Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: AdWare installiert sich immer wieder selber (Win8.1)

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 01.03.2016, 14:59   #1
Tritron
 
AdWare installiert sich immer wieder selber (Win8.1) - Standard

AdWare installiert sich immer wieder selber (Win8.1)



Hi,

Ich habe ein kleines Problem mit meinem (neuen) Rechner. Seit dem ich eine Seite mit dem Namen Springfiles besucht habe und eine Datei heruntergeladen habe kommt andauernd Werbung in meinen Browsern. Außerdem druckt mein Drucker sobald er an dem PC angeschlossen ist pausenlos irgendwas über Homosexuelle. Ich will nicht wissen was der "Virus sonst noch alles gemacht hat. Mein Problem ist dass ich Chrome und Firefox garnicht mehr nutzen kann da dort nur Werbung ist, und in Internet Explorer kann ich nur Google oder dieses Forum besuchen.
Ich habe schon bestimmt 5 Anleitungen abgearbeitet bevor ich auf dieses Forum gestoßen bin, (Malwarebytes, ADWCleaner, Revo, ...). Alle haben Ad- und Malware gefunden, jedoch "installiert" sich diese Werbung (by capricornus) immer und immer wieder.) Die Ausgangsdatei habe ich selbstverständlich wieder gelöscht, doch das Problem tritt immernoch auf.
Solange ich nicht zu 100% sicher sein kann dass ich keine Viren mehr auf meinem PC habe kann ich ihn leider auch nicht mehr für PayPal oder ähnliche Dienste nutzen.

FRST Logs:

FRST.txt:
[Spoiler]
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:27-02-2016
durchgeführt von German (Administrator) auf HENDRYK (01-03-2016 14:42:19)
Gestartet von C:\Users\German\Downloads
Geladene Profile: German &  (Verfügbare Profile: admin & German & Papa)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(HP) C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\System32\PnkBstrA.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Gainward Co. Ltd.) C:\Program Files (x86)\EXPERTool\TBPanel.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(© 2015 Microsoft Corporation) C:\Users\German\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.92.21.0\OverwolfHelper.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\0.92.21.0\OverwolfHelper64.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\0.92.21.0\Purplizer\Purplizer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\0.92.21.0\OverwolfBrowser.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\0.92.21.0\OverwolfBrowser.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\German\Downloads\adwcleaner_5.037.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15003256 2015-09-19] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508104 2015-09-04] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2292912 2015-09-17] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [917112 2015-10-08] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [804168 2016-02-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [330176 2014-08-19] (Hewlett-Packard Company)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [TBPanel] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2195416 2015-05-29] (Gainward Co. Ltd.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3639280 2016-02-02] (Electronic Arts)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3014224 2016-02-04] (Valve Corporation)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [BingSvc] => C:\Users\German\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [61200 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [103696 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [45296 2016-02-11] (Overwolf LTD)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [CyberGhost] => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [Dexpot] => G:\Dexpot\dexpot.exe [1845296 2014-09-04] (Dexpot GbR)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50615936 2016-01-18] (Skype Technologies S.A.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\...\Run: [MurGee.com Auto Clicker] => G:\Auto Clicker\AutoClicker.exe [124072 2016-01-14] (MurGee.com)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [TBPanel] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2195416 2015-05-29] (Gainward Co. Ltd.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3639280 2016-02-02] (Electronic Arts)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3014224 2016-02-04] (Valve Corporation)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [BingSvc] => C:\Users\German\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [61200 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [103696 2015-10-21] (Apple Inc.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe [45296 2016-02-11] (Overwolf LTD)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [CyberGhost] => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Dexpot] => G:\Dexpot\dexpot.exe [1845296 2014-09-04] (Dexpot GbR)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50615936 2016-01-18] (Skype Technologies S.A.)
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [MurGee.com Auto Clicker] => G:\Auto Clicker\AutoClicker.exe [124072 2016-01-14] (MurGee.com)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll (EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-09-11] ()
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\German\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\German\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\German\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] ()
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\SysWow64\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7D799B41-54F3-47C6-AE88-26F3C57B6DC2}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{951E8EDF-B09B-4639-977F-2857679E2F0A}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{B8FD05E0-44B9-4037-AEFB-3A369EE66CC2}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{bbed3e08-0b41-11e3-8249-806e6f6e6963}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{D48B96C9-F2FC-40F4-96B8-7BC7A17A7EC9}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{D48B96C9-F2FC-40F4-96B8-7BC7A17A7EC9}: [DhcpNameServer] 8.8.8.8

Internet Explorer:
==================
HKU\S-1-5-21-4250030646-1501493049-109087217-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002 -> {27B3153F-C6B6-4AC8-A300-25EA0AE6E6E1} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002 -> {92EE6304-7779-4A2B-BF23-4BF4DB1AD39E} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002 -> {A2A1DE56-07DD-46DB-A2E2-FFD328CCB63E} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002 -> {C736CDB4-2297-4972-B35C-3C02C11F285A} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002 -> {E688550F-FD47-4F80-A2F2-DD4AEF500166} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {27B3153F-C6B6-4AC8-A300-25EA0AE6E6E1} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {92EE6304-7779-4A2B-BF23-4BF4DB1AD39E} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {A2A1DE56-07DD-46DB-A2E2-FFD328CCB63E} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {C736CDB4-2297-4972-B35C-3C02C11F285A} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {E688550F-FD47-4F80-A2F2-DD4AEF500166} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1005-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-4250030646-1501493049-109087217-1005-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_71\bin\ssv.dll [2016-01-30] (Oracle Corporation)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_71\bin\jp2ssv.dll [2016-01-30] (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll => Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-15] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-15] (Oracle Corporation)
BHO-x32: Kein Name -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\German\AppData\Roaming\Mozilla\Firefox\Profiles\AoEQNFUc.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @java.com/DTPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\dtplugin\npDeployJava1.dll [2016-01-30] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.71.2 -> C:\Program Files\Java\jre1.8.0_71\bin\plugin2\npjp2.dll [2016-01-30] (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-09-17] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-08] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-29] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-29] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-15] (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-09-17] (Adobe Systems)
FF Plugin HKU\S-1-5-21-4250030646-1501493049-109087217-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\German\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-4250030646-1501493049-109087217-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\German\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
FF Extension: Flash and Video Download - C:\Users\German\AppData\Roaming\Mozilla\Firefox\Profiles\AoEQNFUc.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-01-26]
FF Extension: Greasemonkey - C:\Users\German\AppData\Roaming\Mozilla\Firefox\Profiles\AoEQNFUc.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-01-26]
FF Extension: Kein Name - C:\Users\German\AppData\Roaming\Mozilla\Firefox\Profiles\AoEQNFUc.default\extensions\yahooprotected@gmail.com [nicht gefunden]
FF Extension: Avira Browser Safety - C:\Users\German\AppData\Roaming\Mozilla\Firefox\Profiles\AoEQNFUc.default\Extensions\abs@avira.com [2016-02-18]
FF Extension: MEGA - C:\Users\German\AppData\Roaming\Mozilla\Firefox\Profiles\AoEQNFUc.default\Extensions\firefox@mega.co.nz.xpi [2016-02-18]
FF Extension: Oasis Space 1.0.1 - C:\Users\German\AppData\Roaming\Mozilla\Firefox\Profiles\AoEQNFUc.default\Extensions\{307918f0-0f35-499c-953c-5e64815cd976}.xpi [2016-02-29] [ist nicht signiert]
FF Extension: Adblock Plus - C:\Users\German\AppData\Roaming\Mozilla\Firefox\Profiles\AoEQNFUc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-20]

Chrome: 
=======
CHR HomePage: Default -> hxxps://www.google.de/
CHR Profile: C:\Users\German\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-15]
CHR Extension: (Google Docs) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-15]
CHR Extension: (Google Drive) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-26]
CHR Extension: (YouTube) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-15]
CHR Extension: (Adblock Plus) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-06]
CHR Extension: (Google-Suche) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Tampermonkey) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-12-19]
CHR Extension: (Google Tabellen) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-15]
CHR Extension: (iCloud-Lesezeichen) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2015-10-16]
CHR Extension: (Avira Browserschutz) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-18]
CHR Extension: (Google Docs Offline) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Norton Identity Safe) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-10-16]
CHR Extension: (BitGo) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlgeogaipkoajobchncghcojanffjfhl [2015-12-02]
CHR Extension: (Skype) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-19]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-15]
CHR Extension: (Google Mail) - C:\Users\German\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-15]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [669872 2015-09-15] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2020056 2016-02-09] (Adobe Systems, Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [948392 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1417592 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1345056 2016-02-11] ()
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.)
S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-24] (HP) [Datei ist nicht signiert]
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2048720 2015-11-13] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [96600 2015-11-13] ()
R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [851152 2015-11-13] (AnchorFree Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-29] (Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [192120 2015-09-19] (Logitech Inc.)
S2 MBAMService; G:\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-02] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1009904 2016-02-11] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2016-01-18] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2016-01-17] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2015-10-15] () [Datei ist nicht signiert]
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S2 Gittuiu; "C:\Users\German\AppData\Roaming\AodoJamp\Feklaf.exe" -cms [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2015-12-13] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146704 2016-02-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-13] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2015-12-13] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems)
R3 cbfs3; C:\Windows\System32\drivers\cbfs3.sys [352144 2012-04-09] (EldoS Corporation)
S3 csrusbfilter; C:\Windows\System32\Drivers\csrusbfilter.sys [23752 2012-03-22] (Cambridge Silicon Radio Limited)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [118272 2014-04-29] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
S3 NVSWCFilter; C:\Windows\System32\drivers\nvswcfilter.sys [19616 2015-06-17] (Windows (R) Win 7 DDK provider)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [47672 2016-02-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [3860224 2015-08-05] (Realtek Semiconductor Corporation                           )
R3 ScpVBus; C:\Windows\System32\drivers\ScpVBus.sys [39168 2015-10-27] (Scarlet.Crush Productions)
R3 taphss6; C:\Windows\system32\DRIVERS\taphss6.sys [42088 2015-11-13] (Anchorfree Inc.)
R3 VBAudioVACMME; C:\Windows\system32\DRIVERS\vbaudio_cable64_win7.sys [41192 2013-07-11] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x64.sys [X]
S3 CsrBtPort; \SystemRoot\system32\DRIVERS\CsrBtPort.sys [X]
S3 csrpan; \SystemRoot\system32\DRIVERS\csrpan.sys [X]
S3 csrserial; \SystemRoot\system32\DRIVERS\csrserial.sys [X]
S3 csrusb; \SystemRoot\System32\Drivers\csrusb.sys [X]
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-01 14:42 - 2016-03-01 14:42 - 00037207 _____ C:\Users\German\Downloads\FRST.txt
2016-03-01 14:41 - 2016-03-01 14:42 - 00000000 ____D C:\FRST
2016-03-01 14:41 - 2016-03-01 14:41 - 02371072 _____ (Farbar) C:\Users\German\Downloads\FRST64.exe
2016-03-01 14:34 - 2016-03-01 14:34 - 00002628 _____ C:\Windows\System32\Tasks\ParetoLogic Registration3
2016-03-01 14:34 - 2016-03-01 14:34 - 00000438 _____ C:\Windows\Tasks\ParetoLogic Registration3.job
2016-03-01 14:33 - 2016-03-01 14:33 - 00000000 ____D C:\Users\German\AppData\Roaming\ParetoLogic
2016-03-01 14:33 - 2016-03-01 14:33 - 00000000 ____D C:\Users\German\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ParetoLogic
2016-03-01 14:33 - 2016-03-01 14:33 - 00000000 ____D C:\Users\German\AppData\Roaming\DriverCure
2016-03-01 14:33 - 2016-03-01 14:33 - 00000000 ____D C:\ProgramData\ParetoLogic
2016-03-01 14:32 - 2016-03-01 14:32 - 05964208 _____ (ParetoLogic Inc.) C:\Users\German\Downloads\ParetoLogic PC Health Advisor.exe
2016-03-01 08:32 - 2016-03-01 08:32 - 00263142 _____ C:\Users\Papa\Downloads\Husar_OD_11563_091115_9.pdf
2016-02-29 19:30 - 2016-03-01 14:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-29 19:30 - 2016-02-29 19:30 - 22908888 _____ (Malwarebytes ) C:\Users\German\Downloads\mbam-setup-2.2.0.1024.exe
2016-02-29 19:30 - 2016-02-29 19:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-02-29 19:30 - 2016-02-29 19:30 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-29 19:30 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-02-29 19:30 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-02-29 19:30 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-02-29 19:19 - 2016-02-29 19:19 - 00000000 ____D C:\Windows\system32\lut
2016-02-29 19:13 - 2016-03-01 14:35 - 00000000 ____D C:\AdwCleaner
2016-02-29 19:13 - 2016-02-29 19:13 - 01518592 _____ C:\Users\German\Downloads\adwcleaner_5.037.exe
2016-02-29 18:42 - 2016-02-29 19:40 - 00000000 ____D C:\Users\German\AppData\LocalLow\Company
2016-02-29 18:42 - 2016-02-29 18:42 - 00003344 _____ C:\Windows\System32\Tasks\Aviel
2016-02-29 18:42 - 2016-02-29 18:42 - 00000000 ____D C:\Users\German\AppData\Local\Tempfolder
2016-02-29 18:42 - 2016-02-29 18:42 - 00000000 ____D C:\uninst
2016-02-29 18:41 - 2014-11-24 22:09 - 00020872 _____ (Phoenix Technologies) C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS
2016-02-29 18:40 - 2016-02-29 18:40 - 04255744 _____ C:\Users\German\Downloads\remouse_standard_3.4_crack.iso
2016-02-29 18:28 - 2016-02-29 18:28 - 00000000 ____D C:\Users\German\Documents\AutomaticSolution Software
2016-02-29 18:28 - 2016-02-29 18:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReMouse Standard
2016-02-29 18:27 - 2016-02-29 18:27 - 01162728 _____ (AutomaticSolution Software ) C:\Users\German\Downloads\ReMouseStandard-Setup.exe
2016-02-28 15:12 - 2016-02-28 15:12 - 00000419 _____ C:\Users\German\Downloads\listen-dsl.pls
2016-02-28 11:49 - 2016-02-28 11:49 - 00093222 _____ C:\Users\German\Downloads\Husar®+Plus+(Husar®+Plus+%2b+Mero®).pdf
2016-02-28 10:43 - 2016-02-28 10:43 - 00000042 _____ C:\Windows\SysWOW64\AK083E209605E394C.lie
2016-02-28 10:42 - 2016-02-28 10:43 - 02670160 _____ (www.PerfectUninstaller.com ) C:\Users\German\Downloads\PerfectUninstaller_Setup.exe
2016-02-27 15:35 - 2016-02-27 15:35 - 00137728 _____ C:\Users\German\Downloads\ZombieHack (1).exe
2016-02-27 15:24 - 2016-02-27 15:24 - 00137728 _____ C:\Users\German\Downloads\ZombieHack.exe
2016-02-26 17:53 - 2016-02-26 17:53 - 00000257 _____ C:\Users\Papa\Desktop\Renault Top-Angebote.url
2016-02-26 12:33 - 2016-02-26 12:33 - 01855998 _____ C:\Users\Papa\Desktop\Duster.pdf
2016-02-24 21:11 - 2016-02-24 21:11 - 00030377 _____ C:\Users\German\Downloads\Leer 6.pdf
2016-02-24 17:59 - 2016-02-24 17:59 - 00128595 _____ C:\Users\German\Downloads\Leer 6.pages
2016-02-22 18:18 - 2016-02-24 14:46 - 00000000 ____D C:\Users\German\Desktop\Französisch
2016-02-22 14:45 - 2016-02-22 14:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auto Clicker
2016-02-22 14:44 - 2016-02-22 14:44 - 00855448 _____ (MurGee.com ) C:\Users\German\Downloads\setup.exe
2016-02-19 22:04 - 2016-02-29 19:40 - 00000642 _____ C:\Users\Public\Desktop\Flixster.lnk
2016-02-19 22:04 - 2016-02-29 19:40 - 00000642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flixster.lnk
2016-02-19 22:04 - 2016-02-19 22:04 - 00000000 ____D C:\Users\German\AppData\Roaming\com.wb.DC2
2016-02-19 22:04 - 2016-02-19 22:04 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2016-02-19 22:04 - 2016-02-19 22:04 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2016-02-19 21:54 - 2016-02-19 21:54 - 00000000 ____D C:\Users\German\AppData\Roaming\dvdcss
2016-02-19 19:32 - 2016-02-19 19:32 - 00000278 _____ C:\Users\German\Downloads\wspam-illuminati.zip
2016-02-19 18:45 - 2016-02-19 18:45 - 00000300 _____ C:\Users\German\Downloads\wspam-bob.zip
2016-02-19 10:37 - 2016-02-09 09:39 - 42982336 _____ C:\Windows\system32\nvcompiler.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 37616696 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 31081920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 24916536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 20733832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 12383288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-02-19 10:37 - 2016-02-09 09:39 - 03145272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436191.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436191.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00878816 _____ C:\Windows\system32\nvmcumd.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00691256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00124352 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcaparm.dll
2016-02-19 10:37 - 2016-02-09 09:39 - 00047672 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvadarm.sys
2016-02-19 10:34 - 2016-02-19 10:36 - 00000000 ____D C:\Users\German\Desktop\EndeavourPC
2016-02-19 10:31 - 2016-02-19 10:31 - 00000000 ____D C:\Users\German\AppData\Roaming\Mael
2016-02-19 10:28 - 2016-02-19 10:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HxD Hex Editor
2016-02-19 10:27 - 2016-02-19 10:31 - 00000000 ____D C:\Users\German\Desktop\uzhz78uh8uz7huh8
2016-02-19 10:27 - 2016-01-29 10:52 - 00792576 _____ (Alexander Blade) C:\Users\German\Desktop\ScriptHookV.dll.bak
2016-02-18 15:32 - 2016-02-18 15:32 - 00242312 _____ C:\Users\German\Downloads\Firefox Setup Stub 44.0.2.exe
2016-02-18 14:37 - 2016-02-18 14:37 - 00000640 _____ C:\Users\German\Desktop\asdasdasdasd.txt
2016-02-18 14:35 - 2016-02-18 14:35 - 02391038 _____ C:\Users\German\Downloads\ApocalypseBot.jar
2016-02-18 10:36 - 2016-02-18 10:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-02-17 20:10 - 2016-02-17 20:10 - 00375451 _____ C:\Users\German\Downloads\Biologie_LP_SekII.pdf
2016-02-17 20:07 - 2016-02-17 20:07 - 00326271 _____ C:\Users\German\Downloads\physik-gym-oberstufe.pdf
2016-02-17 07:58 - 2016-02-17 07:58 - 00059548 _____ C:\Users\Papa\Downloads\Konto_117581439-Auszug_2015_010.PDF
2016-02-17 07:58 - 2016-02-17 07:58 - 00059234 _____ C:\Users\Papa\Downloads\Konto_117581439-Auszug_2015_011.PDF
2016-02-15 12:24 - 2016-02-15 12:24 - 00000000 ____D C:\Users\Papa\AppData\Roaming\HpUpdate
2016-02-15 06:56 - 2016-02-15 06:56 - 00058322 _____ C:\Users\Papa\Downloads\Konto_117581439-Auszug_2016_001.PDF
2016-02-14 10:32 - 2016-02-14 10:32 - 00424544 _____ C:\Users\Papa\Downloads\mainradweg--weisser-main.gpx
2016-02-13 16:02 - 2016-02-13 16:02 - 00011510 _____ C:\Users\German\Desktop\Arma3Launcher_Exception_20160213T150213.txt
2016-02-13 16:02 - 2016-02-09 06:41 - 00530368 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-02-13 16:02 - 2016-02-09 06:41 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-02-13 16:01 - 2016-01-23 04:42 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436175.dll
2016-02-13 16:01 - 2016-01-23 04:42 - 01573432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436175.dll
2016-02-13 15:05 - 2016-02-13 15:05 - 00000000 ____D C:\Users\German\Documents\Mein Garmin
2016-02-13 11:03 - 2016-02-13 15:06 - 00000000 ____D C:\Users\German\AppData\Roaming\Garmin
2016-02-13 11:03 - 2016-02-13 11:03 - 00000000 ____D C:\Users\German\AppData\Local\GARMIN_Corp
2016-02-13 11:03 - 2016-02-13 11:03 - 00000000 ____D C:\Users\German\AppData\Local\Garmin
2016-02-13 11:03 - 2016-02-13 11:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2016-02-13 11:03 - 2016-02-13 11:03 - 00000000 ____D C:\Program Files (x86)\Garmin
2016-02-13 11:02 - 2016-02-13 11:02 - 104822528 _____ C:\Users\German\Downloads\BaseCamp_462.exe
2016-02-13 10:03 - 2016-02-13 10:03 - 01615659 _____ C:\Users\Papa\Downloads\Expert_UV_40B.pdf
2016-02-12 01:01 - 2016-02-12 01:01 - 00963009 _____ C:\Users\German\Documents\Präsentation 3 (2).pptx
2016-02-11 10:35 - 2016-02-06 11:48 - 25839104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-11 10:35 - 2016-02-06 11:24 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-02-11 10:35 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-11 10:35 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-02-11 10:35 - 2016-02-06 10:32 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-11 10:35 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-11 10:35 - 2016-02-06 10:09 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-11 10:35 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-11 10:01 - 2016-01-22 09:01 - 22365992 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-02-11 10:01 - 2016-01-22 08:11 - 19794896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-02-11 10:01 - 2016-01-22 07:40 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-02-11 10:01 - 2016-01-22 07:29 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-11 10:01 - 2016-01-22 07:28 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-02-11 10:01 - 2016-01-22 07:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-02-11 10:01 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-02-11 10:01 - 2016-01-22 06:55 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-02-11 10:01 - 2016-01-22 06:52 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-02-11 10:01 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-02-11 10:01 - 2016-01-22 06:50 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-02-11 10:01 - 2016-01-22 06:48 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-02-11 10:01 - 2016-01-22 06:48 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-02-11 10:01 - 2016-01-22 06:47 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-02-11 10:01 - 2016-01-22 06:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-02-11 10:01 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-11 10:01 - 2016-01-22 06:31 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-11 10:01 - 2016-01-22 06:31 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-02-11 10:01 - 2016-01-22 06:28 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-02-11 10:01 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-02-11 10:01 - 2016-01-22 06:25 - 14467072 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-02-11 10:01 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-02-11 10:01 - 2016-01-22 06:25 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-02-11 10:01 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-02-11 10:01 - 2016-01-22 06:14 - 12879360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-02-11 10:01 - 2016-01-22 06:08 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-02-11 10:01 - 2016-01-22 06:07 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-02-11 10:01 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-11 10:01 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-02-11 10:01 - 2016-01-22 05:58 - 02464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-02-11 10:01 - 2016-01-19 20:14 - 07453024 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-02-11 10:01 - 2016-01-19 20:13 - 02175008 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-02-11 10:01 - 2016-01-19 20:13 - 01063464 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-02-11 10:01 - 2016-01-19 20:12 - 01737088 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-11 10:01 - 2016-01-19 20:12 - 01133744 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-11 10:01 - 2016-01-19 19:23 - 01564496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-02-11 10:01 - 2016-01-19 19:23 - 01501496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-11 10:01 - 2016-01-19 19:23 - 00548024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-02-11 10:01 - 2016-01-19 19:15 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-11 10:01 - 2016-01-19 18:30 - 00862720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-11 10:01 - 2016-01-19 17:37 - 00267776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2016-02-11 10:01 - 2016-01-15 02:42 - 00033472 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-02-11 10:01 - 2016-01-14 21:44 - 01362944 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-02-11 10:01 - 2016-01-14 21:44 - 01162240 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-02-11 10:01 - 2016-01-14 21:44 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-02-11 10:01 - 2016-01-14 21:44 - 00677376 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-02-11 10:01 - 2016-01-14 21:44 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-02-11 10:01 - 2016-01-14 21:44 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-02-11 10:01 - 2016-01-10 20:37 - 00442720 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-02-11 10:01 - 2016-01-10 20:37 - 00136912 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-02-11 10:01 - 2016-01-10 19:39 - 00332640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-02-11 10:01 - 2016-01-10 19:15 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-02-11 10:01 - 2016-01-10 19:15 - 00202240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-02-11 10:01 - 2016-01-10 18:50 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\cfgbkend.dll
2016-02-11 10:01 - 2016-01-10 18:43 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-02-11 10:01 - 2016-01-10 18:31 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-11 10:01 - 2016-01-10 18:16 - 00898048 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2016-02-11 10:01 - 2016-01-10 18:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cfgbkend.dll
2016-02-11 10:01 - 2016-01-10 18:12 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll
2016-02-11 10:01 - 2016-01-10 18:09 - 01442304 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-02-11 10:01 - 2016-01-10 18:09 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-02-11 10:01 - 2016-01-10 18:02 - 00987648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-11 10:01 - 2016-01-10 17:58 - 00166400 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-11 10:01 - 2016-01-10 17:56 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2016-02-11 10:01 - 2016-01-10 17:51 - 03707392 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-11 10:01 - 2016-01-10 17:51 - 00702976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2016-02-11 10:01 - 2016-01-10 17:49 - 00443392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2016-02-11 10:01 - 2016-01-10 17:43 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-11 10:01 - 2016-01-10 17:40 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-11 10:01 - 2016-01-10 17:39 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-02-11 10:01 - 2016-01-10 17:38 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-02-11 10:01 - 2016-01-10 17:36 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-02-11 10:01 - 2016-01-10 17:36 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-02-11 10:01 - 2016-01-10 17:35 - 02243584 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-02-11 10:01 - 2016-01-10 17:35 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-11 10:01 - 2016-01-10 17:29 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-02-11 10:01 - 2016-01-10 17:29 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-02-11 10:01 - 2016-01-10 17:27 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-02-11 10:01 - 2016-01-10 17:26 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-11 10:01 - 2016-01-07 19:34 - 04175872 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-02-11 10:01 - 2016-01-06 19:25 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-11 10:01 - 2015-12-29 16:45 - 07783936 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-11 10:01 - 2015-12-29 16:45 - 07075328 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-02-11 10:01 - 2015-12-29 16:43 - 05267968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-02-11 10:01 - 2015-12-29 16:42 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-02-11 10:01 - 2015-12-28 22:42 - 00713216 _____ (Microsoft Corporation) C:\Windows\system32\WinSync.dll
2016-02-11 10:01 - 2015-12-28 21:31 - 00578048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinSync.dll
2016-02-11 10:01 - 2015-12-17 19:29 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-02-11 10:01 - 2015-12-17 17:17 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-02-08 17:59 - 2016-02-08 17:59 - 00000000 ____D C:\Program Files\VB
2016-02-08 17:59 - 2013-07-11 07:57 - 00041192 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\vbaudio_cable64_win7.sys
2016-02-03 07:57 - 2016-02-03 07:57 - 00000000 ____D C:\Users\Papa\AppData\Roaming\OpenOffice
2016-02-02 12:00 - 2016-02-02 12:00 - 02945801 _____ C:\Users\Papa\Desktop\Star_C_Br2_Avant_C_Br3.pdf
2016-02-02 11:20 - 2016-02-02 11:20 - 00006144 ___SH C:\Users\Papa\Desktop\Thumbs.db
2016-02-02 10:54 - 2016-02-02 10:54 - 00741839 _____ C:\Users\Papa\Desktop\Scan.pdf
2016-02-02 00:09 - 2016-02-02 00:10 - 238347814 _____ C:\Users\German\Documents\Orca Kaput.MP4
2016-02-02 00:09 - 2016-02-02 00:09 - 00000580 _____ C:\Users\German\Documents\Orca KaputM01.xml
2016-02-01 19:25 - 2016-02-01 19:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-02-01 12:17 - 2016-02-02 10:53 - 00000000 ____D C:\Users\Papa\AppData\Local\HP
2016-01-31 20:40 - 2016-01-31 20:50 - 423791802 _____ C:\Users\German\Documents\YouTube-0964d7cfa0f7407cae02543a4af0ff93.mp4
2016-01-31 20:14 - 2016-01-31 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\H.264 Encoder
2016-01-31 20:14 - 2016-01-31 20:14 - 00000000 ____D C:\Program Files (x86)\H.264 Encoder
2016-01-31 20:09 - 2016-01-31 20:18 - 868391142 _____ C:\Users\German\Documents\DeutschFilmBP.MP4
2016-01-31 19:53 - 2016-01-31 20:02 - 982700592 _____ C:\Users\German\Documents\DeutschFilmBP.mxf
2016-01-31 19:52 - 2016-01-31 19:52 - 00107216 _____ C:\Users\German\Documents\DeutschFilmBP.veg
2016-01-31 18:23 - 2016-01-31 18:32 - 1212161960 _____ C:\Users\German\Documents\Deutsch Film.MP4
2016-01-31 17:54 - 2016-01-31 17:54 - 00130412 _____ C:\Users\German\Desktop\WhatsApp Web.html
2016-01-31 17:54 - 2016-01-31 17:54 - 00000000 ____D C:\Users\German\Desktop\WhatsApp Web_files
2016-01-31 16:54 - 2016-01-31 16:54 - 02839085 _____ C:\Users\German\Downloads\wasted template chroma keyer 2.mp4
2016-01-31 15:24 - 2016-01-31 15:24 - 00253996 _____ C:\Users\German\Downloads\Ding.wav
2016-01-31 11:51 - 2016-01-31 11:51 - 00003704 _____ C:\Windows\System32\Tasks\Java Update Scheduler
2016-01-31 11:51 - 2016-01-31 11:51 - 00003676 _____ C:\Windows\System32\Tasks\HP-Online-Aktualisierungsprogramm
2016-01-31 10:40 - 2016-01-31 10:40 - 00000000 ____D C:\Users\Papa\AppData\Roaming\TuneUp Software
2016-01-31 10:40 - 2016-01-31 10:40 - 00000000 ____D C:\Users\Papa\AppData\Local\TuneUp Software

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-01 14:41 - 2015-12-02 07:34 - 00000000 ____D C:\Users\German\AppData\Roaming\NetSpeedMonitor
2016-03-01 14:36 - 2015-10-15 14:57 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4250030646-1501493049-109087217-1002
2016-03-01 14:32 - 2015-10-16 23:40 - 00000000 ____D C:\Users\German\AppData\Local\Adobe
2016-03-01 14:32 - 2015-10-15 14:57 - 00003930 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{7B856562-478F-4AFD-8FA6-E60951A31F09}
2016-03-01 14:31 - 2016-01-30 10:20 - 00000000 ____D C:\Program Files (x86)\HP
2016-03-01 14:31 - 2014-11-21 04:35 - 01780340 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-01 14:31 - 2014-11-21 03:45 - 00765378 _____ C:\Windows\system32\perfh007.dat
2016-03-01 14:31 - 2014-11-21 03:45 - 00159696 _____ C:\Windows\system32\perfc007.dat
2016-03-01 14:31 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-03-01 14:26 - 2015-10-27 06:52 - 00000000 ____D C:\Users\German\AppData\Local\Purplizer
2016-03-01 14:25 - 2015-10-26 17:43 - 00000464 _____ C:\Windows\Tasks\Nero TuneItUp PRO (Tray).job
2016-03-01 14:25 - 2015-10-17 20:57 - 00000000 ____D C:\Users\German\AppData\Local\Overwolf
2016-03-01 14:25 - 2015-10-16 14:16 - 00000000 ___RD C:\Users\German\iCloudDrive
2016-03-01 14:25 - 2015-10-15 15:30 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-01 14:25 - 2015-10-15 14:54 - 00000000 ___RD C:\Users\German\OneDrive
2016-03-01 14:25 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-01 10:47 - 2015-10-26 13:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-01 10:45 - 2015-10-15 15:30 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-01 08:42 - 2015-10-30 10:55 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4250030646-1501493049-109087217-1005
2016-03-01 08:42 - 2015-10-30 10:51 - 00000000 ___RD C:\Users\Papa\OneDrive
2016-03-01 08:16 - 2015-12-09 14:54 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{9275927A-58A3-40C5-8624-534B2628CDF7}
2016-03-01 08:12 - 2015-10-30 10:51 - 00000000 ____D C:\Users\Papa\AppData\Local\NVIDIA Corporation
2016-02-29 20:02 - 2016-01-21 19:00 - 00001125 _____ C:\Users\German\Desktop\nativelog.txt
2016-02-29 19:54 - 2015-10-15 17:07 - 00000000 ____D C:\Users\German\AppData\Roaming\.minecraft
2016-02-29 19:41 - 2013-08-22 15:45 - 00000000 ____D C:\Windows\Setup
2016-02-29 19:40 - 2016-01-13 18:41 - 00000417 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dying Light.lnk
2016-02-29 19:40 - 2016-01-03 21:38 - 00003065 _____ C:\Users\German\Desktop\BrokenBot.lnk
2016-02-29 19:40 - 2015-12-12 13:57 - 00001391 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-02-29 19:40 - 2015-11-12 22:37 - 00001387 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2016-02-29 19:40 - 2015-10-26 08:04 - 00001759 _____ C:\Users\Public\Desktop\iTunes.lnk
2016-02-29 19:40 - 2015-10-17 15:47 - 00000967 _____ C:\Users\Public\Desktop\Minecraft.lnk
2016-02-29 19:40 - 2015-10-16 23:53 - 00001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2015.lnk
2016-02-29 19:40 - 2015-10-16 23:43 - 00001229 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-02-29 19:40 - 2015-10-16 22:33 - 00001051 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-02-29 19:40 - 2015-10-16 21:37 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-02-29 19:40 - 2015-10-16 10:37 - 00001019 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-02-29 19:40 - 2015-10-15 16:13 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-02-29 19:40 - 2015-10-15 15:30 - 00002212 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-29 19:40 - 2015-10-15 15:30 - 00002189 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-29 19:40 - 2015-10-15 14:52 - 00001450 _____ C:\Users\German\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-29 19:40 - 2015-10-15 14:51 - 00000469 _____ C:\Users\German\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-02-29 19:40 - 2015-10-15 14:51 - 00000467 _____ C:\Users\German\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-02-29 19:40 - 2013-08-22 14:25 - 00524288 ___SH C:\Windows\system32\config\BBI
2016-02-29 19:33 - 2015-10-15 14:52 - 00000000 ____D C:\Users\German\AppData\Local\NVIDIA
2016-02-29 19:15 - 2015-10-14 09:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-02-29 19:15 - 2015-10-14 09:05 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-02-29 18:48 - 2013-08-22 14:25 - 00000194 _____ C:\Windows\win.ini
2016-02-29 18:43 - 2015-10-17 00:14 - 00000000 ____D C:\Users\German\AppData\Local\CrashDumps
2016-02-29 18:41 - 2015-10-13 18:07 - 00000000 ____D C:\Users\admin
2016-02-29 18:39 - 2016-01-30 23:08 - 00000000 ____D C:\Users\German\Desktop\BukkitPlugin
2016-02-29 15:18 - 2015-10-15 16:33 - 00000000 ____D C:\Users\German\AppData\Roaming\Skype
2016-02-29 15:17 - 2016-01-30 19:13 - 00000000 ____D C:\Users\German\AppData\Roaming\Dexpot
2016-02-29 15:16 - 2015-10-15 16:24 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-29 15:16 - 2015-10-15 16:06 - 00000000 ____D C:\ProgramData\Origin
2016-02-29 14:21 - 2015-10-30 10:48 - 00000000 ____D C:\Users\Papa
2016-02-28 10:35 - 2015-10-14 09:05 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-02-28 10:33 - 2015-10-14 09:05 - 00000000 ____D C:\ProgramData\NVIDIA
2016-02-27 22:09 - 2015-10-15 16:27 - 00000000 ____D C:\Users\German\AppData\Roaming\TS3Client
2016-02-27 20:48 - 2015-10-28 00:46 - 00000000 ____D C:\Users\German\AppData\Local\Arma 3
2016-02-27 20:12 - 2015-10-15 17:51 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-02-27 18:51 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2016-02-27 18:50 - 2015-10-15 14:51 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-02-27 18:50 - 2015-10-15 14:51 - 00000000 ___SD C:\Windows\system32\GWX
2016-02-27 15:46 - 2015-10-15 17:51 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-02-27 15:44 - 2015-10-16 12:57 - 01355264 ___SH C:\Users\German\Desktop\Thumbs.db
2016-02-26 22:25 - 2015-10-16 10:37 - 00000000 ____D C:\Users\German\AppData\Roaming\Audacity
2016-02-26 17:55 - 2015-10-17 15:47 - 00000000 ____D C:\Program Files (x86)\Minecraft
2016-02-25 20:10 - 2015-10-26 08:22 - 00000080 _____ C:\Users\German\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2016-02-25 19:35 - 2015-10-16 22:33 - 00003866 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1445031224
2016-02-25 19:35 - 2015-10-16 22:33 - 00000000 ____D C:\Program Files (x86)\Opera
2016-02-24 18:06 - 2015-10-30 16:47 - 00523776 ___SH C:\Users\German\Downloads\Thumbs.db
2016-02-22 13:43 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\NDF
2016-02-19 22:04 - 2015-10-16 23:42 - 00000000 ____D C:\ProgramData\Adobe
2016-02-19 22:04 - 2015-10-16 23:42 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-02-19 22:03 - 2015-10-15 14:52 - 00000000 ____D C:\Users\German\AppData\Roaming\Adobe
2016-02-19 21:59 - 2015-11-19 16:21 - 00000000 ____D C:\Users\German\AppData\Roaming\vlc
2016-02-19 15:08 - 2016-01-19 15:17 - 00000000 ____D C:\Users\German\Downloads\[www.OldSchoolHack.me]_FORAPT2.0_packed
2016-02-19 10:39 - 2015-10-14 09:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-02-18 20:01 - 2015-10-16 21:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-02-18 15:32 - 2015-11-09 21:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-18 13:27 - 2015-10-26 19:48 - 00000000 ____D C:\Users\German\.ssh
2016-02-18 12:00 - 2015-10-28 00:45 - 00000000 ____D C:\Users\German\AppData\Local\Arma 3 Launcher
2016-02-18 11:51 - 2015-10-28 00:46 - 00000000 ____D C:\Users\German\Documents\Arma 3
2016-02-18 11:35 - 2015-12-14 21:10 - 00000000 ____D C:\Users\German\AppData\Local\fabi.me
2016-02-18 11:32 - 2015-10-17 20:57 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-02-18 10:36 - 2015-10-15 15:43 - 00146704 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2016-02-17 07:40 - 2015-11-19 20:39 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-02-17 07:40 - 2015-10-14 09:06 - 01903344 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-02-17 07:40 - 2015-10-14 09:06 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-02-17 07:40 - 2015-10-14 09:06 - 01571624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-02-17 07:40 - 2015-10-14 09:06 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-02-15 10:24 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2016-02-13 16:02 - 2015-10-14 09:04 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-02-13 09:17 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2016-02-11 11:43 - 2013-08-22 15:44 - 00368832 _____ C:\Windows\system32\FNTCACHE.DAT
2016-02-11 11:09 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData
2016-02-11 10:39 - 2015-10-17 01:41 - 00000000 ____D C:\Windows\system32\appraiser
2016-02-11 10:39 - 2015-10-17 01:39 - 00000000 ____D C:\Windows\system32\MRT
2016-02-11 10:39 - 2014-11-21 04:13 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-11 10:36 - 2015-10-17 01:39 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-11 10:01 - 2015-11-11 15:22 - 00561952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-02-11 10:01 - 2015-11-11 15:22 - 00177496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-02-11 10:00 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-10 19:38 - 2016-01-30 23:10 - 00000000 ____D C:\Users\German\.eclipse
2016-02-10 19:18 - 2016-01-30 23:13 - 00000000 ____D C:\Users\German\AppData\Local\Eclipse
2016-02-10 19:18 - 2016-01-30 23:10 - 00000000 ____D C:\Users\German\.p2
2016-02-10 14:47 - 2015-10-26 13:10 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-09 09:39 - 2015-11-12 22:43 - 16995576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-02-09 09:39 - 2015-11-12 22:43 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-02-09 09:39 - 2015-11-12 22:43 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-02-09 09:39 - 2015-10-15 15:34 - 14016576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-02-09 09:39 - 2015-10-15 15:34 - 03259688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-02-09 09:39 - 2015-10-14 09:05 - 18758400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-02-09 09:39 - 2015-10-14 09:05 - 16327896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-02-09 09:39 - 2015-10-14 09:05 - 03684072 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-02-09 09:39 - 2015-10-14 09:05 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcvadgenco64.dll
2016-02-09 09:39 - 2015-10-14 09:05 - 00034905 _____ C:\Windows\system32\nvinfo.pb
2016-02-09 06:41 - 2015-10-14 09:05 - 06368824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-02-09 06:41 - 2015-10-14 09:05 - 02993720 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-02-09 06:41 - 2015-10-14 09:05 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-02-09 06:41 - 2015-10-14 09:05 - 01264696 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-02-09 06:41 - 2015-10-14 09:05 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-02-09 06:41 - 2015-10-14 09:05 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-02-08 11:29 - 2016-01-30 10:23 - 00000000 ____D C:\Users\German\AppData\Roaming\HpUpdate
2016-02-06 02:49 - 2015-10-14 09:05 - 06154909 _____ C:\Windows\system32\nvcoproc.bin
2016-02-05 20:57 - 2015-10-26 07:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2016-02-05 20:57 - 2015-10-26 07:55 - 00000000 ____D C:\Program Files (x86)\TP-LINK
2016-02-05 20:57 - 2015-10-14 07:56 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-05 14:09 - 2016-01-06 17:03 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2016-02-04 17:48 - 2015-12-01 21:33 - 00000000 ____D C:\Users\German\AppData\Roaming\Bitcoin
2016-02-02 15:40 - 2015-10-15 15:30 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-02 15:40 - 2015-10-15 15:30 - 00003870 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-02 14:40 - 2015-10-15 16:06 - 00000000 ____D C:\Program Files (x86)\Origin
2016-02-02 03:37 - 2014-11-21 12:01 - 00828920 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-02 03:37 - 2014-11-21 12:01 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-02 00:10 - 2015-12-03 18:01 - 00100352 ___SH C:\Users\German\Documents\Thumbs.db
2016-02-01 19:25 - 2015-10-15 16:33 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-02-01 19:25 - 2015-10-15 16:33 - 00000000 ____D C:\Users\German\AppData\Local\Skype
2016-02-01 19:25 - 2015-10-15 16:33 - 00000000 ____D C:\ProgramData\Skype
2016-01-31 20:30 - 2015-10-15 16:15 - 00000000 ____D C:\Users\German\AppData\Local\Apple Computer
2016-01-31 19:52 - 2016-01-30 23:04 - 00107216 _____ C:\Users\German\Documents\Deutsch Film.veg
2016-01-31 19:00 - 2015-10-16 23:36 - 00000000 ____D C:\Users\German\AppData\Roaming\Publish Providers
2016-01-31 18:42 - 2016-01-30 23:04 - 00107312 _____ C:\Users\German\Documents\Deutsch Film.veg.bak
2016-01-31 17:44 - 2016-01-30 17:34 - 00000000 ____D C:\Users\German\Desktop\Deutsch
2016-01-31 10:40 - 2015-10-30 10:56 - 00000000 ____D C:\Users\Papa\.oracle_jre_usage

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-01-16 18:08 - 2016-01-16 18:08 - 0001655 _____ () C:\Users\German\AppData\Roaming\SvcTraceViewer.exe.settings
2015-10-17 07:16 - 2015-10-17 23:09 - 0000087 _____ () C:\Users\German\AppData\Local\BrokenBot.org.ini
2015-10-17 17:42 - 2015-12-14 18:11 - 0000600 _____ () C:\Users\German\AppData\Local\PUTTY.RND
2015-10-14 07:57 - 2015-10-14 07:57 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-11-29 16:42 - 2015-11-29 16:42 - 0010255 _____ () C:\ProgramData\regid.2011-06.com.youtubebyclick_3C521B99-9ACE-47EA-AC9F-26075467D03B.swidtag

Einige Dateien in TEMP:
====================
C:\Users\admin\AppData\Local\Temp\avgnt.exe
C:\Users\German\AppData\Local\Temp\185ff11bc1bc45f0b3adf866101289c6.exe
C:\Users\German\AppData\Local\Temp\43a5ef3.exe
C:\Users\German\AppData\Local\Temp\4a6c27b8c86440dfb3a4450952eb6209.exe
C:\Users\German\AppData\Local\Temp\avgnt.exe
C:\Users\German\AppData\Local\Temp\Bass.dll
C:\Users\German\AppData\Local\Temp\Bass.Net.dll
C:\Users\German\AppData\Local\Temp\c2768aa736f041e9a3d374d9ea0efa74.exe
C:\Users\German\AppData\Local\Temp\cpuz165.exe
C:\Users\German\AppData\Local\Temp\d9f94363b99741998ca3f265740fe17f.exe
C:\Users\German\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\German\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\German\AppData\Local\Temp\jansi-64-2477795994535661137.dll
C:\Users\German\AppData\Local\Temp\jansi-64-5142327881927093400.dll
C:\Users\German\AppData\Local\Temp\jansi-64-git-Bukkit-930a59c-1816995455672836149.dll
C:\Users\German\AppData\Local\Temp\jansi-64-git-Bukkit-930a59c-877272298836347272.dll
C:\Users\German\AppData\Local\Temp\NetBalancerSetup.exe
C:\Users\German\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\German\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\German\AppData\Local\Temp\nvStInst.exe
C:\Users\German\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\German\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\German\AppData\Local\Temp\sonarinst.exe
C:\Users\German\AppData\Local\Temp\sqlite3.dll
C:\Users\German\AppData\Local\Temp\Updater.exe
C:\Users\German\AppData\Local\Temp\WDFx7DdLYY.exe
C:\Users\Papa\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-20 15:15

==================== Ende von FRST.txt ============================
         
[/Spoiler]

ADDITION.txt (Angehängt da zu lang)
Ich wäre suuper dankbar wenn mir jemand helfen kann

 

Themen zu AdWare installiert sich immer wieder selber (Win8.1)
antivirus, avira, bluestacks, bonjour, browser, desktop, dnsapi.dll, firefox, flash player, google, homepage, hotspot, installation, internet, internet explorer, launch, mozilla, object, problem, realtek, rundll, scan, software, svchost.exe, system, viren, virus, werbung, whatsapp, windows, windowsapps




Ähnliche Themen: AdWare installiert sich immer wieder selber (Win8.1)


  1. WIN7: PUA/Installmonetizer installiert sich nach dem Löschen immer wieder selbst
    Log-Analyse und Auswertung - 25.07.2015 (12)
  2. Win8.1 Problem mit Software die sich immer wieder installiert
    Log-Analyse und Auswertung - 30.01.2015 (6)
  3. Windows 7: Avira meldet immer wieder ADWARE/Adware.Gen4 bzw. .Gen7, zudem taucht Optimizer Pro immer wieder auf
    Log-Analyse und Auswertung - 14.12.2014 (9)
  4. Websteroids 2.6.53 installiert sich immer wieder automatisch
    Plagegeister aller Art und deren Bekämpfung - 07.09.2014 (3)
  5. Download Protect 2.2.5 installiert sich immer wieder selbst in Firefox
    Log-Analyse und Auswertung - 16.08.2014 (9)
  6. Download Protect installiert sich immer wieder
    Plagegeister aller Art und deren Bekämpfung - 23.04.2014 (19)
  7. Windows 7 Google Chrome Adware (fun2save) installiert sich immer wieder selbst
    Log-Analyse und Auswertung - 08.01.2014 (9)
  8. XP - Feven 1.5 installiert sich von alleine immer wieder
    Plagegeister aller Art und deren Bekämpfung - 07.10.2013 (19)
  9. Claro als automatisches Suchprogramm, installiert sich immer wieder selbst
    Log-Analyse und Auswertung - 12.03.2013 (26)
  10. Virus (ADWARE/AGENT.NMV.1) installiert sich immer neu.
    Plagegeister aller Art und deren Bekämpfung - 31.01.2013 (1)
  11. Virus der sich immer wieder installiert!
    Antiviren-, Firewall- und andere Schutzprogramme - 28.05.2010 (10)
  12. Desktop Security 2010 installiert sich immer wieder neu
    Plagegeister aller Art und deren Bekämpfung - 09.05.2010 (4)
  13. Norton Security Scan installiert sich immer wieder
    Log-Analyse und Auswertung - 28.12.2008 (0)
  14. Plagegeist installiert sich immer wieder neu - was tun?
    Plagegeister aller Art und deren Bekämpfung - 21.06.2008 (1)
  15. Registry Trace installiert sich bei Systemstart immer wieder neu
    Plagegeister aller Art und deren Bekämpfung - 07.05.2006 (8)
  16. Dialer installiert sich immer wieder - hab schon vieles versucht... need help!
    Plagegeister aller Art und deren Bekämpfung - 14.03.2006 (3)
  17. Trojaner installiert sich immer wieder selbst
    Archiv - 27.01.2003 (14)

Zum Thema AdWare installiert sich immer wieder selber (Win8.1) - Hi, Ich habe ein kleines Problem mit meinem (neuen) Rechner. Seit dem ich eine Seite mit dem Namen Springfiles besucht habe und eine Datei heruntergeladen habe kommt andauernd Werbung in - AdWare installiert sich immer wieder selber (Win8.1)...
Archiv
Du betrachtest: AdWare installiert sich immer wieder selber (Win8.1) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.