TR Fire Hooker.1825


Habe diesen Trojaner eingefangen und mit mal Malwarebytes gescannt... danach mit adwcleaner,..er geht nicht weg

benötige unbeding Hilfe

Hi,

bitte alle Logs dazu posten

FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-12-2015
durchgeführt von Guido (Administrator) auf GUIDO-PC (10-12-2015 13:17:10)
Gestartet von C:\Users\Guido\Desktop
Geladene Profile: Guido & (Verfügbare Profile: Guido & UpdatusUser)
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 9 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Windows\System32\KBDMAC32.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Wireless Network Utility\RtWLan.exe
() C:\Program Files (x86)\ASUS\AASP\1.00.46\aaCenter.exe
() C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MxTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Labtec Inc,) C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Program Files\Windows Mail\WinMail.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
() C:\Program Files (x86)\BlueStacks\HD-Adb.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
 
 
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [976672 2013-03-24] (NVIDIA Corporation)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12558440 2011-07-07] (Realtek Semiconductor)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LogitechCommunicationsManager] => C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [488984 2007-03-06] (Labtec Inc,)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [896632 2015-07-22] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-10-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [220704 2015-09-14] (Geek Software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKLM-x32\...\RunOnce: [B Register C:\Program Files (x86)\DivX\DivX Transcode Engine\plugins\mc_demux_mp2_ds.ax] => "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Transcode Engine\plugins\mc_demux_mp2_ds.ax",DllRegisterServer
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\MountPoints2: {27910127-4e75-11de-bcc7-806e6f6e6963} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\copy.exe
HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\MountPoints2: {69567ca0-5606-11df-a237-00235479b1c3} - F:\Setup\rsrc\autorun.exe
HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [334336 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-1757636982-3309790088-3969889856-1003\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-1757636982-3309790088-3969889856-1003\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-1757636982-3309790088-3969889856-1003\...\MountPoints2: {27910127-4e75-11de-bcc7-806e6f6e6963} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\copy.exe
HKU\S-1-5-21-1757636982-3309790088-3969889856-1003\...\MountPoints2: {69567ca0-5606-11df-a237-00235479b1c3} - F:\Setup\rsrc\autorun.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2009-01-25]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
GroupPolicy: Beschränkung - Chrome <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
 
==================== Internet (Nicht auf der Ausnahmeliste) ====================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <======= ACHTUNG (Beschränkung - ProxySettings)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{49513723-493F-43E2-BF9C-BF50C232339F}: [DhcpNameServer] 192.168.2.1
 
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-1757636982-3309790088-3969889856-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> DefaultScope {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> {DD1567C2-7BEC-443E-9C48-5C897B07DAE1} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&intl=de&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1003 -> DefaultScope {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1003 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1003 -> {DD1567C2-7BEC-443E-9C48-5C897B07DAE1} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&intl=de&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-08-05] (Microsoft Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2015-09-24] (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14] (RealDownloader)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO-x32: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files (x86)\Windows Live\Family Safety\fssbho.dll [2009-08-05] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-07] (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-07] (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> Kein Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - Keine Datei
Toolbar: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKU\S-1-5-21-1757636982-3309790088-3969889856-1003 -> Kein Name - {472734EA-242A-422B-ADF8-83D1E48CC825} - Keine Datei
Toolbar: HKU\S-1-5-21-1757636982-3309790088-3969889856-1003 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
 
FireFox:
========
FF ProfilePath: C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default
FF NewTab: hxxp://www.google.de?hl=de&gl=de
FF DefaultSearchUrl: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=
FF SelectedSearchEngine: Google
FF SelectedSearchEngine: google
FF Homepage: hxxp://www.google.de?hl=de&gl=de
FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=
FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)
FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll [Keine Datei]
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-07] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2013-09-21] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-05] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-05] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\VistaCodecPack\rm\browser\plugins\nprpjplug.dll [2009-09-04] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2013-09-21] (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-07] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\user.js [2015-12-10]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npDivxPlayerPlugin.dll [2009-05-27] (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll [2013-09-21] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2013-09-21] (RealPlayer)
FF SearchPlugin: C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\searchplugins\google-lavasoft.xml [2015-12-07]
FF Extension: Avira Browser Safety - C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\Extensions\abs@avira.com [2015-08-14] [ist nicht signiert]
FF Extension: Avira SafeSearch - C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\Extensions\safesearch@avira.com [2015-06-17] [ist nicht signiert]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2015-11-11] [ist nicht signiert]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-11-11] [ist nicht signiert]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2015-11-11] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-04-03] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-21] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{207E5118-6B13-4DD5-81BF-2A5FDBE3FE83}] - C:\Windows\Installer\{84437C0A-F120-4FA0-BDB1-D064C491F928}\{207E5118-6B13-4DD5-81BF-2A5FDBE3FE83}.xpi
FF Extension: Download Protect - C:\Windows\Installer\{84437C0A-F120-4FA0-BDB1-D064C491F928}\{207E5118-6B13-4DD5-81BF-2A5FDBE3FE83}.xpi [2015-12-10]
 
Chrome: 
=======
CHR Profile: C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (RealDownloader) - C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-11-10]
CHR Extension: (Download Protect) - C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkjoakoppngiogmnjjkbblaeomcanfch [2015-12-10]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-24]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx
 
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [930944 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1222952 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [243968 2015-10-14] (Avira Operations GmbH & Co. KG)
R3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [433784 2015-06-16] (BlueStack Systems, Inc.)
R3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-06-16] (BlueStack Systems, Inc.)
R3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [831096 2015-07-21] (BlueStack Systems, Inc.)
S2 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [173344 2007-03-06] (Labtec Inc.)
S2 MAGIX StartUp Analyze Service; C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MXSAS.exe [186368 2010-11-04] (MAGIX AG) [Datei ist nicht signiert]
R2 Magnifyd; C:\Windows\system32\KBDMAC32.exe [117760 2015-10-24] () [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] () [Datei ist nicht signiert]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-12-02] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
 
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13632 2006-10-18] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162072 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140448 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)
R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2006-09-18] (AVM GmbH)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [145528 2015-06-16] (BlueStack Systems)
S3 FPCIBASE; C:\Windows\System32\DRIVERS\fpcibase.sys [899328 2006-09-18] (AVM Berlin)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () [Datei ist nicht signiert]
S3 LVcKap64; C:\Windows\System32\DRIVERS\LVcKap64.sys [1029024 2007-03-06] (Labtec Inc.)
S3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2496928 2007-03-06] (Labtec Inc.)
R3 LVUSBS64; C:\Windows\System32\drivers\LVUSBS64.sys [58400 2007-03-06] (Labtec Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-10] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15680 2006-10-31] ()
R3 NVENETFD; C:\Windows\System32\DRIVERS\nvm60x64.sys [742696 2006-10-10] (NVIDIA Corporation)
S4 nvrd64; C:\Windows\system32\drivers\nvrd64.sys [152608 2007-09-11] (NVIDIA Corporation)
R3 PID_0928; C:\Windows\System32\DRIVERS\LV561V64.SYS [468000 2007-03-06] (Labtec Inc.)
R3 RTL85n64; C:\Windows\System32\DRIVERS\RTL85n64.sys [1462304 2010-03-23] (Realtek Semiconductor Corporation )
S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)
S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)
S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)
S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)
S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation)
S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)
S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)
S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)
S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)
S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)
S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)
S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)
S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)
S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)
R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2008-01-09] (Sony Ericsson Mobile Communications)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-05-02] (Duplex Secure Ltd.)
S3 StarOpen; kein ImagePath
S3 VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [198784 2009-05-25] (Vimicro Corporation) [Datei ist nicht signiert]
S3 VST64HWBS2; C:\Windows\System32\DRIVERS\VSTBS26.SYS [392704 2008-01-21] (Conexant Systems, Inc.)
S3 VST64_DPV; C:\Windows\System32\DRIVERS\VSTDPV6.SYS [1523712 2008-01-21] (Conexant Systems, Inc.)
S3 vvftUVC; C:\Windows\System32\drivers\vvftUVC.sys [303616 2008-07-01] (Vimicro Corporation) [Datei ist nicht signiert]
R3 cpuz132; \??\C:\Users\Guido\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]
S3 cpuz134; \??\C:\Users\Guido\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
U4 Messenger; kein ImagePath
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
 
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 
==================== Ein Monat: Erstellte Dateien und Ordner ========
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 
2099-02-24 14:15 - 2001-04-02 16:30 - 00000821 _____ C:\Windows\Lexmark_ICM.ini
2099-02-16 16:09 - 2001-02-16 15:37 - 00000062 _____ C:\Windows\SysWOW64\LXASUSCI.INI
2015-12-10 13:02 - 2015-12-10 13:02 - 00080400 _____ C:\Users\Guido\Desktop\Shortcut.txt
2015-12-10 12:45 - 2015-12-10 13:02 - 00064255 _____ C:\Users\Guido\Desktop\Addition.txt
2015-12-10 12:44 - 2015-12-10 13:17 - 00030435 _____ C:\Users\Guido\Desktop\FRST.txt
2015-12-10 12:43 - 2015-12-10 12:43 - 02369024 _____ (Farbar) C:\Users\Guido\Desktop\FRST64.exe
2015-12-09 09:06 - 2015-12-09 09:06 - 00000912 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-09 09:06 - 2015-12-09 09:06 - 00000900 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-09 09:06 - 2015-12-09 09:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-09 09:03 - 2015-12-09 09:05 - 00243976 _____ C:\Users\Guido\Downloads\Firefox Setup Stub 42.0 (1).exe
2015-12-09 08:15 - 2015-12-09 08:19 - 00064673 _____ C:\Users\Guido\Downloads\Addition.txt
2015-12-09 08:13 - 2015-12-10 13:17 - 00000000 ___DC C:\FRST
2015-12-09 08:13 - 2015-12-09 08:25 - 00060285 _____ C:\Users\Guido\Downloads\FRST.txt
2015-12-09 08:12 - 2015-12-09 08:13 - 02369024 _____ (Farbar) C:\Users\Guido\Downloads\FRST64 (1).exe
2015-12-09 08:12 - 2015-12-09 08:12 - 02369024 _____ (Farbar) C:\Users\Guido\Downloads\FRST64.exe
2015-12-09 07:45 - 2015-12-09 07:45 - 499767721 _____ C:\Windows\MEMORY.DMP
2015-12-09 07:45 - 2015-12-09 07:45 - 00282224 _____ C:\Windows\Minidump\Mini120915-01.dmp
2015-12-08 14:18 - 2015-12-08 14:18 - 00286567 _____ C:\Users\Guido\Desktop\AN MAiwald Wanne.pdf
2015-12-08 14:17 - 2015-12-09 08:22 - 00292224 _____ C:\Users\Guido\Desktop\AN MAiwald Wanne Kunde.pdf
2015-12-08 14:17 - 2015-12-09 08:21 - 00041472 _____ C:\Users\Guido\Desktop\AN MAiwald Wanne Kunde.xls
2015-12-08 10:11 - 2015-12-08 10:11 - 01738240 _____ C:\Users\Guido\Desktop\adwcleaner_5.024.exe
2015-12-08 09:44 - 2015-12-10 11:45 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-08 09:44 - 2015-12-08 09:44 - 00000963 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-12-08 09:44 - 2015-12-08 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-12-08 09:44 - 2015-12-08 09:44 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-12-08 09:44 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-12-08 09:44 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-12-08 09:44 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-12-08 09:02 - 2015-12-08 09:02 - 00000000 ____D C:\Program Files\Realtek
2015-12-08 08:58 - 2011-06-27 14:44 - 02604376 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2015-12-08 08:58 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2015-12-08 08:58 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2015-12-08 08:58 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2015-12-08 08:58 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2015-12-08 08:57 - 2011-07-11 14:17 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll
2015-12-08 08:57 - 2011-07-07 19:46 - 02432104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2015-12-08 08:57 - 2011-07-07 17:39 - 02914408 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-12-08 08:57 - 2011-07-07 15:50 - 01483264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2015-12-08 08:57 - 2011-07-06 21:42 - 03148904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2015-12-08 08:57 - 2011-07-06 13:27 - 00092264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll
2015-12-08 08:57 - 2011-07-01 14:05 - 01822824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-12-08 08:57 - 2011-06-30 16:14 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-12-08 08:57 - 2011-06-27 14:45 - 03768152 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll
2015-12-08 08:57 - 2011-06-10 17:35 - 00603472 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
2015-12-08 08:57 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
2015-12-08 08:57 - 2011-05-23 17:12 - 01245288 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2015-12-08 08:57 - 2011-05-05 15:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-12-08 08:57 - 2011-05-05 14:15 - 00220512 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
2015-12-08 08:57 - 2011-05-05 14:14 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
2015-12-08 08:57 - 2011-05-05 14:14 - 00078176 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
2015-12-08 08:57 - 2011-05-02 14:27 - 03308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
2015-12-08 08:57 - 2011-05-02 14:27 - 00426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
2015-12-08 08:57 - 2011-05-02 14:27 - 00136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
2015-12-08 08:57 - 2011-05-02 14:27 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2015-12-08 08:57 - 2011-05-02 14:27 - 00074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
2015-12-08 08:57 - 2010-11-18 11:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
2015-12-08 08:57 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2015-12-08 08:57 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2015-12-08 08:57 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2015-12-08 08:57 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2015-12-08 08:57 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2015-12-08 08:57 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2015-12-08 08:57 - 2010-11-03 18:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2015-12-08 08:57 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2015-12-08 08:57 - 2010-10-03 13:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
2015-12-08 08:57 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2015-12-08 08:57 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
2015-12-08 08:57 - 2010-07-22 16:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2015-12-08 08:57 - 2010-05-06 17:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
2015-12-08 08:57 - 2009-11-18 18:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2015-12-08 08:57 - 2009-11-17 18:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2015-12-08 08:54 - 2015-12-08 08:54 - 00000000 ____D C:\Program Files (x86)\Realtek
2015-12-08 08:53 - 2015-12-08 09:03 - 00000000 ___HD C:\Program Files (x86)\Temp
2015-12-08 08:53 - 2015-12-08 08:58 - 00525792 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll
2015-12-08 08:42 - 2015-12-08 14:16 - 00049664 _____ C:\Users\Guido\Desktop\AN MAiwald Wanne.xls
2015-12-08 08:41 - 2015-12-08 08:41 - 00000000 ___DC C:\NVIDIA
2015-12-07 11:47 - 2015-12-07 11:47 - 00000000 ____D C:\Users\Guido\Documents\MAGIX_MxTray
2015-12-07 11:44 - 2015-12-07 11:44 - 00000000 ____D C:\Users\Guido\AppData\LocalLow\Yahoo
2015-12-07 11:43 - 2015-12-07 11:43 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2015-12-07 11:41 - 2015-12-07 11:41 - 00000000 ____D C:\Users\Guido\AppData\Roaming\Sun
2015-12-07 11:41 - 2015-12-07 11:41 - 00000000 ____D C:\Users\Guido\.oracle_jre_usage
2015-12-07 11:39 - 2015-12-07 11:39 - 00000000 ____D C:\Users\Guido\AppData\LocalLow\Oracle
2015-12-07 11:18 - 2015-12-07 11:18 - 00000000 ____D C:\Users\Guido\AppData\Roaming\MAGIX
2015-12-07 11:13 - 2015-12-10 11:22 - 00000438 _____ C:\Windows\Tasks\PCCT - MAGIX AG.job
2015-12-07 11:13 - 2015-12-07 11:47 - 00002822 _____ C:\Windows\System32\Tasks\PCCT - MAGIX AG
2015-12-07 11:13 - 2015-12-07 11:13 - 00000996 _____ C:\Users\Public\Desktop\MAGIX PC Check & Tuning Free 2011.lnk
2015-12-07 11:13 - 2015-12-07 11:13 - 00000000 ____D C:\Users\Guido\Documents\OnDemandDump
2015-12-07 11:13 - 2015-12-07 11:13 - 00000000 ____D C:\Users\Guido\Documents\CrashLog
2015-12-07 11:12 - 2015-12-07 11:35 - 00000259 ____C C:\Prefs.js
2015-12-07 11:12 - 2015-12-07 11:35 - 00000000 ___DC C:\searchplugins
2015-12-07 11:12 - 2015-12-07 11:18 - 00000000 ____D C:\ProgramData\MAGIX
2015-12-07 11:12 - 2015-12-07 11:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2015-12-07 11:12 - 2015-12-07 11:13 - 00000000 ____D C:\Program Files (x86)\MAGIX
2015-12-07 11:11 - 2015-12-07 11:11 - 00002784 _____ C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
2015-12-07 11:11 - 2015-12-07 11:11 - 00002784 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini
2015-12-07 11:11 - 2015-12-07 11:10 - 00425744 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
2015-12-07 11:10 - 2015-12-07 11:10 - 00345360 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
2015-12-07 10:32 - 2015-12-07 10:32 - 00648843 _____ C:\Users\Guido\Downloads\reimage repair keygen__15344_il93455.tar
2015-12-07 10:31 - 2015-12-07 10:31 - 00649669 _____ C:\Users\Guido\Downloads\reimagerepairkeygen__11652_i1773535811_il26.tar
2015-12-07 08:11 - 2015-12-07 08:11 - 00000020 _____ C:\Users\Guido\defogger_reenable
2015-12-02 09:07 - 2015-12-07 07:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-12-02 09:06 - 2015-12-07 08:03 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-11-30 12:45 - 2015-11-30 12:45 - 00117553 _____ C:\Users\Guido\Desktop\Bewerbung Guido.pdf
2015-11-30 08:23 - 2015-11-30 08:24 - 01976892 _____ C:\Users\Guido\Desktop\Rekl. WS 30.11.2015.pdf
2015-11-25 07:36 - 2015-11-25 07:36 - 00243976 _____ C:\Users\Guido\Downloads\Firefox Setup Stub 42.0.exe
2015-11-24 07:51 - 2015-11-24 09:03 - 00751285 _____ C:\Users\Guido\Desktop\defro-ds2-prospekt.pdf
2015-11-11 07:28 - 2015-09-26 17:05 - 00281600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-11-11 07:28 - 2015-09-26 17:05 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-11-11 07:28 - 2015-09-26 17:04 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-11-11 07:28 - 2015-09-26 16:58 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-11-11 07:28 - 2015-09-26 16:58 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-11-11 07:28 - 2015-09-26 14:21 - 00275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2015-11-11 07:28 - 2015-09-22 14:10 - 00517976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-11-11 07:28 - 2015-09-22 14:10 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2015-11-11 07:27 - 2015-10-17 15:35 - 02798592 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-11-11 07:23 - 2015-10-17 17:01 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-11-11 07:23 - 2015-10-17 16:41 - 00659456 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-11-11 07:22 - 2015-10-10 16:48 - 00736192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-11-11 07:15 - 2015-10-13 15:45 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-11-11 07:15 - 2015-10-13 15:44 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-11-11 07:13 - 2015-10-14 21:25 - 01586304 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-11-11 07:13 - 2015-10-14 21:25 - 01168600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-11-11 07:13 - 2015-10-14 16:47 - 04691392 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-11 07:11 - 2015-10-31 20:48 - 17079296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-11-11 07:11 - 2015-10-31 20:45 - 10886144 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-11-11 07:11 - 2015-10-31 20:45 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-11-11 07:11 - 2015-10-31 20:44 - 02264576 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-11-11 07:11 - 2015-10-31 20:44 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-11-11 07:11 - 2015-10-31 20:44 - 01299968 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-11-11 07:11 - 2015-10-31 20:44 - 01295872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-11-11 07:11 - 2015-10-31 20:43 - 02129408 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00887296 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00521728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00234496 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-11-11 07:11 - 2015-10-31 20:43 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-11-11 07:11 - 2015-10-31 20:43 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-11-11 07:11 - 2015-10-31 20:43 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-11-11 07:11 - 2015-10-31 19:40 - 12376576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-11-11 07:11 - 2015-10-31 19:38 - 09727488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-11-11 07:11 - 2015-10-31 19:38 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-11-11 07:11 - 2015-10-31 19:37 - 01830912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-11-11 07:11 - 2015-10-31 19:36 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 01436160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-11-11 07:11 - 2015-10-31 19:36 - 01093632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 01088512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00711168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00615424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00412672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-11-11 07:11 - 2015-10-31 19:36 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00042496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2015-11-11 07:11 - 2015-10-31 19:36 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2015-11-11 07:11 - 2015-10-31 19:36 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2015-11-11 06:26 - 2015-12-09 09:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
 
==================== Ein Monat: Geänderte Dateien und Ordner ========
 
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 
2015-12-10 13:19 - 2010-05-10 18:46 - 00000000 ____D C:\Users\Guido\AppData\Roaming\NetSpeedMonitor
2015-12-10 13:00 - 2006-11-02 14:33 - 00000000 ____D C:\Windows
2015-12-10 12:48 - 2010-06-11 08:16 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-10 12:20 - 2012-05-25 12:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-10 11:27 - 2014-03-27 06:10 - 00000306 __RSH C:\ProgramData\ntuser.pol
2015-12-10 11:26 - 2014-11-26 10:15 - 00000656 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2015-12-10 11:26 - 2010-04-19 12:37 - 00000436 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-12-10 11:23 - 2010-06-11 08:16 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-10 11:22 - 2010-04-24 10:55 - 00000278 _____ C:\Windows\Tasks\RtlVistaStart.job
2015-12-10 11:22 - 2006-11-02 16:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-10 11:22 - 2006-11-02 16:22 - 00004096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-10 11:22 - 2006-11-02 16:22 - 00004096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-10 11:10 - 2006-11-02 16:42 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-12-10 11:09 - 2014-05-22 08:26 - 00000000 ___DC C:\AdwCleaner
2015-12-10 08:06 - 2008-11-26 15:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-10 07:53 - 2013-03-28 14:42 - 00000000 ____D C:\Users\Guido\Desktop\Angebote
2015-12-10 07:22 - 2008-11-24 21:08 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-09 08:20 - 2012-05-25 12:40 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-12-09 08:20 - 2012-05-25 12:40 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-12-09 08:20 - 2012-05-25 12:40 - 00003736 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-12-09 07:45 - 2009-09-25 15:51 - 00000000 ____D C:\Windows\Minidump
2015-12-08 13:45 - 2006-11-02 14:34 - 00000000 ____D C:\Windows\Web
2015-12-08 10:11 - 2014-11-26 10:11 - 00000366 _____ C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Guido).job
2015-12-08 09:02 - 2008-11-24 21:02 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2015-12-08 09:02 - 2006-11-02 14:33 - 00000000 ____D C:\Windows\inf
2015-12-08 08:43 - 2008-12-14 15:35 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-12-08 08:43 - 2008-11-24 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-12-08 08:31 - 2008-11-26 12:50 - 00000000 ____D C:\Users\Guido
2015-12-08 07:32 - 2012-02-22 07:52 - 00000000 ____D C:\Users\UpdatusUser
2015-12-07 12:04 - 2009-01-12 09:01 - 00000000 ____D C:\Users\Guido\Desktop\2009_01_12
2015-12-07 11:58 - 2006-11-02 13:33 - 76283904 _____ C:\Windows\system32\config\COMPONENTS.bak
2015-12-07 11:58 - 2006-11-02 13:33 - 05242880 _____ C:\Windows\system32\config\DEFAULT.bak
2015-12-07 11:58 - 2006-11-02 13:33 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2015-12-07 11:58 - 2006-11-02 13:33 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2015-12-07 11:42 - 2013-10-23 06:13 - 00000000 ____D C:\ProgramData\Oracle
2015-12-07 11:41 - 2014-11-03 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-07 11:41 - 2013-08-07 09:18 - 00000000 ____D C:\Program Files (x86)\Java
2015-12-07 11:40 - 2014-11-03 10:19 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-12-07 11:20 - 2010-07-14 12:08 - 00000000 ____D C:\Users\Guido\Desktop\Bilder
2015-12-07 09:44 - 2010-04-21 09:30 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2015-12-07 09:44 - 2010-04-21 06:46 - 00000837 _____ C:\Users\Guido\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2015-12-07 09:44 - 2006-11-02 16:36 - 00001768 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Collaboration.lnk
2015-12-07 09:44 - 2006-11-02 16:36 - 00001719 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-12-07 09:44 - 2006-11-02 16:35 - 00001673 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Defender.lnk
2015-12-07 09:44 - 2006-11-02 16:34 - 00001684 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker.lnk
2015-12-07 09:44 - 2006-11-02 16:33 - 00001659 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk
2015-12-07 06:43 - 2010-06-11 08:16 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-07 06:43 - 2010-06-11 08:16 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 13:11 - 2013-01-20 10:24 - 00000000 ____D C:\Users\Guido\AppData\Roaming\TS3Client
2015-12-02 12:52 - 2015-08-07 09:29 - 00411840 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-02 07:54 - 2015-08-07 08:00 - 00107984 _____ C:\Users\Guido\AppData\Local\GDIPFONTCACHEV1.DAT
2015-12-02 07:46 - 2008-11-24 21:09 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-01 10:45 - 2012-12-04 08:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-12-01 10:42 - 2013-03-28 08:26 - 00162072 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-12-01 10:42 - 2013-03-28 08:26 - 00140448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-11-30 12:32 - 2008-01-21 12:10 - 01567616 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-30 12:32 - 2008-01-21 12:09 - 00674054 _____ C:\Windows\system32\perfh007.dat
2015-11-30 12:32 - 2008-01-21 12:09 - 00146066 _____ C:\Windows\system32\perfc007.dat
2015-11-16 09:43 - 2008-11-26 14:22 - 00159232 _____ C:\Users\Guido\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-11-11 08:11 - 2006-11-02 14:33 - 00000000 ____D C:\Windows\rescache
2015-11-11 07:46 - 2006-11-02 16:07 - 00000000 ____D C:\Program Files\Windows Journal
2015-11-11 07:46 - 2006-11-02 14:33 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-11-11 07:38 - 2013-07-11 05:49 - 00000000 ____D C:\Windows\system32\MRT
2015-11-11 07:29 - 2006-11-02 13:35 - 145617392 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-11-11 07:18 - 2013-03-28 13:38 - 01543072 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-11-11 06:22 - 2014-07-30 11:52 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-10 10:51 - 2015-09-03 04:40 - 00001055 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
 
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 
2001-06-19 16:34 - 2001-06-20 16:19 - 0040960 _____ (Jetsoft Development Company) C:\Program Files (x86)\ACMonitor_X83.exe
2013-09-17 07:06 - 2013-09-17 07:10 - 0000004 _____ () C:\Users\Guido\AppData\Roaming\cache.ini
2008-12-01 10:53 - 2015-12-09 08:34 - 0024147 _____ () C:\Users\Guido\AppData\Roaming\UserTile.png
2013-08-04 07:56 - 2014-10-22 10:55 - 0000095 _____ () C:\Users\Guido\AppData\Roaming\WB.CFG
2014-01-02 08:52 - 2014-01-03 08:40 - 0000005 _____ () C:\Users\Guido\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-08-04 07:56 - 2014-01-29 07:21 - 0000005 _____ () C:\Users\Guido\AppData\Roaming\WBPU-TTL.DAT
2008-11-26 14:58 - 2008-11-26 14:58 - 0000552 _____ () C:\Users\Guido\AppData\Local\d3d8caps.dat
2008-11-26 14:58 - 2014-10-28 09:39 - 0001356 _____ () C:\Users\Guido\AppData\Local\d3d9caps.dat
2008-11-26 12:50 - 2012-10-11 05:27 - 0002188 _____ () C:\Users\Guido\AppData\Local\d3d9caps64.dat
2008-11-26 14:22 - 2015-11-16 09:43 - 0159232 _____ () C:\Users\Guido\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2008-12-23 12:59 - 2008-12-23 12:59 - 0069376 _____ () C:\Users\Guido\AppData\Local\dd_depcheckdotnetfx30.txt
2008-12-23 12:59 - 2008-12-23 12:59 - 0000710 _____ () C:\Users\Guido\AppData\Local\dd_dotnetfx3error.txt
2008-12-23 12:59 - 2008-12-23 12:59 - 0056262 _____ () C:\Users\Guido\AppData\Local\dd_dotnetfx3install.txt
2010-01-18 16:29 - 2010-01-18 16:29 - 0335386 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI0ADD.txt
2013-08-03 15:47 - 2013-08-03 15:47 - 0350372 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI0C99.txt
2010-06-06 15:06 - 2010-06-06 15:06 - 0435784 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI378B.txt
2010-11-02 18:11 - 2010-11-02 18:11 - 0438730 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI3F28.txt
2010-05-06 06:47 - 2010-05-06 06:48 - 0364054 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI4400.txt
2013-06-13 09:35 - 2013-06-13 09:35 - 0361366 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI5F50.txt
2010-11-25 13:15 - 2010-11-25 13:15 - 0360460 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI614F.txt
2010-11-25 13:20 - 2010-11-25 13:20 - 0361228 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI6595.txt
2009-11-18 10:49 - 2009-11-18 10:49 - 0425072 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI683F.txt
2010-11-25 13:25 - 2010-11-25 13:25 - 0359606 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI6989.txt
2010-01-18 16:29 - 2010-01-18 16:29 - 0011222 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI0ADD.txt
2013-08-03 15:47 - 2013-08-03 15:47 - 0011238 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI0C99.txt
2010-06-06 15:06 - 2010-06-06 15:06 - 0011478 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI378B.txt
2010-11-02 18:11 - 2010-11-02 18:11 - 0011598 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI3F28.txt
2010-05-06 06:47 - 2010-05-06 06:48 - 0011158 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI4400.txt
2010-05-06 06:47 - 2010-05-06 06:47 - 0010634 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI4406.txt
2013-06-13 09:35 - 2013-06-13 09:35 - 0014254 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI5F50.txt
2010-11-25 13:15 - 2010-11-25 13:15 - 0011190 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI614F.txt
2010-11-25 13:20 - 2010-11-25 13:20 - 0011222 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI6595.txt
2009-11-18 10:49 - 2009-11-18 10:49 - 0011430 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI683F.txt
2010-11-25 13:25 - 2010-11-25 13:25 - 0011898 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI6989.txt
2008-12-23 12:59 - 2008-12-23 12:59 - 0001768 _____ () C:\Users\Guido\AppData\Local\uxeventlog.txt
2010-12-03 10:36 - 2010-12-03 10:36 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
 
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Guido\AppData\Roaming\cache.ini
 
 
Einige Dateien in TEMP:
====================
C:\Users\Guido\AppData\Local\Temp\avgnt.exe
C:\Users\Guido\AppData\Local\Temp\sqlite3.dll
 
 
==================== Bamital & volsnap =================
 
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 
LastRegBack: 2015-12-10 12:27
 
==================== Ende von FRST.txt ============================
         

--- --- ---


AdwCleaner Logfile:

# AdwCleaner v5.024 - Bericht erstellt am 10/12/2015 um 13:43:24
# Aktualisiert am 07/12/2015 von Xplode
# Datenbank : 2015-12-07.3 [Server]
# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (x64)
# Benutzername : Guido - GUIDO-PC
# Gestartet von : C:\Users\Guido\Desktop\adwcleaner_5.024.exe
# Option : Suchlauf
# Unterstützung : Forum - ToolsLib

***** [ Dienste ] *****


***** [ Ordner ] *****

Ordner Gefunden : C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkjoakoppngiogmnjjkbblaeomcanfch
Ordner Gefunden : C:\Windows\Installer\{59DAF20E-E043-4409-82D9-C3BC7AA2C84F}
Ordner Gefunden : C:\Windows\Installer\{59DAF20E-E043-4409-82D9-C3BC7AA2C84F}
Ordner Gefunden : C:\Windows\Installer\{84437C0A-F120-4FA0-BDB1-D064C491F928}

***** [ Dateien ] *****

Datei Gefunden : C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kkjoakoppngiogmnjjkbblaeomcanfch_0.localstorage
Datei Gefunden : C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_kkjoakoppngiogmnjjkbblaeomcanfch_0.localstorage-journal
Datei Gefunden : C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\user.js

***** [ DLL ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{207E5118-6B13-4DD5-81BF-2A5FDBE3FE83}]

***** [ Internetbrowser ] *****


########## EOF - C:\AdwCleaner\AdwCleaner[S12].txt - [1531 Bytes] ##########
         

--- --- ---

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 10.12.2015
Suchlaufzeit: 14:32:01
Protokolldatei: mal.txt
Administrator: Ja

Version: 0.0.0.0000
Malware-Datenbank: v2015.12.10.03
Rootkit-Datenbank: v2015.12.07.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows Vista Service Pack 2
CPU: x64
Dateisystem: NTFS
Benutzer: Guido

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 390356
Abgelaufene Zeit: 29 Min., 50 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Logs ohne Funde? Oder Malwarebytes nix gefunden?

Was soll ich machen ...ist immer noch da

Bitte beantworte meine Frage

Malwarebytes hat was gefunden ..habe ich gelöscht

Und davon wollte ich das Log sehen. Nur ein Log ohne Funde zu posten ist ja wohl sinnfrei.

ich scanne nochmal

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 10.12.2015
Suchlaufzeit: 16:42:58
Protokolldatei: mal.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2015.12.10.04
Rootkit-Datenbank: v2015.12.07.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows Vista Service Pack 2
CPU: x64
Dateisystem: NTFS
Benutzer: Guido

Suchlauftyp: Benutzerdefinierter Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 685882
Abgelaufene Zeit: 4 Std., 14 Min., 22 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 1
PUP.Optional.DownloadProtectExtension, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|{6F645B1B-CD94-4F75-9CE8-54D998E99253}, C:\Windows\Installer\{B367BD54-214A-4A1D-A527-0FAE1A7A4255}\{6F645B1B-CD94-4F75-9CE8-54D998E99253}.xpi, , [3339cdd69af171c5a959b8d62cd7f10f]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 2
PUP.Optional.DownloadProtect, C:\Windows\Installer\{DE2D4D06-FB9E-4BA1-AC40-B4E3BDFF2586}, , [f478ecb779122b0bed01781510f3926e],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0, , [55178a193259d75f211d22823dc70000],

Dateien: 10
PUP.Optional.DownloadProtect, C:\Windows\Installer\{DE2D4D06-FB9E-4BA1-AC40-B4E3BDFF2586}\CDBKALLHLNHCFDIEILAEHBLMHJFADHHLIRX, , [f478ecb779122b0bed01781510f3926e],
PUP.Optional.DownloadProtect, C:\Windows\Installer\{DE2D4D06-FB9E-4BA1-AC40-B4E3BDFF2586}\xdbkallhlnhcfdieilaehblmhjfadhhliml, , [f478ecb779122b0bed01781510f3926e],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0\manifest.json, , [55178a193259d75f211d22823dc70000],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0\config.json, , [55178a193259d75f211d22823dc70000],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0\def.bin, , [55178a193259d75f211d22823dc70000],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0\dpl.js, , [55178a193259d75f211d22823dc70000],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0\g.js, , [55178a193259d75f211d22823dc70000],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0\icon128.png, , [55178a193259d75f211d22823dc70000],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0\icon48.png, , [55178a193259d75f211d22823dc70000],
PUP.Optional.DownloadProtect, C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbkallhlnhcfdieilaehblmhjfadhhli\2.2.15_0\jquery.min.js, , [55178a193259d75f211d22823dc70000],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Bitte die addition.txt von FRST nachreichen.

Poste die Logs bitte in CODE-Tags.

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

FRST Additions Logfile:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-12-2015
durchgeführt von Guido (2015-12-11 07:52:30)
Gestartet von C:\Users\Guido\Desktop
Windows Vista (TM) Home Premium Service Pack 2 (X64) (2008-11-26 11:36:44)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1757636982-3309790088-3969889856-500 - Administrator - Disabled)
Gast (S-1-5-21-1757636982-3309790088-3969889856-501 - Limited - Disabled)
Guido (S-1-5-21-1757636982-3309790088-3969889856-1000 - Administrator - Enabled) => C:\Users\Guido
UpdatusUser (S-1-5-21-1757636982-3309790088-3969889856-1004 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

2007 Microsoft Office system (HKLM-x32\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.1.0.5790 - Adobe Systems Inc.)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)
Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Reader X (10.1.16) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Ashampoo Burning Studio 6 FREE (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.7.7 - ashampoo GmbH & Co. KG)
Ashampoo Office 2008 (C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008) (HKLM-x32\...\sm-un1.u32) (Version:  - SoftMaker Software GmbH)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{59c4462d-a177-4d44-a95b-deda1be79844}) (Version: 1.1.49.18939 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.49.18939 - Avira Operations GmbH & Co. KG) Hidden
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{79809712-A577-4B8C-A9FC-51945690C7DC}) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
Call of Duty(R) - World at War(TM) (HKLM-x32\...\InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}) (Version: 1.7 - Activision)
Call of Duty(R) - World at War(TM) (x32 Version: 1.0 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.1 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.1 Patch (x32 Version: 1.1 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.2 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.2 Patch (x32 Version: 1.2 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.3 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.3 Patch (x32 Version: 1.3 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.4 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.4 Patch (x32 Version: 1.4 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.5 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.5 Patch (x32 Version: 1.5 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.6 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.6 Patch (x32 Version: 1.6 - Activision) Hidden
Call of Duty(R) - World at War(TM) 1.7 Patch (x32 Version:  - ) Hidden
Call of Duty(R) - World at War(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden
Call of Duty: Black Ops - Multiplayer (HKLM-x32\...\Steam App 42710) (Version:  - Treyarch)
Call of Duty: Black Ops (HKLM-x32\...\Steam App 42700) (Version:  - Treyarch)
Camera RAW Plug-In for EPSON Creativity Suite (HKLM-x32\...\{55D39D7E-0475-450B-A7A9-919EBCBC9F53}) (Version: 3.1.0.0 - SEIKO EPSON CORPORATION)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon MG3100 series Benutzerregistrierung (HKLM-x32\...\Canon MG3100 series Benutzerregistrierung) (Version:  - )
Canon MG3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3100_series) (Version:  - Canon Inc.)
Canon MG3100 series On-screen Manual (HKLM-x32\...\Canon MG3100 series On-screen Manual) (Version:  - )
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version:  - )
Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
CanoScan LiDE 200 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4807) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Content Manager 2 (HKLM-x32\...\Content Manager 2) (Version: 3.10.0.52790 - NNG Llc.)
DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version:  - )
Debut Video Capture Software (HKLM-x32\...\Debut) (Version:  - NCH Software)
DivX Converter (HKLM-x32\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)
DivX Plus DirectShow Filters (HKLM-x32\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)
EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version:  - )
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Express Zip (HKLM-x32\...\ExpressZip) (Version:  - NCH Software)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 46.0.2490.86 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
HLSW v1.1.0 (HKLM-x32\...\HLSW_is1) (Version:  - Timo Stripf)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Labtec WebCam (HKLM\...\{FA4DA5D7-5140-4024-BADD-FCB540833E5D}) (Version: 10.51.1130 - Labtec, Inc.)
Labtec® Camera-Treiber (HKLM-x32\...\QcDrv) (Version:  - )
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
Lexware faktura+auftrag 2009 (HKLM-x32\...\{1339105E-F091-458E-90C1-B8F24153C825}) (Version: 13.50.00.0001 - Lexware GmbH & Co. KG)
Lexware Info Service (HKLM-x32\...\{59624372-3B85-47f4-9B04-4911E551DF1E}) (Version: 2.61.00.0033 - Lexware GmbH & Co. KG)
Logitech SetPoint 6.51 (HKLM\...\SP6) (Version: 6.51.8 - Logitech)
MAGIX PC Check & Tuning Free 2011 (HKLM-x32\...\MAGIX_MSI_PC_Check_Tuning_Free_2011) (Version: 6.0.403.1050 - MAGIX AG)
MAGIX PC Check & Tuning Free 2011 (x32 Version: 6.0.403.1050 - MAGIX AG) Hidden
MAGIX Screenshare (HKLM-x32\...\{B63DFA23-5C10-44B4-881D-45EFBF4A4761}) (Version: 4.3.6.1987 - MAGIX AG)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Excel Viewer 97 (HKLM-x32\...\XLViewer97) (Version:  - )
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Virtual PC 2007 (HKLM-x32\...\{8A7CAA24-7B23-410B-A7C3-F994B0944160}) (Version: 6.0.156.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Word in Works Suite-Add-In (HKLM-x32\...\{C5DB5FBF-F037-4BEE-A110-257E89EDD8BB}) (Version: 1.0.0.0000 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
MSXML 4.0 SP2 (KB927978) (HKLM-x32\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - NNG Llc.)
NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.7 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)
OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )
PDF24 Creator 7.3.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
Ralink RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.5.0 - Ralink)
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6410 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
RENESIS® Player Browser Plugins (HKLM-x32\...\{62B7C52C-CAB6-48B1-8245-52356C141C92}) (Version: 1.1.1 - examotion® GmbH)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.43.0 - SAMSUNG Electronics Co., Ltd.)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Sony USB Driver (HKLM-x32\...\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}) (Version:  - )
Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
System Requirements Lab (HKLM-x32\...\SystemRequirementsLab) (Version:  - )
T-DSL Treiber (HKLM-x32\...\{511A5609-446A-11D5-9FA6-0060087051D5}) (Version:  - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)
TweakMe! (HKLM-x32\...\{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1) (Version: 1.3.0.0 - pXc-coding.com)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version:  - NCH Software)
Vista Codec Package (HKLM-x32\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.4.6 - Shark007)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
WinRAR Archivierer (HKLM-x32\...\WinRAR archiver) (Version:  - )
WinZip (HKLM-x32\...\WinZip) (Version:  - )
Wireless Network Utility (HKLM-x32\...\{EF72E0A5-57E8-471F-837E-82BB19771363}) (Version: Package:1.00.0006 Driver:0.0.0.0 UI:500.1491.627.2007 - Semiconductor Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B4CA0}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\PlanMaker.exe (SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B7456}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\Presentations.exe (SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B771B}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\TextMaker.exe (SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{05C3F9E2-1E76-439F-9E37-9020946A191A}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{09303D01-B159-4F1B-A2B8-CA3117B8FA1B}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{30291A01-707C-11d0-B457-4446490043BF}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\TextMaker.exe (SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{399254F2-670F-11D1-8092-0080ADB44B5C}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\PlanMaker.exe (SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{399254F3-670F-11D1-8092-0080ADB44B5C}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\PlanMaker.exe (SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{54B2BE72-FEC7-443D-BAE9-3E70E618A7D8}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{73CA2532-42DE-449F-8C8A-229B8AAF3B68}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{8a087491-5264-11d4-95F6-00A0CC3CCA14}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\PlanMaker.exe (SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{949DB7D2-36F2-4CCA-8CA8-A3A6D4E5911C}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{A50A1B09-943D-4A78-B08D-56072A602ABD}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{bf608490-5373-11d0-8efb-4446490043bf}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\TextMaker.exe (SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{C9448C44-BEFB-4941-8457-E5C4314D3D96}\localserver32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{CAF933C7-C65A-46D2-AA63-1FC84EB43954}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{CC9E9F9A-11A4-49DD-B468-782AFDE5607E}\InprocServer32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{CD89D352-5A13-49F8-9EB5-7E6D1FB0CD57}\localserver32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{DB20D0C0-4CEF-11D0-8B17-00AA00211961}\localserver32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{DB20D0C3-4CEF-11D0-8B17-00AA00211961}\localserver32 -> kein Dateipfad
CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{E8ACF719-FFDE-4EE1-8923-48BDA8569FCC}\localserver32 -> kein Dateipfad

==================== Wiederherstellungspunkte =========================

06-11-2015 06:55:23 Windows Update
10-11-2015 07:02:23 Windows Update
11-11-2015 07:12:48 Windows Update
13-11-2015 14:10:18 Geplanter Prüfpunkt
17-11-2015 07:07:28 Windows Update
23-11-2015 06:48:32 Windows Update
27-11-2015 09:34:31 Windows Update
30-11-2015 12:07:20 Geplanter Prüfpunkt
01-12-2015 07:24:15 Windows Update
02-12-2015 15:43:00 Geplanter Prüfpunkt
07-12-2015 06:30:19 Windows Update
07-12-2015 11:43:03 MAGIX PC Check & Tuning Free (PC Check)
08-12-2015 08:36:37 MAGIX PC Check & Tuning Free (PC Check)
08-12-2015 08:40:11 MAGIX Treiberinstallation
nForce 15.49 WHQL
08-12-2015 08:42:48 Konfiguriert NVIDIA ForceWare Network Access Manager
08-12-2015 08:57:12 MAGIX Treiberinstallation
nForce 15.49 WHQL
08-12-2015 08:58:20 Gerätetreiber-Paketinstallation: Realtek Semiconductor Corp. Audio-, Video- und Gamecontroller
10-12-2015 07:58:58 Installed PartitionMagic
10-12-2015 08:03:54 Configured PartitionMagic
10-12-2015 13:22:07 Windows Update

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2006-11-02 13:34 - 2014-12-19 08:02 - 00450690 ____N C:\Windows\system32\Drivers\etc\hosts

127.0.0.1	localhost
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com
127.0.0.1	www.123moviedownload.com

Da befinden sich 15464 zusätzliche Einträge.


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0581CC01-A24A-4B7A-8149-AEF1A709DDD4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1757636982-3309790088-3969889856-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {088E5097-4CD0-41CE-9C8D-6337FB1F9FBC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {0F9323F2-FEB5-4E4E-B4AE-E2C31176C04D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated)
Task: {15FD4707-156B-47AE-B6C0-0C3E4AFEC013} - System32\Tasks\{B77E2419-3A37-4209-91C1-9F7CDE342729} => pcalua.exe -a "D:\Partition Magic 7.0\Setup\Setup.exe" -d "D:\Partition Magic 7.0\Setup"
Task: {194D2E0F-F50D-41B0-BE40-7A7135E6BD18} - System32\Tasks\{A3C53057-F16C-44FF-9192-84BB2B5462B1} => pcalua.exe -a D:\USB_Driver\Driver_Setup_QCT.exe -d D:\USB_Driver
Task: {244350F5-23D0-4CD5-B56E-AB05573CF83A} - System32\Tasks\NCH Software\DebutReminder => C:\Program Files (x86)\NCH Software\Debut\Debut.exe [2012-12-18] (NCH Software)
Task: {387850AD-779F-405A-88F6-BB30EBB1DFD1} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1757636982-3309790088-3969889856-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {397FD979-684F-457B-9257-DC199DA19541} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\Ad-Aware Antivirus\AdAwareLauncher.exe
Task: {3A15955B-A636-4F8A-B2D1-53DD46099007} - System32\Tasks\{F12AA57A-1B74-4D8F-9D0B-31A1C578E9A0} => Firefox.exe hxxp://ui.skype.com/ui/0/6.10.0.104/de/go/help.faq.installer?LastError=1603
Task: {3A47987D-741F-4DDF-A272-4AFBA25DA9AB} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {3C1CAA41-6459-4692-A2BA-F38E283269D2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)
Task: {3F7A53AD-7233-48D9-ABA8-ABB047CB300D} - System32\Tasks\NCH Software\VideoPadReminder => C:\Program Files (x86)\NCH Software\VideoPad\VideoPad.exe [2013-02-17] (NCH Software)
Task: {48667CBE-2C33-405A-A8E1-47551ABFA9C6} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => c:\program files (x86)\real\realplayer\Update\realsched.exe [2013-09-21] (RealNetworks, Inc.)
Task: {4B14D201-95AB-470C-8D29-6CD3B44D22A7} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10] ()
Task: {70FB99A8-0781-49F7-8DCB-20810F8205D6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)
Task: {7426EC5E-1EEF-4A92-8E6A-FAD1EE146489} - System32\Tasks\{C74FB618-8FBD-41C1-8D6D-ACA4960A118D} => pcalua.exe -a D:\setup.exe -d D:\
Task: {769111C6-6D46-4329-983B-8023D5DA15C3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {7BF90FDE-24C7-45F2-9AAD-39F072451A25} - System32\Tasks\{EEB58050-16DA-46D6-88B6-FEAA8BF2A056} => pcalua.exe -a E:\netsetup.exe -d E:\
Task: {7E72D805-8084-4441-9F0D-4AD7B90C8F94} - System32\Tasks\{ABE740EE-25BB-4367-9AA0-ACC0E2A248B6} => pcalua.exe -a D:\Driver\WinNT40\SETUP.EXE -d D:\Driver\WinNT40
Task: {86048BE4-9ABC-4EA6-B30C-F19D75138684} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {86888272-2A5F-4EDC-8977-6ADB8326D9E3} - System32\Tasks\RtlVistaStart => C:\Program Files (x86)\Wireless Network Utility\RtWLan.exe [2007-06-28] (Realtek Semiconductor Corp.)
Task: {89CC459E-4120-4096-ABC6-3AD4C48E96D7} - System32\Tasks\PCCT - MAGIX AG => C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MxTray.exe [2010-11-08] ()
Task: {8BACD978-477A-4620-AED0-900C0DA14EA5} - System32\Tasks\{905EDC18-BCC1-470B-8D1E-F91424032801} => pcalua.exe -a F:\Launch.exe -d F:\
Task: {903BAC58-77BD-4BEB-93CA-8F45547E4C82} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {974119BC-9C05-445F-BF1E-041D820D23EE} - System32\Tasks\{02754A52-267D-422F-AEC4-FF42D32A0FC7} => pcalua.exe -a E:\netsetup.exe -d E:\
Task: {A78D82E9-B63B-4B0C-B13C-928724C7CCAE} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.00.46\AsLoader.exe [2007-03-22] ()
Task: {B3B4068C-860D-4CE2-8D08-2227CCF02072} - System32\Tasks\{81E20A72-FEB7-4E2E-9378-E8E31E1C4D86} => pcalua.exe -a C:\Users\Guido\Desktop\Setup.exe -d C:\Users\Guido\Desktop
Task: {C587334E-9550-43C1-BD4F-E72DC5929282} - System32\Tasks\SlimCleaner Plus (Scheduled Scan - Guido) => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe
Task: {CF3607E2-8D0C-4713-B796-AC09005B9F92} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-11-09] (Oracle Corporation)
Task: {D06B796B-5CC4-4679-A584-FB2CDF2A5135} - System32\Tasks\{2A6AD1DA-B5DF-4483-82B3-689EE52C4B47} => pcalua.exe -a D:\Setup.EXE -d D:\
Task: {D469E258-C507-40B7-8B0A-58A2ED64FA96} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1757636982-3309790088-3969889856-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {DE47000E-F0EC-4F8C-B1C3-FBED6934F1F3} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1757636982-3309790088-3969889856-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {E13063F2-4917-4D76-A270-76A90A0AAD93} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)
Task: {F2D3D22E-AEA1-41CB-A874-96765E6801BC} - System32\Tasks\{D6FE09B2-86B9-4BC3-8256-4537593BAC67} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)
Task: {F685D634-CC34-4942-90C9-FC17E00AA2F9} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {FBCE6CEC-EEB9-45AF-B004-39A9402753AD} - System32\Tasks\NCH Software\ExpressZipDowngrade => C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe [2013-05-25] (NCH Software)
Task: {FBEA9531-0C8E-4785-955D-C0F114440884} - System32\Tasks\ASUS\ASUS ACPI Service Provider => C:\Program Files (x86)\ASUS\AASP\1.00.46\aaCenter.exe [2007-11-09] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCCT - MAGIX AG.job => C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MxTray.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\RtlVistaStart.job => C:\Program Files (x86)\Wireless Network Utility\RtWLan.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Guido).job => C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2011-06-22 12:42 - 2006-02-23 10:35 - 00020480 _____ () C:\Windows\System32\FritzColorPort64.dll
2011-06-22 12:42 - 2006-02-22 09:39 - 00020480 _____ () C:\Windows\System32\FritzPort64.dll
2007-11-09 07:26 - 2007-11-09 07:26 - 00609280 ____R () C:\Program Files (x86)\ASUS\AASP\1.00.46\aaCenter.exe
2013-06-29 11:41 - 2015-10-24 07:30 - 00117760 _____ () C:\Windows\system32\KBDMAC32.exe
2013-08-03 15:05 - 2009-04-30 11:23 - 00090112 _____ () C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
2008-12-14 09:32 - 2014-12-02 08:33 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2013-08-14 14:19 - 2013-08-14 14:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2015-12-11 07:48 - 2015-12-05 02:29 - 08709200 _____ () C:\Program Files (x86)\Google\Update\Install\{BC972312-4AB1-458F-92F3-B4CC14491DCB}\47.0.2526.80_46.0.2490.86_chrome_updater_3stage.exe
2010-04-24 10:51 - 2006-10-26 21:30 - 00131072 _____ () C:\Program Files (x86)\Wireless Network Utility\EnumDevLib.dll
2008-11-26 15:13 - 2005-06-22 10:39 - 00204851 ____R () C:\Program Files (x86)\ASUS\AASP\1.00.46\PowerDll.dll
2008-11-26 15:13 - 2003-10-21 07:31 - 00102400 ____R () C:\Program Files (x86)\ASUS\AASP\1.00.46\cpuutil.dll
2014-11-26 10:15 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-11-26 10:15 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-11-26 10:15 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-11-26 10:15 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-11-26 10:15 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-04-29 12:44 - 2015-09-14 14:56 - 00074272 _____ () C:\Program Files (x86)\PDF24\zlib.dll
2014-04-29 12:44 - 2015-09-14 14:56 - 00051744 _____ () C:\Program Files (x86)\PDF24\OperationUI.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows\system32\KBDMAC32.exe:IID
AlternateDataStreams: C:\ProgramData\TEMP:A8ADE5D8
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1
AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.

IE trusted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\webcompanion.com -> hxxp://webcompanion.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\123simsen.com -> www.123simsen.com

Da befinden sich 7867 mehr Seiten.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\img22.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupreg: CanonSolutionMenuEx => "C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DivXMediaServer => "C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"
MSCONFIG\startupreg: EPSON Stylus D78 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBGE.EXE /FU "C:\Windows\TEMP\E_S3E47.tmp" /EF "HKLM"
MSCONFIG\startupreg: LogitechQuickCamRibbon => "C:\Program Files (x86)\Labtec\WebCam10\WebCam10.exe" /hide
MSCONFIG\startupreg: PDFPrint => "C:\Program Files (x86)\PDF24\pdf24.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Skytel => Skytel.exe
MSCONFIG\startupreg: SlimCleaner Plus => "C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe" /minimize
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
MSCONFIG\startupreg: VMonitorVMUVC => "C:\Program Files (x86)\Vimicro Corporation\VMUVC\VMonitor.exe" VMUVC

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [{B26FB486-4513-4B10-A123-90AD7DF6D86E}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
FirewallRules: [{FD5D1B44-712F-4FDC-8798-DCFC750EB698}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
FirewallRules: [TCP Query User{76DD3638-6AD1-43AA-B93C-5828D25993C5}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{8DBEDC0A-A745-453C-901C-BDAB6FA5B3C4}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{2116F6B2-4CA5-46BE-8E42-D2622282E4FE}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [UDP Query User{CD594906-1D08-476F-9057-4D5E5BF0AD3F}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [{3234ED36-F7BC-4B65-96E2-1870B7539E2C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E52D4CD5-A05E-4768-B886-C8BA40592767}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6D3074B0-ADB5-43D6-B6F4-B5DCCEDC8DC4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D61243F1-7978-4452-A43D-A9D6541F792E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{BED92076-5A50-4868-9F0C-3A546F97791E}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{1E8B68F4-D261-46E6-A496-4F7941512902}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{4F6F59DB-7BEF-4555-9679-31D656E936B2}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaWmp.exe
FirewallRules: [{4F5D9883-8725-4603-B333-E713937BB940}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaWmp.exe
FirewallRules: [{12327FEA-097B-4BEC-B4AD-4D13513E8431}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaW.exe
FirewallRules: [{348A07DA-E692-4C23-8E96-14548B353394}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaW.exe
FirewallRules: [{6733397C-6CC3-405C-B577-A4597FD1A0EA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{971DB8DE-4928-4CAB-84FB-688E5FB87052}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DB93ADEE-C0F5-49BB-AD9D-84C6056AA351}] => (Allow) LPort=80
FirewallRules: [{EEA36A4B-D126-4861-AF0A-901D10735F6F}] => (Allow) LPort=80
FirewallRules: [{A68DF7A5-57DE-43D4-9494-F1C3D464EB9A}] => (Allow) LPort=80
FirewallRules: [TCP Query User{C2F271E0-08DB-41A5-82AC-0EA0B22D7432}E:\condition zero\czero.exe] => (Allow) E:\condition zero\czero.exe
FirewallRules: [UDP Query User{149CF196-41BE-4366-96AB-B31F615DDC0A}E:\condition zero\czero.exe] => (Allow) E:\condition zero\czero.exe
FirewallRules: [{A744FE4D-49DB-4F38-9D36-FA8135222694}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaW.exe
FirewallRules: [{965EB01A-6E2D-465A-9A57-56A24A03DAC1}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaW.exe
FirewallRules: [{A397F3FA-950B-4C7A-8F7B-82AC692357AF}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaWmp.exe
FirewallRules: [{0857ECD0-19D0-4FF1-9E5D-61E58FD4669C}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaWmp.exe
FirewallRules: [{8B20D852-5EFF-4492-907A-DA3F7BEC548E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOps.exe
FirewallRules: [{05D954E3-FE47-43AA-ACDF-ABAA5715ADBB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOps.exe
FirewallRules: [{9012CA45-7A11-462F-AB54-531F0024E0E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe
FirewallRules: [{03EB1293-6BD1-4EA4-B9DF-BEA43F1AFDDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe
FirewallRules: [{6F7E89C5-F943-4F69-8B54-3A37AB8B2130}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6CFE2748-838C-4E9A-AF26-C35A8A3DE9C3}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{69B87AE5-C40E-473F-9947-0547145818A4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{5CCC030B-2CF8-49EE-B113-475B8E9C195F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{568DB3AD-2498-48FF-B46A-5DB1F260E2D2}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [UDP Query User{3F21EEFE-B5A2-4D24-B737-0D2AF1864706}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe
FirewallRules: [{B3596CBB-54CC-4405-9CB8-EE4A3BFB77FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOps.exe
FirewallRules: [{491432CF-A54C-4D50-B0BA-61A19F4801E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOps.exe
FirewallRules: [{D3FF2492-4764-4044-863E-E1049534098F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe
FirewallRules: [{C38EF5E7-1997-4F3D-A804-C54083B85535}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe
FirewallRules: [{F70616C6-DA52-48CD-BF88-22929C6E19C2}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{D9B814B1-F894-456A-A9E2-12A7BB1ACAC9}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{64C2A188-BFD5-4C16-A6FF-EA94952DA91A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{5FBA473E-A871-4A65-8E27-18DACCE6F47E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{B487AAB5-834E-45F4-9521-2C2E9F9B142C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{E8BF369D-A38A-4FFD-96DC-DF2A7546BDA5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{E8FAF092-FCCB-4A47-B63F-968C07ABF4A3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{E92036BA-A6A3-4670-9189-55A610DC50EA}C:\program files (x86)\watchmycam\watchmycam.exe] => (Block) C:\program files (x86)\watchmycam\watchmycam.exe
FirewallRules: [UDP Query User{D09339EE-EF42-4160-83D1-9ACBC99ACF60}C:\program files (x86)\watchmycam\watchmycam.exe] => (Block) C:\program files (x86)\watchmycam\watchmycam.exe
FirewallRules: [{FD383467-3433-492D-8047-535DDF369BE7}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{C7118E51-E03B-4395-A096-7268653E5EBB}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{93D892C6-DC8E-4004-9AC1-FF8D4C35E3AC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{BDD7424D-8ACF-47D9-AFD7-6A6B94C1B566}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Microsoft-6zu4-Adapter #4
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Microsoft-6zu4-Adapter #6
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Microsoft-6zu4-Adapter #7
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: 6TO4 Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Microsoft-ISATAP-Adapter #6
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: USB-EasyTransfer-Kabel
Description: USB-EasyTransfer-Kabel
Class Guid: {bc103702-dd72-406f-9b28-95c868337b59}
Manufacturer: Microsoft
Service: winusb
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: USB-EasyTransfer-Kabel
Description: USB-EasyTransfer-Kabel
Class Guid: {bc103702-dd72-406f-9b28-95c868337b59}
Manufacturer: Microsoft
Service: winusb
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/11/2015 07:47:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/10/2015 04:39:34 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (12/10/2015 04:39:31 PM) (Source: VSS) (EventID: 12342) (User: )
Description: Volumeschattenkopie-Fehler: Beim Initialisieren des Registrierungs-Generators ist ein Fehler "0x8000ffff" 
aufgetreten. Dies kann dazu führen, dass keine Schattenkopien mehr erstellt werden können.

Error: (12/10/2015 04:39:31 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040206.


Vorgang:
   Generator wird abonniert

Kontext:
   Generatorklassen-ID: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Generatorname: Registry Writer
   Generatorinstanz-ID: {ee54762e-4cb0-4234-ba8b-3e296a0afe91}

Error: (12/10/2015 04:39:31 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x80040206.


Vorgang:
   Generator wird abonniert

Kontext:
   Generatorklassen-ID: {cd3f2362-8bef-46c7-9181-d62844cdc0b2}
   Generatorname: MSSearch Service Writer
   Generatorinstanz-ID: {8cb0be10-0722-4bfb-bf86-b018b2d88c6d}

Error: (12/10/2015 04:39:31 PM) (Source: VSS) (EventID: 19) (User: )
Description: Volumenschattenkopie-Dienst-Fehler: Der EventSystem-Dienst ist deaktiviert oder versucht, bei der Ausführung im sicheren Modus zu starten. 
Der Volumenschattenkopie-Dienst kann nicht gestartet werden, während der sichere Modus ausgeführt wird.
Wenn der sichere Modus nicht ausgeführt wird, stellen Sie sicher, dass der EventSystem-Dienst aktiviert ist.
CLSID:{4e14fba2-2e22-11d1-9964-00c04fbbb345} Name:CEventSystem [0x80040206]


Vorgang:
   Generator wird abonniert

Kontext:
   Generatorklassen-ID: {afbab4a2-367d-4d15-a586-71dbb18f8485}
   Generatorname: Registry Writer
   Generatorinstanz-ID: {ee54762e-4cb0-4234-ba8b-3e296a0afe91}

Error: (12/10/2015 04:39:31 PM) (Source: VSS) (EventID: 19) (User: )
Description: Volumenschattenkopie-Dienst-Fehler: Der EventSystem-Dienst ist deaktiviert oder versucht, bei der Ausführung im sicheren Modus zu starten. 
Der Volumenschattenkopie-Dienst kann nicht gestartet werden, während der sichere Modus ausgeführt wird.
Wenn der sichere Modus nicht ausgeführt wird, stellen Sie sicher, dass der EventSystem-Dienst aktiviert ist.
CLSID:{4e14fba2-2e22-11d1-9964-00c04fbbb345} Name:CEventSystem [0x80040206]


Vorgang:
   Generator wird abonniert

Kontext:
   Generatorklassen-ID: {cd3f2362-8bef-46c7-9181-d62844cdc0b2}
   Generatorname: MSSearch Service Writer
   Generatorinstanz-ID: {8cb0be10-0722-4bfb-bf86-b018b2d88c6d}

Error: (12/10/2015 04:39:31 PM) (Source: EventSystem) (EventID: 4609) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp4580004002

Error: (12/10/2015 04:39:31 PM) (Source: EventSystem) (EventID: 4609) (User: )
Description: d:\longhorn\com\complus\src\events\tier1\eventsystemobj.cpp4580004002

Error: (12/10/2015 04:39:31 PM) (Source: EventSystem) (EventID: 4609) (User: )
Description: d:\longhorn\com\complus\src\events\tier2\service.cpp20280010105


Systemfehler:
=============
Error: (12/11/2015 07:51:46 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (12/11/2015 07:47:58 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: UPnP-GerätehostSSDP-Suche%%1058

Error: (12/11/2015 07:47:53 AM) (Source: ipnathlp) (EventID: 30013) (User: )
Description: Die DHCP-Zuweisung wurde für IP-Adresse 192.168.2.106 deaktiviert, da die IP-Adresse außerhalb des Bereichs 192.168.0.0/255.255.255.0 liegt, von der die Adressen DHCP-Clients zu gewiesen werden. Ändern Sie den Bereich, sodass die IP-Adresse mit einbezogen wird, oder ändern Sie die IP-Adresse, sodass sie innerhalb dieses Bereichs liegt, um die DHCP-Zuweisung zu aktivieren.

Error: (12/11/2015 07:47:53 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1068upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}

Error: (12/11/2015 07:47:51 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: UPnP-GerätehostSSDP-Suche%%1058

Error: (12/11/2015 07:47:11 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: SBRE

Error: (12/11/2015 07:47:11 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Gemeinsame Nutzung der Internetverbindung

Error: (12/11/2015 07:47:11 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: UPnP-GerätehostSSDP-Suche%%1058

Error: (12/11/2015 07:47:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Spybot-S&D 2 Scanner Service%%1053

Error: (12/11/2015 07:47:11 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Spybot-S&D 2 Scanner Service


CodeIntegrity:
===================================
  Date: 2015-12-11 07:52:18.023
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:52:17.773
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:52:17.539
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:52:17.274
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:52:16.868
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:52:16.634
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:52:16.385
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:52:16.151
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:51:00.990
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-12-11 07:51:00.756
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz
Prozentuale Nutzung des RAM: 67%
Installierter physikalischer RAM: 4093.63 MB
Verfügbarer physikalischer RAM: 1319.12 MB
Summe virtueller Speicher: 8416.54 MB
Verfügbarer virtueller Speicher: 4910.71 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:698.64 GB) (Free:463.92 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 698.6 GB) (Disk ID: E84C93B8)
Partition 1: (Active) - (Size=698.6 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

--- --- ---

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

• Starte bitte die mbar.exe.
• Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
• Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
• Klicke auf den CleanUp Button und erlaube den Neustart.
• Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
• Nach dem Neustart starte die mbar.exe erneut.
• Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Malwarebytes Anti-Rootkit BETA 1.09.3.1001

(c) Malwarebytes Corporation 2011-2012

OS version: 6.0.6002 Windows Vista Service Pack 2 x64

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED
CPU speed: 2.666000 GHz
Memory total: 4292485120, free: 829628416

---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.3.1001

(c) Malwarebytes Corporation 2011-2012

OS version: 6.0.6002 Windows Vista Service Pack 2 x64

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED
CPU speed: 2.666000 GHz
Memory total: 4292485120, free: 781119488

=======================================


=======================================


---------------------------------------
Malwarebytes Anti-Rootkit BETA 1.09.3.1001

(c) Malwarebytes Corporation 2011-2012

OS version: 6.0.6002 Windows Vista Service Pack 2 x64

Account is Administrative

Internet Explorer version: 9.0.8112.16421

File system is: NTFS
Disk drives: C:\ DRIVE_FIXED
CPU speed: 2.666000 GHz
Memory total: 4292485120, free: 890404864

Downloaded database version: v2015.12.11.02
Downloaded database version: v2015.12.07.01
Downloaded database version: v2015.12.06.02
Initializing...
======================
------------ Kernel report ------------
     12/11/2015 10:43:13
------------ Loaded modules -----------
\SystemRoot\system32\ntoskrnl.exe
\SystemRoot\system32\hal.dll
\SystemRoot\system32\kdcom.dll
\SystemRoot\system32\mcupdate_GenuineIntel.dll
\SystemRoot\system32\PSHED.dll
\SystemRoot\system32\CLFS.SYS
\SystemRoot\system32\CI.dll
\SystemRoot\system32\drivers\CLASSPNP.SYS
\SystemRoot\system32\drivers\Wdf01000.sys
\SystemRoot\system32\drivers\WDFLDR.SYS
\SystemRoot\system32\drivers\acpi.sys
\SystemRoot\system32\drivers\WMILIB.SYS
\SystemRoot\system32\drivers\msisadrv.sys
\SystemRoot\system32\drivers\pci.sys
\SystemRoot\System32\drivers\partmgr.sys
\SystemRoot\system32\DRIVERS\compbatt.sys
\SystemRoot\system32\DRIVERS\BATTC.SYS
\SystemRoot\system32\drivers\volmgr.sys
\SystemRoot\System32\drivers\volmgrx.sys
\SystemRoot\system32\drivers\pciide.sys
\SystemRoot\system32\drivers\PCIIDEX.SYS
\SystemRoot\System32\drivers\mountmgr.sys
\SystemRoot\system32\drivers\nvraid.sys
\SystemRoot\system32\drivers\atapi.sys
\SystemRoot\system32\drivers\ataport.SYS
\SystemRoot\system32\drivers\nvstor.sys
\SystemRoot\system32\drivers\storport.sys
\SystemRoot\system32\DRIVERS\nvstor64.sys
\SystemRoot\system32\drivers\fltmgr.sys
\SystemRoot\system32\drivers\fileinfo.sys
\SystemRoot\System32\Drivers\ksecdd.sys
\SystemRoot\system32\drivers\ndis.sys
\SystemRoot\system32\drivers\msrpc.sys
\SystemRoot\system32\drivers\NETIO.SYS
\SystemRoot\System32\drivers\tcpip.sys
\SystemRoot\System32\drivers\fwpkclnt.sys
\SystemRoot\System32\Drivers\Ntfs.sys
\SystemRoot\system32\drivers\volsnap.sys
\SystemRoot\System32\Drivers\spldr.sys
\SystemRoot\System32\Drivers\mup.sys
\SystemRoot\System32\drivers\ecache.sys
\SystemRoot\system32\drivers\disk.sys
\SystemRoot\system32\drivers\crcdisk.sys
\SystemRoot\system32\DRIVERS\tunnel.sys
\SystemRoot\system32\DRIVERS\tunmp.sys
\SystemRoot\system32\DRIVERS\intelppm.sys
\SystemRoot\system32\DRIVERS\nvlddmkm.sys
\SystemRoot\System32\Drivers\nvBridge.kmd
\SystemRoot\System32\drivers\dxgkrnl.sys
\SystemRoot\System32\drivers\watchdog.sys
\SystemRoot\system32\DRIVERS\fdc.sys
\SystemRoot\system32\DRIVERS\serial.sys
\SystemRoot\system32\DRIVERS\serenum.sys
\SystemRoot\system32\DRIVERS\parport.sys
\SystemRoot\system32\DRIVERS\i8042prt.sys
\SystemRoot\system32\DRIVERS\kbdclass.sys
\SystemRoot\system32\DRIVERS\usbohci.sys
\SystemRoot\system32\DRIVERS\USBPORT.SYS
\SystemRoot\system32\DRIVERS\usbehci.sys
\SystemRoot\system32\DRIVERS\cdrom.sys
\SystemRoot\system32\DRIVERS\RTL85n64.sys
\SystemRoot\system32\DRIVERS\ohci1394.sys
\SystemRoot\system32\DRIVERS\1394BUS.SYS
\SystemRoot\system32\DRIVERS\HDAudBus.sys
\SystemRoot\system32\DRIVERS\nvm60x64.sys
\SystemRoot\system32\DRIVERS\ASACPI.sys
\SystemRoot\system32\DRIVERS\AVMCOWAN.sys
\SystemRoot\system32\DRIVERS\VMNetSrv.sys
\SystemRoot\system32\DRIVERS\serscan.sys
\SystemRoot\system32\drivers\ksthunk.sys
\SystemRoot\system32\drivers\ks.sys
\SystemRoot\system32\DRIVERS\msiscsi.sys
\SystemRoot\system32\DRIVERS\TDI.SYS
\SystemRoot\system32\DRIVERS\rasl2tp.sys
\SystemRoot\system32\DRIVERS\ndistapi.sys
\SystemRoot\system32\DRIVERS\ndiswan.sys
\SystemRoot\system32\DRIVERS\raspppoe.sys
\SystemRoot\system32\DRIVERS\raspptp.sys
\SystemRoot\system32\DRIVERS\rassstp.sys
\SystemRoot\system32\DRIVERS\termdd.sys
\SystemRoot\system32\DRIVERS\mouclass.sys
\SystemRoot\system32\DRIVERS\seehcri.sys
\SystemRoot\system32\DRIVERS\swenum.sys
\SystemRoot\system32\DRIVERS\mssmbios.sys
\SystemRoot\system32\DRIVERS\umbus.sys
\SystemRoot\system32\DRIVERS\flpydisk.sys
\SystemRoot\system32\DRIVERS\usbhub.sys
\SystemRoot\System32\Drivers\NDProxy.SYS
\SystemRoot\system32\drivers\RTKVHD64.sys
\SystemRoot\system32\drivers\portcls.sys
\SystemRoot\system32\drivers\drmk.sys
\SystemRoot\System32\Drivers\Fs_Rec.SYS
\SystemRoot\System32\Drivers\Null.SYS
\SystemRoot\System32\drivers\vga.sys
\SystemRoot\System32\drivers\VIDEOPRT.SYS
\SystemRoot\System32\DRIVERS\RDPCDD.sys
\SystemRoot\system32\drivers\rdpencdd.sys
\SystemRoot\System32\Drivers\Msfs.SYS
\SystemRoot\System32\Drivers\Npfs.SYS
\SystemRoot\System32\DRIVERS\rasacd.sys
\SystemRoot\system32\DRIVERS\tdx.sys
\SystemRoot\system32\DRIVERS\smb.sys
\SystemRoot\system32\drivers\afd.sys
\SystemRoot\System32\DRIVERS\netbt.sys
\SystemRoot\system32\DRIVERS\pacer.sys
\SystemRoot\system32\DRIVERS\rtlprot.sys
\SystemRoot\system32\DRIVERS\netbios.sys
\SystemRoot\system32\DRIVERS\wanarp.sys
\SystemRoot\system32\DRIVERS\rdbss.sys
\SystemRoot\system32\drivers\nsiproxy.sys
\SystemRoot\System32\Drivers\dfsc.sys
\SystemRoot\system32\DRIVERS\avkmgr.sys
\SystemRoot\system32\DRIVERS\avipbb.sys
\SystemRoot\SysWow64\drivers\AsIO.sys
\SystemRoot\System32\Drivers\crashdmp.sys
\SystemRoot\System32\Drivers\dump_diskdump.sys
\SystemRoot\System32\Drivers\dump_nvstor64.sys
\SystemRoot\system32\drivers\LVUSBS64.sys
\SystemRoot\system32\drivers\USBD.SYS
\SystemRoot\system32\DRIVERS\LV561V64.SYS
\SystemRoot\System32\Drivers\LUsbFilt.Sys
\SystemRoot\system32\DRIVERS\hidusb.sys
\SystemRoot\system32\DRIVERS\HIDCLASS.SYS
\SystemRoot\system32\DRIVERS\HIDPARSE.SYS
\SystemRoot\system32\DRIVERS\usbscan.sys
\SystemRoot\system32\DRIVERS\LHidFilt.Sys
\SystemRoot\system32\DRIVERS\mouhid.sys
\SystemRoot\system32\DRIVERS\LMouFilt.Sys
\SystemRoot\System32\win32k.sys
\SystemRoot\System32\drivers\Dxapi.sys
\SystemRoot\system32\DRIVERS\monitor.sys
\SystemRoot\System32\TSDDD.dll
\SystemRoot\System32\cdd.dll
\SystemRoot\System32\ATMFD.DLL
\SystemRoot\system32\drivers\luafv.sys
\SystemRoot\system32\DRIVERS\avgntflt.sys
\??\C:\Windows\system32\drivers\mbam.sys
\SystemRoot\system32\DRIVERS\RMCAST.sys
\SystemRoot\system32\DRIVERS\lltdio.sys
\SystemRoot\system32\DRIVERS\nwifi.sys
\SystemRoot\system32\DRIVERS\ndisuio.sys
\SystemRoot\system32\DRIVERS\rspndr.sys
\SystemRoot\system32\drivers\HTTP.sys
\SystemRoot\System32\DRIVERS\srvnet.sys
\SystemRoot\system32\DRIVERS\bowser.sys
\SystemRoot\System32\drivers\mpsdrv.sys
\SystemRoot\system32\DRIVERS\mrxsmb.sys
\SystemRoot\system32\DRIVERS\mrxsmb10.sys
\SystemRoot\system32\DRIVERS\mrxsmb20.sys
\SystemRoot\System32\DRIVERS\srv2.sys
\SystemRoot\System32\DRIVERS\srv.sys
\SystemRoot\system32\drivers\spsys.sys
\SystemRoot\system32\DRIVERS\asyncmac.sys
\??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys
\SystemRoot\system32\drivers\peauth.sys
\SystemRoot\System32\drivers\tcpipreg.sys
\SystemRoot\system32\DRIVERS\ipnat.sys
\SystemRoot\System32\Drivers\fastfat.SYS
\SystemRoot\system32\DRIVERS\cdfs.sys
\??\C:\Windows\system32\drivers\MBAMSwissArmy.sys
\??\C:\Windows\system32\drivers\mwac.sys
\??\C:\Windows\system32\drivers\2B4C1CDD.sys
\Windows\System32\ntdll.dll
----------- End -----------
Done!

Scan started
Database versions:
  main:    v2015.12.11.02
  rootkit: v2015.12.07.01

<<<2>>>
Physical Sector Size: 512
Drive: 0, DevicePointer: 0xfffffa8004cd9790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
--------- Disk Stack ------
DevicePointer: 0xfffffa8004bb8290, DeviceName: Unknown, DriverName: \Driver\partmgr\
DevicePointer: 0xfffffa8004cd9790, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
DevicePointer: 0xfffffa800496fc60, DeviceName: Unknown, DriverName: \Driver\ACPI\
DevicePointer: 0xfffffa8004978900, DeviceName: \Device\00000087\, DriverName: \Driver\nvstor64\
------------ End ----------
Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\disk\
Upper DeviceData: 0x0, 0x0, 0x0
Lower DeviceData: 0x0, 0x0, 0x0
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
<<<2>>>
<<<3>>>
Volume: C:
File system type: NTFS
SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes
Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers...
Done!
Drive 0
This is a System drive
Scanning MBR on drive 0...
Inspecting partition table:
MBR Signature: 55AA
Disk Signature: E84C93B8

Partition information:

    Partition 0 type is Primary (0x7)
    Partition is ACTIVE.
    Partition starts at LBA: 2048  Numsec = 1465145072
    Partition is bootable
    Partition file system is NTFS

    Partition 1 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0
    Partition is not bootable

    Partition 2 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0
    Partition is not bootable

    Partition 3 type is Empty (0x0)
    Partition is NOT ACTIVE.
    Partition starts at LBA: 0  Numsec = 0
    Partition is not bootable

Disk Size: 750156374016 bytes
Sector size: 512 bytes

Done!
         

Poste bitte das richtige Log von MBAR. Welches das ist steht in der Anleitung in meinem Post.

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.12.11.02
  rootkit: v2015.12.07.01

Windows Vista Service Pack 2 x64 NTFS
Internet Explorer 9.0.8112.16421
Guido :: GUIDO-PC [administrator]

11.12.2015 10:44:07
mbar-log-2015-12-11 (10-44-07).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 403848
Time elapsed: 45 minute(s), 7 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)