Windows 8.1: Sypware Befall gemeldet durch Antivir

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:10-01-2015 01
durchgeführt von Josef (Administrator) auf JOSEF-PC (16-01-2016 17:11:45)
Gestartet von C:\Users\User\Downloads
Geladene Profile: Josef (Verfügbare Profile: Josef)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe
(DVDVideoSoft Ltd.) C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe
(Electronic Arts) C:\Program Files (x86)\Origin\Origin.exe
(Spencer Kimball, Peter Mattis and the GIMP Development Team) C:\Program Files\GIMP 2\bin\gimp-2.8.exe
(Spencer Kimball, Peter Mattis and the GIMP Development Team) C:\Program Files\GIMP 2\lib\gimp\2.0\plug-ins\script-fu.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\swriter.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [BeatsOSDApp] => C:\Program Files\IDT\WDM\beats64.exe [41664 2012-10-25] (Hewlett-Packard )
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-09] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-10-25] (IDT, Inc.)
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [218144 2015-08-18] (Geek Software GmbH)
HKU\S-1-5-21-3441488294-490295330-2377242766-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50385536 2015-12-17] (Skype Technologies S.A.)
HKU\S-1-5-21-3441488294-490295330-2377242766-1001\...\Policies\Explorer: [DisallowRun] 1
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 1010 series.lnk [2016-01-10]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 1010 series.lnk -> C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 1010 series.lnk [2016-01-10]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 1010 series.lnk -> C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{06B874F6-5C10-4CC5-B3AB-2DF70FF78468}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{3F89C5F3-8625-4118-9C0C-8F35C501C356}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-3441488294-490295330-2377242766-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
HKU\S-1-5-21-3441488294-490295330-2377242766-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPDSK13/4
HKU\S-1-5-21-3441488294-490295330-2377242766-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPDSK13/4
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {26A83292-E79E-441F-B347-28E40CB3468D} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {26A83292-E79E-441F-B347-28E40CB3468D} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3441488294-490295330-2377242766-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3441488294-490295330-2377242766-1001 -> {26A83292-E79E-441F-B347-28E40CB3468D} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3441488294-490295330-2377242766-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28] (Hewlett-Packard)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-30] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-30] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard)
Toolbar: HKU\S-1-5-21-3441488294-490295330-2377242766-1001 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default
FF Session Restore: -> ist aktiviert.
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2016-01-08] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2016-01-08] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-30] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3441488294-490295330-2377242766-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-11-18] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-3441488294-490295330-2377242766-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-11-23] ()
FF Extension: Amazon-Icon - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\extensions\amazon-icon@giga.de [2014-06-14] [ist nicht signiert]
FF Extension: Avira Browser Safety - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\Extensions\abs@avira.com [2015-12-30]
FF Extension: anonymoX - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\Extensions\client@anonymox.net.xpi [2015-09-29]
FF Extension: Deutsch (DE) Language Pack - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2015-12-05]
FF Extension: YouTube Unblocker - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\Extensions\youtubeunblocker@unblocker.yt [2015-12-02]
FF Extension: NoScript - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-01-08]
FF Extension: QuickTimeManagerFree - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\Extensions\{95c38ec9-f0d0-479b-87d2-642feda66b64}.xpi [2015-08-25] [ist nicht signiert]
FF Extension: PDF Shield Light - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\Extensions\{ac822cb9-a911-4e22-bff4-6a47e5bd9aa2}.xpi [2015-12-20] [ist nicht signiert]
FF Extension: Adblock Plus - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\9c074num.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-12-15]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mkcedibhemacmilmkpndpkoidlnmgngg] - C:\Users\User\ChromeExtensions\mkcedibhemacmilmkpndpkoidlnmgngg\amazon.crx [2014-06-13]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1418560 2015-12-01] (Avira Operations GmbH & Co. KG)
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-05-21] (BitRaider, LLC)
S3 DAUpdaterSvc; C:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2015-12-12] (BioWare)
S2 Ds3Service; C:\Controller PS3\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert]
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [238376 2015-05-29] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-09] (NVIDIA Corporation)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2014-08-22] (Hi-Rez Studios) [Datei ist nicht signiert]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35744 2012-10-12] (Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-09] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-09] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-01-16] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2015-12-28] ()
S2 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [103736 2015-12-28] ()
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [327680 2012-10-25] (IDT, Inc.) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146696 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-07-14] (LogMeIn Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-12-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [194976 2015-12-18] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 BRDriver64_1_3_3_E02B25FC; \??\C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [X]
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S3 GPU-Z; \??\C:\Users\User\AppData\Local\Temp\GPU-Z.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-16 15:47 - 2016-01-16 15:47 - 00011965 _____ C:\Users\User\AppData\Local\recently-used.xbel
2016-01-16 15:44 - 2016-01-16 15:44 - 00016428 _____ C:\Users\User\Documents\Badge.tga
2016-01-16 14:24 - 2016-01-16 14:24 - 00000220 _____ C:\Users\User\Desktop\Warhammer 40,000 Dawn of War  Soulstorm.url
2016-01-16 13:40 - 2016-01-16 13:56 - 00000093 ____H C:\Users\User\Desktop\.~lock.Tau Bericht.odt#
2016-01-16 13:38 - 2016-01-16 13:56 - 00015219 _____ C:\Users\User\Desktop\Tau Bericht.odt
2016-01-16 10:26 - 2016-01-16 10:26 - 00000000 ____D C:\Users\User\Documents\RPG Maker 2003
2016-01-16 10:26 - 2016-01-16 10:26 - 00000000 ____D C:\Users\User\AppData\Roaming\KADOKAWA
2016-01-15 15:38 - 2016-01-15 15:52 - 1226964992 ____R C:\Users\User\Desktop\ubuntu-15.10-desktop-i386.iso
2016-01-15 15:04 - 2016-01-15 17:43 - 00000000 ____D C:\Users\User\VirtualBox VMs
2016-01-15 15:00 - 2016-01-16 12:21 - 00000000 ____D C:\Users\User\.VirtualBox
2016-01-15 15:00 - 2016-01-15 15:00 - 00001094 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2016-01-15 15:00 - 2016-01-15 15:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2016-01-15 15:00 - 2016-01-15 15:00 - 00000000 ____D C:\Program Files\Oracle
2016-01-15 15:00 - 2015-12-18 17:08 - 00965440 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxDrv.sys
2016-01-15 15:00 - 2015-12-18 17:08 - 00138904 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys
2016-01-15 14:08 - 2016-01-15 14:09 - 117163720 _____ (Oracle Corporation) C:\Users\User\Downloads\VirtualBox-5.0.12-104815-Win.exe
2016-01-14 23:39 - 2016-01-15 12:38 - 00009708 _____ C:\Users\User\Desktop\erinnerungsnotiz.odt
2016-01-14 18:49 - 2016-01-14 18:49 - 00000222 _____ C:\Users\User\Desktop\RPG Maker 2003.url
2016-01-12 16:36 - 2016-01-12 16:37 - 00000000 ____D C:\Users\User\Desktop\Nightwish - Endless Forms Most Beautiful [Deluxe Edition]
2016-01-02 12:04 - 2013-05-19 08:02 - 00039168 _____ (Scarlet.Crush Productions) C:\WINDOWS\system32\Drivers\ScpVBus.sys
2016-01-02 12:04 - 2013-01-07 15:56 - 01721576 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01009.dll
2016-01-02 12:04 - 2013-01-07 15:56 - 01002728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinUSBCoInstaller2.dll
2016-01-02 12:03 - 2016-01-02 12:04 - 00000000 ____D C:\Controller PS3
2016-01-02 12:03 - 2016-01-02 12:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories
2016-01-02 12:03 - 2016-01-02 12:03 - 00000000 ____D C:\Program Files\Microsoft Xbox 360 Accessories
2016-01-02 12:02 - 2016-01-02 12:02 - 07886712 _____ (Microsoft Corporation) C:\Users\User\Downloads\Xbox360_64Deu.exe
2016-01-02 11:46 - 2016-01-02 11:46 - 04117346 _____ C:\Users\User\Downloads\MotioninJoy_071001_signed.zip
2016-01-01 17:48 - 2016-01-01 17:48 - 00000000 ____D C:\Users\User\AppData\Local\BANDAI NAMCO Games
2016-01-01 17:26 - 2016-01-01 17:26 - 00000222 _____ C:\Users\User\Desktop\DRAGON BALL XENOVERSE.url
2015-12-31 21:30 - 2016-01-15 21:30 - 00003164 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForJosef
2015-12-31 21:30 - 2016-01-15 21:30 - 00000350 _____ C:\WINDOWS\Tasks\HPCeeScheduleForJosef.job
2015-12-31 18:07 - 2015-12-31 18:07 - 00000222 _____ C:\Users\User\Desktop\MechWarrior Online.url
2015-12-29 12:27 - 2015-12-29 12:36 - 02212343 _____ C:\Users\User\Downloads\Austrian Mod_0001(1).zip
2015-12-28 21:33 - 2015-12-28 21:33 - 00000000 __RHD C:\Users\User\AppData\Roaming\SecuROM
2015-12-28 19:51 - 2015-12-28 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2015-12-28 19:46 - 2015-12-28 19:46 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2015-12-28 00:12 - 2016-01-11 15:14 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps
2015-12-27 23:43 - 2015-12-27 23:54 - 00000000 ____D C:\Users\User\Documents\Windward
2015-12-22 19:00 - 2015-12-16 15:39 - 00103032 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-12-22 18:59 - 2015-12-22 19:00 - 00000000 ____D C:\WINDOWS\LastGood
2015-12-22 18:59 - 2015-12-16 18:34 - 42977072 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 37609080 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 31061624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 24895792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 21122456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 20663816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 17561432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 17156968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 16981976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 12334200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-12-22 18:59 - 2015-12-16 18:34 - 03168376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 02755704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 01915696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436143.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 01564976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436143.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00938104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00872056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00734512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00681592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00502080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00469144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00423264 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00416376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00388560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00370808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00175368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00153392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00151184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-12-22 18:59 - 2015-12-16 18:34 - 00128696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-12-20 00:43 - 2015-12-20 00:43 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-20 00:43 - 2015-12-20 00:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-18 17:08 - 2015-12-18 17:08 - 00194976 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxNetLwf.sys
2015-12-18 17:08 - 2015-12-18 17:08 - 00117768 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxNetAdp6.sys

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-01-16 17:11 - 2015-08-01 20:02 - 00022135 _____ C:\Users\User\Downloads\FRST.txt
2016-01-16 17:10 - 2015-08-04 20:08 - 00000000 ____D C:\Users\User\Downloads\FRST-OlderVersion
2016-01-16 17:10 - 2015-08-01 20:01 - 02370560 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2016-01-16 17:10 - 2015-08-01 20:01 - 00000000 ____D C:\FRST
2016-01-16 17:02 - 2014-01-25 17:40 - 00000000 ____D C:\Users\User\AppData\Roaming\TS3Client
2016-01-16 16:50 - 2014-01-25 11:46 - 00000000 ____D C:\Program Files (x86)\Steam
2016-01-16 16:27 - 2014-01-25 11:42 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype
2016-01-16 15:47 - 2014-01-25 16:40 - 00000000 ____D C:\Users\User\AppData\Local\gtk-2.0
2016-01-16 15:41 - 2014-01-25 16:39 - 00000000 ____D C:\Users\User\.gimp-2.8
2016-01-16 15:39 - 2014-01-21 15:03 - 00003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3441488294-490295330-2377242766-1001
2016-01-16 15:34 - 2014-02-08 12:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\THQ
2016-01-16 14:24 - 2014-01-25 11:59 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-01-16 13:25 - 2014-01-25 18:15 - 00000000 ____D C:\ProgramData\Origin
2016-01-16 13:25 - 2014-01-25 18:15 - 00000000 ____D C:\Program Files (x86)\Origin
2016-01-16 10:24 - 2014-01-25 15:12 - 00000000 ____D C:\Users\User\AppData\Local\Warframe
2016-01-15 17:51 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-01-15 16:21 - 2015-04-17 23:44 - 00003886 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-01-15 16:20 - 2015-04-17 23:43 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-15 09:24 - 2014-08-27 21:04 - 00000000 ____D C:\Users\User\AppData\Roaming\.purple
2016-01-14 21:49 - 2015-01-30 07:56 - 00000000 ____D C:\Users\User\AppData\Roaming\HP Support Assistant
2016-01-14 21:49 - 2015-01-27 09:26 - 00000000 ____D C:\Users\User\AppData\Roaming\HpUpdate
2016-01-14 14:44 - 2015-10-01 14:39 - 00003868 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1398949701
2016-01-14 14:44 - 2014-05-01 14:08 - 00001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-01-14 14:44 - 2014-05-01 14:08 - 00000000 ____D C:\Program Files (x86)\Opera
2016-01-12 16:38 - 2015-09-27 10:12 - 00000000 ____D C:\Users\User\Desktop\Gesamtordner
2016-01-04 16:50 - 2014-03-18 11:03 - 01657012 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-04 16:50 - 2014-03-18 10:25 - 00695454 _____ C:\WINDOWS\system32\perfh007.dat
2016-01-04 16:50 - 2014-03-18 10:25 - 00149620 _____ C:\WINDOWS\system32\perfc007.dat
2016-01-02 22:56 - 2014-01-25 13:45 - 00000000 ____D C:\Users\User\Documents\my games
2015-12-29 01:12 - 2014-02-04 00:32 - 00000000 ____D C:\Users\User\AppData\Local\Battle.net
2015-12-28 19:52 - 2015-04-23 20:15 - 00103736 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2015-12-28 19:51 - 2015-04-23 20:15 - 00066872 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-12-28 19:51 - 2014-07-05 22:52 - 00669184 _____ C:\WINDOWS\SysWOW64\pbsvc.exe
2015-12-28 14:31 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-28 10:53 - 2014-01-25 17:41 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2015-12-28 10:49 - 2014-05-28 19:38 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2015-12-28 10:38 - 2014-12-12 14:31 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2015-12-28 10:38 - 2014-02-09 19:50 - 00000000 ____D C:\Program Files (x86)\Diablo III
2015-12-28 10:38 - 2014-02-04 00:32 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-12-28 10:36 - 2014-03-25 22:53 - 00000000 ____D C:\Program Files (x86)\Origin Games
2015-12-22 19:00 - 2014-06-30 17:09 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-22 19:00 - 2014-06-30 17:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-22 18:59 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2015-12-21 18:24 - 2014-01-21 14:56 - 00000000 ____D C:\Users\User\AppData\Local\VirtualStore
2015-12-20 18:05 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-20 18:04 - 2015-07-29 14:28 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-20 18:04 - 2014-01-25 11:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-20 18:03 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-20 00:43 - 2014-01-25 11:42 - 00000000 ____D C:\Users\User\AppData\Local\Skype
2015-12-20 00:43 - 2014-01-25 11:42 - 00000000 ____D C:\ProgramData\Skype
2015-12-19 19:00 - 2014-01-25 15:04 - 00000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2015-12-19 18:59 - 2015-02-25 18:39 - 00000000 ____D C:\Program Files (x86)\Minecraft

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-01-16 15:47 - 2016-01-16 15:47 - 0011965 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2015-01-27 09:25 - 2015-01-27 09:25 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-01-21 14:59 - 2014-01-21 14:59 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc

Einige Dateien in TEMP:
====================
C:\Users\User\AppData\Local\Temp\avgnt.exe
C:\Users\User\AppData\Local\Temp\drm_dialogs.dll
C:\Users\User\AppData\Local\Temp\drm_dyndata_7340014.dll
C:\Users\User\AppData\Local\Temp\EBUAFC4.EXE
C:\Users\User\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\User\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\User\AppData\Local\Temp\nvStInst.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-01-12 15:22

==================== Ende von FRST.txt ============================