Frage zur Pop-Up-Meldung

hpinter · 15.05.2016, 19:37

Hallo Matthias,

ich habe zwar alles soweit abgeschaltet, aber hat trotzdem nicht funktioniert

Sorry, dass ich solche Probleme mache. Ihr wollt mir ja nur helfen.

Gruß

Code:

ATTFilter

ComboFix 16-04-29.01 - Admin 15.05.2016  17:13:09.1.8 - x64
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1031.18.8125.6096 [GMT 2:00]
Running from: c:\users\Admin\Desktop\ComboFix.exe
AV: Ad-Aware Antivirus *Disabled/Outdated* {D87B6541-12A1-DAEA-0033-9B8057AAB996}
AV: Avira Antivirus *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
FW: Ad-Aware Firewall *Disabled* {E040E464-58CE-DBB2-2B6C-32B5A979FEED}
SP: Ad-Aware Antivirus *Disabled/Outdated* {631A84A5-349B-D564-3A83-A0F22C2DF32B}
SP: Avira Antivirus *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Admin\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\windows\msdownld.tmp
.
.
(((((((((((((((((((((((((   Files Created from 2016-04-15 to 2016-05-15  )))))))))))))))))))))))))))))))
.
.
2016-05-15 15:18 . 2016-05-15 15:18	--------	d-----w-	c:\users\Default\AppData\Local\temp
2016-05-14 12:29 . 2016-05-14 12:31	--------	d-----w-	C:\FRST
2016-05-14 10:54 . 2016-05-14 10:54	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{E96AB5F3-1C47-4E9A-9B11-CD5CB3344AA6}\offreg.3040.dll
2016-05-14 10:42 . 2016-04-14 05:38	56384	----a-w-	c:\windows\system32\drivers\nvvad64v.sys
2016-05-14 10:42 . 2016-04-14 05:38	113216	----a-w-	c:\windows\system32\nvaudcap64v.dll
2016-05-14 10:42 . 2016-04-14 05:38	102976	----a-w-	c:\windows\SysWow64\nvaudcap32v.dll
2016-05-10 16:44 . 2016-05-10 16:44	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{E96AB5F3-1C47-4E9A-9B11-CD5CB3344AA6}\offreg.7344.dll
2016-05-01 15:27 . 2016-05-01 15:27	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{E96AB5F3-1C47-4E9A-9B11-CD5CB3344AA6}\offreg.5592.dll
2016-04-26 14:28 . 2016-04-26 14:28	75888	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{E96AB5F3-1C47-4E9A-9B11-CD5CB3344AA6}\offreg.10072.dll
2016-04-26 14:15 . 2016-04-26 14:15	--------	d-----w-	c:\program files (x86)\Navigraph
2016-04-25 18:31 . 2016-04-25 18:31	--------	d-----w-	c:\program files (x86)\VATSpy
2016-04-21 15:15 . 2016-03-28 10:07	11686560	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{E96AB5F3-1C47-4E9A-9B11-CD5CB3344AA6}\mpengine.dll
2016-04-21 15:05 . 2015-11-10 18:55	1648128	----a-w-	c:\windows\system32\DWrite.dll
2016-04-21 15:04 . 2016-01-22 06:18	723968	----a-w-	c:\windows\system32\EncDec.dll
2016-04-21 15:03 . 2015-12-08 21:54	665088	----a-w-	c:\windows\SysWow64\WMVXENCD.DLL
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-05-12 21:01 . 2015-03-13 14:08	79696	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2016-05-12 21:01 . 2015-03-13 14:08	141920	----a-w-	c:\windows\system32\drivers\avipbb.sys
2016-04-21 15:21 . 2014-06-25 10:37	135176864	----a-w-	c:\windows\system32\MRT.exe
2016-04-07 20:42 . 2016-04-07 20:42	0	----a-w-	c:\windows\SysWow64\sho52B1.tmp
2016-04-06 08:18 . 2010-11-21 03:27	453280	------w-	c:\windows\system32\MpSigStub.exe
2016-03-30 01:06 . 2014-12-12 05:54	1316000	----a-w-	c:\windows\SysWow64\nvspbridge.dll
2016-03-30 01:06 . 2014-06-25 07:13	1373680	----a-w-	c:\windows\SysWow64\nvspcap.dll
2016-03-30 01:05 . 2015-12-15 17:44	112216	----a-w-	c:\windows\system32\NvRtmpStreamer64.dll
2016-03-30 01:05 . 2014-12-12 05:54	1756424	----a-w-	c:\windows\system32\nvspbridge64.dll
2016-03-30 01:05 . 2014-06-25 07:13	1767248	----a-w-	c:\windows\system32\nvspcap64.dll
2016-03-26 08:20 . 2016-03-26 08:20	374	----a-w-	C:\temp.reg
2016-03-26 08:18 . 2016-03-25 10:37	249856	------w-	c:\windows\Setup1.exe
2016-03-26 08:18 . 2016-03-25 10:37	73216	----a-w-	c:\windows\ST6UNST.EXE
2016-03-22 04:12 . 2016-04-03 09:30	959544	----a-w-	c:\windows\system32\NvFBC64.dll
2016-03-22 04:12 . 2016-04-03 09:30	889400	----a-w-	c:\windows\system32\NvIFR64.dll
2016-03-22 04:12 . 2016-04-03 09:30	8659472	----a-w-	c:\windows\SysWow64\nvptxJitCompiler.dll
2016-03-22 04:12 . 2016-04-03 09:30	753208	----a-w-	c:\windows\SysWow64\NvFBC.dll
2016-03-22 04:12 . 2016-04-03 09:30	695864	----a-w-	c:\windows\SysWow64\NvIFR.dll
2016-03-22 04:12 . 2016-04-03 09:30	678520	----a-w-	c:\windows\system32\nvfatbinaryLoader.dll
2016-03-22 04:12 . 2016-04-03 09:30	571912	----a-w-	c:\windows\SysWow64\nvfatbinaryLoader.dll
2016-03-22 04:12 . 2016-04-03 09:30	501896	----a-w-	c:\windows\system32\nvEncodeAPI64.dll
2016-03-22 04:12 . 2016-04-03 09:30	473592	----a-w-	c:\windows\system32\nvumdshimx.dll
2016-03-22 04:12 . 2016-04-03 09:30	425016	----a-w-	c:\windows\system32\NvIFROpenGL.dll
2016-03-22 04:12 . 2016-04-03 09:30	423080	----a-w-	c:\windows\SysWow64\nvEncodeAPI.dll
2016-03-22 04:12 . 2016-04-03 09:30	391632	----a-w-	c:\windows\SysWow64\nvumdshim.dll
2016-03-22 04:12 . 2016-04-03 09:30	377792	----a-w-	c:\windows\SysWow64\NvIFROpenGL.dll
2016-03-22 04:12 . 2016-04-03 09:30	3235896	----a-w-	c:\windows\system32\nvcuvid.dll
2016-03-22 04:12 . 2016-04-03 09:30	31555008	----a-w-	c:\windows\system32\nvoglv64.dll
2016-03-22 04:12 . 2016-04-03 09:30	2809280	----a-w-	c:\windows\SysWow64\nvcuvid.dll
2016-03-22 04:12 . 2016-04-03 09:30	25321408	----a-w-	c:\windows\SysWow64\nvoglv32.dll
2016-03-22 04:12 . 2016-04-03 09:30	21355248	----a-w-	c:\windows\system32\nvopencl.dll
2016-03-22 04:12 . 2016-04-03 09:30	20897416	----a-w-	c:\windows\system32\nvcuda.dll
2016-03-22 04:12 . 2016-04-03 09:30	1924152	----a-w-	c:\windows\system32\nvdispco6436472.dll
2016-03-22 04:12 . 2016-04-03 09:30	19004040	----a-w-	c:\windows\system32\nvwgf2umx.dll
2016-03-22 04:12 . 2016-04-03 09:30	17748712	----a-w-	c:\windows\SysWow64\nvopencl.dll
2016-03-22 04:12 . 2016-04-03 09:30	175368	----a-w-	c:\windows\system32\nvinitx.dll
2016-03-22 04:12 . 2016-04-03 09:30	17342392	----a-w-	c:\windows\SysWow64\nvcuda.dll
2016-03-22 04:12 . 2016-04-03 09:30	1573432	----a-w-	c:\windows\system32\nvdispgenco6436472.dll
2016-03-22 04:12 . 2016-04-03 09:30	153392	----a-w-	c:\windows\SysWow64\nvinit.dll
2016-03-22 04:12 . 2016-04-03 09:30	151368	----a-w-	c:\windows\system32\nvoglshim64.dll
2016-03-22 04:12 . 2016-04-03 09:30	129208	----a-w-	c:\windows\SysWow64\nvoglshim32.dll
2016-03-22 04:12 . 2016-04-03 09:30	12567608	----a-w-	c:\windows\system32\drivers\nvlddmkm.sys
2016-03-22 04:12 . 2016-04-03 09:30	10550736	----a-w-	c:\windows\system32\nvptxJitCompiler.dll
2016-03-22 04:12 . 2016-04-03 09:30	42923576	----a-w-	c:\windows\system32\nvcompiler.dll
2016-03-22 04:12 . 2016-04-03 09:30	37567424	----a-w-	c:\windows\SysWow64\nvcompiler.dll
2016-03-22 04:12 . 2015-12-25 10:27	17248408	----a-w-	c:\windows\system32\nvd3dumx.dll
2016-03-22 04:12 . 2015-08-03 18:39	3286992	----a-w-	c:\windows\SysWow64\nvapi.dll
2016-03-22 04:12 . 2015-06-24 21:14	16446032	----a-w-	c:\windows\SysWow64\nvwgf2um.dll
2016-03-22 04:12 . 2015-02-10 13:37	3714472	----a-w-	c:\windows\system32\nvapi64.dll
2016-03-22 04:12 . 2015-02-10 13:37	14128840	----a-w-	c:\windows\SysWow64\nvd3dum.dll
2016-03-22 02:25 . 2014-06-25 07:12	6369728	----a-w-	c:\windows\system32\nvcpl.dll
2016-03-22 02:25 . 2014-06-25 07:12	2993088	----a-w-	c:\windows\system32\nvsvc64.dll
2016-03-22 02:25 . 2014-06-25 07:12	2561472	----a-w-	c:\windows\system32\nvsvcr.dll
2016-03-22 02:25 . 2014-06-25 07:12	1264064	----a-w-	c:\windows\system32\nvvsvc.exe
2016-03-22 02:25 . 2015-12-25 10:29	81856	----a-w-	c:\windows\system32\nv3dappshextr.dll
2016-03-22 02:25 . 2015-12-25 10:29	532536	----a-w-	c:\windows\system32\nv3dappshext.dll
2016-03-22 02:25 . 2014-06-25 07:12	69568	----a-w-	c:\windows\system32\nvshext.dll
2016-03-22 02:25 . 2014-06-25 07:12	393784	----a-w-	c:\windows\system32\nvmctray.dll
2016-03-22 02:10 . 2016-04-03 09:32	112184	----a-w-	c:\windows\SysWow64\nvStreaming.exe
2016-03-18 18:10 . 2014-06-25 07:12	6253721	----a-w-	c:\windows\system32\nvcoproc.bin
2016-03-18 10:12 . 2015-10-09 17:44	642328	----a-w-	c:\programdata\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\integrator.exe
2016-03-18 10:10 . 2015-03-13 14:08	154816	----a-w-	c:\windows\system32\drivers\avgntflt.sys
2016-03-16 21:30 . 2016-04-03 09:32	128792	----a-w-	c:\windows\SysWow64\vulkan-1.dll
2016-03-16 21:30 . 2016-03-16 21:30	128792	----a-w-	c:\windows\SysWow64\vulkan-1-1-0-5-1.dll
2016-03-16 21:29 . 2016-04-03 09:32	41752	----a-w-	c:\windows\SysWow64\vulkaninfo.exe
2016-03-16 21:29 . 2016-03-16 21:29	41752	----a-w-	c:\windows\SysWow64\vulkaninfo-1-1-0-5-1.exe
2016-03-16 21:29 . 2016-04-03 09:32	127768	----a-w-	c:\windows\system32\vulkan-1.dll
2016-03-16 21:29 . 2016-03-16 21:29	127768	----a-w-	c:\windows\system32\vulkan-1-1-0-5-1.dll
2016-03-16 21:28 . 2016-04-03 09:32	45848	----a-w-	c:\windows\system32\vulkaninfo.exe
2016-03-16 21:28 . 2016-03-16 21:28	45848	----a-w-	c:\windows\system32\vulkaninfo-1-1-0-5-1.exe
2016-03-16 18:23 . 2016-04-21 15:06	44032	----a-w-	c:\windows\apppatch\acwow64.dll
.
.
(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{06E08260-0695-4EC1-A74B-1310D8899D93}]
2015-04-24 10:22	38104	----a-w-	c:\program files (x86)\PDF Architect 3\creator-ie-helper.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{2DFF3579-5AA7-45B9-9328-1D38EA230861}"= "c:\program files (x86)\PDF Architect 3\creator-ie-plugin.dll" [2015-04-24 496344]
.
[HKEY_CLASSES_ROOT\clsid\{2dff3579-5aa7-45b9-9328-1d38ea230861}]
[HKEY_CLASSES_ROOT\PDFIEPlugin.PDFIEConverter.1]
[HKEY_CLASSES_ROOT\TypeLib\{882BBDC8-4C5D-46A7-8333-5F4E819666F4}]
[HKEY_CLASSES_ROOT\PDFIEPlugin.PDFIEConverter]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-04-19 06:09	1741104	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-04-19 06:09	1741104	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-04-19 06:09	1741104	----a-w-	c:\program files\Microsoft Office 15\root\office15\GROOVEEX.DLL
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Web Companion"="c:\program files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe" [2016-04-14 1477392]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2013-04-26 292848]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2016-05-12 814608]
"Avira SystrayStartTrigger"="c:\program files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe" [2016-04-25 66328]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\SeaPort.exe [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\Intel\iCLS Client\SocketHeciServer.exe;c:\program files\Intel\iCLS Client\SocketHeciServer.exe [x]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\drivers\nusb3hub.sys;c:\windows\SYSNATIVE\drivers\nusb3hub.sys [x]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\drivers\nusb3xhc.sys;c:\windows\SYSNATIVE\drivers\nusb3xhc.sys [x]
R3 PDF Architect 3 CrashHandler;PDF Architect 3 CrashHandler;c:\program files (x86)\PDF Architect 3\crash-handler-ws.exe;c:\program files (x86)\PDF Architect 3\crash-handler-ws.exe [x]
R3 PDF Architect 3;PDF Architect 3;c:\program files (x86)\PDF Architect 3\ws.exe;c:\program files (x86)\PDF Architect 3\ws.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RTL8192cu;300Mbps Wireless USB Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192cu.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 asComSvc;ASUS Com Service;c:\program files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe;c:\program files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [x]
S2 Avira.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe;c:\program files (x86)\Avira\Launcher\Avira.ServiceHost.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.1.362.0\BBSvc.exe [x]
S2 ClickToRunSvc;Microsoft Office-Klick-und-Los-Dienst;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 iocbios2;iocbios2;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys;c:\program files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [x]
S2 LavasoftAdAwareService11;Ad-Aware Service 11;c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareService.exe;c:\program files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.6.306.7947\AdAwareService.exe [x]
S2 LavasoftTcpService;LavasoftTcpService;c:\program files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe;c:\program files (x86)\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [x]
S2 PDF Architect 3 Creator;PDF Architect 3 Creator;c:\program files (x86)\PDF Architect 3\creator-ws.exe;c:\program files (x86)\PDF Architect 3\creator-ws.exe [x]
S2 Razer Game Scanner Service;Razer Game Scanner;c:\program files (x86)\Razer\Razer Services\GSS\GameScannerService.exe;c:\program files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [x]
S2 RzKLService;RzKLService;c:\razer cortex\RzKLService.exe;c:\razer cortex\RzKLService.exe [x]
S2 rzpmgrk;rzpmgrk;c:\windows\system32\drivers\rzpmgrk.sys;c:\windows\SYSNATIVE\drivers\rzpmgrk.sys [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 WCAssistantService;WC Assistant;c:\program files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe;c:\program files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [x]
S2 XTU3SERVICE;Intel(R) Extreme Tuning Utility Service;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe;c:\program files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [x]
S3 asmthub3;ASMedia USB3 Hub Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmthub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtxhci.sys [x]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe;c:\program files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [x]
S3 ICCWDT;Intel(R) Watchdog Timer Driver (Intel(R) WDT);c:\windows\system32\DRIVERS\ICCWDT.sys;c:\windows\SYSNATIVE\DRIVERS\ICCWDT.sys [x]
S3 iusb3hub;Intel(R) USB 3.0-Hubtreiber;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible-Hostcontrollertreiber;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 NvStreamNetworkSvc;NVIDIA Streamer Network Service;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 SaiH0763;SaiH0763;c:\windows\system32\DRIVERS\SaiH0763.sys;c:\windows\SYSNATIVE\DRIVERS\SaiH0763.sys [x]
S3 SaiH0BAC;SaiH0BAC;c:\windows\system32\DRIVERS\SaiH0BAC.sys;c:\windows\SYSNATIVE\DRIVERS\SaiH0BAC.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfswin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfswin7.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaywin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaywin7.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirwin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirwin7.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvolwin7.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvolwin7.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - NVSTREAMKMS
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2016-05-13 06:14	1186968	----a-w-	c:\program files (x86)\Google\Chrome\Application\50.0.2661.102\Installer\chrmstp.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{A6EADE66-0000-0000-484E-7E8A45000000}]
2016-05-03 14:41	287416	----a-w-	c:\program files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll
.
Contents of the 'Scheduled Tasks' folder
.
2016-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-06-03 21:46]
.
2016-05-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-06-03 21:46]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2016-04-19 06:09	2348848	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2016-04-19 06:09	2348848	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2016-04-19 06:09	2348848	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2013-10-22 7203032]
"IAStorIcon"="c:\program files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2013-08-07 36352]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2016-03-30 1767248]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2016-05-02 2398776]
"ProfilerU"="c:\program files\Saitek\SD6\Software\ProfilerU.exe" [2007-07-12 347648]
"SaiMfd"="c:\program files\Saitek\SD6\Software\SaiMfd.exe" [2007-07-12 194560]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2016-03-19 176952]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.bing.com/?pc=COSP&ptag=D080815-A510D0E105D5B4CC49CF&form=CONMHP&conlogo=CT3330941
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
Trusted Zone: localhost
Trusted Zone: webcompanion.com
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lktxujni.default-1458295976544\
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
AddRemove-{3FD0C489-0F02-481a-A3E1-9754CD396761} - c:\program files (x86)\Intel\Intel® Watchdog Timer Driver (Intel® WDT)\Uninstall\setup.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
.
**************************************************************************
.
Completion time: 2016-05-15  17:26:18 - machine was rebooted
ComboFix-quarantined-files.txt  2016-05-15 15:26
.
Pre-Run: 33 Verzeichnis(se), 746.817.855.488 Bytes frei
Post-Run: 39 Verzeichnis(se), 749.039.325.184 Bytes frei
.
- - End Of File - - 55AC67EEFA9985B10528AD52903BEF9D
A36C5E4F47E84449FF07ED3517B43A31

Screenshot war leider nicht mehr möglich. Da dieser nicht leserlich war.

M-K-D-B · 16.05.2016, 11:30

Servus,

Mehrere Anti-Virus-Programme

Code:

ATTFilter

Ad-Aware
Avira

Mir ist aufgefallen, dass Du mehr als ein Anti-Virus-Programm mit Hintergrundwächter laufen hast. Das ist gefährlich, da sich die Programme in die Quere kommen können und dadurch Viren erst recht auf dem Rechner landen können. Außerdem bremst es auch das System aus. Entscheide Dich für eine Variante und deinstalliere die andere über Systemsteuerung => Programme deinstallieren.
Berichte, für welches Anti-Virus-Programm Du Dich entschieden hast.

hpinter · 16.05.2016, 14:37

Okay, muss ich mal schauen. Danke für die info.

M-K-D-B · 17.05.2016, 09:13

Zitat:

Zitat von hpinter

Okay, muss ich mal schauen. Danke für die info.

"Schauen" bringt keinem was... eines runter, dann weiter mit FRST:

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

hpinter · 17.05.2016, 16:25

Hi,

ich habe mich dazu entschlossen, das System einfach neu aufzusetzen, ist eh schon recht langsam und dann mit neuem Betriebssystem. Danke für Eure Hilfe.

Ich hoffe mich wieder an Euch wenden zu können, falls mal wieder bedarf besteht.

Viele Grüße

M-K-D-B · 17.05.2016, 20:32

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

17.05.2016, 20:32	#21
M-K-D-B /// TB-Ausbilder	Frage zur Pop-Up-Meldung Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

Frage zur Pop-Up-Meldung

Log-Analyse und Auswertung: Frage zur Pop-Up-Meldung