924C6792239CCCE10DD2C1D90D5B4D6748B55 ] Power           C:\Windows\system32\umpo.dll
13:52:11.0985 0x2044  Power - ok
13:52:12.0045 0x2044  [ F92A2C41117A11A00BE01CA01A7FCDE9, 38ADC6052696D110CA5F393BC586791920663F5DA66934C2A824DDA9CD89C763 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
13:52:12.0142 0x2044  PptpMiniport - ok
13:52:12.0169 0x2044  [ 0D922E23C041EFB1C3FAC2A6F943C9BF, 855418A6A58DCAFB181A1A68613B3E203AFB0A9B3D9D26D0C521F9F613B4EAD5 ] Processor       C:\Windows\system32\drivers\processr.sys
13:52:12.0204 0x2044  Processor - ok
13:52:12.0259 0x2044  [ B6A58491307B4CADA572583D863DC602, 5C44936605E52C9533E4CE22F18FAB8211475877F71EFD88DA4D02FD608C90A3 ] ProfSvc         C:\Windows\system32\profsvc.dll
13:52:12.0393 0x2044  ProfSvc - ok
13:52:12.0413 0x2044  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] ProtectedStorage C:\Windows\system32\lsass.exe
13:52:12.0444 0x2044  ProtectedStorage - ok
13:52:12.0515 0x2044  [ 0557CF5A2556BD58E26384169D72438D, F6F83A616B1F1C6C0DF6D2EC2513E6C23FD4FAA6D36518B8676C619AB74957B4 ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
13:52:12.0624 0x2044  Psched - ok
13:52:12.0674 0x2044  [ 07D57B890DD5693A6AB660CBAE8F91B4, 934895A41C116056E22FE3298418332A9F4280F96E96EEE06C977A4925395674 ] PxHlpa64        C:\Windows\system32\drivers\PxHlpa64.sys
13:52:12.0700 0x2044  PxHlpa64 - ok
13:52:12.0903 0x2044  [ A53A15A11EBFD21077463EE2C7AFEEF0, 6002B012A75045DEA62640A864A8721EADE2F8B65BEB5F5BA76D8CD819774489 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
13:52:13.0062 0x2044  ql2300 - ok
13:52:13.0113 0x2044  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8, FB6ABAB741CED66A79E31A45111649F2FA3E26CEE77209B5296F789F6F7D08DE ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
13:52:13.0149 0x2044  ql40xx - ok
13:52:13.0200 0x2044  [ 906191634E99AEA92C4816150BDA3732, A0305436384104C3B559F9C73902DA19B96B518413379E397C5CDAB0B2B9418F ] QWAVE           C:\Windows\system32\qwave.dll
13:52:13.0256 0x2044  QWAVE - ok
13:52:13.0274 0x2044  [ 76707BB36430888D9CE9D705398ADB6C, 35C1D1D05F98AC29A33D3781F497A0B40A3CB9CDF25FE1F28F574E40DDF70535 ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
13:52:13.0326 0x2044  QWAVEdrv - ok
13:52:13.0355 0x2044  [ 5A0DA8AD5762FA2D91678A8A01311704, 8A64EB5DBAB7048A9E42A21CEB62CCD5B007A80C199892D7F8C69B48E8A255EF ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
13:52:13.0448 0x2044  RasAcd - ok
13:52:13.0524 0x2044  [ 7ECFF9B22276B73F43A99A15A6094E90, 62C70DA127F48F796F8897BBFA23AB6EB080CC923F0F091DFA384A93F5C90CA1 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
13:52:13.0620 0x2044  RasAgileVpn - ok
13:52:13.0698 0x2044  [ 8F26510C5383B8DBE976DE1CD00FC8C7, 60E618C010E8A723960636415573FA17EA0BBEF79647196B3BC0B8DEE680E090 ] RasAuto         C:\Windows\System32\rasauto.dll
13:52:13.0818 0x2044  RasAuto - ok
13:52:13.0863 0x2044  [ 471815800AE33E6F1C32FB1B97C490CA, 27307265F743DE3A3A3EC1B2C472A3D85FDD0AEC458E0B1177593141EE072698 ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
13:52:13.0975 0x2044  Rasl2tp - ok
13:52:14.0059 0x2044  [ EE867A0870FC9E4972BA9EAAD35651E2, 1B848D81705081FD2E18AC762DA7F51455657DAF860BF363DC15925A148BCADA ] RasMan          C:\Windows\System32\rasmans.dll
13:52:14.0195 0x2044  RasMan - ok
13:52:14.0243 0x2044  [ 855C9B1CD4756C5E9A2AA58A15F58C25, A514F8A9C304D54BDA8DC60F5A64259B057EC83A1CAAF6D2B58CFD55E9561F72 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
13:52:14.0356 0x2044  RasPppoe - ok
13:52:14.0412 0x2044  [ E8B1E447B008D07FF47D016C2B0EEECB, FEC789F82B912F3E14E49524D40FEAA4373B221156F14045E645D7C37859258C ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
13:52:14.0531 0x2044  RasSstp - ok
13:52:14.0586 0x2044  [ 77F665941019A1594D887A74F301FA2F, 1FDC6F6853400190C086042933F157814D915C54F26793CAD36CD2607D8810DA ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
13:52:14.0706 0x2044  rdbss - ok
13:52:14.0727 0x2044  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D, 1DF3501BBFFB56C3ECC39DBCC4287D3302216C2208CE22428B8C4967E5DE9D17 ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
13:52:14.0781 0x2044  rdpbus - ok
13:52:14.0808 0x2044  [ CEA6CC257FC9B7715F1C2B4849286D24, A78144D18352EA802C39D9D42921CF97A3E0211766B2169B6755C6FC2D77A804 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
13:52:14.0919 0x2044  RDPCDD - ok
13:52:14.0960 0x2044  [ BB5971A4F00659529A5C44831AF22365, 9AAA5C0D448E821FD85589505D99DF7749715A046BBD211F139E4E652ADDE41F ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
13:52:15.0062 0x2044  RDPENCDD - ok
13:52:15.0093 0x2044  [ 216F3FA57533D98E1F74DED70113177A, 60C126A1409D1E9C39F1C9E95F70115BF4AF07780AB499F6E10A612540F173F4 ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
13:52:15.0207 0x2044  RDPREFMP - ok
13:52:15.0336 0x2044  [ 313F68E1A3E6345A4F47A36B07062F34, B8318A0AE06BDE278931CA52F960B9FE226FD9894B076858DDB755AE26E1E66F ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
13:52:15.0578 0x2044  RdpVideoMiniport - ok
13:52:15.0645 0x2044  [ FE571E088C2D83619D2D48D4E961BF41, 88C5A2FCB1D0E528657842E39963471A6E42FCA3FCDF37955AEC8258AB4C48EA ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
13:52:15.0726 0x2044  RDPWD - ok
13:52:15.0806 0x2044  [ 34ED295FA0121C241BFEF24764FC4520, AAEE5F00CAA763A5BA51CF56BD7262C03409CD72BD5601490E3EC3FFF929BB5F ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
13:52:15.0849 0x2044  rdyboost - ok
13:52:15.0964 0x2044  [ A0FF419B61AE47E26ADF3BB15DB4F2FE, 974FF9751D123E212BD3CE8DAE70D4BCCC988A01431A1BD91A532849E492BBD8 ] RealNetworks Downloader Resolver Service C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
13:52:15.0989 0x2044  RealNetworks Downloader Resolver Service - ok
13:52:16.0034 0x2044  [ 254FB7A22D74E5511C73A3F6D802F192, 3D0FB5840364200DE394F8CC28DA0E334C2B5FA8FF28A41656EE72287F3D3836 ] RemoteAccess    C:\Windows\System32\mprdim.dll
13:52:16.0147 0x2044  RemoteAccess - ok
13:52:16.0187 0x2044  [ E4D94F24081440B5FC5AA556C7C62702, 147CAA03568DC480F9506E30B84891AB7E433B5EBC05F34FF10F72B00E1C6B22 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
13:52:16.0305 0x2044  RemoteRegistry - ok
13:52:16.0336 0x2044  [ E4DC58CF7B3EA515AE917FF0D402A7BB, 665B5CD9FE905B0EE3F59A7B1A94760F5393EBEE729877D8584349754C2867E8 ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
13:52:16.0423 0x2044  RpcEptMapper - ok
13:52:16.0452 0x2044  [ D5BA242D4CF8E384DB90E6A8ED850B8C, CB4CB2608B5E31B55FB1A2CF4051E6D08A0C2A5FB231B2116F95938D7577334E ] RpcLocator      C:\Windows\system32\locator.exe
13:52:16.0479 0x2044  RpcLocator - ok
13:52:16.0532 0x2044  [ 5C627D1B1138676C0A7AB2C2C190D123, C5003F2C912C5CA990E634818D3B4FD72F871900AF2948BD6C4D6400B354B401 ] RpcSs           C:\Windows\system32\rpcss.dll
13:52:16.0634 0x2044  RpcSs - ok
13:52:16.0692 0x2044  [ DDC86E4F8E7456261E637E3552E804FF, D250C69CCC75F2D88E7E624FCC51300E75637333317D53908CCA7E0F117173DD ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
13:52:16.0770 0x2044  rspndr - ok
13:52:16.0802 0x2044  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] SamSs           C:\Windows\system32\lsass.exe
13:52:16.0827 0x2044  SamSs - ok
13:52:16.0854 0x2044  [ AC03AF3329579FFFB455AA2DAABBE22B, 7AD3B62ADFEC166F9E256F9FF8BAA0568B2ED7308142BF8F5269E6EAA5E0A656 ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
13:52:16.0881 0x2044  sbp2port - ok
13:52:17.0000 0x2044  [ 794D4B48DFB6E999537C7C3947863463, 93DA8AA20D6B02A3360E7F56150F126E75266E9372E6409D42B89DA588EF49C3 ] SBSDWSCService  C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
13:52:17.0089 0x2044  SBSDWSCService - ok
13:52:17.0124 0x2044  [ 9B7395789E3791A3B6D000FE6F8B131E, E5F067F3F212BF5481668BE1779CBEF053F511F8967589BE2E865ACB9A620024 ] SCardSvr        C:\Windows\System32\SCardSvr.dll
13:52:17.0226 0x2044  SCardSvr - ok
13:52:17.0262 0x2044  [ 253F38D0D7074C02FF8DEB9836C97D2B, CB5CAFCB8628BB22877F74ACF1DED0BBAED8F4573A74DA7FE94BBBA584889116 ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
13:52:17.0335 0x2044  scfilter - ok
13:52:17.0443 0x2044  [ 40686B59C127F0C93B4234E4A1E3472A, B2DD61CB796C6AA8AFD285D43472B94646CA6D331D282818E0FDC9DE28DDE9CF ] Schedule        C:\Windows\system32\schedsvc.dll
13:52:17.0610 0x2044  Schedule - ok
13:52:17.0640 0x2044  [ F17D1D393BBC69C5322FBFAFACA28C7F, 62A1A92B3C52ADFD0B808D7F69DD50238B5F202421F1786F7EAEAA63F274B3E8 ] SCPolicySvc     C:\Windows\System32\certprop.dll
13:52:17.0715 0x2044  SCPolicySvc - ok
13:52:17.0755 0x2044  [ 111E0EBC0AD79CB0FA014B907B231CF0, B7D43D156C2524938503CF8E99C4D1F7A5C55E16C0368F57F4CD23C6D833B38F ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys
13:52:17.0791 0x2044  sdbus - ok
13:52:17.0824 0x2044  [ 6EA4234DC55346E0709560FE7C2C1972, 64011E044C16E2F92689E5F7E4666A075E27BBFA61F3264E5D51CE1656C1D5B8 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
13:52:17.0905 0x2044  SDRSVC - ok
13:52:17.0960 0x2044  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\Windows\system32\drivers\secdrv.sys
13:52:18.0024 0x2044  secdrv - ok
13:52:18.0048 0x2044  [ BC617A4E1B4FA8DF523A061739A0BD87, 10C4057F6B321EB5237FF619747B74F5401BC17D15A8C7060829E8204A2297F9 ] seclogon        C:\Windows\system32\seclogon.dll
13:52:18.0122 0x2044  seclogon - ok
13:52:18.0175 0x2044  [ C32AB8FA018EF34C0F113BD501436D21, E0EB8E80B51E45CA7EB061E705DA0BC07878759418A8519AE6E12326FE79E7C7 ] SENS            C:\Windows\System32\sens.dll
13:52:18.0266 0x2044  SENS - ok
13:52:18.0329 0x2044  [ 0336CFFAFAAB87A11541F1CF1594B2B2, 8B8A6A33E78A12FB05E29B2E2775850626574AFD2EF88748D65E690A07B10B8D ] SensrSvc        C:\Windows\system32\sensrsvc.dll
13:52:18.0432 0x2044  SensrSvc - ok
13:52:18.0476 0x2044  [ CB624C0035412AF0DEBEC78C41F5CA1B, A4D937F11E06CAE914347CA1362F4C98EC5EE0C0C80321E360EA1ABD6726F8D4 ] Serenum         C:\Windows\system32\drivers\serenum.sys
13:52:18.0518 0x2044  Serenum - ok
13:52:18.0571 0x2044  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6, 8F9776FB84C5D11068EAF1FF1D1A46466C655D64D256A8B1E31DC0C23B5DD22D ] Serial          C:\Windows\system32\drivers\serial.sys
13:52:18.0618 0x2044  Serial - ok
13:52:18.0641 0x2044  [ 1C545A7D0691CC4A027396535691C3E3, 065C30BE598FF4DC55C37E0BBE0CEDF10A370AE2BF5404B42EBBB867A3FFED6D ] sermouse        C:\Windows\system32\drivers\sermouse.sys
13:52:18.0695 0x2044  sermouse - ok
13:52:18.0750 0x2044  [ 0B6231BF38174A1628C4AC812CC75804, E569BF1F7F5689E2E917FA6516DB53388A5B8B1C6699DEE030147E853218811D ] SessionEnv      C:\Windows\system32\sessenv.dll
13:52:18.0849 0x2044  SessionEnv - ok
13:52:18.0872 0x2044  [ A554811BCD09279536440C964AE35BBF, DA8F893722F803E189D7D4D6C6232ED34505B63A64ED3A0132A5BB7A2BABDE55 ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
13:52:18.0910 0x2044  sffdisk - ok
13:52:18.0936 0x2044  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF, B81EF5D26AEB572CAB590F7AD7CA8C89F296420089EF5E6148E972F2DBCA1042 ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
13:52:18.0993 0x2044  sffp_mmc - ok
13:52:19.0017 0x2044  [ DD85B78243A19B59F0637DCF284DA63C, 6730D4F2BAE7E24615746ACC41B42D01DB6068D6504982008ADA1890DE900197 ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
13:52:19.0057 0x2044  sffp_sd - ok
13:52:19.0066 0x2044  [ A9D601643A1647211A1EE2EC4E433FF4, 7AC60B4AB48D4BBF1F9681C12EC2A75C72E6E12D30FABC564A24394310E9A5F9 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
13:52:19.0116 0x2044  sfloppy - ok
13:52:19.0237 0x2044  [ 9242988D74674C2819D454F001457BAD, D353A30D224940B0C7750161782CE98D4C47ABC5C4E04B100F8ABB6A3402B5AD ] Sftfs           C:\Windows\system32\DRIVERS\Sftfswin7.sys
13:52:19.0322 0x2044  Sftfs - ok
13:52:19.0485 0x2044  [ 4E1BB8A9CCDB4BAF41F7F9A930EB121D, D994B20DACEB187BEB6530309E2185040B58105E4FD5AC1DA435712F9DE027D0 ] sftlist         C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
13:52:19.0537 0x2044  sftlist - ok
13:52:19.0613 0x2044  [ 44391FA910901E2B8A2F831340FD707A, 9ACAD655DCCCAF562CEDE9180B187C229FFCAF97BA87D78225253C7868698CB8 ] Sftplay         C:\Windows\system32\DRIVERS\Sftplaywin7.sys
13:52:19.0651 0x2044  Sftplay - ok
13:52:19.0684 0x2044  [ 8654DBDC8ED8ED7257618D11B6C590BE, 1A410CCB7CDE99C607662E21054E959D3349647C5BD810CE744DA59EEB9C3FA2 ] Sftredir        C:\Windows\system32\DRIVERS\Sftredirwin7.sys
13:52:19.0707 0x2044  Sftredir - ok
13:52:19.0735 0x2044  [ 648F0152A7BAE175905C22E8BD839760, 6E3FC032212FD1F39FEE96D230F47BB25355587E8A73E34776CAEA8C0C1FB58E ] Sftvol          C:\Windows\system32\DRIVERS\Sftvolwin7.sys
13:52:19.0758 0x2044  Sftvol - ok
13:52:19.0793 0x2044  [ CECFDE5D3701B2D914862F5E6C3DFE18, E7627F90630C306324A39DC3C652B37D255F90636AC19D3302EE5B85BD504BD5 ] sftvsa          C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
13:52:19.0827 0x2044  sftvsa - ok
13:52:19.0916 0x2044  [ B95F6501A2F8B2E78C697FEC401970CE, 758B73A32902299A313348CE7EC189B20EB4CB398D0180E4EE24B84DAD55F291 ] SharedAccess    C:\Windows\System32\ipnathlp.dll
13:52:20.0032 0x2044  SharedAccess - ok
13:52:20.0085 0x2044  [ AAF932B4011D14052955D4B212A4DA8D, 2A3BFD0FA9569288E91AE3E72CA1EC39E1450D01E6473CE51157E0F138257923 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
13:52:20.0204 0x2044  ShellHWDetection - ok
13:52:20.0226 0x2044  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1, 89CA9F516E42A6B905474D738CDA2C121020A07DBD4E66CFE569DD77D79D7820 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
13:52:20.0250 0x2044  SiSRaid2 - ok
13:52:20.0304 0x2044  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4, 87B85C66DF7EB6FDB8A2341D05FAA5261FF68A90CCFC63F0E4A03824F1E33E5E ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
13:52:20.0331 0x2044  SiSRaid4 - ok
13:52:20.0449 0x2044  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
13:52:20.0495 0x2044  SkypeUpdate - ok
13:52:20.0544 0x2044  [ 548260A7B8654E024DC30BF8A7C5BAA4, 4A7E58331D7765A12F53DC2371739DC9A463940B13E16157CE10DB80E958D740 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
13:52:20.0621 0x2044  Smb - ok
13:52:20.0675 0x2044  [ 6313F223E817CC09AA41811DAA7F541D, D787061043BEEDB9386B048CB9E680E6A88A1CBAE9BD4A8C0209155BFB76C630 ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
13:52:20.0715 0x2044  SNMPTRAP - ok
13:52:20.0751 0x2044  [ B9E31E5CACDFE584F34F730A677803F9, 21A5130BD00089C609522A372018A719F8E37103D2DD22C59EACB393BE35A063 ] spldr           C:\Windows\system32\drivers\spldr.sys
13:52:20.0774 0x2044  spldr - ok
13:52:20.0846 0x2044  [ 85DAA09A98C9286D4EA2BA8D0E644377, F9C324E2EF81193FE831C7EECC44A100CA06F82FA731BF555D9EA4D91DA13329 ] Spooler         C:\Windows\System32\spoolsv.exe
13:52:20.0955 0x2044  Spooler - ok
13:52:21.0246 0x2044  [ E17E0188BB90FAE42D83E98707EFA59C, FC075F7B39E86CC8EF6DA4E339FE946917E319C347AC70FB0C50AAF36F97E27F ] sppsvc          C:\Windows\system32\sppsvc.exe
13:52:21.0584 0x2044  sppsvc - ok
13:52:21.0608 0x2044  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45, 36D48B23B8243BE5229707375FCD11C2DCAC96983199345365F065A0CBF33314 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
13:52:21.0696 0x2044  sppuinotify - ok
13:52:21.0752 0x2044  [ 441FBA48BFF01FDB9D5969EBC1838F0B, 306128F1AD489F87161A089D1BDC1542A4CB742D91A0C12A7CD1863FDB8932C0 ] srv             C:\Windows\system32\DRIVERS\srv.sys
13:52:21.0828 0x2044  srv - ok
13:52:21.0868 0x2044  [ B4ADEBBF5E3677CCE9651E0F01F7CC28, 726DB2283113AB2A9681E8E9F61132303D6D86E9CD034C40EE4A8C9DB29E87F7 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
13:52:21.0949 0x2044  srv2 - ok
13:52:21.0976 0x2044  [ 27E461F0BE5BFF5FC737328F749538C3, AFA4704ED8FFC1A0BAB40DFB81D3AE3F3D933A3C9BF54DDAF39FF9AF3646D9E6 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
13:52:22.0022 0x2044  srvnet - ok
13:52:22.0085 0x2044  [ 51B52FBD583CDE8AA9BA62B8B4298F33, 2E2403F8AA39E79D1281CA006B51B43139C32A5FDD64BD34DAA4B935338BD740 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
13:52:22.0160 0x2044  SSDPSRV - ok
13:52:22.0177 0x2044  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB, D21CDBC4C2AA0DB5B4455D5108B0CAF4282A2E664B9035708F212CC094569D9D ] SstpSvc         C:\Windows\system32\sstpsvc.dll
13:52:22.0251 0x2044  SstpSvc - ok
13:52:22.0415 0x2044  [ 2A6EDC2FBB4B9C11BB21BE3881C7A692, 74482CA4EC2B98C069A32C224BA5449AE10A8B41BFC053A4C23B6F65113A97A4 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
13:52:22.0472 0x2044  Steam Client Service - ok
13:52:22.0518 0x2044  [ F3817967ED533D08327DC73BC4D5542A, 1B204454408A690C0A86447F3E4AA9E7C58A9CFB567C94C17C21920BA648B4D5 ] stexstor        C:\Windows\system32\drivers\stexstor.sys
13:52:22.0538 0x2044  stexstor - ok
13:52:22.0615 0x2044  [ DECACB6921DED1A38642642685D77DAC, 1633711CE973F818EBCCCA28538772431167C33ECDD44D1E846A9436598B52DC ] StillCam        C:\Windows\system32\DRIVERS\serscan.sys
13:52:22.0661 0x2044  StillCam - ok
13:52:22.0759 0x2044  [ 8DD52E8E6128F4B2DA92CE27402871C1, 1101C38BE8FC383B5F2F9FA402F9652B23B88A764DE2B584DFE62B88B11DEF92 ] stisvc          C:\Windows\System32\wiaservc.dll
13:52:22.0847 0x2044  stisvc - ok
13:52:22.0877 0x2044  [ D01EC09B6711A5F8E7E6564A4D0FBC90, 3CB922291DBADC92B46B9E28CCB6810CD8CCDA3E74518EC9522B58B998E1F969 ] swenum          C:\Windows\system32\drivers\swenum.sys
13:52:22.0918 0x2044  swenum - ok
13:52:22.0994 0x2044  [ E08E46FDD841B7184194011CA1955A0B, 9C3725BB1F08F92744C980A22ED5C874007D3B5863C7E1F140F50061052AC418 ] swprv           C:\Windows\System32\swprv.dll
13:52:23.0140 0x2044  swprv - ok
13:52:23.0339 0x2044  [ 2E730941CC5BF6200A4F56D1E9C24AAD, 758836D55DC84F3EBE9917DC6FAB8E6170A5B238FEDBCFDB6D7C5C6EA98E08B2 ] SysMain         C:\Windows\system32\sysmain.dll
13:52:23.0563 0x2044  SysMain - ok
13:52:23.0603 0x2044  [ E3C61FD7B7C2557E1F1B0B4CEC713585, 01F0E116606D185BF93B540868075BFB1A398197F6AABD994983DBFF56B3A8A0 ] TabletInputService C:\Windows\System32\TabSvc.dll
13:52:23.0656 0x2044  TabletInputService - ok
13:52:23.0696 0x2044  [ 40F0849F65D13EE87B9A9AE3C1DD6823, E251A7EF3D0FD2973AF33A62FC457A7E8D5E8694208F811F52455F7C2426121F ] TapiSrv         C:\Windows\System32\tapisrv.dll
13:52:23.0823 0x2044  TapiSrv - ok
13:52:23.0854 0x2044  [ 1BE03AC720F4D302EA01D40F588162F6, AB644862BF1D2E824FD846180DEC4E2C0FAFCC517451486DE5A92E5E78A952E4 ] TBS             C:\Windows\System32\tbssvc.dll
13:52:23.0994 0x2044  TBS - ok
13:52:24.0206 0x2044  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
13:52:24.0397 0x2044  Tcpip - ok
13:52:24.0591 0x2044  [ 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E, F05C0C4CA3DD234AD5D60CF1EF763C9A1D9EC3C157E180C2D75CC07E6B02A611 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
13:52:24.0757 0x2044  TCPIP6 - ok
13:52:24.0805 0x2044  [ 1B16D0BD9841794A6E0CDE0CEF744ABC, 7EB8BA97339199EEE7F2B09DA2DA6279DA64A510D4598D42CF86415D67CD674C ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
13:52:24.0842 0x2044  tcpipreg - ok
13:52:24.0875 0x2044  [ 3371D21011695B16333A3934340C4E7C, 7416F9BBFC1BA9D875EA7D1C7A0D912FC6977B49A865D67E3F9C4E18A965082D ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
13:52:24.0946 0x2044  TDPIPE - ok
13:52:24.0982 0x2044  [ 51C5ECEB1CDEE2468A1748BE550CFBC8, 4E8F83877330B421F7B5D8393D34BC44C6450E69209DAA95B29CB298166A5DF9 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
13:52:25.0033 0x2044  TDTCP - ok
13:52:25.0091 0x2044  [ 70988118145F5F10EF24720B97F35F65, F80C806417A68047FFB3D63214BC4AE5445315219AC594E043293006B704A63D ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
13:52:25.0145 0x2044  tdx - ok
13:52:26.0115 0x2044  [ 2AA61246A5B813C1B12BCCFAA6F23DD8, 74EE3DB839A0F4BC781294803281DB2248D013B8808FF05F2EE9597C14C6FEED ] TeamViewer      C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
13:52:26.0825 0x2044  TeamViewer - ok
13:52:26.0871 0x2044  [ 561E7E1F06895D78DE991E01DD0FB6E5, 83BFA50A528762EC52A011302AC3874636FB7E26628CD7ACFBF2BDC9FAA8110D ] TermDD          C:\Windows\system32\drivers\termdd.sys
13:52:26.0910 0x2044  TermDD - ok
13:52:27.0059 0x2044  [ 008CD4EBFABCF78D0F19B3778492648C, 9050490EEE0AD86E73F0A82D83E4FC29DF84F6B6FDB389AE135FD712B5F425BE ] TermService     C:\Windows\System32\termsrv.dll
13:52:27.0195 0x2044  TermService - ok
13:52:27.0238 0x2044  [ F0344071948D1A1FA732231785A0664C, DB9886C2C858FAF45AEA15F8E42860343F73EB8685C53EC2E8CCC10586CB0832 ] Themes          C:\Windows\system32\themeservice.dll
13:52:27.0297 0x2044  Themes - ok
13:52:27.0345 0x2044  [ E40E80D0304A73E8D269F7141D77250B, 0DB4AC13A264F19A84DC0BCED54E8E404014CC09C993B172002B1561EC7E265A ] THREADORDER     C:\Windows\system32\mmcss.dll
13:52:27.0422 0x2044  THREADORDER - ok
13:52:27.0464 0x2044  [ 7E7AFD841694F6AC397E99D75CEAD49D, DE87F203FD8E6BDCCFCA1860A85F283301A365846FB703D9BB86278D8AC96B07 ] TrkWks          C:\Windows\System32\trkwks.dll
13:52:27.0555 0x2044  TrkWks - ok
13:52:27.0633 0x2044  [ 773212B2AAA24C1E31F10246B15B276C, F2EF85F5ABA307976D9C649D710B408952089458DDE97D4DEF321DF14E46A046 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
13:52:27.0714 0x2044  TrustedInstaller - ok
13:52:27.0764 0x2044  [ E232A3B43A894BB327FC161529BD9ED1, F2673DA8C920F21ACCECC25F7C59A05822E5E577D47F126EDF9C94FEB4B30C5F ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
13:52:27.0791 0x2044  tssecsrv - ok
13:52:27.0838 0x2044  [ E9981ECE8D894CEF7038FD1D040EB426, DCDDCE933CAECE8180A3447199B07F2F0413704EEC1A09606EE357901A84A7CF ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
13:52:27.0896 0x2044  TsUsbFlt - ok
13:52:27.0923 0x2044  [ AD64450A4ABE076F5CB34CC08EEACB07, B5C386635441A19178E7FEEE299BA430C8D72F9110866C13A216B12A1080AD12 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
13:52:27.0974 0x2044  TsUsbGD - ok
13:52:28.0044 0x2044  [ 3566A8DAAFA27AF944F5D705EAA64894, AE9D8B648DA08AF667B9456C3FE315489859C157510A258559F18238F2CC92B8 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
13:52:28.0108 0x2044  tunnel - ok
13:52:28.0180 0x2044  [ FD24F98D2898BE093FE926604BE7DB99, F9851C57A2ED838AC76BB19FE2F62BB81C57DBBE2A2555F738B5D6725D39AD61 ] TurboB          C:\Windows\system32\DRIVERS\TurboB.sys
13:52:28.0205 0x2044  TurboB - ok
13:52:28.0351 0x2044  [ 600B406A04D90F577FEA8A88D7379F08, 77CC8E8AFB6F571A42D916C0B2FEFFD3A7A32A455C78228B407C6C9B6DED8CAD ] TurboBoost      C:\Program Files\Intel\TurboBoost\TurboBoost.exe
13:52:28.0384 0x2044  TurboBoost - ok
13:52:28.0429 0x2044  [ B4DD609BD7E282BFC683CEC7EAAAAD67, EF131DB6F6411CAD36A989A421AF93F89DD61601AC524D2FF11C10FF6E3E9123 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
13:52:28.0461 0x2044  uagp35 - ok
13:52:28.0472 0x2044  [ A17D5E1A6DF4EAB0A480F2C490DE4C9D, 1EA835F172B6BF3D7F496E079DF1CDF00122B2110C08D61427582BC9405D2B7B ] UBHelper        C:\Windows\system32\drivers\UBHelper.sys
13:52:28.0495 0x2044  UBHelper - ok
13:52:28.0540 0x2044  [ FF4232A1A64012BAA1FD97C7B67DF593, D8591B4EB056899C7B604E4DD852D82D4D9809F508ABCED4A03E1BE6D5D456E3 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
13:52:28.0653 0x2044  udfs - ok
13:52:28.0704 0x2044  [ 3CBDEC8D06B9968ABA702EBA076364A1, B8DAB8AA804FC23021BFEBD7AE4D40FBE648D6C6BA21CC008E26D1C084972F9B ] UI0Detect       C:\Windows\system32\UI0Detect.exe
13:52:28.0759 0x2044  UI0Detect - ok
13:52:28.0788 0x2044  [ 4BFE1BC28391222894CBF1E7D0E42320, 5918B1ED2030600DF77BDACF1C808DF6EADDD8BF3E7003AF1D72050D8B102B3A ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
13:52:28.0815 0x2044  uliagpkx - ok
13:52:28.0868 0x2044  [ DC54A574663A895C8763AF0FA1FF7561, 09A3F3597E91CBEB2F38E96E75134312B60CAE5574B2AD4606C2D3E992AEDDFE ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
13:52:28.0900 0x2044  umbus - ok
13:52:28.0917 0x2044  [ B2E8E8CB557B156DA5493BBDDCC1474D, F547509A08C0679ACB843E20C9C0CF51BED1B06530BBC529DFB0944504564A43 ] UmPass          C:\Windows\system32\drivers\umpass.sys
13:52:28.0960 0x2044  UmPass - ok
13:52:29.0243 0x2044  [ 374EBDA379A8F38E0CFC2211611E7167, 0D6C3002B28E27C052227488CEE69FA99399421FF777EB48031E6080A759F532 ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
13:52:29.0502 0x2044  UNS - ok
13:52:29.0558 0x2044  [ D47EC6A8E81633DD18D2436B19BAF6DE, 0FB461E2D5E0B75BB5958F6362F4880BFA4C36AD930542609BCAF574941AA7AE ] upnphost        C:\Windows\System32\upnphost.dll
13:52:29.0676 0x2044  upnphost - ok
13:52:29.0721 0x2044  [ C9E9D59C0099A9FF51697E9306A44240, 78D9A7A5E5742962B6978F475BF06CB32262F1D214699D3D40538476A58012A1 ] USBAAPL64       C:\Windows\system32\Drivers\usbaapl64.sys
13:52:29.0771 0x2044  USBAAPL64 - ok
13:52:29.0830 0x2044  [ B0435098C81D04CAFFF80DDB746CD3A2, A17B207740382E38729571F0B0BC98FF874E856A7C7CE9EB930328A2AD88F52A ] usbaudio        C:\Windows\system32\drivers\usbaudio.sys
13:52:29.0906 0x2044  usbaudio - ok
13:52:29.0962 0x2044  [ DCA68B0943D6FA415F0C56C92158A83A, BEE5A5B33B22D1DF50B884D46D89FC3B8286EB16E38AD5A20F0A49E5C6766C57 ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
13:52:30.0044 0x2044  usbccgp - ok
13:52:30.0095 0x2044  [ 80B0F7D5CCF86CEB5D402EAAF61FEC31, 140C62116A425DEAD25FE8D82DE283BC92C482A9F643658D512F9F67061F28AD ] usbcir          C:\Windows\system32\drivers\usbcir.sys
13:52:30.0140 0x2044  usbcir - ok
13:52:30.0190 0x2044  [ 18A85013A3E0F7E1755365D287443965, 811C5EDF38C765BCF71BCE25CB6626FF6988C3699F5EF1846240EA0052F34C33 ] usbehci         C:\Windows\system32\drivers\usbehci.sys
13:52:30.0217 0x2044  usbehci - ok
13:52:30.0273 0x2044  [ 8D1196CFBB223621F2C67D45710F25BA, B5D7AFE51833B24FC9576F3AED3D8A2B290E5846060E73F9FFFAC1890A8B6003 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
13:52:30.0331 0x2044  usbhub - ok
13:52:30.0349 0x2044  [ 765A92D428A8DB88B960DA5A8D6089DC, 56DE8A2ED58E53B202C399CA7BACB1551136303C2EE0AB426BDBBF880E3C542C ] usbohci         C:\Windows\system32\drivers\usbohci.sys
13:52:30.0371 0x2044  usbohci - ok
13:52:30.0412 0x2044  [ 73188F58FB384E75C4063D29413CEE3D, B485463933306036B1D490722CB1674DC85670753D79FA0EF7EBCA7BBAAD9F7C ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
13:52:30.0443 0x2044  usbprint - ok
13:52:30.0501 0x2044  [ 9661DA76B4531B2DA272ECCE25A8AF24, FEA93254A21E71A7EB8AD35FCCAD2C1E41F7329EC33B1734F5B41307A34D8637 ] usbscan         C:\Windows\system32\drivers\usbscan.sys
13:52:30.0559 0x2044  usbscan - ok
13:52:30.0603 0x2044  [ FED648B01349A3C8395A5169DB5FB7D6, DC4D7594C24ADD076927B9347F1B50B91CF03A4ABDB284248D5711D9C19DEB96 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
13:52:30.0685 0x2044  USBSTOR - ok
13:52:30.0737 0x2044  [ DD253AFC3BC6CBA412342DE60C3647F3, 146F8613F1057AC054DC3593E84BC52899DA27EA33B0E72ACFB78C3699ADCDE7 ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
13:52:30.0781 0x2044  usbuhci - ok
13:52:30.0874 0x2044  [ 1F775DA4CF1A3A1834207E975A72E9D7, 6D3DE5BD3EF3A76E997E5BAF900C51D25308F5A9682D1F62017F577A24095B90 ] usbvideo        C:\Windows\System32\Drivers\usbvideo.sys
13:52:30.0933 0x2044  usbvideo - ok
13:52:30.0993 0x2044  [ 7B28E2FBE75115660FAB31079C0A9F29, 81BB5A3E64B652A672A0782A88ABF6DDD729D38712D0706CE0FB9DE6D1EE1515 ] usb_rndisx      C:\Windows\system32\DRIVERS\usb8023x.sys
13:52:31.0055 0x2044  usb_rndisx - ok
13:52:31.0088 0x2044  [ EDBB23CBCF2CDF727D64FF9B51A6070E, 7202484C8E1BFB2AFD64D8C81668F3EDE0E3BF5EB27572877A0A7B337AE5AE42 ] UxSms           C:\Windows\System32\uxsms.dll
13:52:31.0187 0x2044  UxSms - ok
13:52:31.0213 0x2044  [ 5424EC756808C1002457033D969115C7, 85B86C3DF9BCF4BA085C4978BE36A38D0079CE24C5C61FB754286E476EB77741 ] VaultSvc        C:\Windows\system32\lsass.exe
13:52:31.0247 0x2044  VaultSvc - ok
13:52:31.0322 0x2044  [ C5C876CCFC083FF3B128F933823E87BD, 6FE0FBB6C3207E09300E0789E2168F76668D87C317FE9F263E733827ADCFBE0D ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
13:52:31.0346 0x2044  vdrvroot - ok
13:52:31.0430 0x2044  [ 8D6B481601D01A456E75C3210F1830BE, A2CEF483F4231367138EEF7E67FD5BE5364FC0780C44CA1368E36CE4AA3D0633 ] vds             C:\Windows\System32\vds.exe
13:52:31.0544 0x2044  vds - ok
13:52:31.0591 0x2044  [ DA4DA3F5E02943C2DC8C6ED875DE68DD, EDE604536DB78C512D68C92B26DA77C8811AC109D1F0A473673F0A82D15A2838 ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
13:52:31.0641 0x2044  vga - ok
13:52:31.0662 0x2044  [ 53E92A310193CB3C03BEA963DE7D9CFC, 45898604375B42EB1246C17A22D91C2440F11C746FF6459AD38027C1BC2E3125 ] VgaSave         C:\Windows\System32\drivers\vga.sys
13:52:31.0749 0x2044  VgaSave - ok
13:52:31.0790 0x2044  [ 2CE2DF28C83AEAF30084E1B1EB253CBB, D1946816A1CB89F825CBEA58F94A4C9D0CE7249355CD3915563F54054EE564BF ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
13:52:31.0825 0x2044  vhdmp - ok
13:52:31.0863 0x2044  [ E5689D93FFE4E5D66C0178761240DD54, 6D35CED80681B12AAF63BFA0DA1C386E71D3838839B68A686990AA8031949D27 ] viaide          C:\Windows\system32\drivers\viaide.sys
13:52:31.0886 0x2044  viaide - ok
13:52:31.0924 0x2044  [ D2AAFD421940F640B407AEFAAEBD91B0, 31EF342A60AF04F4108759A71F8FB7B8C8819216CF3D16A95B2BA0E33A8A9161 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
13:52:31.0949 0x2044  volmgr - ok
13:52:31.0982 0x2044  [ A255814907C89BE58B79EF2F189B843B, 463DB771851352185B6AC323BD93B9084D47291E53C1F7B628B65D6918B2E28F ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
13:52:32.0025 0x2044  volmgrx - ok
13:52:32.0091 0x2044  [ 0D08D2F3B3FF84E433346669B5E0F639, 3D6716CEC95B8861A7CC5778E91F310528DC6BEE0E57A3C8757FC675154EBDEC ] volsnap         C:\Windows\system32\drivers\volsnap.sys
13:52:32.0131 0x2044  volsnap - ok
13:52:32.0164 0x2044  [ 5E2016EA6EBACA03C04FEAC5F330D997, 53106EB877459FE55A459111F7AB0EE320BB3B4C954D3DB6FA1642396001F2AC ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
13:52:32.0195 0x2044  vsmraid - ok
13:52:32.0359 0x2044  [ B60BA0BC31B0CB414593E169F6F21CC2, 47B801E623254CF0202B3591CB5C019CABFB52F123C7D47E29D19B32F1F2B915 ] VSS             C:\Windows\system32\vssvc.exe
13:52:32.0550 0x2044  VSS - ok
13:52:32.0598 0x2044  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1, 3254523C85C70EBA2DBAC05DB2DBA89EDF8E9195F390F7C21F96458FB6B2E3D7 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
13:52:32.0642 0x2044  vwifibus - ok
13:52:32.0656 0x2044  [ 6A3D66263414FF0D6FA754C646612F3F, 30F6BA594B0D3B94113064015A16D97811CD989DF1715CCE21CEAB9894C1B4FB ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
13:52:32.0689 0x2044  vwififlt - ok
13:52:32.0735 0x2044  [ 6A638FC4BFDDC4D9B186C28C91BD1A01, 5521F1DC515586777EC4837E0AEAA3E613CC178AF1074031C4D0D0C695A93168 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
13:52:32.0766 0x2044  vwifimp - ok
13:52:32.0831 0x2044  [ 1C9D80CC3849B3788048078C26486E1A, 34A89F31E53F6B6C209B286F580CC2257AE6D057E4E20741F241C9C167947962 ] W32Time         C:\Windows\system32\w32time.dll
13:52:32.0914 0x2044  W32Time - ok
13:52:32.0946 0x2044  [ 4E9440F4F152A7B944CB1663D3935A3E, 8FE04EBD3BC612EE943A21A3E56F37E5C9B578CDACA6044048181DAD81816D53 ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
13:52:32.0970 0x2044  WacomPen - ok
13:52:33.0015 0x2044  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
13:52:33.0078 0x2044  WANARP - ok
13:52:33.0087 0x2044  [ 356AFD78A6ED4457169241AC3965230C, CE4D1EE3525C10AC658B20776C3E444DE44874C837713DC5311386EDFCB18399 ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
13:52:33.0150 0x2044  Wanarpv6 - ok
13:52:33.0327 0x2044  [ 78F4E7F5C56CB9716238EB57DA4B6A75, 46A4E78CE5F2A4B26F4E9C3FF04A99D9B727A82AC2E390A82A1611C3F6E0C9AF ] wbengine        C:\Windows\system32\wbengine.exe
13:52:33.0516 0x2044  wbengine - ok
13:52:33.0558 0x2044  [ 3AA101E8EDAB2DB4131333F4325C76A3, 4F7BD3DA5E58B18BFF106CFF7B45E75FD13EE556D433C695BA23EC80827E49DE ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
13:52:33.0622 0x2044  WbioSrvc - ok
13:52:33.0689 0x2044  [ 7368A2AFD46E5A4481D1DE9D14848EDD, 8039C478FC2D9F095F5883A4FA47F9E6EDF57CC88A4AA74F07C88445F90DED57 ] wcncsvc         C:\Windows\System32\wcncsvc.dll
13:52:33.0780 0x2044  wcncsvc - ok
13:52:33.0807 0x2044  [ 20F7441334B18CEE52027661DF4A6129, 7B8E0247234B740FED2BE9B833E9CE8DD7453340123AB43F6B495A7E6A27B0DD ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
13:52:33.0866 0x2044  WcsPlugInService - ok
13:52:33.0900 0x2044  [ 72889E16FF12BA0F235467D6091B17DC, F2FD0BBD075E33608D93F350D216F97442AB89ABD540513C2D568C78096E12A8 ] Wd              C:\Windows\system32\drivers\wd.sys
13:52:33.0930 0x2044  Wd - ok
13:52:34.0047 0x2044  [ E2C933EDBC389386EBE6D2BA953F43D8, AF1DEADD5F1267CCEBD226E8EEB971D1946EA6A5A9645A36F5D111F758AF2F07 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
13:52:34.0142 0x2044  Wdf01000 - ok
13:52:34.0180 0x2044  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiServiceHost  C:\Windows\system32\wdi.dll
13:52:34.0241 0x2044  WdiServiceHost - ok
13:52:34.0257 0x2044  [ C6F7473B55510F0B93961DA03D8E3B38, 4BAB9274DED8F7AC4A52B8739F501323FFFA0367CAA24BFAFDB5523812E0CE39 ] WdiSystemHost   C:\Windows\system32\wdi.dll
13:52:34.0299 0x2044  WdiSystemHost - ok
13:52:34.0372 0x2044  [ 4E89FC53493704BF835F0300DC201C34, FB3080725E144D93512DED81047D21C0582BC3412250EFF37E039108D7351F53 ] WebClient       C:\Windows\System32\webclnt.dll
13:52:34.0468 0x2044  WebClient - ok
13:52:34.0536 0x2044  [ C749025A679C5103E575E3B48E092C43, B71171D07EE7AB085A24BF3A1072FF2CE7EA021AAE695F6A90640E6EE8EB55C1 ] Wecsvc          C:\Windows\system32\wecsvc.dll
13:52:34.0657 0x2044  Wecsvc - ok
13:52:34.0702 0x2044  [ 7E591867422DC788B9E5BD337A669A08, 484E6BCCDF7ADCE9A1AACAD1BC7C7D7694B9E40FA90D94B14D80C607784F6C75 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
13:52:34.0818 0x2044  wercplsupport - ok
13:52:34.0873 0x2044  [ 6D137963730144698CBD10F202E9F251, A9F522A125158D94F540544CCD4DBF47B9DCE2EA878C33675AFE40F80E8F4979 ] WerSvc          C:\Windows\System32\WerSvc.dll
13:52:34.0983 0x2044  WerSvc - ok
13:52:35.0036 0x2044  [ 611B23304BF067451A9FDEE01FBDD725, 0AF2734B978165FC6FD22B64862132CCE32528A21C698A49D176129446E099C8 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
13:52:35.0128 0x2044  WfpLwf - ok
13:52:35.0160 0x2044  [ 05ECAEC3E4529A7153B3136CEB49F0EC, 9995CB2CEC70A633EA33CBB0DEAD2BB28CB67132B41E9444BDAB9E75744C9A50 ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
13:52:35.0190 0x2044  WIMMount - ok
13:52:35.0226 0x2044  WinDefend - ok
13:52:35.0281 0x2044  WinHttpAutoProxySvc - ok
13:52:35.0369 0x2044  [ 19B07E7E8915D701225DA41CB3877306, D6555E8D276DBB11358246E0FE215F76F1FB358791C76B88D82C2A66A42DA19F ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
13:52:35.0489 0x2044  Winmgmt - ok
13:52:35.0694 0x2044  [ D929ABD465A2DED963DA8B30946A8D5C, DE8DBFB01C11D2AE903CBD6A974D6F995E9813CE2D6484B7DA06EAE4C545842A ] WinRM           C:\Windows\system32\WsmSvc.dll
13:52:35.0998 0x2044  WinRM - ok
13:52:36.0116 0x2044  [ FE88B288356E7B47B74B13372ADD906D, A16B166F6BB32EF9D2A142F27B9EC54CBC7B3AC915799783CF4C40E525BC9E03 ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
13:52:36.0169 0x2044  WinUsb - ok
13:52:36.0316 0x2044  [ 4FADA86E62F18A1B2F42BA18AE24E6AA, CE1683386886BF34862681A46199EA7E7FB4232A186047DA7FBD8EC240AF6726 ] Wlansvc         C:\Windows\System32\wlansvc.dll
13:52:36.0429 0x2044  Wlansvc - ok
13:52:36.0486 0x2044  [ 06C8FA1CF39DE6A735B54D906BA791C6, D8FEC7DE227781CDA876904701B2AA995268F74DCD6CB34AA0296C557FC283B6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
13:52:36.0511 0x2044  wlcrasvc - ok
13:52:36.0748 0x2044  [ 2BACD71123F42CEA603F4E205E1AE337, 1FEF20554110371D738F462ECFFA999158EFEED02062414C58C1B61C422BF0B9 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
13:52:36.0954 0x2044  wlidsvc - ok
13:52:36.0983 0x2044  [ F6FF8944478594D0E414D3F048F0D778, 6F75E0AE6127B33A92A88E59D4B048FD4C15F997807BE7BF0EFE76F95235B1D9 ] WmiAcpi         C:\Windows\system32\DRIVERS\wmiacpi.sys
13:52:37.0009 0x2044  WmiAcpi - ok
13:52:37.0060 0x2044  [ 38B84C94C5A8AF291ADFEA478AE54F93, 1AC267AC73670BEA5F3785C9AD9DB146F8E993A862C843742B21FDB90D102B2A ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
13:52:37.0106 0x2044  wmiApSrv - ok
13:52:37.0173 0x2044  WMPNetworkSvc - ok
13:52:37.0203 0x2044  [ 96C6E7100D724C69FCF9E7BF590D1DCA, 2E63C9B0893B4FC03B7A71BAEA6202D3D3DB1B52F3643467829B5A573FD7655B ] WPCSvc          C:\Windows\System32\wpcsvc.dll
13:52:37.0253 0x2044  WPCSvc - ok
13:52:37.0277 0x2044  [ 93221146D4EBBF314C29B23CD6CC391D, C0750858A65BF51E210CD244C825C121D67E025CD2D2455139991AAC289A90FE ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
13:52:37.0346 0x2044  WPDBusEnum - ok
13:52:37.0368 0x2044  [ 6BCC1D7D2FD2453957C5479A32364E52, E48554D31FBDCF8F985C1C72524CAA9106F5B7CC2B79064F8F5E2562D517F090 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
13:52:37.0443 0x2044  ws2ifsl - ok
13:52:37.0477 0x2044  [ E8B1FE6669397D1772D8196DF0E57A9E, 39FE0819360719F756BD31A1884A0508A1E2371ACC723E25E005CBEC0A7B02FA ] wscsvc          C:\Windows\System32\wscsvc.dll
13:52:37.0533 0x2044  wscsvc - ok
13:52:37.0540 0x2044  WSearch - ok
13:52:37.0784 0x2044  [ 291778E1A36716182AFBC1731B2DFEAB, C0B928CCCE8C496C90C42E0D294BAB51DC67C02B0D20CFB6A16B0AE1F51CC497 ] wuauserv        C:\Windows\system32\wuaueng.dll
13:52:38.0060 0x2044  wuauserv - ok
13:52:38.0109 0x2044  [ AB886378EEB55C6C75B4F2D14B6C869F, D6C4602EB8F291DADEDF3CD211013D4AC752DDE7E799C2D8D74AA4F5477CAED6 ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
13:52:38.0170 0x2044  WudfPf - ok
13:52:38.0270 0x2044  [ DDA4CAF29D8C0A297F886BFE561E6659, 94E5DD649B5D86FA1A7C7D30FCF9644D0EE048D312E626111458ADF66BFBE978 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
13:52:38.0327 0x2044  WUDFRd - ok
13:52:38.0369 0x2044  [ B20F051B03A966392364C83F009F7D17, 88ECEB55AE91F58F592B96EBC10B572747D5A2F9B7629E8F371761E4F7408A65 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
13:52:38.0424 0x2044  wudfsvc - ok
13:52:38.0476 0x2044  [ 04F82965C09CBDF646B487E145060301, 2CD8533EDBE24C3E42EB7550E20F8A2EB9E5E345B165DEF543163A6BC1FDD18B ] WwanSvc         C:\Windows\System32\wwansvc.dll
13:52:38.0572 0x2044  WwanSvc - ok
13:52:38.0634 0x2044  ================ Scan global ===============================
13:52:38.0666 0x2044  [ 168EA9CD9BD6056BB6F60B57D5304BBE, 5A2F98754F042A7D80E7483842967EB362F01D57CE9720B24C7EDAA047F24C6F ] C:\Windows\system32\basesrv.dll
13:52:38.0731 0x2044  [ 4AD1C61152A0199E3D7F9A82C07AC629, A4A42C7757EB084EE368A6BC4EBAB0C47BE41B0B4119A6AECD1B8E3332A7C5D5 ] C:\Windows\system32\winsrv.dll
13:52:38.0769 0x2044  [ 4AD1C61152A0199E3D7F9A82C07AC629, A4A42C7757EB084EE368A6BC4EBAB0C47BE41B0B4119A6AECD1B8E3332A7C5D5 ] C:\Windows\system32\winsrv.dll
13:52:38.0812 0x2044  [ D6160F9D869BA3AF0B787F971DB56368, 0033E6212DD8683E4EE611B290931FDB227B4795F0B17C309DC686C696790529 ] C:\Windows\system32\sxssrv.dll
13:52:38.0869 0x2044  [ 71C85477DF9347FE8E7BC55768473FCA, A86D6A6D1F5A0EFCD649792A06F3AE9B37158D48493D2ECA7F52DCC1CB9B6536 ] C:\Windows\system32\services.exe
13:52:38.0894 0x2044  [ Global ] - ok
13:52:38.0895 0x2044  ================ Scan MBR ==================================
13:52:38.0920 0x2044  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
13:52:39.0342 0x2044  \Device\Harddisk0\DR0 - ok
13:52:39.0344 0x2044  ================ Scan VBR ==================================
13:52:39.0359 0x2044  [ 49FA62B0D2E796D24842F244C4A0859A ] \Device\Harddisk0\DR0\Partition1
13:52:39.0363 0x2044  \Device\Harddisk0\DR0\Partition1 - ok
13:52:39.0384 0x2044  [ 65EE82FD262100CBDCE53CA1964009C2 ] \Device\Harddisk0\DR0\Partition2
13:52:39.0387 0x2044  \Device\Harddisk0\DR0\Partition2 - ok
13:52:39.0426 0x2044  [ FD31E5EC2804FB0AC576F5299752B9D5 ] \Device\Harddisk0\DR0\Partition3
13:52:39.0429 0x2044  \Device\Harddisk0\DR0\Partition3 - ok
13:52:39.0431 0x2044  ================ Scan generic autorun ======================
13:52:39.0493 0x2044  [ BA9E8BF3E91C14DE99FDB1FA946D07AF, 9C3F5F52EE5B8D02B15EE18AA492FB110547A8DCDA3F8284A614F4E1A30F9BB1 ] C:\Windows\system32\igfxtray.exe
13:52:39.0526 0x2044  IgfxTray - ok
13:52:39.0569 0x2044  [ B20857C91A3E992A5AC93D8625C53CAE, ECB89856B267E2F4930CB7B404B51425C6375A47F864577C1A7B8B255278EC12 ] C:\Windows\system32\hkcmd.exe
13:52:39.0619 0x2044  HotKeysCmds - ok
13:52:39.0681 0x2044  [ 29E120E36791B2E620CC398847C28E12, 7C2904FEDD50F49447FD091D33BB3BFA5A2A684101ADB123BC2C08699320B912 ] C:\Windows\system32\igfxpers.exe
13:52:39.0733 0x2044  Persistence - ok
13:52:39.0741 0x2044  IntelTBRunOnce - ok
13:52:39.0742 0x2044  ETDCtrl - ok
13:52:40.0790 0x2044  [ 5DADA908E14051D65DB1991CB0B1F58D, DC02EDA032CEC2241F302995BF010B0376D5421A3E97583CB8A13A80993290B4 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
13:52:41.0606 0x2044  RtHDVCpl - ok
13:52:41.0965 0x2044  [ E897F9B62E611D59FDFAB82FC829B93A, E11E1A488D461105104E7FFD9F8219BDD231807FE33600233BEF11A432E138FD ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
13:52:42.0194 0x2044  RtHDVBg_Dolby - ok
13:52:42.0404 0x2044  [ F0474296AC4E0E6BDE733C1B8513E41A, 2E54894FC1B422F0C520D11166204926D3994A3440037D655C73D66D7118859C ] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
13:52:42.0575 0x2044  Power Management - ok
13:52:42.0655 0x2044  [ 5A89395D7185A2B1B6A43870079D808F, 6557F3F82931D2782B33976FB7B441FFE65AB98377ADB2E8582D0CA41A28F581 ] C:\Program Files (x86)\Acer\OOBEOffer\ootag.exe
13:52:42.0678 0x2044  OOTag - ok
13:52:42.0846 0x2044  [ 79C9B6A7836DC358216036A1EBA31B62, 9E3987ED10C5CFCD06A2DCBC4E0838004F97A1527527749EF3CC7C5EC5AC2597 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
13:52:42.0892 0x2044  AdobeAAMUpdater-1.0 - ok
13:52:42.0921 0x2044  [ DD81D91FF3B0763C392422865C9AC12E, F5691B8F200E3196E6808E932630E862F8F26F31CD949981373F23C9D87DB8B9 ] C:\Windows\system32\rundll32.exe
13:52:42.0952 0x2044  Logitech Download Assistant - ok
13:52:43.0026 0x2044  [ D35187E38B0BD6E116C2CE582CAC4273, B3C652E0875D4354ACE6F475BC84B4BCA41A1AD8AF5FBE9DE9A9B66B7FCC2756 ] C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
13:52:43.0062 0x2044  SuiteTray - ok
13:52:43.0142 0x2044  [ 0D360F06B168A6F37ACA9D9F958245DA, 0F37D510AE0A31503A359F65D5C04CD798B178A3A3E2601DFBAB6534B3C7C23C ] C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
13:52:43.0174 0x2044  BackupManagerTray - ok
13:52:43.0199 0x2044  [ 5A89395D7185A2B1B6A43870079D808F, 6557F3F82931D2782B33976FB7B441FFE65AB98377ADB2E8582D0CA41A28F581 ] C:\Program Files (x86)\Acer\OOBEOffer\OOTag.exe
13:52:43.0216 0x2044  OOTag - ok
13:52:43.0354 0x2044  [ 9ABC4E3B00CFA3A47D5569F5B49FE42F, 5D33CCE770BC9BC3AFA544A21F100A7F1E5A36577FDB30884160AC4BFE6A1838 ] C:\Program Files (x86)\Launch Manager\LManager.exe
13:52:43.0437 0x2044  LManager - ok
13:52:43.0508 0x2044  [ E6CC0FA3C1040C791EB3F4BA6C789411, 095D5965FEE00ACB6D8713B2E2772A409A84F42D85383AEAF5FC3E2E393DC07D ] C:\Dolby PCEE4\pcee4.exe
13:52:43.0555 0x2044  Dolby Advanced Audio v2 - ok
13:52:43.0617 0x2044  [ D474767D4805CEF801AF6D4AEED1F9E3, 4645EABB554ED97737D9375826EFB06BF43E3DC4C33095FDCCC530B51DEC6145 ] C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe
13:52:43.0639 0x2044  ArcadeMovieService - ok
13:52:43.0732 0x2044  [ 72860972F8196EBB3C896F53D2B95470, 95C046A66DD0089377867F073CADCE585B7C69CA23E724DCAD9D896BF01E023D ] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
13:52:43.0746 0x2044  hpqSRMon - detected UnsignedFile.Multi.Generic ( 1 )
13:52:46.0785 0x2044  Detect skipped due to KSN trusted
13:52:46.0785 0x2044  hpqSRMon - ok
13:52:46.0874 0x2044  [ 93A5FC4337DF3ED8546755B26C4B1E75, C42941F4D8D1EE6F12C7FB6F34F2B6E3937510752B56578B3E9352C2598E584D ] C:\Program Files (x86)\Microsoft Works\WksSb.exe
13:52:46.0910 0x2044  Microsoft Works Portfolio - detected UnsignedFile.Multi.Generic ( 1 )
13:52:49.0528 0x2044  Detect skipped due to KSN trusted
13:52:49.0528 0x2044  Microsoft Works Portfolio - ok
13:52:49.0570 0x2044  [ C637FC4638A96165256B28D38DE7B953, CD658543610F151C7860DBDCF36596C9B5417D87E598FA50A435392D4AED1C14 ] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
13:52:49.0594 0x2044  HP Software Update - ok
13:52:49.0745 0x2044  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
13:52:49.0897 0x2044  Sidebar - ok
13:52:49.0943 0x2044  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
13:52:49.0994 0x2044  mctadmin - ok
13:52:50.0000 0x2044  IsMyWinLockerReboot - ok
13:52:50.0111 0x2044  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
13:52:50.0212 0x2044  Sidebar - ok
13:52:50.0231 0x2044  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
13:52:50.0274 0x2044  mctadmin - ok
13:52:50.0281 0x2044  IsMyWinLockerReboot - ok
13:52:50.0366 0x2044  [ DCCA4B04AF87E52EF9EAA2190E06CBAC, 8858CFD159BB32AE9FCCA1A79EA83C876D481A286E914071D48F42FCA5B343D8 ] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
13:52:50.0477 0x2044  Sidebar - ok
13:52:50.0500 0x2044  [ 0FA760BF380B08D0B67B5507CD8B32AA, 0F73A7F64C4FDAB98CD3A865CC54B3A7195761530FCB115B725CC5A9FB738739 ] C:\Windows\System32\mctadmin.exe
13:52:50.0543 0x2044  mctadmin - ok
13:52:50.0757 0x2044  [ 175CE6C35FF720F0140E3E59A93166CA, 8A75C4BE62FBC8E907AF2DB9E3FF13C11525A2F86A7D62DA63698C2A04F7678B ] C:\Users\Niklas\AppData\Local\Apps\2.0\Data\5J40E04R.DMV\JMNQMW8A.15V\zedg..tion_4cd56dcfd1799009_0001.0002_ea3f01849f5e16c3\Data\ZedgeToneSync.appref-ms
13:52:50.0918 0x2044  ZedgeToneSync - detected UnsignedFile.Multi.Generic ( 1 )
13:52:53.0719 0x2044  ZedgeToneSync ( UnsignedFile.Multi.Generic ) - warning
13:52:56.0379 0x2044  [ 48C3EBD6D5E52AFCB1A0FA9B7F9802FA, 4F2E27AA8305FFC94F65C65C5FDB8462C92ED02A7B37627404382C3CAB65AC59 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
13:52:56.0403 0x2044  iCloudServices - ok
13:52:56.0436 0x2044  [ 799BCC829F48F19C5689478179060435, 495C6E363982F7BE1785A46C12ED4AC99E0AF98F340F1CE3C55D39EBE6FE33AA ] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
13:52:56.0461 0x2044  ApplePhotoStreams - ok
13:52:56.0574 0x2044  [ DAB55357D9CC9A76052F4472EBD5C729, 6028463D46079D1D8AD564197B54D89035AD85472A80ABA2FD11D3F7A91FCAD4 ] C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe
13:52:56.0709 0x2044  AppleIEDAV - ok
13:52:57.0401 0x2044  [ 1646226D604FC4CCB9AFBD9DE9D7E84F, D477B277781CBBB3FCEA218D0A177DDCB17F8ECB7F617619D925B5037A1A4A4F ] C:\WatchMyCam\WatchMyCam.exe
13:52:58.0172 0x2044  WatchMyCam - detected UnsignedFile.Multi.Generic ( 1 )
13:53:00.0716 0x2044  Detect skipped due to KSN trusted
13:53:00.0716 0x2044  WatchMyCam - ok
13:53:01.0056 0x2044  [ 71B8F5AD8CB230DD3ABA063701789CB1, A54E29953BD6D2F3303AF9514F05A1D394790B5ADB74FE833D9FA895AD61DFBF ] C:\Users\Niklas\AppData\Roaming\Spotify\SpotifyWebHelper.exe
13:53:01.0259 0x2044  Spotify Web Helper - ok
13:53:01.0324 0x2044  [ 7C6D524C78A1722AD987B9E47AC1FEE2, FFDC6C92ABB547D0DCD2621EC423C755A78079B061A41FA1751A56799D1A79A5 ] C:\Users\Niklas\AppData\Local\Dropbox\Update\DropboxUpdate.exe
13:53:01.0358 0x2044  Dropbox Update - ok
13:53:01.0393 0x2044  Skype - ok
13:53:02.0576 0x2044  [ FB5B78A3DE88FD3B725DA574497BC225, 0096C3ED0E29153E6A9E84C121B79A170FEDFE521AEA1BC602BC536E1795E5F3 ] C:\Program Files\CCleaner\CCleaner64.exe
13:53:03.0546 0x2044  CCleaner Monitoring - ok
13:53:03.0586 0x2044  Microsoft Works Update Detection - ok
13:53:03.0588 0x2044  Microsoft Works Update Detection - ok
13:53:03.0591 0x2044  radio ffn RekorderTimer - ok
13:53:03.0688 0x2044  Facebook Update - ok
13:53:03.0690 0x2044  radio ffn Rekorder - ok
13:53:03.0694 0x2044  Waiting for KSN requests completion. In queue: 3
13:53:04.0694 0x2044  Waiting for KSN requests completion. In queue: 3
13:53:05.0694 0x2044  Waiting for KSN requests completion. In queue: 3
13:53:06.0750 0x2044  AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\AntiVir Desktop\wsctool.exe ( 15.0.13.202 ), 0x41000 ( enabled : updated )
13:53:06.0793 0x2044  Win FW state via NFP2: enabled ( trusted )
13:53:09.0257 0x2044  ============================================================
13:53:09.0257 0x2044  Scan finished
13:53:09.0257 0x2044  ============================================================
13:53:09.0284 0x2324  Detected object count: 1
13:53:09.0284 0x2324  Actual detected object count: 1
13:55:54.0539 0x2324  ZedgeToneSync ( UnsignedFile.Multi.Generic ) - skipped by user
13:55:54.0539 0x2324  ZedgeToneSync ( UnsignedFile.Multi.Generic ) - User select action: Skip 
13:59:19.0033 0x15a8  Deinitialize success

schrauber · 02.11.2015, 20:13

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Tessy1993 · 02.11.2015, 22:10

Code:

ATTFilter

ComboFix 15-10-28.01 - Niklas 02.11.2015  21:29:54.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8044.5393 [GMT 1:00]
ausgeführt von:: c:\users\Niklas\Desktop\Trojaner Board Dateien\ComboFix\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Niklas\AppData\Local[j0005]-[p04].bmp
c:\windows\smun3240.exe
c:\windows\SysWow64\DEBUG.log
c:\windows\wininit.ini
D:\install.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-10-02 bis 2015-11-02  ))))))))))))))))))))))))))))))
.
.
2015-11-02 20:43 . 2015-11-02 20:43	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2015-11-02 20:43 . 2015-11-02 20:43	--------	d-----w-	c:\users\Robert\AppData\Local\temp
2015-11-02 20:43 . 2015-11-02 20:43	--------	d-----w-	c:\users\Lauritz\AppData\Local\temp
2015-11-02 20:43 . 2015-11-02 20:43	--------	d-----w-	c:\users\Default\AppData\Local\temp
2015-11-01 01:42 . 2015-11-01 01:42	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{BDFA528B-2A84-463F-BC1C-3129FA03D788}\offreg.8180.dll
2015-10-30 21:45 . 2015-10-30 23:31	--------	d-----w-	c:\programdata\Malwarebytes' Anti-Malware (portable)
2015-10-30 18:29 . 2015-10-13 09:47	11140960	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{BDFA528B-2A84-463F-BC1C-3129FA03D788}\mpengine.dll
2015-10-29 12:56 . 2015-10-29 12:58	--------	d-----w-	C:\AdwCleaner
2015-10-28 13:57 . 2015-10-28 14:03	--------	d-----w-	C:\FRST
2015-10-15 18:25 . 2015-09-18 19:19	700416	----a-w-	c:\windows\system32\invagent.dll
2015-10-15 18:25 . 2015-09-18 19:19	766464	----a-w-	c:\windows\system32\generaltel.dll
2015-10-15 18:25 . 2015-09-18 19:19	503808	----a-w-	c:\windows\system32\devinv.dll
2015-10-15 18:25 . 2015-09-18 19:19	1291264	----a-w-	c:\windows\system32\appraiser.dll
2015-10-15 18:25 . 2015-09-18 19:09	1163776	----a-w-	c:\windows\system32\aeinv.dll
2015-10-15 18:25 . 2015-09-18 19:22	25432	----a-w-	c:\windows\system32\CompatTelRunner.exe
2015-10-15 18:25 . 2015-09-18 19:19	73216	----a-w-	c:\windows\system32\acmigration.dll
2015-10-14 12:46 . 2015-09-16 03:45	92160	----a-w-	c:\windows\system32\mshtmled.dll
2015-10-14 12:43 . 2015-08-06 18:04	14176768	----a-w-	c:\windows\system32\shell32.dll
2015-10-14 12:43 . 2015-08-06 18:03	1866752	----a-w-	c:\windows\system32\ExplorerFrame.dll
2015-10-14 12:43 . 2015-08-06 17:44	1498624	----a-w-	c:\windows\SysWow64\ExplorerFrame.dll
2015-10-14 12:43 . 2015-09-01 18:14	503296	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\tiptsf.dll
2015-10-14 12:43 . 2015-09-01 18:14	1247232	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\tipskins.dll
2015-10-14 12:43 . 2015-09-01 18:14	110592	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\TipBand.dll
2015-10-14 12:43 . 2015-09-01 18:13	224768	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\TabTip.exe
2015-10-14 12:43 . 2015-09-01 18:12	544768	----a-w-	c:\program files\Common Files\Microsoft Shared\ink\TipRes.dll
2015-10-14 12:43 . 2015-09-01 17:52	348672	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\ink\tiptsf.dll
2015-10-14 12:43 . 2015-09-01 17:52	10240	----a-w-	c:\program files (x86)\Common Files\Microsoft Shared\ink\TabTip32.exe
2015-10-14 12:38 . 2015-09-29 03:16	5569472	----a-w-	c:\windows\system32\ntoskrnl.exe
2015-10-14 12:37 . 2015-07-18 13:08	984448	----a-w-	c:\windows\system32\ucrtbase.dll
2015-10-13 21:59 . 2015-10-13 21:59	51312	----a-w-	c:\program files (x86)\Mozilla Firefox\updated\browser\components\browsercomps.dll
2015-10-12 21:21 . 2015-10-30 21:45	192216	----a-w-	c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-10-12 21:21 . 2015-10-30 21:43	109272	----a-w-	c:\windows\system32\drivers\mbamchameleon.sys
2015-10-12 21:21 . 2015-10-29 12:28	--------	d-----w-	c:\program files (x86)\ Malwarebytes Anti-Malware 
2015-10-12 21:21 . 2015-10-05 08:50	63704	----a-w-	c:\windows\system32\drivers\mwac.sys
2015-10-12 21:21 . 2015-10-05 08:50	25816	----a-w-	c:\windows\system32\drivers\mbam.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-10-28 02:13 . 2012-09-07 23:29	143481208	----a-w-	c:\windows\system32\MRT.exe
2015-10-07 22:47 . 2013-05-07 16:39	74952	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2015-10-07 22:47 . 2013-03-30 11:41	163544	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2015-09-29 02:58 . 2015-10-14 12:38	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-09-02 03:04 . 2015-09-09 16:55	41984	----a-w-	c:\windows\system32\lpk.dll
2015-09-02 03:04 . 2015-09-09 16:55	100864	----a-w-	c:\windows\system32\fontsub.dll
2015-09-02 03:04 . 2015-09-09 16:55	14336	----a-w-	c:\windows\system32\dciman32.dll
2015-09-02 03:04 . 2015-09-09 16:55	46080	----a-w-	c:\windows\system32\atmlib.dll
2015-09-02 02:48 . 2015-09-09 16:55	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2015-09-02 02:48 . 2015-09-09 16:55	10240	----a-w-	c:\windows\SysWow64\dciman32.dll
2015-09-02 02:48 . 2015-09-09 16:55	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2015-09-02 02:47 . 2015-09-09 16:55	25600	----a-w-	c:\windows\SysWow64\lpk.dll
2015-09-02 01:51 . 2015-09-09 16:55	3209216	----a-w-	c:\windows\system32\win32k.sys
2015-09-02 01:47 . 2015-09-09 16:55	372736	----a-w-	c:\windows\system32\atmfd.dll
2015-09-02 01:33 . 2015-09-09 16:55	299520	----a-w-	c:\windows\SysWow64\atmfd.dll
2015-09-01 09:51 . 2015-09-01 09:51	365576	----a-w-	c:\windows\SysWow64\DivXControlPanelApplet.cpl
2015-08-27 18:18 . 2015-09-09 16:56	2004480	----a-w-	c:\windows\system32\msxml6.dll
2015-08-27 18:18 . 2015-09-09 16:56	1887232	----a-w-	c:\windows\system32\msxml3.dll
2015-08-27 18:13 . 2015-09-09 16:56	2048	----a-w-	c:\windows\system32\msxml6r.dll
2015-08-27 18:13 . 2015-09-09 16:56	2048	----a-w-	c:\windows\system32\msxml3r.dll
2015-08-27 17:58 . 2015-09-09 16:56	1391104	----a-w-	c:\windows\SysWow64\msxml6.dll
2015-08-27 17:58 . 2015-09-09 16:56	1241088	----a-w-	c:\windows\SysWow64\msxml3.dll
2015-08-27 17:51 . 2015-09-09 16:56	2048	----a-w-	c:\windows\SysWow64\msxml6r.dll
2015-08-27 17:51 . 2015-09-09 16:56	2048	----a-w-	c:\windows\SysWow64\msxml3r.dll
2015-08-05 17:56 . 2015-09-09 16:57	1110016	----a-w-	c:\windows\system32\schedsvc.dll
2015-08-05 17:56 . 2015-09-09 16:57	24576	----a-w-	c:\windows\system32\jnwmon.dll
2015-08-05 17:56 . 2015-09-09 16:57	275456	----a-w-	c:\windows\system32\InkEd.dll
2015-08-05 17:40 . 2015-09-09 16:57	216064	----a-w-	c:\windows\SysWow64\InkEd.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ZedgeToneSync"="c:\users\Niklas\AppData\Local\Apps\2.0\Data\5J40E04R.DMV\JMNQMW8A.15V\zedg..tion_4cd56dcfd1799009_0001.0002_ea3f01849f5e16c3\Data\ZedgeToneSync.appref-ms -startup" [X]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-11-20 59720]
"AppleIEDAV"="c:\program files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe" [2013-11-15 1326408]
"WatchMyCam"="c:\watchmycam\WatchMyCam.exe" [2013-07-18 8249856]
"Spotify Web Helper"="c:\users\Niklas\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-07-30 2017848]
"Dropbox Update"="c:\users\Niklas\AppData\Local\Dropbox\Update\DropboxUpdate.exe" [2015-06-20 134512]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-09-04 55349888]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2015-08-19 8455960]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-09-20 341360]
"BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-04-24 297280]
"OOTag"="c:\program files (x86)\Acer\OOBEOffer\OOTag.exe" [2010-02-23 13856]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-07-01 1103440]
"Dolby Advanced Audio v2"="c:\dolby pcee4\pcee4.exe" [2011-06-01 506712]
"ArcadeMovieService"="c:\program files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" [2011-08-26 177448]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"Microsoft Works Portfolio"="c:\program files (x86)\Microsoft Works\WksSb.exe" [2001-10-04 331830]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2011-05-10 49208]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-10-07 782520]
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2012-12-29 295072]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-07-03 43816]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-01-17 421888]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2015-09-14 1045720]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2015-09-04 433160]
"ControlCenter4"="c:\program files (x86)\ControlCenter4\BrCcBoot.exe" [2012-08-28 143360]
"BrStsMon00"="c:\program files (x86)\Browny02\Brother\BrStMonW.exe" [2012-06-06 3076096]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-05-26 152392]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2015-06-26 1861640]
"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2015-09-14 220704]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-09-04 55349888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe" [2015-06-15 73216]
.
c:\users\Niklas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2015-5-5 36711472]
Office2010AdRemover.lnk - c:\program files (x86)\Microsoft Office\OfficeAdRemover.exe [2014-6-16 6915951]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Erinnerungen in Microsoft Works-Kalender.lnk - c:\program files (x86)\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe [2001-10-4 24633]
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"HP Software Update"=c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe
"WorksFUD"=c:\program files (x86)\Microsoft Works\wkfud.exe
"Microsoft Works Update Detection"=c:\program files (x86)\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 gupdate1cf79c886f01d6b;Google Update-Dienst (gupdate1cf79c886f01d6b);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x]
R3 gupdatem1cf79c886fd640c;Google Update-Dienst (gupdatem1cf79c886fd640c);c:\program files (x86)\Google\Update\GoogleUpdate.exe;c:\program files (x86)\Google\Update\GoogleUpdate.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\drivers\PxHlpa64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 AdobeActiveFileMonitor12.0;Adobe Active File Monitor V12;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe;c:\program files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\DRIVERS\b57xdbd.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdbd.sys [x]
S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\DRIVERS\b57xdmp.sys;c:\windows\SYSNATIVE\DRIVERS\b57xdmp.sys [x]
S3 BrYNSvc;BrYNSvc;c:\program files (x86)\Browny02\BrYNSvc.exe;c:\program files (x86)\Browny02\BrYNSvc.exe [x]
S3 bScsiMSa;bScsiMSa;c:\windows\system32\DRIVERS\bScsiMSa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiMSa.sys [x]
S3 bScsiSDa;bScsiSDa;c:\windows\system32\DRIVERS\bScsiSDa.sys;c:\windows\SYSNATIVE\DRIVERS\bScsiSDa.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\program files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe;c:\program files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfswin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfswin7.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaywin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaywin7.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirwin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirwin7.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvolwin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvolwin7.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - 68766303
*NewlyCreated* - MBAMPROTECTOR
*Deregistered* - 68766303
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-10-28 00:06	997704	----a-w-	c:\program files (x86)\Google\Chrome\Application\46.0.2490.80\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-10-14 c:\windows\Tasks\Adobe Acrobat Update Task.job
- c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14 07:25]
.
2015-07-14 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-04 16:00]
.
2015-09-21 c:\windows\Tasks\AdobeAAMUpdater-1.0-DER-PC-Niklas.job
- c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-06-03 04:06]
.
2013-12-18 c:\windows\Tasks\AdobeAAMUpdater-1.0-Niklas-PC-Niklas.job
- c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-06-03 04:06]
.
2014-02-15 c:\windows\Tasks\Apple Diagnostics.job
- c:\program files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20 14:43]
.
2015-07-20 c:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1001Core1d0c2ed7ff8372.job
- c:\users\Niklas\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-20 13:31]
.
2014-10-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cf8d48a6358f0b.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-27 15:41]
.
2014-11-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cfec38a3504081.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-27 15:41]
.
2015-02-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cffea853be9f1.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-27 15:41]
.
2015-05-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore1d0426d4441e82f.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-27 15:41]
.
2015-07-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore1d0923fa120a728.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-27 15:41]
.
2015-08-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore1d0c2eb3dba2a34.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-27 15:41]
.
2015-09-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore1d0e403775249fc.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-27 15:41]
.
2015-09-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore1d0f0c8130d34a0.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-27 15:41]
.
2014-05-08 c:\windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1001.job
- c:\program files (x86)\Real\RealUpgrade\realupgrade.exe [2012-11-30 14:30]
.
2015-09-02 c:\windows\Tasks\{2F30B804-8FED-4427-A580-06EACEAA7E27}.job
- c:\program files\Internet Explorer\iexplore.exe [2015-10-14 19:31]
.
2015-09-01 c:\windows\Tasks\{39813253-D53E-4F49-B904-3211210020BE}.job
- c:\program files\Internet Explorer\iexplore.exe [2015-10-14 19:31]
.
2015-09-02 c:\windows\Tasks\{3BB5EF68-1F88-4A0D-A747-2F0157525F44}.job
- c:\program files\Internet Explorer\iexplore.exe [2015-10-14 19:31]
.
2015-09-01 c:\windows\Tasks\{4C15085C-EF41-481E-B06F-531E86806560}.job
- c:\program files (x86)\google\chrome\application\chrome.exe [2014-05-27 14:08]
.
2015-09-02 c:\windows\Tasks\{81A5F1D3-9173-4C90-9AC5-7E011B9062F2}.job
- c:\program files\Internet Explorer\iexplore.exe [2015-10-14 19:31]
.
2015-09-02 c:\windows\Tasks\{C0E2E969-B239-43B7-8386-B68CA859C338}.job
- c:\program files\Internet Explorer\iexplore.exe [2015-10-14 19:31]
.
2013-10-30 c:\windows\Tasks\{C549AB83-6923-4AC4-A1D3-CCB8AEA181FA}.job
- c:\program files (x86)\mozilla firefox\firefox.exe [2015-02-09 18:18]
.
2015-09-01 c:\windows\Tasks\{CEBCD1CE-9FDF-4E2E-BC16-F09D763897AD}.job
- c:\program files (x86)\Skype\Phone\Skype.exe [2015-09-04 11:44]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34	232712	----a-w-	c:\users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34	232712	----a-w-	c:\users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"]
@="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34	232712	----a-w-	c:\users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"]
@="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34	232712	----a-w-	c:\users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34	232712	----a-w-	c:\users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"]
@="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34	232712	----a-w-	c:\users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34	232712	----a-w-	c:\users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"]
@="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}]
2015-10-12 23:34	232712	----a-w-	c:\users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-06-21 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-06-21 392472]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-06-21 416024]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-08-16 12673128]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-08-16 2277480]
"Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-08-02 1831016]
"OOTag"="c:\program files (x86)\Acer\OOBEOffer\ootag.exe" [2010-02-23 13856]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2013-06-03 472984]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mSearch Page = hxxp://www.google.com
uSearchAssistant = hxxp://www.bing.com/search?q={searchTerms}
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - c:\program files (x86)\ICQ7M\ICQ.exe
TCP: DhcpNameServer = 8.8.8.8 8.8.4.4
FF - ProfilePath - c:\users\Niklas\AppData\Roaming\Mozilla\Firefox\Profiles\w5o7vqrp.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.facebook.com/
FF - prefs.js: network.proxy.http - 111.13.46.99
FF - prefs.js: network.proxy.http_port - 3128
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: !HIDDEN! 2012-09-07 18:18; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF - ExtSQL: !HIDDEN! 2013-11-11 00:49; {ACAA314B-EEBA-48e4-AD47-84E31C44796C}; c:\program files (x86)\Common Files\DVDVideoSoft\plugins\ff
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-Microsoft Works Update Detection - c:\program files (x86)\Microsoft Works\WkDetect.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
AddRemove-SoftMaker-Software - c:\windows\smun3240.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-3696339184-2483942939-123780382-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}*]
"iaecpkhfpoldifjela"=hex:6a,61,70,65,65,64,6f,70,6c,70,66,6c,64,64,6b,65,64,65,
   61,70,00,00
"haobkeonjjlheche"=hex:6b,61,61,66,6b,6d,62,6f,66,6c,6f,6a,65,6f,62,64,66,68,
   69,6d,6a,62,00,00
"iaadefaeljpbepiocm"=hex:63,61,66,66,6f,6e,00,01
"dbefckonladmbppfjoalcinmfpcbgplegdlljinl"=hex:68,61,6a,64,69,61,6b,69,62,61,
   6c,6f,6a,6e,62,69,00,00
"jbefckonladmbppfjoalfjjjihogefagekoapiiconidpcfcnoog"=hex:68,61,6a,64,69,61,
   6b,69,62,61,6c,6f,6a,6e,62,69,00,00
"dbefckonladmbppfjoaldjanmogjoggmgjjoegbd"=hex:6a,61,6f,64,67,62,62,66,65,6d,
   70,6a,62,6d,6a,6e,66,66,64,65,00,fb
.
[HKEY_USERS\S-1-5-21-3696339184-2483942939-123780382-1001\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{26839C32-730F-A914-CCEE-23D9593F3856}*]
"iaecpkhfpoldifjela"=hex:6a,61,70,65,65,64,6f,70,6c,70,66,6c,64,64,6b,65,64,65,
   61,70,00,00
"haobkeonjjlheche"=hex:6b,61,61,66,6b,6d,62,6f,66,6c,6f,6a,65,6f,62,64,66,68,
   69,6d,6a,62,00,00
"iaadefaeljpbepiocm"=hex:63,61,66,66,6f,6e,00,01
"dbefckonladmbppfjoalcinmfpcbgplegdlljinl"=hex:68,61,6a,64,69,61,6b,69,62,61,
   6c,6f,6a,6e,62,69,00,00
"jbefckonladmbppfjoalfjjjihogefagekoapiiconidpcfcnoog"=hex:68,61,6a,64,69,61,
   6b,69,62,61,6c,6f,6a,6e,62,69,00,00
"dbefckonladmbppfjoaldjanmogjoggmgjjoegbd"=hex:6a,61,6f,64,67,62,62,66,65,6d,
   70,6a,62,6d,6a,6e,66,66,64,65,00,fb
.
[HKEY_USERS\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\Wow6432Node\CLSID\{130F8154-E804-4BD5-A07B-35BE69039715}\{A730F6F3-255C-417C-8986-2C578500547E}*Hidden]
"{6D31FCD2-64F7-4E43-8E18-5A2BBA7D13C9}"="AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAR8wTf8W/c0GYFytP1tCg+QAAAAACAAAAAAAQZgAAAAEAACAAAAALXGf1KKQqPJlSNA2/BApwAiWAW4EARTkDNsXAMuRf1wAAAAAOgAAAAAIAACAAAAB82SgzaolHpSjefy5rQmGn452bWe/Q2wVIHk00DwvyBhAAAAAwZeyMpXEdeXhFwwV7Fe3zQAAAAO4HvAC9/lXC8eSQfATkH6xrZYxwZE39uBZX8S8+24QIC+lZeOsouQJXrw/gFbXEc/rtDCqyb/0E28Eb84RBT1s="
"{2338F5D5-2437-4FC3-9005-A01804321264}"="AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAR8wTf8W/c0GYFytP1tCg+QAAAAACAAAAAAAQZgAAAAEAACAAAACLNJMYn6yeR9NSf1VmnAYWt5v88x1xssRKPZpRYPeSEAAAAAAOgAAAAAIAACAAAACXY6MbjQp+Gl0LyZiP3QGcLaqRnAj9QPVS4Po7wVMT/yAAAADp2XZYuFuv6aSagxEkBHDyQGsgojtyZSpYVW74dT2pXUAAAADP7Lj4yvsMPCYouAS27YHLvrB23Z7WxNJTeMlwclfprsWYJfy/jkKInQlmrAF8NvnzIQM2sxv5ww9twSYnkX3Z"
"{FCCCD80D-2A5E-401E-B64F-D1C2E375B955}"="AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAR8wTf8W/c0GYFytP1tCg+QAAAAACAAAAAAAQZgAAAAEAACAAAADe+64GBdT6DGpVuwlFi8rClma4BqJs5WjK949COP5t4QAAAAAOgAAAAAIAACAAAACKKzHeTMJE5jn4SgduXoTjiowOJldw08Oshr6x+vFIRxAAAADlV1PUDWu3hFvSa3qabNLlQAAAAIgqJGcw6vMnzuMXXbEnN49TNIbUGsooFxzbSvZH9n/AqSwg3Yfj8sKdeo7T0Z4K/39RKmkPD+Ntzv+49SRg0Sc="
.
[HKEY_USERS\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\Wow6432Node\CLSID\{130F8154-E804-4BD5-A07B-35BE69039715}\{A730F6F3-255C-417C-8986-2C578500547E}*Hidden\DeltaClock]
"LastSynchronizationClock"=hex(b):00,3b,5c,99,b2,ed,d0,08
"DeltaClock"=hex(b):b5,8e,9a,d2,ff,ff,ff,ff
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_94_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_94.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-11-02  21:51:06
ComboFix-quarantined-files.txt  2015-11-02 20:51
.
Vor Suchlauf: 17 Verzeichnis(se), 196.328.869.888 Bytes frei
Nach Suchlauf: 25 Verzeichnis(se), 198.236.123.136 Bytes frei
.
- - End Of File - - A128F9B7339B9CCE37080B3897B07D62

schrauber · 03.11.2015, 21:06

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Tessy1993 · 04.11.2015, 15:35

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 03.11.2015
Suchlaufzeit: 21:40
Protokolldatei: Scan 03.11.2015.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2015.11.03.07
Rootkit-Datenbank: v2015.10.28.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Niklas

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 514964
Abgelaufene Zeit: 1 Std., 10 Min., 41 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Code:

ATTFilter

# AdwCleaner v5.017 - Bericht erstellt am 04/11/2015 um 13:44:21
# Aktualisiert am 03/11/2015 von Xplode
# Datenbank : 2015-11-01.2 [Lokal]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : Niklas - DER-PC
# Gestartet von : C:\Users\Niklas\Desktop\Trojaner Board Dateien\AdwCleaner_5.017.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****


***** [ Dateien ] *****


***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Geplante Tasks ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{00A6FAF1-072E-44CF-8957-5838F569A31D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0E1230F8-EA50-42A9-983C-D22ABC2EED3B}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{224530A0-C9CB-4AEE-9C0F-54AC1B533211}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{8C875948-9C60-4381-9248-0DF180542D53}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C1E58A84-95B3-4630-B8C2-D06B77B7A0FC}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{C900B400-CDFE-11D3-976A-00E02913A9E0}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F9765480-72D1-11D4-A75A-004F49045A87}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FC87A650-207D-4392-A6A1-82ADBC56FA64}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1000\Software\systweak
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\systweak
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\systweak
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004\Software\Softonic
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004\Software\systweak
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004\Software\yuna software
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Softonic
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\systweak
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\yuna software
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Softonic
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\systweak
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\yuna software
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1005\Software\systweak
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\systweak
[-] Schlüssel Gelöscht : HKU\S-1-5-21-3696339184-2483942939-123780382-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\systweak
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18C9E3869A16248439FE3FF9EB02207A
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3204F747B20694B8D49EF92D8DC94B
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFA531D0F3A71504DA7AC6A11CE33739

***** [ Internetbrowser ] *****

[-] [C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : facebook-messenger-windows.softonic.de
[-] [C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : kursbuch.bahn.de
[-] [C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : radio-station.en.softonic.com
[-] [C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : facerig.de.softonic.com
[-] [C:\Users\Niklas\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : train-simulator-2013.de.softonic.com

*************************

:: "Tracing" schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [5993 Bytes] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.2 (09.14.2015:1)
OS: Windows 7 Home Premium x64
Ran by Niklas on 04.11.2015 at 14:08:49,44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks

Successfully deleted: [Task] C:\Windows\system32\tasks\EgisUpdate



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer



~~~ Files

Successfully deleted: [File] C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{04745E43-9260-47B3-9372-86A42F47C8AB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{05A3D380-CB49-4C54-A340-053E61FBC538}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{061B56F1-81EC-4C06-9A50-4E933770153A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{08CA8FB2-0983-4D1B-9A59-C815E3FEB70C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{09C0446D-21DF-4D44-A7EF-EEE24C630AA3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{0C0BA5D8-E69E-431F-B29E-CCA6E94FA745}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{10510365-E257-402A-B6F1-7E2DA10F97BD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{109469DE-3427-4D09-B45A-7C82D6C4FA7C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{10D77850-F04C-4344-B3F2-7E6DE240C8F2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{12675047-2A79-4EC6-A008-F20A681BE268}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1269755E-308C-40E5-A910-D70FFA2C72F3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{12E7E90B-936C-4DE8-A130-AB821C7BB16E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{15B5E8BD-924F-4DB2-9586-812AF2D105BA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{162300CD-FDDE-429C-B09F-00F5AAE2A242}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{17AB6EB6-1DB5-4484-B3DB-D28BD1987599}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1A290220-7513-4725-9E5D-51094315B017}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1B0C43BF-37A4-478E-B92F-4A1A791773FC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1B3BFA1D-15CB-482D-9107-26D6C12C6328}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1CE71132-6313-4EE5-960B-997BE437FC51}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1F001594-F869-4761-9AC0-8C10E3D2BFC1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{20F01B25-9FF1-4E02-A310-1765ED1FCBFC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{21A6A0BD-0335-42B6-A4FF-E5E1AE72842C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{220C274A-389E-49E7-9220-4BD4B3360706}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{238FFA70-AEC6-4BA4-B72E-40ED538D68B3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{23E997C8-0D7E-472E-9B01-3FA1395B5622}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{25A5F1B1-F991-4978-83A2-698CDB4E6BBD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{284A99C3-AB5D-44FE-A1AC-37C501EC68BE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{289B1489-91C5-4615-A867-4CB0631594C2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{2B58F98B-C547-4F70-87C3-E78F3A19D435}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{30EFE5B9-82C4-431C-A5C2-738CB89566AE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{31227896-F0F5-43F7-9023-8A6E7385862F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{31EE984D-35C3-41F8-8C39-D61F5A4756CE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{32776E53-0451-4E37-8A25-B91822D2815F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{33A44024-E8F9-4259-A156-2E541F79B205}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{34B00329-BF8E-4D2B-933B-5BA8F74D0E1C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{361F990A-B4C8-4F2A-984D-3D6AFD7FD0F1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{36BB5459-BBCB-4222-8E28-928D1CBB10B1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{37942C30-4D58-4B7D-A768-48D9A0979DE6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{38C03B41-95B4-4E54-9213-C0D699407BEC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{39456593-7339-4526-88E8-E3E50E87AAD2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{39C4564A-6C88-48BC-889B-225449B968A0}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3BE3B9C6-EA7D-478D-B908-A56837D71EC2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3BE9BB46-07FC-4F39-AC86-017A147D6742}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3BF1FEC0-4584-4E95-925D-20D98904CB38}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3DAB9FB1-49ED-4D5A-B406-C2BFDA9D4C00}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3E12551F-D076-4A81-A7F8-1D82992B18F8}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3E912BE5-DF47-4DE6-AECD-ECA69000720B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3EB35A2F-E3ED-4D40-AF1A-017E13848A52}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3EE386C8-0BAB-40BD-A02A-D2930538E994}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{410CE057-2480-42B2-B3D7-B034F48A6122}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{43F90695-F181-4062-86EC-FFBA3369B300}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{462FD97B-2A7E-45D0-A7FD-5EBFFBF40ACF}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4745CD5C-744C-43FB-9A1C-73564DBDCB01}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4762B6AF-F4F1-49C5-957D-1B23C504C584}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{494922C0-DFEC-4B93-8060-2E40163E3EAB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{49D07B21-5888-47AA-9A12-CFE4176CB99F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4B0D7CB8-D70D-4E4C-9B5D-8878BD288F7A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4B140461-0E4C-475C-BEA1-C57590E12463}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4CF35FA4-02FF-4CB9-A1E8-1558EF7E56BD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4D1AB41C-31C3-464E-B083-3B2C46DD41C1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4D7329CC-D3B3-4FDF-89BC-071DF7D30BD1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4E0D7D87-FF5B-4D0E-B201-90A46B4B3038}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4E9F12FE-1623-4120-BC87-F4AC4B480A08}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5061150C-980B-4163-8B15-72D407061F5F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{511F04BF-A33D-42C1-AC7B-38381FD1E46B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{52A75719-F6AE-4B80-BAC7-E7FBDB646E0F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{53E05D1B-60AA-4331-BDA9-352C1357F485}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{53E2EF16-5EA9-4DE3-97A8-86699024928D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{54AC9994-7390-452D-8179-31DA15D449F3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{54D748CD-0694-4547-B367-0E4A6A69FC8D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5720AC97-9F25-4B5E-A957-2FAD8B8965CE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{58C40C2F-3A3C-48F2-9908-C96BF7A618C1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5A697005-8956-41E3-8F02-8A72A408891D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5AF32367-B2EE-4888-9826-3AA4FA0CC5DB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5B54116A-7F91-4528-9CD0-B949628B983D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5B665194-2C0E-4F77-B4B2-C5F90959ED2D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5D94A03A-0BD9-40CB-A3F4-27759F70E917}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5E435F45-1635-4A84-A7C3-F411C0A5976C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5E4D93FE-6881-449D-9435-5106FFD09BAA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5ED277BD-0DB9-4380-8DE3-EBAAA204B898}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6096428F-BC26-45DD-BA6A-E857AAE1FCFF}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6218EE76-E813-46AE-BBA0-86F7BCC56EED}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{635F5457-BEEB-4495-8B7E-DC9DCF857493}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{637ED3FE-6FC6-43A9-AD96-1650B4E1B375}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{64692140-2006-4AAA-AC47-784BCC857CA2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{65AA5805-E86F-40AF-9D8B-D3165F74777C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{65BE094E-BE73-474C-B5DA-7083400B17D5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{65C57205-36FB-46AC-9161-B273A51B7993}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{660EDB77-0F80-4954-B1AA-B6C16114FB5F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{68229C9D-16E0-4A73-954A-1E8FA520EC29}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6992B236-4C7F-4D79-86D7-75B529448F65}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{69AAE675-8C13-44FF-BD98-EF4201043933}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6C566AE0-4CAF-48AC-9FB7-E8FDD07B8AE6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6C68F84A-7D5D-497E-9CE4-4D8C3962C842}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6CF11500-F267-47D0-969B-93BE3C12AC0F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6D2F292E-0C0F-4A23-8743-3F4644B7A004}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6D756BAD-91A7-4DDB-BA45-EF100AD31819}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{734A69B2-3621-429C-818A-D9831CDBF627}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{73D1FD15-4CB4-490D-9FAD-0DBE16682F55}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{73EDB436-83F7-4158-8D77-10EB0E848AF7}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{74F48A53-0C19-48DE-BEF9-A78489537EDA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7505E6C2-7332-40B1-A697-11F2182F391C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{750FB75A-4404-4ECF-8435-FFE943342DCA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7611E56A-B14C-44AB-B15E-D15202B653D5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7DBEF67F-85C5-424F-AB89-CD35C0E2FBFA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7E4B192E-4FC0-4BDD-992E-DD4B791FB7AB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7EAB25EA-ADEE-4380-9FE9-D4C13EAF08EF}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{838E13B9-895F-4C86-9835-9DF2C8FA6580}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{85C7299D-8551-43A2-8628-00E13CEB43F8}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8755722B-F302-4032-87E3-F15C66BC132C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{87AB5ABC-025A-44BD-ACBE-73BD919F6B91}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{88E54F0C-B74C-4EFD-8D4C-B83C46E5C6F4}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8A5615AD-2126-4E7E-93B6-C2982D2CD86E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8A7044E9-F7C9-4638-A355-20DFBC658355}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8A875BDF-1E5E-4964-BFDF-D65CE28ACCF5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8B3888DA-E015-4DCE-BF9A-C59FDD8B8301}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8B926A0B-0694-4BE1-9E9D-7B6F140B5891}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8B9CC5AC-2604-47FB-9220-822D02AA8AA0}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8BA2961F-594C-4D19-AE9B-758DD304FBF5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8C5C255F-9AE3-4BAE-A346-FEA4A3009F3F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8EA19ADB-1FD6-42B3-BE17-27FF05E0EDA0}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8EE1600C-C987-41D0-B323-729073E75029}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{91B106E0-6C41-410E-AAC7-550C499BB9DF}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9270A00B-AEE8-4E14-8894-1E84555845F3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{92E7A930-A227-4C80-9176-F9C0B93220A5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9333BE8C-A844-4988-9C25-054B89964B26}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9AA56D25-E27A-4B36-9311-F6BFEAE0931B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9B3B6926-B2DB-4196-828A-D0E3840D3EC2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9B4D7F15-85CD-44B1-9BE7-77BE3D9AE73E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9C461E27-9602-41C8-AAC4-6E0AF2157F9D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9C513D02-E3C6-4CAE-A513-5D544783DF4D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9FCFA546-217A-4911-9765-59347398D56F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9FE6AD00-27B9-46CF-A5F2-723A9E49AE5D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A10F34B6-F3B6-4C49-B8A3-F4F2AD3D811B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A1F7F614-DF75-4BBE-9073-0EE9804278B1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A3B7B9C5-4EA2-48B4-AA39-24313E71A939}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A3EFB8F2-9F63-494F-A4BE-D3683A508E2F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A4D0F9C0-C4D9-41B0-A41E-0FD0E6200870}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A51D3F83-CE3E-44FA-B717-FF5F451635E9}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A54BB637-DA51-4249-855C-C5DFB4BAAFA5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A5C02CC6-FC2F-4FF4-99E2-1335E4D5A348}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A76D5776-3A25-4682-ACF3-6B79561D33BB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A772A1F1-9043-46B2-9F78-72553CC79F4F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A7C7309D-972F-406D-B04C-050A092A4825}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A7D9B02A-E871-4440-8087-A9D2A9B72BB9}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{AA26BD9C-77A0-4AE4-A11D-8BE0C8237E7C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{AFF881CE-5FC6-4E69-BEC2-AB161694D179}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B01C8A9D-E1D1-4BB8-9BCB-3B69676B6EDC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B1ECD482-D310-4810-953A-2C56DAABDB9B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B259AFF7-FB2F-43F0-928C-6CE9232D4759}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B4FFC844-9E95-42DE-9A8A-DE623F8AA9E9}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B6AA4BFC-03E2-44AB-996E-FFCD5AA49FEC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B7B0D66C-88D7-4980-9878-9F55EE5B09FD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B83EED6B-EF1D-4FC2-A07D-FCB085A40959}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B92AC3F6-CB86-42C3-8B5D-273A7AD593BA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B998D302-EAC3-4E74-B6D7-12B7D63116A6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BA45D29E-5D06-41B7-BEBD-CE7082AFEA5C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BB7F5394-19D6-47E8-9E3A-83BDE5956F7F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BBE2DE1E-B013-49B1-B53D-61F4101FDD9B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BC946156-BE92-483D-AFCE-B0AC7F65E7FD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BCD9E532-09A4-43AB-A2C7-A5606097A144}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BDED6BA1-010C-4A1D-B0AA-255CF092DED3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BE1B3EBD-A02A-4130-BDC5-9599BBF75E6A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BF153ADB-37C8-4A9F-9DD1-A453EE82DF89}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C1803234-64FE-4350-990C-D66A8BAAD61E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C1891A2B-9F0C-4D2D-86A4-0ABB12168452}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C18FF4B9-FC9D-4144-8D13-F038E14E0015}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C197DC89-D923-4CD4-ABAE-CB2B03E6FBDE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C28BF993-02E4-4F2A-B1A9-39BA7AF2B029}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C462CB65-8F0B-43D5-9FF6-8B4D27C63368}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C5E44DDA-EFBE-4648-AA19-76A430C7F033}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C5F9F4FF-3179-43FE-AA3D-CF2911C9CDC0}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C7626BE8-9B2F-4A03-8307-57FAD47F5E6B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C824F080-0A96-46DE-B983-0D22DBDEE75D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C83AB6B9-A0FF-492A-ABE4-74BAEB3F90CA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C9E69B47-A447-476A-84AF-C93DD7971284}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CA7ABADA-2AB9-40DE-A23A-2BB7B1D1DA7B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CAB64692-A1E6-40EE-85CE-5D5EF67A4F32}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CC6141A6-D948-4527-9A49-567599E56775}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CE167BE6-4EBE-4578-B241-18D67387E25C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CF024743-B38C-4FC1-8792-505600FE44C9}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CF11915F-A3EA-4015-8DCA-54F1BA6DBF1A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D01B0216-50AF-4BC2-B051-4326C53215B5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D0284AF8-AFFD-406F-A339-27078C7A69BA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D11A42A6-E962-43FA-B18D-AAB88933D274}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D33EC2A1-A4A8-4CAB-A40D-690D8D1AB20C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D5E8B311-994A-4231-A49A-2EA11CD442DB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D63133F7-53EF-47CD-ABD0-454E7BC1492E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D63FE271-828E-42BC-B7D9-7415C1034212}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D6C68EAC-0E4A-4A5A-8068-B675C9C6CEE3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D6FE6D06-40F0-4056-B67B-7D664448D498}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D883C94D-260D-4B3E-B9C4-A9C6D06044E5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D98FEC95-DF37-487A-9F43-385F5C856F3A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DA69C6EE-B116-4EAD-B004-1E53B8510108}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DB94B5A9-1C63-4547-A070-F73C1FD7E824}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DD505D5C-D41F-4FB5-A133-EC810503F567}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DED75147-8917-4018-9B56-789F0BDE692A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DF5CF385-69DE-4C05-B11F-034FD0643F89}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E0967074-2F0C-4C62-8224-A0AF808C4CA6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E261D895-A19A-4ED8-986C-CDCDB540B27B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E2987AFD-6122-4347-8FA5-9C930D2BBE6E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E35746F2-3EA8-4E00-816E-C2A3DFF18D17}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E3ABE95F-510E-4FF2-B08D-8260246FDA57}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E3B9779C-CF5A-4747-9AD7-938ED1A755E2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E49E99D7-644F-4689-84D1-87A005205758}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E50668BB-DC09-422E-B3F3-BA2B2A42415F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E6AC01C9-8FFF-4367-9F7C-B2C6175ACF3A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E94A9507-9D51-4D5F-A230-39EC41AECB05}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E960009F-79E3-42C1-AF5D-A62A8F1E05E8}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{ED7F5910-B0C7-4905-9349-AB44F6BB4DE2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F0311DB2-4E7A-425E-88E2-B3DC195A3B75}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F03D3FCA-EDBC-4A92-8DBD-8FAC06046E4B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F0821082-CEF4-44CB-BE6D-45A1FCE95E64}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F0B2CED3-E580-47C9-8B00-2D8DB352E370}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F0F3BCEE-F981-4529-A091-9270202FBEBD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F2703361-20A1-4CD8-9F65-AA68D7DFFDCD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F36CCB9F-0E51-4758-BA48-B1F45F656E13}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F48181B2-32ED-46D5-AFE3-C6111E09A7B1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F4F1A081-D1B7-4DFD-AC60-3C01287288E1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F5B22933-FCFE-4410-8FA9-A22973898431}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F695DC2A-CDEB-483B-8427-E0B1A3E02D54}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F6E8DF33-1890-449E-9842-74DF66FC685B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F8101CFD-47CA-4832-A729-06FBA2346A53}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F8DA6D15-9290-4A1F-A2DB-DAAD559B872C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F8FD5A44-68B2-496C-8FCA-AF8C1BA510C6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F973074F-14D7-48B8-8F2C-7F64041CC12C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F97F22FA-94EB-4216-AFF7-056C762B3F79}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FA4C5190-36B5-48F1-A421-DBE8E57CDF7B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FB2BF8A9-8002-4C8A-B5D5-5B847336F2B4}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FD014F8A-6D95-4510-BE1A-C362D0CDC785}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FD31BE78-3AA8-4397-AEE5-DA2917B87DE6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FD7DF8E3-DC63-4850-99C3-374D030E7B82}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FFECC280-AACA-4891-A9FB-0A87447C9CE9}
Successfully deleted: [Folder] C:\ProgramData\messenger plus! for skype
Successfully deleted: [Folder] C:\Users\Niklas\Appdata\Local\cre
Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin



~~~ FireFox

Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\Niklas\AppData\Roaming\mozilla\firefox\profiles\w5o7vqrp.default\minidumps [197 files]



~~~ Chrome


[C:\Users\Niklas\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Niklas\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Niklas\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Niklas\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.11.2015 at 14:13:32,96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Tessy1993 · 04.11.2015, 15:38

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.2 (09.14.2015:1)
OS: Windows 7 Home Premium x64
Ran by Niklas on 04.11.2015 at 14:08:49,44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks

Successfully deleted: [Task] C:\Windows\system32\tasks\EgisUpdate



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer



~~~ Files

Successfully deleted: [File] C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{04745E43-9260-47B3-9372-86A42F47C8AB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{05A3D380-CB49-4C54-A340-053E61FBC538}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{061B56F1-81EC-4C06-9A50-4E933770153A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{08CA8FB2-0983-4D1B-9A59-C815E3FEB70C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{09C0446D-21DF-4D44-A7EF-EEE24C630AA3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{0C0BA5D8-E69E-431F-B29E-CCA6E94FA745}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{10510365-E257-402A-B6F1-7E2DA10F97BD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{109469DE-3427-4D09-B45A-7C82D6C4FA7C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{10D77850-F04C-4344-B3F2-7E6DE240C8F2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{12675047-2A79-4EC6-A008-F20A681BE268}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1269755E-308C-40E5-A910-D70FFA2C72F3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{12E7E90B-936C-4DE8-A130-AB821C7BB16E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{15B5E8BD-924F-4DB2-9586-812AF2D105BA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{162300CD-FDDE-429C-B09F-00F5AAE2A242}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{17AB6EB6-1DB5-4484-B3DB-D28BD1987599}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1A290220-7513-4725-9E5D-51094315B017}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1B0C43BF-37A4-478E-B92F-4A1A791773FC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1B3BFA1D-15CB-482D-9107-26D6C12C6328}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1CE71132-6313-4EE5-960B-997BE437FC51}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{1F001594-F869-4761-9AC0-8C10E3D2BFC1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{20F01B25-9FF1-4E02-A310-1765ED1FCBFC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{21A6A0BD-0335-42B6-A4FF-E5E1AE72842C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{220C274A-389E-49E7-9220-4BD4B3360706}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{238FFA70-AEC6-4BA4-B72E-40ED538D68B3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{23E997C8-0D7E-472E-9B01-3FA1395B5622}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{25A5F1B1-F991-4978-83A2-698CDB4E6BBD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{284A99C3-AB5D-44FE-A1AC-37C501EC68BE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{289B1489-91C5-4615-A867-4CB0631594C2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{2B58F98B-C547-4F70-87C3-E78F3A19D435}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{30EFE5B9-82C4-431C-A5C2-738CB89566AE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{31227896-F0F5-43F7-9023-8A6E7385862F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{31EE984D-35C3-41F8-8C39-D61F5A4756CE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{32776E53-0451-4E37-8A25-B91822D2815F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{33A44024-E8F9-4259-A156-2E541F79B205}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{34B00329-BF8E-4D2B-933B-5BA8F74D0E1C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{361F990A-B4C8-4F2A-984D-3D6AFD7FD0F1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{36BB5459-BBCB-4222-8E28-928D1CBB10B1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{37942C30-4D58-4B7D-A768-48D9A0979DE6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{38C03B41-95B4-4E54-9213-C0D699407BEC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{39456593-7339-4526-88E8-E3E50E87AAD2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{39C4564A-6C88-48BC-889B-225449B968A0}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3BE3B9C6-EA7D-478D-B908-A56837D71EC2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3BE9BB46-07FC-4F39-AC86-017A147D6742}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3BF1FEC0-4584-4E95-925D-20D98904CB38}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3DAB9FB1-49ED-4D5A-B406-C2BFDA9D4C00}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3E12551F-D076-4A81-A7F8-1D82992B18F8}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3E912BE5-DF47-4DE6-AECD-ECA69000720B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3EB35A2F-E3ED-4D40-AF1A-017E13848A52}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{3EE386C8-0BAB-40BD-A02A-D2930538E994}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{410CE057-2480-42B2-B3D7-B034F48A6122}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{43F90695-F181-4062-86EC-FFBA3369B300}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{462FD97B-2A7E-45D0-A7FD-5EBFFBF40ACF}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4745CD5C-744C-43FB-9A1C-73564DBDCB01}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4762B6AF-F4F1-49C5-957D-1B23C504C584}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{494922C0-DFEC-4B93-8060-2E40163E3EAB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{49D07B21-5888-47AA-9A12-CFE4176CB99F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4B0D7CB8-D70D-4E4C-9B5D-8878BD288F7A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4B140461-0E4C-475C-BEA1-C57590E12463}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4CF35FA4-02FF-4CB9-A1E8-1558EF7E56BD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4D1AB41C-31C3-464E-B083-3B2C46DD41C1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4D7329CC-D3B3-4FDF-89BC-071DF7D30BD1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4E0D7D87-FF5B-4D0E-B201-90A46B4B3038}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{4E9F12FE-1623-4120-BC87-F4AC4B480A08}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5061150C-980B-4163-8B15-72D407061F5F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{511F04BF-A33D-42C1-AC7B-38381FD1E46B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{52A75719-F6AE-4B80-BAC7-E7FBDB646E0F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{53E05D1B-60AA-4331-BDA9-352C1357F485}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{53E2EF16-5EA9-4DE3-97A8-86699024928D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{54AC9994-7390-452D-8179-31DA15D449F3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{54D748CD-0694-4547-B367-0E4A6A69FC8D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5720AC97-9F25-4B5E-A957-2FAD8B8965CE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{58C40C2F-3A3C-48F2-9908-C96BF7A618C1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5A697005-8956-41E3-8F02-8A72A408891D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5AF32367-B2EE-4888-9826-3AA4FA0CC5DB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5B54116A-7F91-4528-9CD0-B949628B983D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5B665194-2C0E-4F77-B4B2-C5F90959ED2D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5D94A03A-0BD9-40CB-A3F4-27759F70E917}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5E435F45-1635-4A84-A7C3-F411C0A5976C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5E4D93FE-6881-449D-9435-5106FFD09BAA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{5ED277BD-0DB9-4380-8DE3-EBAAA204B898}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6096428F-BC26-45DD-BA6A-E857AAE1FCFF}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6218EE76-E813-46AE-BBA0-86F7BCC56EED}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{635F5457-BEEB-4495-8B7E-DC9DCF857493}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{637ED3FE-6FC6-43A9-AD96-1650B4E1B375}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{64692140-2006-4AAA-AC47-784BCC857CA2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{65AA5805-E86F-40AF-9D8B-D3165F74777C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{65BE094E-BE73-474C-B5DA-7083400B17D5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{65C57205-36FB-46AC-9161-B273A51B7993}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{660EDB77-0F80-4954-B1AA-B6C16114FB5F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{68229C9D-16E0-4A73-954A-1E8FA520EC29}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6992B236-4C7F-4D79-86D7-75B529448F65}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{69AAE675-8C13-44FF-BD98-EF4201043933}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6C566AE0-4CAF-48AC-9FB7-E8FDD07B8AE6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6C68F84A-7D5D-497E-9CE4-4D8C3962C842}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6CF11500-F267-47D0-969B-93BE3C12AC0F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6D2F292E-0C0F-4A23-8743-3F4644B7A004}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{6D756BAD-91A7-4DDB-BA45-EF100AD31819}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{734A69B2-3621-429C-818A-D9831CDBF627}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{73D1FD15-4CB4-490D-9FAD-0DBE16682F55}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{73EDB436-83F7-4158-8D77-10EB0E848AF7}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{74F48A53-0C19-48DE-BEF9-A78489537EDA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7505E6C2-7332-40B1-A697-11F2182F391C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{750FB75A-4404-4ECF-8435-FFE943342DCA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7611E56A-B14C-44AB-B15E-D15202B653D5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7DBEF67F-85C5-424F-AB89-CD35C0E2FBFA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7E4B192E-4FC0-4BDD-992E-DD4B791FB7AB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{7EAB25EA-ADEE-4380-9FE9-D4C13EAF08EF}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{838E13B9-895F-4C86-9835-9DF2C8FA6580}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{85C7299D-8551-43A2-8628-00E13CEB43F8}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8755722B-F302-4032-87E3-F15C66BC132C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{87AB5ABC-025A-44BD-ACBE-73BD919F6B91}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{88E54F0C-B74C-4EFD-8D4C-B83C46E5C6F4}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8A5615AD-2126-4E7E-93B6-C2982D2CD86E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8A7044E9-F7C9-4638-A355-20DFBC658355}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8A875BDF-1E5E-4964-BFDF-D65CE28ACCF5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8B3888DA-E015-4DCE-BF9A-C59FDD8B8301}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8B926A0B-0694-4BE1-9E9D-7B6F140B5891}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8B9CC5AC-2604-47FB-9220-822D02AA8AA0}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8BA2961F-594C-4D19-AE9B-758DD304FBF5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8C5C255F-9AE3-4BAE-A346-FEA4A3009F3F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8EA19ADB-1FD6-42B3-BE17-27FF05E0EDA0}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{8EE1600C-C987-41D0-B323-729073E75029}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{91B106E0-6C41-410E-AAC7-550C499BB9DF}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9270A00B-AEE8-4E14-8894-1E84555845F3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{92E7A930-A227-4C80-9176-F9C0B93220A5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9333BE8C-A844-4988-9C25-054B89964B26}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9AA56D25-E27A-4B36-9311-F6BFEAE0931B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9B3B6926-B2DB-4196-828A-D0E3840D3EC2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9B4D7F15-85CD-44B1-9BE7-77BE3D9AE73E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9C461E27-9602-41C8-AAC4-6E0AF2157F9D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9C513D02-E3C6-4CAE-A513-5D544783DF4D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9FCFA546-217A-4911-9765-59347398D56F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{9FE6AD00-27B9-46CF-A5F2-723A9E49AE5D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A10F34B6-F3B6-4C49-B8A3-F4F2AD3D811B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A1F7F614-DF75-4BBE-9073-0EE9804278B1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A3B7B9C5-4EA2-48B4-AA39-24313E71A939}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A3EFB8F2-9F63-494F-A4BE-D3683A508E2F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A4D0F9C0-C4D9-41B0-A41E-0FD0E6200870}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A51D3F83-CE3E-44FA-B717-FF5F451635E9}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A54BB637-DA51-4249-855C-C5DFB4BAAFA5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A5C02CC6-FC2F-4FF4-99E2-1335E4D5A348}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A76D5776-3A25-4682-ACF3-6B79561D33BB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A772A1F1-9043-46B2-9F78-72553CC79F4F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A7C7309D-972F-406D-B04C-050A092A4825}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{A7D9B02A-E871-4440-8087-A9D2A9B72BB9}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{AA26BD9C-77A0-4AE4-A11D-8BE0C8237E7C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{AFF881CE-5FC6-4E69-BEC2-AB161694D179}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B01C8A9D-E1D1-4BB8-9BCB-3B69676B6EDC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B1ECD482-D310-4810-953A-2C56DAABDB9B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B259AFF7-FB2F-43F0-928C-6CE9232D4759}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B4FFC844-9E95-42DE-9A8A-DE623F8AA9E9}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B6AA4BFC-03E2-44AB-996E-FFCD5AA49FEC}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B7B0D66C-88D7-4980-9878-9F55EE5B09FD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B83EED6B-EF1D-4FC2-A07D-FCB085A40959}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B92AC3F6-CB86-42C3-8B5D-273A7AD593BA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{B998D302-EAC3-4E74-B6D7-12B7D63116A6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BA45D29E-5D06-41B7-BEBD-CE7082AFEA5C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BB7F5394-19D6-47E8-9E3A-83BDE5956F7F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BBE2DE1E-B013-49B1-B53D-61F4101FDD9B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BC946156-BE92-483D-AFCE-B0AC7F65E7FD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BCD9E532-09A4-43AB-A2C7-A5606097A144}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BDED6BA1-010C-4A1D-B0AA-255CF092DED3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BE1B3EBD-A02A-4130-BDC5-9599BBF75E6A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{BF153ADB-37C8-4A9F-9DD1-A453EE82DF89}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C1803234-64FE-4350-990C-D66A8BAAD61E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C1891A2B-9F0C-4D2D-86A4-0ABB12168452}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C18FF4B9-FC9D-4144-8D13-F038E14E0015}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C197DC89-D923-4CD4-ABAE-CB2B03E6FBDE}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C28BF993-02E4-4F2A-B1A9-39BA7AF2B029}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C462CB65-8F0B-43D5-9FF6-8B4D27C63368}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C5E44DDA-EFBE-4648-AA19-76A430C7F033}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C5F9F4FF-3179-43FE-AA3D-CF2911C9CDC0}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C7626BE8-9B2F-4A03-8307-57FAD47F5E6B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C824F080-0A96-46DE-B983-0D22DBDEE75D}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C83AB6B9-A0FF-492A-ABE4-74BAEB3F90CA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{C9E69B47-A447-476A-84AF-C93DD7971284}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CA7ABADA-2AB9-40DE-A23A-2BB7B1D1DA7B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CAB64692-A1E6-40EE-85CE-5D5EF67A4F32}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CC6141A6-D948-4527-9A49-567599E56775}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CE167BE6-4EBE-4578-B241-18D67387E25C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CF024743-B38C-4FC1-8792-505600FE44C9}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{CF11915F-A3EA-4015-8DCA-54F1BA6DBF1A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D01B0216-50AF-4BC2-B051-4326C53215B5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D0284AF8-AFFD-406F-A339-27078C7A69BA}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D11A42A6-E962-43FA-B18D-AAB88933D274}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D33EC2A1-A4A8-4CAB-A40D-690D8D1AB20C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D5E8B311-994A-4231-A49A-2EA11CD442DB}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D63133F7-53EF-47CD-ABD0-454E7BC1492E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D63FE271-828E-42BC-B7D9-7415C1034212}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D6C68EAC-0E4A-4A5A-8068-B675C9C6CEE3}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D6FE6D06-40F0-4056-B67B-7D664448D498}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D883C94D-260D-4B3E-B9C4-A9C6D06044E5}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{D98FEC95-DF37-487A-9F43-385F5C856F3A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DA69C6EE-B116-4EAD-B004-1E53B8510108}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DB94B5A9-1C63-4547-A070-F73C1FD7E824}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DD505D5C-D41F-4FB5-A133-EC810503F567}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DED75147-8917-4018-9B56-789F0BDE692A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{DF5CF385-69DE-4C05-B11F-034FD0643F89}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E0967074-2F0C-4C62-8224-A0AF808C4CA6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E261D895-A19A-4ED8-986C-CDCDB540B27B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E2987AFD-6122-4347-8FA5-9C930D2BBE6E}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E35746F2-3EA8-4E00-816E-C2A3DFF18D17}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E3ABE95F-510E-4FF2-B08D-8260246FDA57}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E3B9779C-CF5A-4747-9AD7-938ED1A755E2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E49E99D7-644F-4689-84D1-87A005205758}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E50668BB-DC09-422E-B3F3-BA2B2A42415F}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E6AC01C9-8FFF-4367-9F7C-B2C6175ACF3A}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E94A9507-9D51-4D5F-A230-39EC41AECB05}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{E960009F-79E3-42C1-AF5D-A62A8F1E05E8}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{ED7F5910-B0C7-4905-9349-AB44F6BB4DE2}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F0311DB2-4E7A-425E-88E2-B3DC195A3B75}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F03D3FCA-EDBC-4A92-8DBD-8FAC06046E4B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F0821082-CEF4-44CB-BE6D-45A1FCE95E64}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F0B2CED3-E580-47C9-8B00-2D8DB352E370}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F0F3BCEE-F981-4529-A091-9270202FBEBD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F2703361-20A1-4CD8-9F65-AA68D7DFFDCD}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F36CCB9F-0E51-4758-BA48-B1F45F656E13}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F48181B2-32ED-46D5-AFE3-C6111E09A7B1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F4F1A081-D1B7-4DFD-AC60-3C01287288E1}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F5B22933-FCFE-4410-8FA9-A22973898431}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F695DC2A-CDEB-483B-8427-E0B1A3E02D54}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F6E8DF33-1890-449E-9842-74DF66FC685B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F8101CFD-47CA-4832-A729-06FBA2346A53}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F8DA6D15-9290-4A1F-A2DB-DAAD559B872C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F8FD5A44-68B2-496C-8FCA-AF8C1BA510C6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F973074F-14D7-48B8-8F2C-7F64041CC12C}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{F97F22FA-94EB-4216-AFF7-056C762B3F79}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FA4C5190-36B5-48F1-A421-DBE8E57CDF7B}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FB2BF8A9-8002-4C8A-B5D5-5B847336F2B4}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FD014F8A-6D95-4510-BE1A-C362D0CDC785}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FD31BE78-3AA8-4397-AEE5-DA2917B87DE6}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FD7DF8E3-DC63-4850-99C3-374D030E7B82}
Successfully deleted: [Empty Folder] C:\Users\Niklas\Appdata\Local\{FFECC280-AACA-4891-A9FB-0A87447C9CE9}
Successfully deleted: [Folder] C:\ProgramData\messenger plus! for skype
Successfully deleted: [Folder] C:\Users\Niklas\Appdata\Local\cre
Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin



~~~ FireFox

Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\Niklas\AppData\Roaming\mozilla\firefox\profiles\w5o7vqrp.default\minidumps [197 files]



~~~ Chrome


[C:\Users\Niklas\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Niklas\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Niklas\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Niklas\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.11.2015 at 14:13:32,96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-10-2015 02
durchgeführt von Niklas (2015-11-04 14:51:46)
Gestartet von C:\Users\Niklas\Desktop\Trojaner Board Dateien
Windows 7 Home Premium Service Pack 1 (X64) (2012-09-04 17:31:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3696339184-2483942939-123780382-500 - Administrator - Disabled)
Gast (S-1-5-21-3696339184-2483942939-123780382-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3696339184-2483942939-123780382-1007 - Limited - Enabled)
Lauritz (S-1-5-21-3696339184-2483942939-123780382-1005 - Limited - Enabled) => C:\Users\Lauritz
Niklas (S-1-5-21-3696339184-2483942939-123780382-1001 - Administrator - Enabled) => C:\Users\Niklas
Robert (S-1-5-21-3696339184-2483942939-123780382-1004 - Limited - Enabled) => C:\Users\Robert
UpdatusUser (S-1-5-21-3696339184-2483942939-123780382-1000 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}) (Version: 1.5.3018.00 - CyberLink Corp.)
Acer Crystal Eye Webcam (x32 Version: 1.5.3018.00 - CyberLink Corp.) Hidden
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3504 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0913.2011 - Acer Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20069 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.8.800.94 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop Elements 12 (HKLM-x32\...\Adobe Photoshop Elements 12) (Version: 12.0 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.1 - Nero AG) Hidden
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Apple Application Support (HKLM-x32\...\{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}) (Version: 3.0.5 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.13.210 - Avira Operations GmbH & Co. KG)
Backup Manager V3 (x32 Version: 3.0.0.99 - NTI Corporation) Hidden
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.8.2.2 - Broadcom Corporation)
Broadcom NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.8.4.1 - Broadcom Corporation)
Brother MFL-Pro Suite DCP-J925DW (HKLM-x32\...\{A1B36B88-AF90-43A3-8906-6DBEE89B4FBD}) (Version: 1.1.6.0 - Brother Industries, Ltd.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.)
clear.fi (x32 Version: 1.0.1517_36458 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 1.0.2024.00 - CyberLink Corp.) Hidden
clear.fi (x32 Version: 9.0.8026 - CyberLink Corp.) Hidden
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Crazy Chicken Kart 2 (x32 Version: 2.2.0.97 - WildTangent) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.93 - DivX, LLC)
DJ_AIO_03_F4200_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.7 - Dolby Laboratories Inc)
Dropbox (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Dropbox) (Version: 3.10.8 - Dropbox, Inc.)
Elements 12 Organizer (x32 Version: 12.0 - Ihr Firmenname) Hidden
ETDWare PS/2-X64 8.0.6.3_WHQL (HKLM\...\Elantech) (Version: 8.0.6.3 - ELAN Microelectronic Corp.)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.)
F4200 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
Facebook Video Calling 1.2.0.287 (HKLM-x32\...\{B92C5909-1D37-4C51-8397-A28BB28E5DC3}) (Version: 1.2.287 - Skype Limited)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Firebird 2.5.0.26074 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.0.26074 - Firebird Project)
Fooz Kids (HKLM-x32\...\FoozKids) (Version: 3.0.8 - FUHU, Inc.)
Fooz Kids (x32 Version: 3.0.8 - FUHU, Inc.) Hidden
Fooz Kids Platform (HKLM-x32\...\{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}) (Version: 2.1 - FUHU, Inc.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free Screen Video Recorder version 2.5.34.605 (HKLM-x32\...\Free Screen Video Recorder_is1) (Version: 2.5.34.605 - DVDVideoSoft Ltd.)
Free Studio version 2014 (HKLM-x32\...\Free Studio_is1) (Version: 6.4.0.1022 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.46.923 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.46.923 - DVDVideoSoft Ltd.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.80 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HP Deskjet F4200 All-In-One Driver Software 13.0 Rel. 3 (HKLM\...\{A00C9114-40E6-4C70-A619-7DF264B23485}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
ICQ7M (HKLM-x32\...\{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}) (Version: 7.8 - ICQ)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2418 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Jewel Match 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.6137.5006 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{6F29F195-B11C-3EAD-B883-997BB29DFA17}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{D285FC5F-3021-32E9-9C59-24CA325BDC5C}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{09298F26-A95C-31E2-9D95-2C60F586F075}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works 2002-Setup-Start (HKLM-x32\...\Works2002Setup) (Version:  - )
Microsoft Works 6.0 (HKLM-x32\...\{ED5EDCD0-5745-4B13-8061-58C9833FD06D}) (Version: 06.00.0000 - Microsoft Corporation)
Microsoft Works Suite-Add-Ins für Microsoft Word (HKLM-x32\...\{25F60491-F5AB-4985-9354-37C146783F35}) (Version: 2.0.0.0000 - Microsoft Corporation)
Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MP3jam 1.1.1.4 (HKLM-x32\...\MP3jam_is1) (Version: 1.1.1.4 - MP3jam)
Mp3tag v2.60 (HKLM-x32\...\Mp3tag) (Version: v2.60 - Florian Heidenreich)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project)
MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{EBFC96E5-4409-426E-88B7-650ADB342E78}) (Version: 8.0.50727.42 - The Firebird Project)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.19 - Egis Technology Inc.) Hidden
Nero 9 Essentials (HKLM-x32\...\{392b04ee-d95a-41c3-86dd-f7feb5fbfa9a}) (Version:  - Nero AG)
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
newsXpresso (x32 Version: 1.0.0.40 - esobi Inc.) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9002 - NTI Corporation) Hidden
Nur Entfernen der CopyTrans Suite möglich (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\CopyTrans Suite) (Version: 2.37 - WindSolutions)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}) (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
PDF24 Creator 7.3.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PSE12 STI Installer (x32 Version: 12.0 - Adobe Systems Incorporated) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
RadioSure (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\RadioSure) (Version:  - )
RealDownloader (x32 Version: 1.3.0 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6438 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
SAM Broadcaster (remove only) (HKLM-x32\...\SAM3) (Version:  - )
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Skype™ 7.10 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.10.101 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SoftMaker-Software (HKLM-x32\...\SoftMaker-Software) (Version:  - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Spotify (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\Spotify) (Version: 1.0.10.107.gd0dfca3a - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1) (Version: 1.6.2 - Safer Networking Limited)
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
stepnova (HKLM-x32\...\{892560AA-4F1F-46C6-95D1-0BEA659D62CB}) (Version: 1.80 - ergovia GmbH)
Strike Solitiare (x32 Version: 3.0.2.48 - WildTangent) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
ToneSync for Windows (HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\c2c9648a374f64d1) (Version: 1.2.3.309 - Zedge Europe AS)
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
Torchlight (x32 Version: 2.2.0.97 - WildTangent) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
VirtualDJ Home FREE (HKLM-x32\...\{B515962D-C979-44AC-9912-F7BB499B4B2C}) (Version: 7.3 - Atomix Productions)
VLC media player 2.0.2 (HKLM\...\VLC media player) (Version: 2.0.2 - VideoLAN)
WatchMyCam - Live Video Streaming (HKLM-x32\...\WatchMyCam_is1) (Version: 1.15.33.362 - hepasoft oHG, Germany)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Works Suite-Betriebssystem-Pack (x32 Version: 1.0.0.0000 - Microsoft Corporation) Hidden
Works-Synchronisierung (x32 Version: 1.0.0.0000 - Firmenname) Hidden
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3696339184-2483942939-123780382-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Niklas\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

==================== Wiederherstellungspunkte =========================

21-10-2015 12:43:05 Windows Update
24-10-2015 17:10:52 Installiert Acer Updater
24-10-2015 17:19:40 Windows Update
28-10-2015 03:00:32 Windows Update
02-11-2015 21:25:50 ComboFix created restore point
03-11-2015 15:52:59 Windows Update
04-11-2015 00:27:46 Removed Dojotech Spotify Recorder
04-11-2015 00:30:04 Removed Google Earth Plug-in
04-11-2015 00:32:53 Removed Pixelmon Launcher
04-11-2015 14:08:54 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2015-11-02 21:44 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {076FB1A9-384B-4EF6-80FD-17A8290A4C48} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1004 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {258B9B9D-0DEB-49C7-85AB-5F8CBF3184F1} - System32\Tasks\Works Update Detect => C:\Program Files (x86)\Microsoft Works\WkDetect.exe
Task: {2E2562F0-66DC-488F-B3A9-EE57B6FF59EE} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {3C52F16D-43ED-4A30-BEB4-5A38A5C22008} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3696339184-2483942939-123780382-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {3E84AD36-D7DE-4D84-8CEB-435534BFADB1} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1001Core => C:\Users\Niklas\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {43C70473-1420-4A8F-90BC-651DD912B0B8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {4EA9F65E-C813-4DA1-917C-356E775A6F7B} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-05-10] (Hewlett-Packard)
Task: {55B5C6A5-05E5-4FEC-A241-3E5BC44AB94C} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {76FC2444-5161-49D2-895A-956CC5A517E8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1004UA => C:\Users\Robert\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {8564B9AE-84F0-42B5-A3CC-DEBAEEA1B184} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3696339184-2483942939-123780382-1004 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {92337B37-82F6-4B45-9FEF-E31FB9CA47B7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-19] (Piriform Ltd)
Task: {95C9F1DB-96A5-4AE1-AD54-9396DA852238} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1004 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {A47019EE-E5B7-4D61-961C-C746CD2FE870} - System32\Tasks\{735DF766-132D-49CA-B89F-0B9F1C71B6FC} => pcalua.exe -a C:\Users\Niklas\Desktop\QuickTimeInstaller.exe -d C:\Users\Niklas\Desktop
Task: {A77C8300-739D-492A-B1BA-84049BEE8633} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {ACD63A61-045A-40BA-BA09-66CDB3ABC42C} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {AE83F9D3-D20B-47E2-B7D3-5380F88699F4} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-12-17] (Oracle Corporation)
Task: {B6FCBEA3-53E2-478D-9288-4E2D789E2E1C} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1001UA => C:\Users\Niklas\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {B743D1BC-7DB0-418E-A599-A91F57CB5DB9} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3696339184-2483942939-123780382-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {BFE1C280-63D8-4612-B9B3-4CEEDEEFCEF1} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-08-24] (CyberLink Corp.)
Task: {D2F78784-3DBC-4C88-8705-7B7E72658D2A} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-08-24] (Acer Incorporated)
Task: {D913FEAF-F24C-4D37-95FA-157C5D48759F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1004Core => C:\Users\Robert\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: {DAED3D6E-0F82-4F59-A88A-1E71A743CFBE} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3696339184-2483942939-123780382-1004 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {E970B63A-36A3-46CD-9A6F-FBA5A778A5AB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FB8B9595-D1EB-47D1-A27C-6B450D136BFC} - System32\Tasks\Works Update Find => C:\Program Files (x86)\Common Files\Microsoft Shared\Works Shared\WkUFind.exe [2001-10-04] (Microsoft® Corporation)
Task: {FBF1CD52-477A-41DE-A244-C2504003ABF8} - \EgisUpdate -> Keine Datei <==== ACHTUNG
Task: {FE577482-67AF-4068-B8C6-A70F4B47CD7F} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-08-24] (CyberLink)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Acrobat Update Task.job => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AdobeAAMUpdater-1.0-DER-PC-Niklas.job => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
Task: C:\Windows\Tasks\AdobeAAMUpdater-1.0-Niklas-PC-Niklas.job => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
Task: C:\Windows\Tasks\Apple Diagnostics.job => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3696339184-2483942939-123780382-1001Core1d0c2ed7ff8372.job => C:\Users\Niklas\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf8d48a6358f0b.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cfec38a3504081.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cffea853be9f1.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0426d4441e82f.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0923fa120a728.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0c2eb3dba2a34.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0e403775249fc.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0f0c8130d34a0.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3696339184-2483942939-123780382-1001.job => C:\Program Files (x86)\Real\RealUpgrade\realupgrade.exe
Task: C:\Windows\Tasks\{2F30B804-8FED-4427-A580-06EACEAA7E27}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{39813253-D53E-4F49-B904-3211210020BE}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{3BB5EF68-1F88-4A0D-A747-2F0157525F44}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{4C15085C-EF41-481E-B06F-531E86806560}.job => c:\program files (x86)\google\chrome\application\chrome.exeKhxxp:/ui.skype.com/ui/0/7.8.0.102/de/go/
Task: C:\Windows\Tasks\{81A5F1D3-9173-4C90-9AC5-7E011B9062F2}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{C0E2E969-B239-43B7-8386-B68CA859C338}.job => Iexplore exe http /ui skype com ui 0 5 117 de/
Task: C:\Windows\Tasks\{C549AB83-6923-4AC4-A1D3-CCB8AEA181FA}.job => c:\program files (x86)\mozilla firefox\firefox.exeMhxxp:/ui.skype.com/ui/0/6.9.73.106.456/de/
Task: C:\Windows\Tasks\{CEBCD1CE-9FDF-4E2E-BC16-F09D763897AD}.job => C:\Program Files (x86)\Skype\Phone\Skype.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-07-12 21:41 - 2005-04-22 05:36 - 00143360 _____ () C:\Windows\system32\BrSNMP64.dll
2009-01-22 00:45 - 2009-01-22 00:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2015-08-19 18:10 - 2015-08-19 18:10 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-10-16 19:44 - 2014-10-16 19:44 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\c152a64e30c5b94894d75ac86aa7aad2\IsdiInterop.ni.dll
2012-08-31 14:06 - 2011-04-29 23:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.

IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1000\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.

IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1001\...\123simsen.com -> www.123simsen.com

Da befinden sich 7865 mehr Seiten.

IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1004\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.

IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3696339184-2483942939-123780382-1005\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3696339184-2483942939-123780382-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Niklas\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3696339184-2483942939-123780382-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\Robert\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-3696339184-2483942939-123780382-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Lauritz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Datenträger ist nicht mit dem Internet verbunden.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: TeamViewer9 => 2
MSCONFIG\startupreg: GoogleChromeAutoLaunch_17B538142C689CA6298E80C28D1C2356 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4
MSCONFIG\startupreg: MessengerPlusForSkypeService => "C:\Program Files (x86)\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"
MSCONFIG\startupreg: PlusService => C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Niklas\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Niklas\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{BB9D900C-0431-418E-8C0A-C231DDCD4601}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{32049F24-47B1-4DD3-8444-C00D6AD61B16}] => (Allow) LPort=2869
FirewallRules: [{F75F9F29-02E8-4A68-8A28-54916E467F3D}] => (Allow) LPort=1900
FirewallRules: [{7C12433D-E695-482E-AC41-B404C9C612A8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{17AC6D61-999B-492A-B0F8-A187266C3F9A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{A0DEB6CF-C009-49A9-9225-DFA4FFFE208A}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
FirewallRules: [{5387279B-A475-4A39-A4B6-06BDFC3C0017}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
FirewallRules: [{AA765051-3912-43BE-84DA-1D8E031CFDC4}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\CLML\CLMLSvc.exe
FirewallRules: [{14300777-AE22-4662-B6A4-37C92F8B8F88}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{026D91D9-93FA-4F0D-8741-F0C6913E0D8D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{CFE5FB46-B4C8-4337-B57D-DF6B8C069CDF}] => (Block) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [TCP Query User{6FB75837-BF91-430B-878A-D9AEA94E7263}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{D27C781B-2F85-42A6-9411-66D06567DE49}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [{76C03AB0-6898-4F00-A1B0-34CA72571CA3}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{85C82862-9D6F-4E83-B8BC-B302572406D0}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{813FAA50-B182-4118-B4E9-48FFDAB5D0F6}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{717F9B8D-5B61-42AA-A46B-38F75C1E6D2B}] => (Allow) C:\Program Files (x86)\ICQ7M\ICQ.exe
FirewallRules: [{2411A16C-1C89-498D-B2AA-6393E9B063DD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{C87BF8F0-AB51-4232-BFF0-A488F87B40A7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{48CDC15E-87D3-443A-BAA5-E453E7663EC8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{11217F62-93AE-4DA7-A316-0711A8839530}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{F27C19E5-1DF0-49E7-BE1C-3F2DCD478E63}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{95A1B355-2831-4F92-A9DE-D9270C12CC74}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{A85A9EBA-FDEE-4774-82C7-00DFB9C7440D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{8EBC74DA-2159-48AB-9178-C2A67C6ED05A}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{44B270C7-20AF-4865-82D1-1CE0EFA76CB0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{55CF6113-5426-44AC-8D25-6C535CD8EEFA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{C3873571-B983-4512-8D2A-875B889DB96F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{3EAAE64A-9AA6-4D43-A0AD-31DA0012F736}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{EF655BAE-31B7-4F6D-B09B-49743C03CA52}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{116E419E-E47C-40CA-A133-1A59832FF582}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{FF9FD340-4EDE-4167-8629-CF947B583FE5}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{105A3EC6-24DE-4483-A261-E2297F2E2605}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{B980FF7E-2E6B-46D0-BD99-A2F4D46544CE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{226C699B-4C55-426B-972E-680756DB9775}C:\program files (x86)\icq7m\icq.exe] => (Allow) C:\program files (x86)\icq7m\icq.exe
FirewallRules: [UDP Query User{37513782-2F2E-4A1F-9ECF-23E1A9C81049}C:\program files (x86)\icq7m\icq.exe] => (Allow) C:\program files (x86)\icq7m\icq.exe
FirewallRules: [TCP Query User{CCA8AF8A-4943-4C10-A6DC-B9E491FFF01D}C:\program files (x86)\real\realplayer\realplay.exe] => (Block) C:\program files (x86)\real\realplayer\realplay.exe
FirewallRules: [UDP Query User{C5FA3A53-7B9F-4F1C-99C7-DE7A65FA8122}C:\program files (x86)\real\realplayer\realplay.exe] => (Block) C:\program files (x86)\real\realplayer\realplay.exe
FirewallRules: [TCP Query User{5AEFC15F-F366-4015-88F6-1EF0D9AC78C8}C:\users\niklas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\niklas\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0F908C96-126A-4DEA-92B8-1B3FD4A53199}C:\users\niklas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\niklas\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{8415AABF-723F-4C49-BF47-3A2E9C6F8028}C:\users\niklas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\niklas\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{BCAAB17C-B050-4675-8B5A-06E7A0D53C3B}C:\users\niklas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\niklas\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F3C230E1-7AC8-49E1-8105-CAA540AD2896}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9277D5AD-5AC6-4E13-98E8-648CEFCF3CA4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2B49D824-756A-478E-B7E3-504E6685D1DC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{23F9D13E-0913-4E8D-BA8A-BE461499FD1B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{72487EA3-4409-4136-A157-D76BDC9F5FF4}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [UDP Query User{05B64D99-1A36-45F1-8DA1-66A01F2659D8}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [TCP Query User{2DE18A98-D49E-44FB-A160-A45CFEA43F12}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [UDP Query User{60499776-5028-4251-A4BF-6028A06A1267}C:\program files (x86)\spacialaudio\sambc\sambc.exe] => (Allow) C:\program files (x86)\spacialaudio\sambc\sambc.exe
FirewallRules: [TCP Query User{21B4C9BD-8248-4E74-B4C3-61772D6B774E}C:\watchmycam\watchmycam.exe] => (Allow) C:\watchmycam\watchmycam.exe
FirewallRules: [UDP Query User{C4A31F50-0C95-4FB9-912E-7551B9CA9D95}C:\watchmycam\watchmycam.exe] => (Allow) C:\watchmycam\watchmycam.exe
FirewallRules: [{9E4CAD37-A4E1-44E7-83C5-083A6EDF3112}] => (Allow) LPort=54925
FirewallRules: [{C77F2156-2B0B-49B3-BEE7-2DF815C14620}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
FirewallRules: [{08CD1220-CF35-4A86-B408-7A72886C070E}] => (Allow) C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{36C05870-880A-4DCA-A54E-4B67108D7F05}] => (Allow) C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{367E0977-966A-448C-BC7F-AB0892409750}] => (Allow) C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{2FA63972-5804-4BC0-96B9-E5762E72088E}] => (Allow) C:\Users\Niklas\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{35F82333-6216-46E2-B056-8E110E34B4F9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{8BF3DA07-3822-4FC7-9AFA-171CFDECC827}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{CE2C5266-5108-4C07-969F-E37AA817EF1D}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{E6CA2B34-472D-489C-B20C-B39774C6B224}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{D4DD2C73-B1BA-40B7-B7FD-350470DB923E}] => (Allow) C:\ProgramData\stepnova\Support\DeskShare.exe
FirewallRules: [{709802EE-31DA-473D-9369-E37AAEBDFDC1}] => (Allow) C:\ProgramData\stepnova\FirefoxPortable\stepnova.exe
FirewallRules: [TCP Query User{74F4B7D3-5FB4-45E5-AE39-D51E26F5F50F}D:\eigene dateien\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\eigene dateien\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{5F0687F3-2955-4959-8CC1-5572D5519B7F}D:\eigene dateien\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) D:\eigene dateien\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{F03D48A6-2096-4628-B801-CE84E2465B45}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{64A7511C-C4F9-492B-ABB8-1355ADDA6D20}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{F421641D-20DE-4BA8-B726-C8CCA4FB9F4E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C979598C-698C-49DB-AFA9-96D7578943D4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B20BDCDF-DF02-41F4-96F2-3D476FEB73F7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E1DF32EA-0994-4940-8A5B-1631604B8D9F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{37158244-32AC-4257-B614-F88761FC4428}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{55C9ACED-06A4-4F15-AB81-06EDC2A91156}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{12D1972B-D1A1-4490-930E-7833643738B3}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{AD67A416-A364-4287-BE3F-19B097DEA9B0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E7765EB9-0FD1-41BA-9CE6-3BBCEAF1BC8E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{07D568A0-D637-4C7E-B947-A85C0C96C847}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{95C5DBC7-FBC2-448A-B46F-AB67F78EA871}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{723FF5D0-BB3E-43FC-BD67-C396F074FEA4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/04/2015 02:09:59 PM) (Source: FirebirdGuardianDefaultInstance) (EventID: 281) (User: )
Description: Abnormal Termination: "C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe": terminated abnormally (4294967295)

Error: (11/04/2015 01:46:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (11/04/2015 01:44:20 PM) (Source: FirebirdGuardianDefaultInstance) (EventID: 281) (User: )
Description: Abnormal Termination: "C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe": terminated abnormally (4294967295)

Error: (11/03/2015 05:57:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4558958

Error: (11/03/2015 05:57:16 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4558958

Error: (11/03/2015 05:57:14 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/03/2015 04:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7130

Error: (11/03/2015 04:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7130

Error: (11/03/2015 04:41:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/03/2015 04:41:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6038


Systemfehler:
=============
Error: (11/04/2015 02:10:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/04/2015 02:10:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/04/2015 02:10:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/04/2015 02:10:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/04/2015 02:10:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/04/2015 02:10:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/04/2015 02:10:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Active File Monitor V12" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/04/2015 02:09:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Firebird Server - DefaultInstance" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/04/2015 02:09:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/04/2015 02:09:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "BrYNSvc" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


CodeIntegrity:
===================================
  Date: 2015-11-02 21:42:29.736
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2015-11-02 21:42:29.562
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-09 01:32:59.509
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Niklas\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-09 01:32:59.497
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\Niklas\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-09 01:32:59.471
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2012-09-09 01:32:59.456
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 23%
Installierter physikalischer RAM: 8043.86 MB
Verfügbarer physikalischer RAM: 6177.32 MB
Summe virtueller Speicher: 16085.93 MB
Verfügbarer virtueller Speicher: 14119.01 MB

==================== Laufwerke ================================

Drive c: (Acer) (Fixed) (Total:288.23 GB) (Free:188.65 GB) NTFS
Drive d: (DATA) (Fixed) (Total:288.31 GB) (Free:156.2 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: C65AF392)
Partition 1: (Not Active) - (Size=19.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=288.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=288.3 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

schrauber · 04.11.2015, 20:46

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

01.11.2015, 07:35	#8
schrauber /// the machine /// TB-Ausbilder	Windows 7: Automatische blockierte Tabs in Chrome, Best Results entfernen. Logs als Antwort! ok __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Windows 7: Automatische blockierte Tabs in Chrome, Best Results entfernen. Logs als Antwort!

Log-Analyse und Auswertung: Windows 7: Automatische blockierte Tabs in Chrome, Best Results entfernen. Logs als Antwort!