PriceSparrow ohn PriceSparrow?

padazz · 12.07.2016, 16:19

Windows 8

Wenn ich meinen PC starte hab ich diesen Proxy:

http=127.0.0.1:49307;https=127.0.0.1:49307

<-loopback>

Ich habe schon von diesem "PriceSparrow" gehört haber das hatte ich nie. Habe adwCleaner, Malwarebytes und CCleaner scan gemacht... nix gefunden
Ich kann den Proxy zwar aus machen aber er kommt jeden Tag wieder

Ich habe ein Bild hinzugefügt aber das wird irgendwie nicht angezeigt... ( hxxp://imgur.com/xg03E6w )

burningice · 12.07.2016, 16:53

Mein Name ist Rafael und ich werde dir bei der Bereinigung helfen.

Damit ich dir optimal helfen kann, halte dich bitte an folgende Regeln:

Bitte lies meine Posts komplett durch bevor du sie abarbeitest
Wenn ein Problem auftauchen sollte oder dir etwas unklar ist, unterbreche deine Arbeit und beschreibe es so genau wie möglich.
Bitte kein Crossposting
Installiere oder Deinstalliere keine Software ohne Aufforderung
Bitte verwende nur die Tools, welche hier im Thread erwähnt werden und führe sie nur gemäß Anweisung aus
Bitte antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen
Wichtig: Nur weil dein Problem mit einem Schritt plötzlich behoben ist, bedeutet das nicht, dass dein PC auch sauber ist. Mache solange weiter, bis ich dir sage, dass dein PC "clean" ist
Wenn ich dir nicht binnen 36h antworte, sende mir bitte eine persönliche Nachricht!

Los geht's

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

padazz · 12.07.2016, 17:21

FRST.txt

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 10-07-2016 01
durchgeführt von Philipp (Administrator) auf MININT-PG8F7SM (12-07-2016 18:17:57)
Gestartet von C:\Users\Philipp\Downloads
Geladene Profile: Philipp (Verfügbare Profile: Philipp)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(DVDVideoSoft Ltd.) C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\skyui.exe
(Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Curse) C:\Users\Philipp\AppData\Local\Apps\2.0\PHR9GGLT.HVT\13ZRYG7N.CWB\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Adobe Systems Inc.) D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\acrotray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7573720 2014-06-11] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-01] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14601160 2015-07-02] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [814608 2016-05-13] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-06-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Steam] => D:\Games\Steam\steam.exe [2851408 2016-07-09] (Valve Corporation)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [DVSSkypeRecorder] => C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\skyui.exe [1056424 2015-04-15] (DVDVideoSoft Ltd.)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Spotify Web Helper] => C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1553520 2016-06-27] (Spotify Ltd)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Spotify] => C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe [7003760 2016-06-27] (Spotify Ltd)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53123712 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3582240 2016-06-02] (Nota Inc.)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd)
Startup: C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2016-03-31] ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

ProxyServer: [S-1-5-21-1509964601-4050779672-1784354819-1002] => http=127.0.0.1:49307;https=127.0.0.1:49307
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1FC88F7A-9FBC-4128-B2EB-A632147415EE}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.mifcom.de
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-22] (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-22] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05] (Adobe Systems Incorporated)

FireFox:
========
FF ProfilePath: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\5hzyrx76.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF DefaultSearchEngine: Google Default
FF SelectedSearchEngine: Bing
FF Homepage: google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-22] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Philipp\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2011-09-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1509964601-4050779672-1784354819-1002: @hola.org/vlc,version=1.8.649 -> C:\Users\Philipp\AppData\Local\Hola\firefox\app\vlc [2015-07-26] ()
FF Plugin HKU\S-1-5-21-1509964601-4050779672-1784354819-1002: @my.com/Games -> C:\Users\Philipp\AppData\Local\MyComGames\NPMyComDetector.dll [2015-07-09] (My.com, Inc)
FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\5hzyrx76.default\searchplugins\google-default.xml [2015-06-11]
FF Extension: BetterTTV - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\5hzyrx76.default\Extensions\firefox@betterttv.net.xpi [2015-11-28]
FF Extension: Adblock Plus - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\5hzyrx76.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
FF Extension: UITBAutoInstaller - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\{edd7fc99-d65c-4979-85c2-ddeed30c50c7} [2016-06-10] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2016-06-14] [ist nicht signiert]

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\pdf.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Raidcall plugin) - C:\Users\Philipp\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll => Keine Datei
CHR Profile: C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-14]
CHR Extension: (Google Docs) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-14]
CHR Extension: (Google Drive) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-07]
CHR Extension: (YouTube) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-07]
CHR Extension: (Steam inventory helper) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2016-02-20]
CHR Extension: (Google-Suche) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-25]
CHR Extension: (Google Tabellen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-14]
CHR Extension: (Google Docs Offline) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-01]
CHR Extension: (Adblock Plus) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\peffdggbbagjeincinefnjidplocagco [2015-06-04]
CHR Extension: (Google Mail) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-14]
CHR Extension: (Custom JavaScript for websites ) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\poakhlngfciodnhlhhgnaaelnpjljija [2015-12-27]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [970656 2016-05-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [467016 2016-05-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [467016 2016-05-13] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1435704 2016-05-13] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [302680 2016-06-01] (Avira Operations GmbH & Co. KG)
S3 celavimushost; C:\Program Files (x86)\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [123608 2015-06-30] (altPUG LLC)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-01] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1884304 2015-05-01] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-01] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128664 2016-03-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146712 2016-05-13] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [78208 2016-05-13] (Avira Operations GmbH & Co. KG)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [457496 2014-11-03] (Intel Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv.sys [49272 2014-12-29] (Visicom Media Inc.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-07-12] (Malwarebytes)
R3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
S3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [35960 2014-12-29] (Visicom Media Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-01] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40136 2015-03-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-12-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [194976 2015-12-18] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 1IHD10ozPX1IHD10; \??\F:\1IHD10ozPX1IHD10.sys [X]
S3 3Al6ZgZt; \??\F:\3Al6ZgZt.sys [X]
S3 4IvGvSSb; \??\F:\4IvGvSSb.sys [X]
S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X]
S3 g1iyJepl; \??\F:\g1iyJepl.sys [X]
S3 gTAxs5ymQ5gTAxs; \??\F:\gTAxs5ymQ5gTAxs.sys [X]
S3 hFHJ6S0b3thFH; \??\F:\hFHJ6S0b3thFH.sys [X]
S3 HkZFWAHDZ; \??\F:\HkZFWAHDZ.sys [X]
S3 hlxuFUjphlhlxuFU; \??\F:\hlxuFUjphlhlxuFU.sys [X]
S3 hy6osD2GGfhy6os; \??\F:\hy6osD2GGfhy6os.sys [X]
S3 JvPvSCds; \??\F:\JvPvSCds.sys [X]
S3 KdR4by2P; \??\F:\KdR4by2P.sys [X]
S3 KIsYE; \??\F:\KIsYE.sys [X]
S3 LNBO4EqeTzLN; \??\F:\LNBO4EqeTzLN.sys [X]
S3 oYbfoGPz3ioYbfo; \??\F:\oYbfoGPz3ioYbfo.sys [X]
S3 Q16gyb; \??\F:\Q16gyb.sys [X]
S3 RXc7k9; \??\F:\RXc7k9.sys [X]
S3 sdnb8thLH; \??\F:\sdnb8thLH.sys [X]
S3 TDN4Z3r0SgTDN4; \??\F:\TDN4Z3r0SgTDN4.sys [X]
S3 UA1dPNjsU; \??\F:\UA1dPNjsU.sys [X]
S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X]
S3 wSyAetjsyHwSyAet; \??\F:\wSyAetjsyHwSyAet.sys [X]
S3 X20CmmMaVSX20Cmm; \??\F:\X20CmmMaVSX20Cmm.sys [X]
S3 X8XBpMzmmuX8XB; \??\F:\X8XBpMzmmuX8XB.sys [X]
S3 Ya8ZwDzk3lY; \??\F:\Ya8ZwDzk3lY.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-12 18:17 - 2016-07-12 18:17 - 00024347 _____ C:\Users\Philipp\Downloads\FRST.txt
2016-07-12 18:17 - 2016-07-12 18:17 - 00000000 ____D C:\FRST
2016-07-12 18:16 - 2016-07-12 18:16 - 02390528 _____ (Farbar) C:\Users\Philipp\Downloads\FRST64.exe
2016-07-07 16:40 - 2016-07-07 16:40 - 01117394 _____ C:\Users\Philipp\Downloads\RSBot-7030.jar
2016-07-05 16:55 - 2016-07-05 16:55 - 00002806 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2016-07-05 16:55 - 2016-07-05 16:55 - 00000840 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-07-05 16:55 - 2016-07-05 16:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-07-05 16:55 - 2016-07-05 16:55 - 00000000 ____D C:\Program Files\CCleaner
2016-07-05 16:54 - 2016-07-05 16:54 - 05756448 _____ (Piriform Ltd) C:\Users\Philipp\Downloads\ccsetup519_slim.exe
2016-07-05 16:43 - 2016-07-05 16:49 - 00000000 ____D C:\AdwCleaner
2016-07-05 16:43 - 2016-07-05 16:43 - 03712064 _____ C:\Users\Philipp\Downloads\AdwCleaner_5.201.exe
2016-07-04 23:19 - 2016-07-04 23:19 - 01107770 _____ C:\Users\Philipp\Downloads\RSBot-7029.jar
2016-07-01 12:32 - 2016-07-01 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-07-01 12:32 - 2016-07-01 12:32 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-06-28 12:32 - 2016-06-28 12:32 - 00001160 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2016-06-26 11:59 - 2016-06-26 12:00 - 22851472 _____ (Malwarebytes ) C:\Users\Philipp\Downloads\mbam-setup-2.2.1.1043.exe
2016-06-15 12:41 - 2016-06-03 19:11 - 00472576 _____ (Microsoft Corporation) C:\windows\system32\pcasvc.dll
2016-06-15 12:41 - 2016-06-03 15:38 - 01413120 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2016-06-15 12:41 - 2016-06-02 19:51 - 00050352 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2016-06-15 12:41 - 2016-05-29 17:04 - 01204224 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2016-06-15 12:41 - 2016-05-29 17:04 - 00569856 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2016-06-15 12:41 - 2016-05-29 17:04 - 00544256 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2016-06-15 12:41 - 2016-05-29 17:04 - 00276480 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2016-06-15 12:41 - 2016-05-29 17:04 - 00265216 _____ (Microsoft Corporation) C:\windows\system32\centel.dll
2016-06-15 12:41 - 2016-05-29 17:04 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2016-06-15 12:41 - 2016-05-21 19:28 - 25802752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2016-06-15 12:41 - 2016-05-21 18:57 - 20341248 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2016-06-15 12:41 - 2016-05-21 00:09 - 00572416 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2016-06-15 12:41 - 2016-05-21 00:08 - 02895360 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2016-06-15 12:41 - 2016-05-21 00:02 - 06051328 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2016-06-15 12:41 - 2016-05-20 23:57 - 00497664 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2016-06-15 12:41 - 2016-05-20 23:54 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2016-06-15 12:41 - 2016-05-20 23:50 - 02287104 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2016-06-15 12:41 - 2016-05-20 23:29 - 13815808 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2016-06-15 12:41 - 2016-05-20 23:25 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2016-06-15 12:41 - 2016-05-20 23:14 - 04610048 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2016-06-15 12:41 - 2016-05-20 23:11 - 15420928 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2016-06-15 12:41 - 2016-05-20 23:09 - 00693248 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2016-06-15 12:41 - 2016-05-20 23:08 - 02055680 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2016-06-15 12:41 - 2016-05-20 23:08 - 00806400 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2016-06-15 12:41 - 2016-05-20 23:06 - 02131968 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2016-06-15 12:41 - 2016-05-20 22:46 - 02597888 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2016-06-15 12:41 - 2016-05-20 22:42 - 02121216 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2016-06-15 12:41 - 2016-05-20 22:38 - 01310208 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2016-06-15 12:41 - 2016-05-20 22:34 - 01544192 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2016-06-15 12:41 - 2016-05-18 07:31 - 00372568 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2016-06-15 12:41 - 2016-05-18 07:31 - 00315224 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2016-06-15 12:41 - 2016-05-16 23:13 - 00563016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2016-06-15 12:41 - 2016-05-16 23:13 - 00397224 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll
2016-06-15 12:41 - 2016-05-16 23:13 - 00340872 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll
2016-06-15 12:41 - 2016-05-16 23:13 - 00178008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2016-06-15 12:41 - 2016-05-14 01:09 - 04169216 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-06-15 12:41 - 2016-05-14 01:07 - 00675328 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv2.sys
2016-06-15 12:41 - 2016-05-14 01:07 - 00416768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srv.sys
2016-06-15 12:41 - 2016-05-14 01:06 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\srvnet.sys
2016-06-15 12:41 - 2016-05-14 01:04 - 00044032 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2016-06-15 12:41 - 2016-05-14 00:34 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2016-06-15 12:41 - 2016-05-14 00:19 - 00035840 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2016-06-15 12:41 - 2016-05-13 23:58 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2016-06-15 12:41 - 2016-05-12 20:38 - 00135336 _____ (Microsoft Corporation) C:\windows\system32\gpapi.dll
2016-06-15 12:41 - 2016-05-12 19:43 - 00115704 _____ (Microsoft Corporation) C:\windows\SysWOW64\gpapi.dll
2016-06-15 12:41 - 2016-05-12 18:17 - 00331776 _____ (Microsoft Corporation) C:\windows\system32\polstore.dll
2016-06-15 12:41 - 2016-05-12 18:08 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\FwRemoteSvr.dll
2016-06-15 12:41 - 2016-05-12 18:07 - 01360896 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
2016-06-15 12:41 - 2016-05-12 17:59 - 00398848 _____ (Microsoft Corporation) C:\windows\system32\IPSECSVC.DLL
2016-06-15 12:41 - 2016-05-12 17:43 - 00291328 _____ (Microsoft Corporation) C:\windows\SysWOW64\polstore.dll
2016-06-15 12:41 - 2016-05-12 17:37 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\FwRemoteSvr.dll
2016-06-15 12:41 - 2016-05-09 23:35 - 07075328 _____ (Microsoft Corporation) C:\windows\system32\glcndFilter.dll
2016-06-15 12:41 - 2016-05-09 22:56 - 05270016 _____ (Microsoft Corporation) C:\windows\SysWOW64\glcndFilter.dll
2016-06-15 12:41 - 2016-05-09 22:45 - 07793152 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll
2016-06-15 12:41 - 2016-05-09 22:23 - 05265920 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll
2016-06-15 12:41 - 2016-05-06 17:45 - 00748544 _____ (Microsoft Corporation) C:\windows\system32\StructuredQuery.dll
2016-06-15 12:41 - 2016-05-06 17:23 - 00503808 _____ (Microsoft Corporation) C:\windows\SysWOW64\StructuredQuery.dll
2016-06-15 12:41 - 2016-04-14 17:25 - 02778624 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2016-06-15 12:41 - 2016-04-14 17:11 - 02464768 _____ (Microsoft Corporation) C:\windows\SysWOW64\authui.dll
2016-06-15 12:41 - 2016-04-12 17:46 - 14467584 _____ (Microsoft Corporation) C:\windows\system32\twinui.dll
2016-06-15 12:41 - 2016-04-12 17:30 - 12879872 _____ (Microsoft Corporation) C:\windows\SysWOW64\twinui.dll
2016-06-15 12:41 - 2016-01-31 21:17 - 00118624 _____ (Microsoft Corporation) C:\windows\system32\consent.exe
2016-06-15 12:41 - 2016-01-31 20:07 - 00110080 _____ (Microsoft Corporation) C:\windows\system32\appinfo.dll
2016-06-15 12:41 - 2016-01-31 19:42 - 03320832 _____ (Microsoft Corporation) C:\windows\system32\msi.dll
2016-06-15 12:41 - 2016-01-31 19:14 - 03607040 _____ (Microsoft Corporation) C:\windows\SysWOW64\msi.dll
2016-06-15 12:40 - 2016-05-20 23:55 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2016-06-15 12:40 - 2016-05-20 23:44 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2016-06-15 12:40 - 2016-05-20 23:27 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2016-06-15 12:40 - 2016-05-20 23:25 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2016-06-15 12:40 - 2016-05-20 23:21 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2016-06-15 12:40 - 2016-05-20 23:21 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2016-06-15 12:40 - 2016-05-20 23:19 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2016-06-15 12:40 - 2016-05-20 23:16 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2016-06-15 12:40 - 2016-05-20 23:12 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2016-06-15 12:40 - 2016-05-20 23:11 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2016-06-15 12:40 - 2016-05-20 23:09 - 00379392 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2016-06-15 12:40 - 2016-05-20 22:38 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2016-06-15 12:40 - 2016-05-20 22:23 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2016-06-15 12:40 - 2016-05-19 01:15 - 01379040 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2016-06-15 12:40 - 2016-05-18 22:35 - 01097216 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2016-06-15 12:40 - 2016-05-14 22:01 - 00363104 _____ (Microsoft Corporation) C:\windows\system32\ws2_32.dll
2016-06-15 12:40 - 2016-05-14 22:01 - 00320720 _____ (Microsoft Corporation) C:\windows\SysWOW64\ws2_32.dll
2016-06-15 12:40 - 2016-05-14 01:07 - 00281088 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netbt.sys
2016-06-15 12:40 - 2016-05-13 23:58 - 00339456 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2016-06-15 12:40 - 2016-05-13 23:45 - 00802816 _____ (Microsoft Corporation) C:\windows\system32\winhttp.dll
2016-06-15 12:40 - 2016-05-13 23:35 - 00286208 _____ (Microsoft Corporation) C:\windows\SysWOW64\mswsock.dll
2016-06-15 12:40 - 2016-05-13 23:26 - 00631808 _____ (Microsoft Corporation) C:\windows\SysWOW64\winhttp.dll
2016-06-15 00:08 - 2016-06-15 00:08 - 00001018 _____ C:\Users\Philipp\Downloads\rip.properties
2016-06-15 00:07 - 2016-06-15 00:08 - 00000168 _____ C:\Users\Philipp\Downloads\history.json
2016-06-15 00:01 - 2016-06-15 00:01 - 00000000 ____D C:\Users\Philipp\Downloads\rips
2016-06-15 00:00 - 2016-06-15 00:00 - 04045697 _____ C:\Users\Philipp\Downloads\ripme.jar
2016-06-14 23:57 - 2016-07-10 17:51 - 00000000 ____D C:\Users\Philipp\Desktop\Magali de France
2016-06-14 23:49 - 2016-06-14 23:49 - 00003518 _____ C:\windows\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-pmovie@gmx.de
2016-06-14 22:12 - 2016-06-14 22:12 - 00360070 _____ C:\Users\Philipp\Downloads\visitenkarte.pdf
2016-06-14 21:14 - 2016-06-14 21:14 - 00314416 _____ C:\Users\Philipp\Downloads\VS geändert.pdf
2016-06-14 21:07 - 2016-06-14 21:07 - 00002481 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk
2016-06-14 21:07 - 2016-06-14 21:07 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk
2016-06-14 21:07 - 2016-06-14 21:07 - 00001748 _____ C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
2016-06-14 21:07 - 2016-06-14 21:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2
2016-06-14 21:07 - 2016-06-14 21:07 - 00000000 ____D C:\ProgramData\ALM
2016-06-14 21:02 - 2016-06-14 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS6
2016-06-12 23:34 - 2016-06-12 23:34 - 00636242 _____ C:\Users\Philipp\Downloads\AppNee.com.Adobe.CS6.All.Products.Universal.Crack.DLL.amtlib.x64.7z
2016-06-12 20:49 - 2016-06-12 20:49 - 00001119 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Widget Browser.lnk
2016-06-12 20:48 - 2016-06-12 20:48 - 00000000 ____D C:\Program Files (x86)\My Company Name
2016-06-12 20:48 - 2011-11-03 03:01 - 00056208 ____N (Rovi Corporation) C:\windows\system32\Drivers\PxHlpa64.sys
2016-06-12 20:48 - 2011-10-17 03:00 - 00010224 ____N (Sonic Solutions) C:\windows\system32\Drivers\cdralw2k.sys
2016-06-12 20:48 - 2011-10-17 03:00 - 00010224 ____N (Sonic Solutions) C:\windows\system32\Drivers\cdr4_xp.sys
2016-06-12 17:34 - 2016-06-12 17:34 - 01007541 _____ C:\Users\Philipp\Downloads\Anzeige Kreisbote.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-12 18:05 - 2015-02-26 22:03 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Skype
2016-07-12 18:04 - 2016-03-31 13:52 - 00000000 ____D C:\Users\Philipp\AppData\Local\Deployment
2016-07-12 17:59 - 2015-02-10 21:22 - 00000000 ____D C:\Users\Philipp\AppData\Local\Spotify
2016-07-12 17:59 - 2015-02-10 21:19 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Spotify
2016-07-12 17:53 - 2015-08-22 14:21 - 00001148 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-12 17:31 - 2016-01-19 20:33 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2016-07-12 17:27 - 2015-02-10 18:58 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-07-12 17:25 - 2014-06-10 23:36 - 01780340 _____ C:\windows\system32\PerfStringBackup.INI
2016-07-12 17:25 - 2013-08-23 01:24 - 00765378 _____ C:\windows\system32\perfh007.dat
2016-07-12 17:25 - 2013-08-23 01:24 - 00159696 _____ C:\windows\system32\perfc007.dat
2016-07-12 17:25 - 2013-08-22 15:36 - 00000000 ____D C:\windows\Inf
2016-07-12 17:04 - 2013-08-22 17:36 - 00000000 ____D C:\windows\tracing
2016-07-12 16:27 - 2015-02-10 18:58 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2016-07-12 16:27 - 2013-08-22 17:36 - 00000000 ____D C:\windows\SysWOW64\Macromed
2016-07-12 16:27 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\Macromed
2016-07-12 16:07 - 2015-02-10 18:57 - 00000000 ____D C:\Users\Philipp\AppData\Local\Adobe
2016-07-12 16:07 - 2015-02-10 18:25 - 00003962 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{07F8E538-C4E2-4831-88BC-09C9A7852060}
2016-07-12 16:04 - 2015-08-22 14:21 - 00001144 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-12 16:04 - 2015-02-10 19:10 - 00000000 ___DO C:\Users\Philipp\OneDrive
2016-07-12 16:03 - 2015-02-06 12:32 - 00000000 ____D C:\ProgramData\NVIDIA
2016-07-12 16:03 - 2013-08-22 16:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-07-11 23:59 - 2013-08-22 15:25 - 00524288 ___SH C:\windows\system32\config\BBI
2016-07-08 22:15 - 2013-08-22 17:36 - 00000000 ____D C:\windows\LiveKernelReports
2016-07-07 16:49 - 2015-02-10 18:30 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1509964601-4050779672-1784354819-1002
2016-07-07 16:41 - 2015-07-26 20:24 - 00000046 _____ C:\Users\Philipp\jagex_cl_oldschool_LIVE.dat
2016-07-07 16:41 - 2015-07-26 20:19 - 00000024 _____ C:\Users\Philipp\jagexappletviewer.preferences
2016-07-06 19:33 - 2016-04-07 00:12 - 00000000 ____D C:\Users\Philipp\Documents\Schule
2016-07-06 16:28 - 2015-04-14 06:02 - 00003880 _____ C:\windows\System32\Tasks\Opera scheduled Autoupdate 1428984148
2016-07-06 16:28 - 2015-04-14 06:02 - 00001069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-07-06 16:28 - 2015-04-14 06:02 - 00000000 ____D C:\Program Files (x86)\Opera
2016-07-06 16:26 - 2015-12-19 16:56 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\RSBot
2016-07-06 16:25 - 2015-07-26 20:20 - 00000046 _____ C:\Users\Philipp\jagex_cl_runescape_LIVE.dat
2016-07-06 00:02 - 2015-02-10 18:24 - 00000000 ____D C:\Users\Philipp
2016-07-05 16:58 - 2016-02-16 21:47 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\TeamViewer
2016-07-05 16:58 - 2015-08-16 13:37 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\uTorrent
2016-07-05 16:58 - 2015-08-07 15:06 - 00000000 ____D C:\windows\Minidump
2016-07-05 16:58 - 2015-03-18 20:14 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\TS3Client
2016-07-05 16:58 - 2015-02-07 04:26 - 00000000 ____D C:\windows\Panther
2016-07-01 12:32 - 2016-01-19 20:32 - 00001124 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-07-01 00:33 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppReadiness
2016-06-28 12:32 - 2015-03-22 00:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-06-28 12:32 - 2014-06-16 13:53 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-26 19:03 - 2016-03-11 21:08 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\vlc
2016-06-23 21:08 - 2015-03-18 20:14 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2016-06-23 20:30 - 2016-03-02 00:17 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-06-20 22:50 - 2016-05-19 23:59 - 00000000 ____D C:\Users\Philipp\AppData\Local\ElevatedDiagnostics
2016-06-18 12:24 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-18 11:53 - 2015-08-22 14:22 - 00002213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-18 11:53 - 2015-08-22 14:22 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-18 00:29 - 2013-08-22 17:20 - 00000000 ____D C:\windows\CbsTemp
2016-06-17 13:02 - 2013-08-22 17:36 - 00000000 ____D C:\windows\rescache
2016-06-16 12:44 - 2013-08-22 16:44 - 04987280 _____ C:\windows\system32\FNTCACHE.DAT
2016-06-16 12:43 - 2015-04-16 01:57 - 00000000 ____D C:\windows\system32\appraiser
2016-06-16 12:43 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ToastData
2016-06-15 18:02 - 2014-06-11 09:23 - 00000000 ____D C:\windows\system32\MRT
2016-06-15 18:00 - 2014-06-11 09:23 - 142482544 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2016-06-14 21:15 - 2016-03-03 17:49 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Adobe
2016-06-14 21:15 - 2016-03-03 17:48 - 00000000 ____D C:\ProgramData\Adobe
2016-06-14 21:09 - 2015-07-26 18:58 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-06-14 21:04 - 2016-03-01 23:22 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-06-14 19:13 - 2013-08-22 17:38 - 00828408 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2016-06-14 19:13 - 2013-08-22 17:38 - 00176632 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-06-13 12:38 - 2016-05-20 18:35 - 00000000 ___RD C:\Users\Philipp\Creative Cloud Files
2016-06-13 12:38 - 2016-03-01 23:24 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-06-12 23:48 - 2016-03-02 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-06 14:58 - 2016-03-06 14:58 - 0000033 _____ () C:\Users\Philipp\AppData\Roaming\AdobeWLCMCache.dat
2015-08-21 22:01 - 2015-12-04 02:43 - 0007592 _____ () C:\Users\Philipp\AppData\Local\Resmon.ResmonCfg

Einige Dateien in TEMP:
====================
C:\Users\Philipp\AppData\Local\Temp\0buxhirp.dll
C:\Users\Philipp\AppData\Local\Temp\0em3c3f0.dll
C:\Users\Philipp\AppData\Local\Temp\2uxve053.dll
C:\Users\Philipp\AppData\Local\Temp\3obohdop.dll
C:\Users\Philipp\AppData\Local\Temp\3ufbdc2t.dll
C:\Users\Philipp\AppData\Local\Temp\3ziubq35.dll
C:\Users\Philipp\AppData\Local\Temp\40b23lvn.dll
C:\Users\Philipp\AppData\Local\Temp\achtvwkg.dll
C:\Users\Philipp\AppData\Local\Temp\ashse2z0.dll
C:\Users\Philipp\AppData\Local\Temp\askxndc0.dll
C:\Users\Philipp\AppData\Local\Temp\avgnt.exe
C:\Users\Philipp\AppData\Local\Temp\be5mak3v.dll
C:\Users\Philipp\AppData\Local\Temp\bzs1hucg.dll
C:\Users\Philipp\AppData\Local\Temp\ctq3zxej.dll
C:\Users\Philipp\AppData\Local\Temp\dgcxe2du.dll
C:\Users\Philipp\AppData\Local\Temp\dj2e53ft.dll
C:\Users\Philipp\AppData\Local\Temp\dquxtzim.dll
C:\Users\Philipp\AppData\Local\Temp\fozewr1a.dll
C:\Users\Philipp\AppData\Local\Temp\fwhmswsu.dll
C:\Users\Philipp\AppData\Local\Temp\gkju44k0.dll
C:\Users\Philipp\AppData\Local\Temp\gqc0sfew.dll
C:\Users\Philipp\AppData\Local\Temp\hhb02i2g.dll
C:\Users\Philipp\AppData\Local\Temp\hrcl2diu.dll
C:\Users\Philipp\AppData\Local\Temp\hzkaihcf.dll
C:\Users\Philipp\AppData\Local\Temp\ift3lgz0.dll
C:\Users\Philipp\AppData\Local\Temp\j0vxojo0.dll
C:\Users\Philipp\AppData\Local\Temp\j15mrzan.dll
C:\Users\Philipp\AppData\Local\Temp\l4cm1wc2.dll
C:\Users\Philipp\AppData\Local\Temp\ljqrbx3f.dll
C:\Users\Philipp\AppData\Local\Temp\mr30mkm4.dll
C:\Users\Philipp\AppData\Local\Temp\nolipmvw.dll
C:\Users\Philipp\AppData\Local\Temp\p1xlb1tw.dll
C:\Users\Philipp\AppData\Local\Temp\qc0lblfq.dll
C:\Users\Philipp\AppData\Local\Temp\qseioam1.dll
C:\Users\Philipp\AppData\Local\Temp\ra1xowm1.dll
C:\Users\Philipp\AppData\Local\Temp\skygstvm.dll
C:\Users\Philipp\AppData\Local\Temp\smcpt2fe.dll
C:\Users\Philipp\AppData\Local\Temp\uecvvkau.dll
C:\Users\Philipp\AppData\Local\Temp\ujiekwck.dll
C:\Users\Philipp\AppData\Local\Temp\uxks0j4d.dll
C:\Users\Philipp\AppData\Local\Temp\v2qifhkx.dll
C:\Users\Philipp\AppData\Local\Temp\vjrom2xy.dll
C:\Users\Philipp\AppData\Local\Temp\vnrg1dsm.dll
C:\Users\Philipp\AppData\Local\Temp\vqzvahsd.dll
C:\Users\Philipp\AppData\Local\Temp\xqb45ljo.dll
C:\Users\Philipp\AppData\Local\Temp\yfgcj5mb.dll
C:\Users\Philipp\AppData\Local\Temp\yofdo4fr.dll
C:\Users\Philipp\AppData\Local\Temp\yvnc4zv4.dll
C:\Users\Philipp\AppData\Local\Temp\zwkazplg.dll
C:\Users\Philipp\AppData\Local\Temp\zxn13qmk.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\windows\system32\winlogon.exe => Datei ist digital signiert
C:\windows\system32\wininit.exe => Datei ist digital signiert
C:\windows\explorer.exe => Datei ist digital signiert
C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\windows\system32\svchost.exe => Datei ist digital signiert
C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\windows\system32\services.exe => Datei ist digital signiert
C:\windows\system32\User32.dll => Datei ist digital signiert
C:\windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\windows\system32\userinit.exe => Datei ist digital signiert
C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\windows\system32\rpcss.dll => Datei ist digital signiert
C:\windows\system32\dnsapi.dll => Datei ist digital signiert
C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-07-04 16:54

==================== Ende von FRST.txt ============================

Addition.txt:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 10-07-2016 01
durchgeführt von Philipp (2016-07-12 18:18:10)
Gestartet von C:\Users\Philipp\Downloads
Windows 8.1 (Update) (X64) (2015-02-10 16:24:00)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1509964601-4050779672-1784354819-500 - Administrator - Disabled)
Gast (S-1-5-21-1509964601-4050779672-1784354819-501 - Limited - Disabled)
Philipp (S-1-5-21-1509964601-4050779672-1784354819-1002 - Administrator - Enabled) => C:\Users\Philipp

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\uTorrent) (Version: 3.4.6.42094 - BitTorrent Inc.)
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.1 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - Adobe Systems, Inc.)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version:  - Studio Wildcard)
AutoHotkey 1.1.22.03 (HKLM\...\AutoHotkey) (Version: 1.1.22.03 - Lexikos)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.17.273 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{3d9e0476-943f-4962-99dc-b9c937a43840}) (Version: 1.1.65.9690 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.65.9690 - Avira Operations GmbH & Co. KG) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)
Counter-Strike: Global Offensive - SDK (HKLM-x32\...\Steam App 745) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Curse Client (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dungeon Defenders II (HKLM\...\Steam App 236110) (Version:  - Trendy Entertainment)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
GoldWave v6.13 (HKLM\...\GoldWave v6.13) (Version: 6.13 - GoldWave Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.103 - Google Inc.)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Logitech Gaming Software 8.70 (HKLM\...\Logitech Gaming Software) (Version: 8.70.315 - Logitech Inc.)
MetaTrader 4 (HKLM-x32\...\MetaTrader 4) (Version: 6.00 - MetaQuotes Software Corp.)
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.43 - mIRC Co. Ltd.)
Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
Mumble 1.2.8 (HKLM-x32\...\{1BC144A3-20EF-49DD-8EBB-E421E128E30F}) (Version: 1.2.8 - Thorvald Natvig)
My.com Games (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\MyComGames) (Version: 3.133 - My.com B.V.)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.3.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 347.88 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OldSchool RuneScape Launcher 1.2.6 (HKLM-x32\...\{05BFC9A4-24B2-4E96-A450-A3D926A64C20}) (Version: 1.2.6 - Jagex Ltd)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 38.0.2220.41 (HKLM-x32\...\Opera 38.0.2220.41) (Version: 38.0.2220.41 - Opera Software)
Oracle VM VirtualBox 5.0.12 (HKLM\...\{6F93731D-89E1-4A8F-BDA9-D104860DDB02}) (Version: 5.0.12 - Oracle Corporation)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.13004.105 - raidcall.com)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
RuneScape Launcher 1.2.7 (HKLM-x32\...\{FA52A2D0-298E-4D40-8BB7-39928627EA6A}) (Version: 1.2.7 - Jagex Ltd)
Sakura Angels (HKLM-x32\...\Steam App 342380) (Version:  - Winged Cloud)
Sakura Clicker (HKLM-x32\...\Steam App 383080) (Version:  - Winged Cloud)
Sakura Spirit (HKLM-x32\...\Steam App 313740) (Version:  - Winged Cloud)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.3.22 - NVIDIA Corporation) Hidden
skyforge_mycom (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\skyforge_mycom) (Version: 1.28 - My.com B.V.)
Skype™ 7.24 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Spotify) (Version: 1.0.32.96.g3c8a06e6 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 1.0.0.0 - 1&1 Mail & Media GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {22155C24-A9B4-4B6F-8652-D2BBF1F45644} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-02] ()
Task: {24E716C9-1065-48F9-8074-EC9E084B2695} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd)
Task: {3038D534-D8E5-4309-AE11-DF4700CF0E93} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-12] (Adobe Systems Incorporated)
Task: {47FB0C47-5096-4C60-A568-2FF74AC0DFDE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2016-06-15] (Microsoft Corporation)
Task: {5915ABE4-8EB2-489B-901A-B3CB43FE8A04} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-22] (Google Inc.)
Task: {714BE0A7-8772-4D7B-931E-0D3B393D99A2} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-pmovie@gmx.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {B65C3467-8DBD-45FC-9B0F-48113E46CFF9} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-02] ()
Task: {CD89B9C5-1D0B-453B-B9CB-F6F8C3EDF711} - System32\Tasks\Opera scheduled Autoupdate 1428984148 => C:\Program Files (x86)\Opera\launcher.exe [2016-07-01] (Opera Software)
Task: {D688DAF9-073C-4374-B3E3-9F71271CD801} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-22] (Google Inc.)
Task: {FE75E312-D564-4105-9661-889C239443AA} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-02-06 12:32 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-02-06 12:28 - 2013-07-04 03:32 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2015-02-06 12:28 - 2014-06-11 12:06 - 00033592 _____ () C:\windows\SYSTEM32\audioLibVc.dll
2015-02-06 12:28 - 2014-06-11 12:06 - 02117424 _____ () C:\windows\SYSTEM32\SStudio.dll
2016-07-06 16:38 - 2016-07-12 17:21 - 00048944 _____ () C:\Users\Philipp\AppData\Local\Temp\AsusUiPlugin\AsusUiNativePlugin.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-07-02 02:28 - 2015-07-02 02:28 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-07-02 02:28 - 2015-07-02 02:28 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2016-06-10 17:22 - 2016-06-10 17:22 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2016-03-31 13:52 - 2016-03-31 13:52 - 00016384 _____ () C:\Users\Philipp\AppData\Local\Apps\2.0\PHR9GGLT.HVT\13ZRYG7N.CWB\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.WowDb.dll
2016-03-31 13:52 - 2016-03-31 13:52 - 00035840 _____ () C:\Users\Philipp\AppData\Local\Apps\2.0\PHR9GGLT.HVT\13ZRYG7N.CWB\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.Advertising.dll
2016-03-31 13:52 - 2016-03-31 13:52 - 00099840 _____ () C:\Users\Philipp\AppData\Local\Apps\2.0\PHR9GGLT.HVT\13ZRYG7N.CWB\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.CMOD2.dll
2015-02-06 12:28 - 2016-07-12 16:03 - 00036864 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2015-02-06 12:28 - 2013-07-04 03:32 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2015-05-04 17:47 - 2015-05-01 18:52 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00301224 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\stat.dll
2015-05-10 14:48 - 2015-04-15 16:47 - 00085672 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\suhvadapter.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00730280 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\libGLESv2.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00088744 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_thread-vc120-mt-1_56.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00022696 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_system-vc120-mt-1_56.dll
2015-05-10 14:48 - 2015-04-15 16:47 - 00177320 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\easyhook32.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00113320 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\zlib1.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00106664 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_filesystem-vc120-mt-1_56.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00046760 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_date_time-vc120-mt-1_56.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00030888 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_chrono-vc120-mt-1_56.dll
2015-05-10 14:48 - 2014-10-21 20:56 - 00878592 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\platforms\qwindows.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00048296 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\libEGL.dll
2011-09-05 19:05 - 2011-09-05 19:05 - 00019968 _____ () D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu
2014-04-03 17:48 - 2014-04-03 17:48 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\hola.org -> hxxp://hola.org
IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{59EE78CF-2ED2-4392-B86D-A1B103484757}] => (Allow) C:\Users\Administrator\Desktop\X13\TightVNCServer\TightVNCServerPortable.exe
FirewallRules: [{CB7EDF25-F2BB-4409-ABA1-D5FADBA17F17}] => (Allow) C:\Users\Administrator\Desktop\X13\TightVNCServer\App\tightvnc-64bit\tvnserver.exe
FirewallRules: [{F1AFD839-51DA-43F6-8025-C7E45852701D}] => (Allow) C:\Users\Administrator\Desktop\X13\TightVNCServer\App\tightvnc-32bit\tvnserver.exe
FirewallRules: [{D35D3A2B-91F9-4103-9D52-066B8CD7916A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{FD196778-DAC4-4B11-9E9B-02EAF88D2188}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E533FAF9-DDDC-40FB-A7E2-9FFFD62986AF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{86389E10-4AE9-40B0-AA68-67F4AC47F283}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B5CAD491-9B12-41B8-9D92-AB34721940C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{AD6F789D-880C-4C8B-B6ED-192D36D2CD9B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5286E167-DC19-4687-A2D9-B00DF081B2A1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{608B4F47-D7C5-4064-AAD2-0BCDF38BE0F6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{AE12A457-F3CE-47A2-9FBA-DC4473F0F241}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [{55538275-4194-4C57-A704-10C036992D9E}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [TCP Query User{8542DED0-D82D-4FB6-B2FA-AF07B995F068}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{6AFB9A04-DF8E-407D-8448-3CD488D1F233}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [{EC9A76F5-525F-476E-9E8E-2D31929C2BF9}] => (Allow) D:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{7C300035-8DC6-4465-8637-80D093997C2A}] => (Allow) D:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{0886E97E-690C-4014-BD8A-14D3D93ECCAD}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{3AB1575F-23B6-49B1-BAD8-58129ACCF11E}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{1D601004-3929-475B-A2FB-0562DC09B02B}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D4EB33F1-CC8B-4930-B58A-3EF2C23F8665}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{0BE07150-0D64-4A04-9B78-996A50293B85}C:\users\philipp\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\philipp\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{047CA6C9-B576-4138-B558-1556AFD68CAE}C:\users\philipp\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\philipp\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{63B30267-3DED-45CC-B480-9D957FB77D10}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{1D996D2D-0349-4853-B3E0-50CABABE0435}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{F40B1FBF-8103-41DE-BE4D-EE7045502B28}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{76FE2E7F-0CFA-44D8-9C5A-678C5A9DE264}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{42763727-ABCD-4676-9D90-DBCC3E4A86C1}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{75693E1C-6C2F-4FCE-A0D9-18FF336C08E9}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{936FB8E7-267B-4331-B9F7-53DC82612469}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{6A481202-9BC2-4E48-91E0-EA98851D3ECE}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{33D9FAA4-41FD-4926-A1E3-BD6D8EDFD0BA}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{6131B99C-EBA1-4959-8EA2-084E99D0E09F}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{9F1BD25A-9C52-4CB2-B288-986CA736FAA8}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{D23D9851-4D38-4173-BFB7-B8188A9DDE73}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{C08AD989-5A5D-475E-8752-A4EBD34D601D}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{58E67EA8-41ED-4F5E-8735-4D8323304879}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{F10C5285-D127-4F2F-90D9-60AE3EEF50DB}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{8216971D-8E34-4D6E-AD32-FE1A0ADE675E}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{A2EEEADD-0E21-4791-8DE0-167293ADA1FD}] => (Allow) C:\Users\Philipp\Desktop\Neuer Ordner\PwnBoxer.exe
FirewallRules: [{D9E78D73-0510-4C49-AA04-F81DEF011237}] => (Allow) C:\Users\Philipp\Desktop\Neuer Ordner\PwnBoxer.exe
FirewallRules: [{9F95BB54-25CD-45E0-80CA-29DD10193DA1}] => (Allow) C:\Users\Philipp\Desktop\Neuer Ordner\PwnBoxer.exe
FirewallRules: [{3B1A60E7-0F7E-49DD-9625-0815683D3B9B}] => (Allow) C:\Users\Philipp\Desktop\Neuer Ordner\PwnBoxer.exe
FirewallRules: [{964DB25F-C0A8-4359-8CCD-4A025C6FB960}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AE1494AB-89CC-481B-8C2C-29F09B5CF43D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{CF902C2F-8E1E-494A-BBC5-82085B320308}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{345F4335-45DB-4CE9-B54E-C534F86D69DB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{44064886-4634-4C69-9FFC-AFC7CBD7E56A}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Angels\Sakura Angels.exe
FirewallRules: [{312BDEEE-D14B-40F0-BF86-3C315735983E}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Angels\Sakura Angels.exe
FirewallRules: [{54B7EE2E-4EE7-4CA9-B64A-BCB797FBFCE2}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Spirit\Sakura Spirit.exe
FirewallRules: [{12900EEA-0855-434B-8105-C9AC4290E937}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Spirit\Sakura Spirit.exe
FirewallRules: [TCP Query User{901E6DAC-5593-4C1F-91CE-59C21ABA4A7C}C:\users\philipp\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\philipp\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{BE325BC3-A3E4-48BB-AA34-7884015B216C}C:\users\philipp\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\philipp\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{9E42C936-D21A-4942-8AE7-D5046BECEBEE}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{B7138BC7-E32D-4233-8FCD-A921B5588C74}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{1D093622-50F6-455E-9A4A-BDB7F0584862}] => (Allow) C:\Program Files\Hola\app\hola_updater.exe
FirewallRules: [{E061E5F9-5DFC-4972-A213-1FA528E2567A}] => (Allow) C:\Program Files\Hola\app\hola_updater.exe
FirewallRules: [{5025E05C-37BF-462E-9B9E-81C84F3FCCC7}] => (Allow) C:\Users\Philipp\AppData\Local\Hola\firefox\app\hola_plugin.exe
FirewallRules: [{D8EE1FEA-FF59-4402-8724-A24B5EC30F61}] => (Allow) C:\Users\Philipp\AppData\Local\Hola\firefox\app\hola_plugin.exe
FirewallRules: [{5E58771C-7B9B-4501-A47A-6A526824D8B3}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Clicker\Sakura Clicker.exe
FirewallRules: [{B488E962-A617-46BA-A931-4068384329E5}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Clicker\Sakura Clicker.exe
FirewallRules: [{43A6E85D-1775-40CD-BF77-1F2B372EB369}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B2F4AF75-718A-4468-99CB-7D723CD2167F}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1F6E4E49-111D-4A02-87CB-8C29A5C6A042}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E6E8F995-ED72-407D-AA2C-53C555DB70F4}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{56D61BFA-A284-406C-AEF7-99CF48FC2DE7}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{76A4B3E8-3B21-4668-AFBA-47F2952FE37A}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{624C203D-D8C0-4C8F-B9A5-B44EDE475799}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{B5460446-65EE-43DE-B372-7E9EA2FD101C}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{DD5E84B9-BE4C-4B98-B1E2-D31D1616B1A2}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{9F9CEFBB-A7FC-469A-BBC0-2A5E0514224E}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{09EBF58A-441F-401E-87EB-4A1C2BE3084F}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{A867F091-84C6-45B2-84FC-625223BC56AB}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{B42F72D3-89FC-4AE0-B8CF-A063FC4EBCAA}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0129647E-B711-45DE-862E-F6BF8788754A}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{69FA3D4B-3337-403E-95D1-C05F5AB85274}C:\users\philipp\desktop\isboxer_server_v2.exe] => (Allow) C:\users\philipp\desktop\isboxer_server_v2.exe
FirewallRules: [UDP Query User{27FD86CC-403F-426C-9BF7-745DBE4CC923}C:\users\philipp\desktop\isboxer_server_v2.exe] => (Allow) C:\users\philipp\desktop\isboxer_server_v2.exe
FirewallRules: [{877A745B-B2F0-4C4D-B733-316478436AF3}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{33DA439A-D9FE-4F0C-B5E5-815F9CA3A7CA}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{F8067172-889B-4923-9F03-F535321712BF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BF05525D-1FBB-4CA6-B638-C52603035E34}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{94024D1B-F804-4AEB-B342-CAE64DA29BAB}] => (Allow) C:\Users\Philipp\Downloads\sweg\EloBuddy-Setup.exe
FirewallRules: [{5BB8F3F6-9CA4-4170-9D3D-E9863DD040BF}] => (Allow) C:\Users\Philipp\Downloads\sweg\EloBuddy-Setup.exe
FirewallRules: [{0D820EBD-F953-4FFD-9DA3-1E47863F2CCF}] => (Allow) C:\Users\Philipp\Downloads\sweg\EloBuddy-Setup.exe
FirewallRules: [{49976E7B-4A1B-4DC1-91CC-E029A3E13160}] => (Allow) C:\Users\Philipp\Downloads\sweg\EloBuddy-Setup.exe
FirewallRules: [TCP Query User{BAE164AD-0A66-4930-8A83-83F1EDD7E224}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [UDP Query User{943C0954-22F8-47F3-B25B-8E4D5842F84C}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [{6C13FC77-7837-4FCE-BFB6-DD7CDA28129A}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{B7110E8D-19B3-48FA-8610-CBC880B5DABF}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{3F84D472-57D9-433F-B5AD-A7B6752DCBE1}] => (Allow) D:\Games\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{4E3BE5E5-FB73-40E7-8868-DAD0855EC7C2}] => (Allow) D:\Games\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{94CB36F4-AD53-4F0C-901E-6BD0D9733424}] => (Allow) C:\Users\Philipp\Desktop\RSBot-7019.exe
FirewallRules: [{82CFD2B0-9A29-4B58-B408-C5A8B2989CDE}] => (Allow) C:\Users\Philipp\Desktop\RSBot-7019.exe
FirewallRules: [{0581695B-1C8E-49FF-BB5E-2B4BF61EDE15}] => (Allow) C:\Users\Philipp\Desktop\RSBot-7019.exe
FirewallRules: [{4157F46E-C6D4-4192-A38B-439E8D35FC56}] => (Allow) C:\Users\Philipp\Desktop\RSBot-7019.exe
FirewallRules: [TCP Query User{69AE046A-6D46-4AAB-AA97-5CEB75EAB9FE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{826AB844-5BF1-459D-A700-9659EE79F2BC}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{C65E4720-A447-493A-8373-89F1FD0E7A9F}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{FDF080DE-5431-470D-ABBA-82F05B969F8D}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{56623CD0-A940-43D9-9FC8-4B8D9328A76D}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{02E17A1A-4613-4F2F-A779-A0B27D83CA14}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{DA044059-81A6-45A2-8A2F-CCD179102BAD}D:\games\warlame 5.4.8\botterino\wrobot auth.exe] => (Allow) D:\games\warlame 5.4.8\botterino\wrobot auth.exe
FirewallRules: [UDP Query User{774880DD-187A-4010-BCE5-6B083C1564AB}D:\games\warlame 5.4.8\botterino\wrobot auth.exe] => (Allow) D:\games\warlame 5.4.8\botterino\wrobot auth.exe
FirewallRules: [{7FE50949-16FC-4301-8BEE-FBAE2B0B421E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

26-06-2016 14:28:32 Geplanter Prüfpunkt
05-07-2016 18:32:03 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (07/12/2016 05:04:38 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\windows\system32\wbem\wmiaprpl.dll8

Error: (07/12/2016 05:04:38 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (07/12/2016 05:04:38 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\windows\system32\msdtcuiu.DLL8

Error: (07/12/2016 05:04:38 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll8

Error: (07/12/2016 05:04:38 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\windows\system32\esentprf.dll8

Error: (07/12/2016 05:04:38 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (07/11/2016 05:48:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\windows\system32\wbem\wmiaprpl.dll8

Error: (07/11/2016 05:48:13 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (07/11/2016 05:48:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\windows\system32\msdtcuiu.DLL8

Error: (07/11/2016 05:48:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll8


Systemfehler:
=============
Error: (07/11/2016 04:48:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053 = Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


Error: (07/11/2016 04:48:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (07/09/2016 11:18:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053 = Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


Error: (07/09/2016 11:18:44 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (07/06/2016 04:21:57 PM) (Source: Ntfs) (EventID: 55) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "D:" wurde eine Beschädigung erkannt.

Die genaue Art der Beschädigung ist unbekannt. Die Dateisystemstrukturen müssen offline überprüft und repariert werden.

Error: (07/06/2016 04:21:57 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT-AUTORITÄT)
Description: D:\Device\HarddiskVolume53

Error: (07/06/2016 04:24:31 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎06.‎07.‎2016 um 16:08:22 unerwartet heruntergefahren.

Error: (07/05/2016 05:38:12 PM) (Source: DCOM) (EventID: 10005) (User: MININT-PG8F7SM)
Description: 1053WSearchNicht verfügbar{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (07/05/2016 05:38:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053 = Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


Error: (07/05/2016 05:38:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 17%
Installierter physikalischer RAM: 16325.74 MB
Verfügbarer physikalischer RAM: 13412.32 MB
Summe virtueller Speicher: 18757.74 MB
Verfügbarer virtueller Speicher: 14868.38 MB

==================== Laufwerke ================================

Drive c: (OSDisk) (Fixed) (Total:118.34 GB) (Free:19.14 GB) NTFS
Drive d: () (Fixed) (Total:931.51 GB) (Free:254.15 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: A897B8DE)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

Vielen Dank für die schnelle Rückmeldung

burningice · 13.07.2016, 14:57

Schritt: 1
Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

padazz · 13.07.2016, 15:22

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.07.13.08
  rootkit: v2016.05.27.01

Windows 8.1 x64 NTFS
Internet Explorer 11.0.9600.18350
Philipp :: MININT-PG8F7SM [administrator]

13/07/2016 16:15:17
mbar-log-2016-07-13 (16-15-17).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 305787
Time elapsed: 6 minute(s), 12 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Nix gefunden

burningice · 15.07.2016, 11:25

Machen wir noch einmal diese Scans mit den aktuellsten Versionen:
Schritt 1
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Starte bitte wieder Malwarebytes Anti-Malware

Klicke im Anschluss auf Dashboard und klicke unter dem Punkt Datenbankversion auf "Jetzt aktualisieren"
Wechsle zum Reiter Scannen und wähle den Bedrohungssuchlauf aus und klicke im Anschluss auf Suchlauf starten
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Suchlaufprotokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

Bitte poste in deiner nächsten Antwort also:

Logfile von AdwCleaner
Logfile von Malwarebytes
Frst.txt
Addition.txt

padazz · 15.07.2016, 15:44

Ich hab das problem gefunden. Es war ein Programm das automatisch einen Proxy eingestellt hat beim starten. Trotzdem Danke für die Hilfe

burningice · 16.07.2016, 12:17

Was du nicht sagst - man muss aber auch verschiedene Sachen checken als nur das offensichtliche... Nur weil du das Programm jetzt scheinbar selber gefunden hast, bist du aber nicht unbedingt clean.

Wenn du möchtest, dass wir das weiter checken:
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

felix1 · 16.07.2016, 19:55

Zitat:

Zitat von burningice

Was du nicht sagst - man muss aber auch verschiedene Sachen checken als nur das offensichtliche... Nur weil du das Programm jetzt scheinbar selber gefunden hast, bist du aber nicht unbedingt clean.

Wenn du möchtest, dass wir das weiter checken:
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

Da sprach Paulchen Panther: Ich komme wieder, keine Frage

Hier will das Ei wieder mal klüger als die Henne sein

padazz · 17.07.2016, 21:00

Frst.txt:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17-07-2016 03
durchgeführt von Philipp (Administrator) auf MININT-PG8F7SM (17-07-2016 21:59:11)
Gestartet von C:\Users\Philipp\Downloads
Geladene Profile: Philipp (Verfügbare Profile: Philipp)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Valve Corporation) D:\Games\Steam\Steam.exe
(DVDVideoSoft Ltd.) C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\skyui.exe
(Spotify Ltd) C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) D:\Games\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Curse) C:\Users\Philipp\AppData\Local\Apps\2.0\PHR9GGLT.HVT\13ZRYG7N.CWB\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Adobe Systems Inc.) D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\acrotray.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Valve Corporation) D:\Games\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7573720 2014-06-11] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-01] (NVIDIA Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [14601160 2015-07-02] (Logitech Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [814608 2016-05-13] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-06-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [937920 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Steam] => D:\Games\Steam\steam.exe [2851408 2016-07-09] (Valve Corporation)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [DVSSkypeRecorder] => C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\skyui.exe [1056424 2015-04-15] (DVDVideoSoft Ltd.)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Spotify Web Helper] => C:\Users\Philipp\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1554032 2016-07-13] (Spotify Ltd)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Spotify] => C:\Users\Philipp\AppData\Roaming\Spotify\Spotify.exe [6913648 2016-07-13] (Spotify Ltd)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53123712 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3582240 2016-06-02] (Nota Inc.)
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8810200 2016-06-10] (Piriform Ltd)
Startup: C:\Users\Philipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2016-03-31] ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

ProxyServer: [S-1-5-21-1509964601-4050779672-1784354819-1002] => http=127.0.0.1:49410;https=127.0.0.1:49410
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1FC88F7A-9FBC-4128-B2EB-A632147415EE}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.mifcom.de
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-22] (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-22] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2011-09-05] (Adobe Systems Incorporated)

FireFox:
========
FF ProfilePath: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\5hzyrx76.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF DefaultSearchEngine: Google Default
FF SelectedSearchEngine: Bing
FF Homepage: google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-04-03] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-22] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Philipp\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-10] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2011-09-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1509964601-4050779672-1784354819-1002: @hola.org/vlc,version=1.8.649 -> C:\Users\Philipp\AppData\Local\Hola\firefox\app\vlc [2015-07-26] ()
FF Plugin HKU\S-1-5-21-1509964601-4050779672-1784354819-1002: @my.com/Games -> C:\Users\Philipp\AppData\Local\MyComGames\NPMyComDetector.dll [2015-07-09] (My.com, Inc)
FF SearchPlugin: C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\5hzyrx76.default\searchplugins\google-default.xml [2015-06-11]
FF Extension: BetterTTV - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\5hzyrx76.default\Extensions\firefox@betterttv.net.xpi [2015-11-28]
FF Extension: Adblock Plus - C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Profiles\5hzyrx76.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
FF Extension: UITBAutoInstaller - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\{edd7fc99-d65c-4979-85c2-ddeed30c50c7} [2016-06-10] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2016-06-14] [ist nicht signiert]

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\51.0.2704.103\pdf.dll => Keine Datei
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Raidcall plugin) - C:\Users\Philipp\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
CHR Plugin: (Shockwave Flash) - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll => Keine Datei
CHR Profile: C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-14]
CHR Extension: (Google Docs) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-14]
CHR Extension: (Google Drive) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-07]
CHR Extension: (YouTube) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-07]
CHR Extension: (Steam inventory helper) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2016-02-20]
CHR Extension: (Google-Suche) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-25]
CHR Extension: (Google Tabellen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-14]
CHR Extension: (Google Docs Offline) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-01]
CHR Extension: (Adblock Plus) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\peffdggbbagjeincinefnjidplocagco [2015-06-04]
CHR Extension: (Google Mail) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-14]
CHR Extension: (Custom JavaScript for websites ) - C:\Users\Philipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\poakhlngfciodnhlhhgnaaelnpjljija [2015-12-27]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [970656 2016-05-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [467016 2016-05-13] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [467016 2016-05-13] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1435704 2016-05-13] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-07-04] ()
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [302680 2016-06-01] (Avira Operations GmbH & Co. KG)
S3 celavimushost; C:\Program Files (x86)\CEVO\CSGO Client Beta\CelavimusClientHelper.exe [123608 2015-06-30] (altPUG LLC)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-01] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-04-03] (Intel Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1884304 2015-05-01] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-01] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-07-04] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128664 2016-03-09] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146712 2016-05-13] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [78208 2016-05-13] (Avira Operations GmbH & Co. KG)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [457496 2014-11-03] (Intel Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
S3 ManyCam; C:\Windows\system32\DRIVERS\mcvidrv.sys [49272 2014-12-29] (Visicom Media Inc.)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-07-15] (Malwarebytes)
S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
S3 mcaudrv_simple; C:\Windows\system32\drivers\mcaudrv_x64.sys [35960 2014-12-29] (Visicom Media Inc.)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-01] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [40136 2015-03-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-12-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [194976 2015-12-18] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 1IHD10ozPX1IHD10; \??\F:\1IHD10ozPX1IHD10.sys [X]
S3 3Al6ZgZt; \??\F:\3Al6ZgZt.sys [X]
S3 4IvGvSSb; \??\F:\4IvGvSSb.sys [X]
S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X]
S3 g1iyJepl; \??\F:\g1iyJepl.sys [X]
S3 gTAxs5ymQ5gTAxs; \??\F:\gTAxs5ymQ5gTAxs.sys [X]
S3 hFHJ6S0b3thFH; \??\F:\hFHJ6S0b3thFH.sys [X]
S3 HkZFWAHDZ; \??\F:\HkZFWAHDZ.sys [X]
S3 hlxuFUjphlhlxuFU; \??\F:\hlxuFUjphlhlxuFU.sys [X]
S3 hy6osD2GGfhy6os; \??\F:\hy6osD2GGfhy6os.sys [X]
S3 JvPvSCds; \??\F:\JvPvSCds.sys [X]
S3 KdR4by2P; \??\F:\KdR4by2P.sys [X]
S3 KIsYE; \??\F:\KIsYE.sys [X]
S3 LNBO4EqeTzLN; \??\F:\LNBO4EqeTzLN.sys [X]
S3 oYbfoGPz3ioYbfo; \??\F:\oYbfoGPz3ioYbfo.sys [X]
S3 Q16gyb; \??\F:\Q16gyb.sys [X]
S3 RXc7k9; \??\F:\RXc7k9.sys [X]
S3 sdnb8thLH; \??\F:\sdnb8thLH.sys [X]
S3 TDN4Z3r0SgTDN4; \??\F:\TDN4Z3r0SgTDN4.sys [X]
S3 UA1dPNjsU; \??\F:\UA1dPNjsU.sys [X]
S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X]
S3 wSyAetjsyHwSyAet; \??\F:\wSyAetjsyHwSyAet.sys [X]
S3 X20CmmMaVSX20Cmm; \??\F:\X20CmmMaVSX20Cmm.sys [X]
S3 X8XBpMzmmuX8XB; \??\F:\X8XBpMzmmuX8XB.sys [X]
S3 Ya8ZwDzk3lY; \??\F:\Ya8ZwDzk3lY.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-17 21:58 - 2016-07-17 21:58 - 00000000 ____D C:\Users\Philipp\Downloads\FRST-OlderVersion
2016-07-14 18:59 - 2016-05-25 15:22 - 00875712 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2016-07-14 18:59 - 2016-05-25 15:22 - 00536768 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcp120_clr0400.dll
2016-07-14 18:59 - 2016-05-25 15:12 - 00869576 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2016-07-14 18:59 - 2016-05-25 15:12 - 00678600 _____ (Microsoft Corporation) C:\windows\system32\msvcp120_clr0400.dll
2016-07-13 16:27 - 2016-06-11 21:45 - 07445856 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2016-07-13 16:26 - 2016-06-25 22:05 - 00050368 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2016-07-13 16:26 - 2016-06-25 20:13 - 00165376 _____ (Microsoft Corporation) C:\windows\system32\inetpp.dll
2016-07-13 16:26 - 2016-06-25 18:24 - 00345600 _____ (Microsoft Corporation) C:\windows\system32\ntprint.dll
2016-07-13 16:26 - 2016-06-25 18:15 - 01094656 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2016-07-13 16:26 - 2016-06-25 18:13 - 00864256 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2016-07-13 16:26 - 2016-06-25 18:05 - 00306176 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntprint.dll
2016-07-13 16:26 - 2016-06-22 15:48 - 00268800 _____ (Microsoft Corporation) C:\windows\system32\centel.dll
2016-07-13 16:26 - 2016-06-21 20:32 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\poqexec.exe
2016-07-13 16:26 - 2016-06-21 16:12 - 00129536 _____ (Microsoft Corporation) C:\windows\SysWOW64\poqexec.exe
2016-07-13 16:26 - 2016-06-21 15:48 - 01490432 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2016-07-13 16:26 - 2016-06-21 15:48 - 01208320 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2016-07-13 16:26 - 2016-06-21 15:48 - 00571904 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2016-07-13 16:26 - 2016-06-21 15:48 - 00544256 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2016-07-13 16:26 - 2016-06-21 15:48 - 00294912 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2016-07-13 16:26 - 2016-06-21 15:48 - 00219136 _____ (Microsoft Corporation) C:\windows\system32\aepic.dll
2016-07-13 16:26 - 2016-06-21 15:48 - 00076800 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2016-07-13 16:26 - 2016-06-11 20:14 - 00572416 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2016-07-13 16:26 - 2016-06-11 20:11 - 02895360 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2016-07-13 16:26 - 2016-06-11 19:56 - 25812992 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2016-07-13 16:26 - 2016-06-11 19:56 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2016-07-13 16:26 - 2016-06-11 19:42 - 06047744 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2016-07-13 16:26 - 2016-06-11 19:23 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2016-07-13 16:26 - 2016-06-11 19:22 - 00497664 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2016-07-13 16:26 - 2016-06-11 19:22 - 00145408 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2016-07-13 16:26 - 2016-06-11 19:21 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2016-07-13 16:26 - 2016-06-11 19:20 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2016-07-13 16:26 - 2016-06-11 19:13 - 02287104 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2016-07-13 16:26 - 2016-06-11 19:12 - 20348928 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2016-07-13 16:26 - 2016-06-11 19:12 - 01032704 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2016-07-13 16:26 - 2016-06-11 19:07 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2016-07-13 16:26 - 2016-06-11 19:03 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2016-07-13 16:26 - 2016-06-11 19:01 - 00378880 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2016-07-13 16:26 - 2016-06-11 19:00 - 00806400 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2016-07-13 16:26 - 2016-06-11 19:00 - 00724992 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2016-07-13 16:26 - 2016-06-11 18:57 - 02131456 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2016-07-13 16:26 - 2016-06-11 18:44 - 00128000 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2016-07-13 16:26 - 2016-06-11 18:43 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2016-07-13 16:26 - 2016-06-11 18:38 - 00880128 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2016-07-13 16:26 - 2016-06-11 18:33 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2016-07-13 16:26 - 2016-06-11 18:31 - 04608000 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2016-07-13 16:26 - 2016-06-11 18:31 - 00692736 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2016-07-13 16:26 - 2016-06-11 18:31 - 00330752 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2016-07-13 16:26 - 2016-06-11 18:30 - 15409664 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2016-07-13 16:26 - 2016-06-11 18:29 - 02055680 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2016-07-13 16:26 - 2016-06-11 18:26 - 02869248 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2016-07-13 16:26 - 2016-06-11 18:15 - 13806080 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2016-07-13 16:26 - 2016-06-11 18:12 - 01550848 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2016-07-13 16:26 - 2016-06-11 18:02 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2016-07-13 16:26 - 2016-06-11 17:59 - 02392576 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2016-07-13 16:26 - 2016-06-11 17:56 - 01315840 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2016-07-13 16:26 - 2016-06-11 17:56 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2016-07-13 16:26 - 2016-01-30 21:50 - 00477184 _____ (Microsoft Corporation) C:\windows\system32\puiobj.dll
2016-07-13 16:26 - 2016-01-30 21:00 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\puiapi.dll
2016-07-13 16:26 - 2016-01-30 20:48 - 00269312 _____ (Microsoft Corporation) C:\windows\system32\DafPrintProvider.dll
2016-07-13 16:26 - 2016-01-30 20:18 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiobj.dll
2016-07-13 16:26 - 2016-01-30 19:48 - 00167424 _____ (Microsoft Corporation) C:\windows\SysWOW64\puiapi.dll
2016-07-13 16:26 - 2016-01-30 19:41 - 00203776 _____ (Microsoft Corporation) C:\windows\SysWOW64\DafPrintProvider.dll
2016-07-13 16:25 - 2016-06-10 23:35 - 04167680 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2016-07-13 16:14 - 2016-07-13 16:21 - 00000000 ____D C:\Users\Philipp\Desktop\mbar
2016-07-13 16:14 - 2016-07-13 16:21 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-07-13 16:13 - 2016-07-13 16:13 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Philipp\Downloads\mbar-1.09.3.1001.exe
2016-07-12 21:17 - 2016-07-12 21:17 - 00000000 ____D C:\Users\Philipp\Desktop\Neuer Ordner
2016-07-12 18:28 - 2016-07-12 18:28 - 00000000 ____D C:\Users\Philipp\AppData\Local\DunDefLauncher
2016-07-12 18:18 - 2016-07-12 18:18 - 00040874 _____ C:\Users\Philipp\Downloads\Addition.txt
2016-07-12 18:17 - 2016-07-17 21:59 - 00024382 _____ C:\Users\Philipp\Downloads\FRST.txt
2016-07-12 18:17 - 2016-07-17 21:59 - 00000000 ____D C:\FRST
2016-07-12 18:16 - 2016-07-17 21:58 - 02391040 _____ (Farbar) C:\Users\Philipp\Downloads\FRST64.exe
2016-07-07 16:40 - 2016-07-07 16:40 - 01117394 _____ C:\Users\Philipp\Downloads\RSBot-7030.jar
2016-07-05 16:55 - 2016-07-05 16:55 - 00002806 _____ C:\windows\System32\Tasks\CCleanerSkipUAC
2016-07-05 16:55 - 2016-07-05 16:55 - 00000840 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-07-05 16:55 - 2016-07-05 16:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-07-05 16:55 - 2016-07-05 16:55 - 00000000 ____D C:\Program Files\CCleaner
2016-07-05 16:54 - 2016-07-05 16:54 - 05756448 _____ (Piriform Ltd) C:\Users\Philipp\Downloads\ccsetup519_slim.exe
2016-07-05 16:43 - 2016-07-05 16:49 - 00000000 ____D C:\AdwCleaner
2016-07-05 16:43 - 2016-07-05 16:43 - 03712064 _____ C:\Users\Philipp\Downloads\AdwCleaner_5.201.exe
2016-07-04 23:19 - 2016-07-04 23:19 - 01107770 _____ C:\Users\Philipp\Downloads\RSBot-7029.jar
2016-07-01 12:32 - 2016-07-01 12:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-07-01 12:32 - 2016-07-01 12:32 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-06-28 12:32 - 2016-06-28 12:32 - 00001160 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2016-06-26 11:59 - 2016-06-26 12:00 - 22851472 _____ (Malwarebytes ) C:\Users\Philipp\Downloads\mbam-setup-2.2.1.1043.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-07-17 21:58 - 2015-02-10 21:22 - 00000000 ____D C:\Users\Philipp\AppData\Local\Spotify
2016-07-17 21:55 - 2015-02-10 21:19 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Spotify
2016-07-17 21:53 - 2015-08-22 14:21 - 00001148 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-17 21:43 - 2015-02-26 22:03 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\Skype
2016-07-17 21:37 - 2016-03-31 13:52 - 00000000 ____D C:\Users\Philipp\AppData\Local\Deployment
2016-07-17 21:27 - 2015-02-10 18:58 - 00000884 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-07-17 19:08 - 2015-02-10 18:25 - 00003962 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{07F8E538-C4E2-4831-88BC-09C9A7852060}
2016-07-17 18:53 - 2013-08-22 17:36 - 00000000 ____D C:\windows\tracing
2016-07-17 13:01 - 2016-06-14 23:57 - 00000000 ____D C:\Users\Philipp\Desktop\Magali de France
2016-07-17 12:48 - 2014-06-10 23:36 - 01780340 _____ C:\windows\system32\PerfStringBackup.INI
2016-07-17 12:48 - 2013-08-23 01:24 - 00765378 _____ C:\windows\system32\perfh007.dat
2016-07-17 12:48 - 2013-08-23 01:24 - 00159696 _____ C:\windows\system32\perfc007.dat
2016-07-17 12:48 - 2013-08-22 15:36 - 00000000 ____D C:\windows\Inf
2016-07-17 12:42 - 2015-08-22 14:21 - 00001144 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-17 12:42 - 2015-02-10 19:10 - 00000000 ___DO C:\Users\Philipp\OneDrive
2016-07-17 12:42 - 2015-02-06 12:32 - 00000000 ____D C:\ProgramData\NVIDIA
2016-07-17 12:42 - 2013-08-22 16:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-07-17 02:35 - 2013-08-22 15:25 - 00524288 ___SH C:\windows\system32\config\BBI
2016-07-17 02:00 - 2015-02-10 18:57 - 00000000 ____D C:\Users\Philipp\AppData\Local\Adobe
2016-07-16 18:44 - 2013-08-22 17:36 - 00000000 ____D C:\windows\rescache
2016-07-16 00:58 - 2015-02-10 18:24 - 00000000 ____D C:\Users\Philipp
2016-07-15 21:46 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppReadiness
2016-07-15 16:44 - 2016-01-19 20:33 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2016-07-14 19:03 - 2013-08-22 16:44 - 04987280 _____ C:\windows\system32\FNTCACHE.DAT
2016-07-14 19:02 - 2015-04-16 01:57 - 00000000 ____D C:\windows\system32\appraiser
2016-07-14 19:02 - 2014-06-11 09:23 - 00000000 ____D C:\windows\system32\MRT
2016-07-14 19:02 - 2013-08-23 01:26 - 00000000 ____D C:\Program Files\Windows Journal
2016-07-14 19:02 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ToastData
2016-07-14 19:02 - 2013-08-22 17:20 - 00000000 ____D C:\windows\CbsTemp
2016-07-14 19:00 - 2014-06-11 09:23 - 144749672 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2016-07-13 20:56 - 2016-03-11 21:08 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\vlc
2016-07-13 16:15 - 2016-01-19 20:32 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-07-13 16:14 - 2016-01-19 20:32 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys
2016-07-12 16:27 - 2015-02-10 18:58 - 00003772 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2016-07-12 16:27 - 2013-08-22 17:36 - 00000000 ____D C:\windows\SysWOW64\Macromed
2016-07-12 16:27 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\Macromed
2016-07-08 22:15 - 2013-08-22 17:36 - 00000000 ____D C:\windows\LiveKernelReports
2016-07-07 16:49 - 2015-02-10 18:30 - 00003600 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1509964601-4050779672-1784354819-1002
2016-07-07 16:41 - 2015-07-26 20:24 - 00000046 _____ C:\Users\Philipp\jagex_cl_oldschool_LIVE.dat
2016-07-07 16:41 - 2015-07-26 20:19 - 00000024 _____ C:\Users\Philipp\jagexappletviewer.preferences
2016-07-06 19:33 - 2016-04-07 00:12 - 00000000 ____D C:\Users\Philipp\Documents\Schule
2016-07-06 16:28 - 2015-04-14 06:02 - 00003880 _____ C:\windows\System32\Tasks\Opera scheduled Autoupdate 1428984148
2016-07-06 16:28 - 2015-04-14 06:02 - 00001069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-07-06 16:28 - 2015-04-14 06:02 - 00000000 ____D C:\Program Files (x86)\Opera
2016-07-06 16:26 - 2015-12-19 16:56 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\RSBot
2016-07-06 16:25 - 2015-07-26 20:20 - 00000046 _____ C:\Users\Philipp\jagex_cl_runescape_LIVE.dat
2016-07-05 16:58 - 2016-02-16 21:47 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\TeamViewer
2016-07-05 16:58 - 2015-08-16 13:37 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\uTorrent
2016-07-05 16:58 - 2015-08-07 15:06 - 00000000 ____D C:\windows\Minidump
2016-07-05 16:58 - 2015-03-18 20:14 - 00000000 ____D C:\Users\Philipp\AppData\Roaming\TS3Client
2016-07-05 16:58 - 2015-02-07 04:26 - 00000000 ____D C:\windows\Panther
2016-07-02 06:29 - 2013-08-22 17:38 - 00828408 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2016-07-02 06:29 - 2013-08-22 17:38 - 00176632 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-07-01 12:32 - 2016-01-19 20:32 - 00001124 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-06-28 12:32 - 2015-03-22 00:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-06-28 12:32 - 2014-06-16 13:53 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-23 21:08 - 2015-03-18 20:14 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2016-06-23 20:30 - 2016-03-02 00:17 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-06-20 22:50 - 2016-05-19 23:59 - 00000000 ____D C:\Users\Philipp\AppData\Local\ElevatedDiagnostics
2016-06-18 12:24 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-06-18 11:53 - 2015-08-22 14:22 - 00002213 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-18 11:53 - 2015-08-22 14:22 - 00002201 _____ C:\Users\Public\Desktop\Google Chrome.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-03-06 14:58 - 2016-03-06 14:58 - 0000033 _____ () C:\Users\Philipp\AppData\Roaming\AdobeWLCMCache.dat
2015-08-21 22:01 - 2015-12-04 02:43 - 0007592 _____ () C:\Users\Philipp\AppData\Local\Resmon.ResmonCfg

Einige Dateien in TEMP:
====================
C:\Users\Philipp\AppData\Local\Temp\0buxhirp.dll
C:\Users\Philipp\AppData\Local\Temp\0em3c3f0.dll
C:\Users\Philipp\AppData\Local\Temp\201cv2nd.dll
C:\Users\Philipp\AppData\Local\Temp\2b3ykyp3.dll
C:\Users\Philipp\AppData\Local\Temp\2uxve053.dll
C:\Users\Philipp\AppData\Local\Temp\30own1et.dll
C:\Users\Philipp\AppData\Local\Temp\3obohdop.dll
C:\Users\Philipp\AppData\Local\Temp\3ufbdc2t.dll
C:\Users\Philipp\AppData\Local\Temp\3ziubq35.dll
C:\Users\Philipp\AppData\Local\Temp\40b23lvn.dll
C:\Users\Philipp\AppData\Local\Temp\achtvwkg.dll
C:\Users\Philipp\AppData\Local\Temp\ashse2z0.dll
C:\Users\Philipp\AppData\Local\Temp\askxndc0.dll
C:\Users\Philipp\AppData\Local\Temp\avgnt.exe
C:\Users\Philipp\AppData\Local\Temp\be5mak3v.dll
C:\Users\Philipp\AppData\Local\Temp\bzs1hucg.dll
C:\Users\Philipp\AppData\Local\Temp\cbzst51u.dll
C:\Users\Philipp\AppData\Local\Temp\ctq3zxej.dll
C:\Users\Philipp\AppData\Local\Temp\czusynwj.dll
C:\Users\Philipp\AppData\Local\Temp\dgcxe2du.dll
C:\Users\Philipp\AppData\Local\Temp\dj2e53ft.dll
C:\Users\Philipp\AppData\Local\Temp\dquxtzim.dll
C:\Users\Philipp\AppData\Local\Temp\f04u35ji.dll
C:\Users\Philipp\AppData\Local\Temp\fozewr1a.dll
C:\Users\Philipp\AppData\Local\Temp\fwhmswsu.dll
C:\Users\Philipp\AppData\Local\Temp\gkju44k0.dll
C:\Users\Philipp\AppData\Local\Temp\gqc0sfew.dll
C:\Users\Philipp\AppData\Local\Temp\gzkyyc1t.dll
C:\Users\Philipp\AppData\Local\Temp\hhb02i2g.dll
C:\Users\Philipp\AppData\Local\Temp\hij3cej2.dll
C:\Users\Philipp\AppData\Local\Temp\hrcl2diu.dll
C:\Users\Philipp\AppData\Local\Temp\hzkaihcf.dll
C:\Users\Philipp\AppData\Local\Temp\ift3lgz0.dll
C:\Users\Philipp\AppData\Local\Temp\j0vxojo0.dll
C:\Users\Philipp\AppData\Local\Temp\j15mrzan.dll
C:\Users\Philipp\AppData\Local\Temp\jz11li2n.dll
C:\Users\Philipp\AppData\Local\Temp\kcwdjroc.dll
C:\Users\Philipp\AppData\Local\Temp\l4cm1wc2.dll
C:\Users\Philipp\AppData\Local\Temp\ljqrbx3f.dll
C:\Users\Philipp\AppData\Local\Temp\lt0n3xis.dll
C:\Users\Philipp\AppData\Local\Temp\mr30mkm4.dll
C:\Users\Philipp\AppData\Local\Temp\mvcgk44a.dll
C:\Users\Philipp\AppData\Local\Temp\nolipmvw.dll
C:\Users\Philipp\AppData\Local\Temp\orrwxl4o.dll
C:\Users\Philipp\AppData\Local\Temp\p1xlb1tw.dll
C:\Users\Philipp\AppData\Local\Temp\qc0lblfq.dll
C:\Users\Philipp\AppData\Local\Temp\qseioam1.dll
C:\Users\Philipp\AppData\Local\Temp\r412mafa.dll
C:\Users\Philipp\AppData\Local\Temp\ra1xowm1.dll
C:\Users\Philipp\AppData\Local\Temp\rpnxd4f5.dll
C:\Users\Philipp\AppData\Local\Temp\s2wqev5y.dll
C:\Users\Philipp\AppData\Local\Temp\s3do13pz.dll
C:\Users\Philipp\AppData\Local\Temp\skygstvm.dll
C:\Users\Philipp\AppData\Local\Temp\smcpt2fe.dll
C:\Users\Philipp\AppData\Local\Temp\tbsq3ny0.dll
C:\Users\Philipp\AppData\Local\Temp\uecvvkau.dll
C:\Users\Philipp\AppData\Local\Temp\ujiekwck.dll
C:\Users\Philipp\AppData\Local\Temp\usfmxeeg.dll
C:\Users\Philipp\AppData\Local\Temp\uxks0j4d.dll
C:\Users\Philipp\AppData\Local\Temp\v2qifhkx.dll
C:\Users\Philipp\AppData\Local\Temp\vjrom2xy.dll
C:\Users\Philipp\AppData\Local\Temp\vla23ev0.dll
C:\Users\Philipp\AppData\Local\Temp\vnrg1dsm.dll
C:\Users\Philipp\AppData\Local\Temp\vqzvahsd.dll
C:\Users\Philipp\AppData\Local\Temp\vwas3wpd.dll
C:\Users\Philipp\AppData\Local\Temp\wcfewbaj.dll
C:\Users\Philipp\AppData\Local\Temp\x32m2inr.dll
C:\Users\Philipp\AppData\Local\Temp\xffnc4b3.dll
C:\Users\Philipp\AppData\Local\Temp\xqb45ljo.dll
C:\Users\Philipp\AppData\Local\Temp\yfgcj5mb.dll
C:\Users\Philipp\AppData\Local\Temp\yofdo4fr.dll
C:\Users\Philipp\AppData\Local\Temp\yvnc4zv4.dll
C:\Users\Philipp\AppData\Local\Temp\z0zki4c5.dll
C:\Users\Philipp\AppData\Local\Temp\zwkazplg.dll
C:\Users\Philipp\AppData\Local\Temp\zxn13qmk.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\windows\system32\winlogon.exe => Datei ist digital signiert
C:\windows\system32\wininit.exe => Datei ist digital signiert
C:\windows\explorer.exe => Datei ist digital signiert
C:\windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\windows\system32\svchost.exe => Datei ist digital signiert
C:\windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\windows\system32\services.exe => Datei ist digital signiert
C:\windows\system32\User32.dll => Datei ist digital signiert
C:\windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\windows\system32\userinit.exe => Datei ist digital signiert
C:\windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\windows\system32\rpcss.dll => Datei ist digital signiert
C:\windows\system32\dnsapi.dll => Datei ist digital signiert
C:\windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-07-15 21:46

==================== Ende von FRST.txt ============================

Addition.txt:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-07-2016 03
durchgeführt von Philipp (2016-07-17 21:59:25)
Gestartet von C:\Users\Philipp\Downloads
Windows 8.1 (Update) (X64) (2015-02-10 16:24:00)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1509964601-4050779672-1784354819-500 - Administrator - Disabled)
Gast (S-1-5-21-1509964601-4050779672-1784354819-501 - Limited - Disabled)
Philipp (S-1-5-21-1509964601-4050779672-1784354819-1002 - Administrator - Enabled) => C:\Users\Philipp

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\uTorrent) (Version: 3.4.6.42094 - BitTorrent Inc.)
Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.1 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.8 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - Adobe Systems, Inc.)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version:  - Studio Wildcard)
AutoHotkey 1.1.22.03 (HKLM\...\AutoHotkey) (Version: 1.1.22.03 - Lexikos)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.17.273 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{3d9e0476-943f-4962-99dc-b9c937a43840}) (Version: 1.1.65.9690 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.65.9690 - Avira Operations GmbH & Co. KG) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
bl (x32 Version: 1.0.0 - Your Company Name) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform)
Counter-Strike: Global Offensive - SDK (HKLM-x32\...\Steam App 745) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
Curse Client (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dungeon Defenders II (HKLM\...\Steam App 236110) (Version:  - Trendy Entertainment)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
GoldWave v6.13 (HKLM\...\GoldWave v6.13) (Version: 6.13 - GoldWave Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.103 - Google Inc.)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.1.1000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Logitech Gaming Software 8.70 (HKLM\...\Logitech Gaming Software) (Version: 8.70.315 - Logitech Inc.)
MetaTrader 4 (HKLM-x32\...\MetaTrader 4) (Version: 6.00 - MetaQuotes Software Corp.)
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
mIRC (HKLM-x32\...\mIRC) (Version: 7.43 - mIRC Co. Ltd.)
Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
Mumble 1.2.8 (HKLM-x32\...\{1BC144A3-20EF-49DD-8EBB-E421E128E30F}) (Version: 1.2.8 - Thorvald Natvig)
My.com Games (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\MyComGames) (Version: 3.133 - My.com B.V.)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.3.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 347.88 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OldSchool RuneScape Launcher 1.2.6 (HKLM-x32\...\{05BFC9A4-24B2-4E96-A450-A3D926A64C20}) (Version: 1.2.6 - Jagex Ltd)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 38.0.2220.41 (HKLM-x32\...\Opera 38.0.2220.41) (Version: 38.0.2220.41 - Opera Software)
Oracle VM VirtualBox 5.0.12 (HKLM\...\{6F93731D-89E1-4A8F-BDA9-D104860DDB02}) (Version: 5.0.12 - Oracle Corporation)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
ph (x32 Version: 1.0.0 - Your Company Name) Hidden
RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.13004.105 - raidcall.com)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7240 - Realtek Semiconductor Corp.)
RuneScape Launcher 1.2.7 (HKLM-x32\...\{FA52A2D0-298E-4D40-8BB7-39928627EA6A}) (Version: 1.2.7 - Jagex Ltd)
Sakura Angels (HKLM-x32\...\Steam App 342380) (Version:  - Winged Cloud)
Sakura Clicker (HKLM-x32\...\Steam App 383080) (Version:  - Winged Cloud)
Sakura Spirit (HKLM-x32\...\Steam App 313740) (Version:  - Winged Cloud)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.3.22 - NVIDIA Corporation) Hidden
skyforge_mycom (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\skyforge_mycom) (Version: 1.28 - My.com B.V.)
Skype™ 7.24 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Spotify) (Version: 1.0.33.106.g60b5d1f0 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
Vegas Pro 13.0 (64-bit) (HKLM\...\{CDA02BF0-BFBC-11E3-AFA0-F04DA23A5C58}) (Version: 13.0.290 - Sony)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.2 - VideoLAN)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 1.0.0.0 - 1&1 Mail & Media GmbH)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {22155C24-A9B4-4B6F-8652-D2BBF1F45644} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-02] ()
Task: {24E716C9-1065-48F9-8074-EC9E084B2695} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd)
Task: {3038D534-D8E5-4309-AE11-DF4700CF0E93} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-12] (Adobe Systems Incorporated)
Task: {47FB0C47-5096-4C60-A568-2FF74AC0DFDE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\windows\system32\MRT.exe [2016-07-14] (Microsoft Corporation)
Task: {5915ABE4-8EB2-489B-901A-B3CB43FE8A04} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-22] (Google Inc.)
Task: {714BE0A7-8772-4D7B-931E-0D3B393D99A2} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-pmovie@gmx.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {B65C3467-8DBD-45FC-9B0F-48113E46CFF9} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-06-02] ()
Task: {CD89B9C5-1D0B-453B-B9CB-F6F8C3EDF711} - System32\Tasks\Opera scheduled Autoupdate 1428984148 => C:\Program Files (x86)\Opera\launcher.exe [2016-07-01] (Opera Software)
Task: {D688DAF9-073C-4374-B3E3-9F71271CD801} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-22] (Google Inc.)
Task: {FE75E312-D564-4105-9661-889C239443AA} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-02-06 12:32 - 2015-03-13 18:16 - 00118472 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-02-06 12:28 - 2013-07-04 03:32 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2015-02-06 12:28 - 2014-06-11 12:06 - 00033592 _____ () C:\windows\SYSTEM32\audioLibVc.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-07-02 02:28 - 2015-07-02 02:28 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-07-02 02:28 - 2015-07-02 02:28 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2016-03-31 13:52 - 2016-03-31 13:52 - 00016384 _____ () C:\Users\Philipp\AppData\Local\Apps\2.0\PHR9GGLT.HVT\13ZRYG7N.CWB\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.WowDb.dll
2016-03-31 13:52 - 2016-03-31 13:52 - 00035840 _____ () C:\Users\Philipp\AppData\Local\Apps\2.0\PHR9GGLT.HVT\13ZRYG7N.CWB\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.Advertising.dll
2016-03-31 13:52 - 2016-03-31 13:52 - 00099840 _____ () C:\Users\Philipp\AppData\Local\Apps\2.0\PHR9GGLT.HVT\13ZRYG7N.CWB\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.CMOD2.dll
2016-06-10 17:22 - 2016-06-10 17:22 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-02-06 12:28 - 2016-07-17 12:42 - 00036864 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2015-02-06 12:28 - 2013-07-04 03:32 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2015-05-04 17:47 - 2015-05-01 18:52 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-02-10 22:57 - 2016-04-29 22:10 - 00785920 _____ () D:\Games\Steam\SDL2.dll
2015-02-10 22:57 - 2015-07-03 18:12 - 04962816 _____ () D:\Games\Steam\v8.dll
2015-02-10 22:57 - 2016-07-09 03:06 - 02317904 _____ () D:\Games\Steam\video.dll
2015-02-10 22:57 - 2015-07-03 18:12 - 01556992 _____ () D:\Games\Steam\icui18n.dll
2015-02-10 22:57 - 2015-07-03 18:12 - 01187840 _____ () D:\Games\Steam\icuuc.dll
2015-02-10 22:57 - 2016-02-09 01:14 - 02549760 _____ () D:\Games\Steam\libavcodec-56.dll
2015-02-10 22:57 - 2016-02-09 01:14 - 00491008 _____ () D:\Games\Steam\libavformat-56.dll
2015-02-10 22:57 - 2016-02-09 01:14 - 00332800 _____ () D:\Games\Steam\libavresample-2.dll
2015-02-10 22:57 - 2016-02-09 01:14 - 00442880 _____ () D:\Games\Steam\libavutil-54.dll
2015-02-10 22:57 - 2016-02-09 01:14 - 00485888 _____ () D:\Games\Steam\libswscale-3.dll
2015-02-10 22:57 - 2016-07-09 03:06 - 00829520 _____ () D:\Games\Steam\bin\chromehtml.DLL
2016-03-09 19:54 - 2016-07-07 00:00 - 00266560 _____ () D:\Games\Steam\openvr_api.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00301224 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\stat.dll
2015-05-10 14:48 - 2015-04-15 16:47 - 00085672 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\suhvadapter.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00730280 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\libGLESv2.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00088744 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_thread-vc120-mt-1_56.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00022696 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_system-vc120-mt-1_56.dll
2015-05-10 14:48 - 2015-04-15 16:47 - 00177320 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\easyhook32.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00113320 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\zlib1.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00106664 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_filesystem-vc120-mt-1_56.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00046760 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_date_time-vc120-mt-1_56.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00030888 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\boost_chrono-vc120-mt-1_56.dll
2015-05-10 14:48 - 2014-10-21 20:56 - 00878592 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\platforms\qwindows.dll
2015-05-10 14:48 - 2015-04-15 16:52 - 00048296 _____ () C:\Program Files (x86)\DVDVideoSoft\Free Video Call Recorder for Skype\libEGL.dll
2015-02-10 22:57 - 2016-06-14 21:14 - 49826080 _____ () D:\Games\Steam\bin\libcef.dll
2011-09-05 19:05 - 2011-09-05 19:05 - 00019968 _____ () D:\ADOBE\MC CS6\Acrobat 10.0\Acrobat\Locale\de_DE\acrotray.deu
2014-04-03 17:48 - 2014-04-03 17:48 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-02-10 22:57 - 2015-09-25 01:56 - 00119208 _____ () D:\Games\Steam\winh264.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\hola.org -> hxxp://hola.org
IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Philipp\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{59EE78CF-2ED2-4392-B86D-A1B103484757}] => (Allow) C:\Users\Administrator\Desktop\X13\TightVNCServer\TightVNCServerPortable.exe
FirewallRules: [{CB7EDF25-F2BB-4409-ABA1-D5FADBA17F17}] => (Allow) C:\Users\Administrator\Desktop\X13\TightVNCServer\App\tightvnc-64bit\tvnserver.exe
FirewallRules: [{F1AFD839-51DA-43F6-8025-C7E45852701D}] => (Allow) C:\Users\Administrator\Desktop\X13\TightVNCServer\App\tightvnc-32bit\tvnserver.exe
FirewallRules: [{D35D3A2B-91F9-4103-9D52-066B8CD7916A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{FD196778-DAC4-4B11-9E9B-02EAF88D2188}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E533FAF9-DDDC-40FB-A7E2-9FFFD62986AF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{86389E10-4AE9-40B0-AA68-67F4AC47F283}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B5CAD491-9B12-41B8-9D92-AB34721940C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{AD6F789D-880C-4C8B-B6ED-192D36D2CD9B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5286E167-DC19-4687-A2D9-B00DF081B2A1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{608B4F47-D7C5-4064-AAD2-0BCDF38BE0F6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{AE12A457-F3CE-47A2-9FBA-DC4473F0F241}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [{55538275-4194-4C57-A704-10C036992D9E}] => (Allow) D:\Games\Steam\Steam.exe
FirewallRules: [TCP Query User{8542DED0-D82D-4FB6-B2FA-AF07B995F068}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{6AFB9A04-DF8E-407D-8448-3CD488D1F233}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [{EC9A76F5-525F-476E-9E8E-2D31929C2BF9}] => (Allow) D:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{7C300035-8DC6-4465-8637-80D093997C2A}] => (Allow) D:\Games\Steam\bin\steamwebhelper.exe
FirewallRules: [{0886E97E-690C-4014-BD8A-14D3D93ECCAD}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{3AB1575F-23B6-49B1-BAD8-58129ACCF11E}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{1D601004-3929-475B-A2FB-0562DC09B02B}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D4EB33F1-CC8B-4930-B58A-3EF2C23F8665}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{0BE07150-0D64-4A04-9B78-996A50293B85}C:\users\philipp\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\philipp\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{047CA6C9-B576-4138-B558-1556AFD68CAE}C:\users\philipp\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\philipp\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{63B30267-3DED-45CC-B480-9D957FB77D10}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{1D996D2D-0349-4853-B3E0-50CABABE0435}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{F40B1FBF-8103-41DE-BE4D-EE7045502B28}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{76FE2E7F-0CFA-44D8-9C5A-678C5A9DE264}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{42763727-ABCD-4676-9D90-DBCC3E4A86C1}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{75693E1C-6C2F-4FCE-A0D9-18FF336C08E9}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{936FB8E7-267B-4331-B9F7-53DC82612469}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{6A481202-9BC2-4E48-91E0-EA98851D3ECE}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{33D9FAA4-41FD-4926-A1E3-BD6D8EDFD0BA}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{6131B99C-EBA1-4959-8EA2-084E99D0E09F}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{9F1BD25A-9C52-4CB2-B288-986CA736FAA8}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{D23D9851-4D38-4173-BFB7-B8188A9DDE73}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{C08AD989-5A5D-475E-8752-A4EBD34D601D}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{58E67EA8-41ED-4F5E-8735-4D8323304879}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{F10C5285-D127-4F2F-90D9-60AE3EEF50DB}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{8216971D-8E34-4D6E-AD32-FE1A0ADE675E}] => (Allow) D:\Games\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{A2EEEADD-0E21-4791-8DE0-167293ADA1FD}] => (Allow) C:\Users\Philipp\Desktop\Neuer Ordner\PwnBoxer.exe
FirewallRules: [{D9E78D73-0510-4C49-AA04-F81DEF011237}] => (Allow) C:\Users\Philipp\Desktop\Neuer Ordner\PwnBoxer.exe
FirewallRules: [{9F95BB54-25CD-45E0-80CA-29DD10193DA1}] => (Allow) C:\Users\Philipp\Desktop\Neuer Ordner\PwnBoxer.exe
FirewallRules: [{3B1A60E7-0F7E-49DD-9625-0815683D3B9B}] => (Allow) C:\Users\Philipp\Desktop\Neuer Ordner\PwnBoxer.exe
FirewallRules: [{964DB25F-C0A8-4359-8CCD-4A025C6FB960}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AE1494AB-89CC-481B-8C2C-29F09B5CF43D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{CF902C2F-8E1E-494A-BBC5-82085B320308}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{345F4335-45DB-4CE9-B54E-C534F86D69DB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{44064886-4634-4C69-9FFC-AFC7CBD7E56A}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Angels\Sakura Angels.exe
FirewallRules: [{312BDEEE-D14B-40F0-BF86-3C315735983E}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Angels\Sakura Angels.exe
FirewallRules: [{54B7EE2E-4EE7-4CA9-B64A-BCB797FBFCE2}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Spirit\Sakura Spirit.exe
FirewallRules: [{12900EEA-0855-434B-8105-C9AC4290E937}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Spirit\Sakura Spirit.exe
FirewallRules: [TCP Query User{901E6DAC-5593-4C1F-91CE-59C21ABA4A7C}C:\users\philipp\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\philipp\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{BE325BC3-A3E4-48BB-AA34-7884015B216C}C:\users\philipp\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\philipp\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{9E42C936-D21A-4942-8AE7-D5046BECEBEE}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{B7138BC7-E32D-4233-8FCD-A921B5588C74}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{1D093622-50F6-455E-9A4A-BDB7F0584862}] => (Allow) C:\Program Files\Hola\app\hola_updater.exe
FirewallRules: [{E061E5F9-5DFC-4972-A213-1FA528E2567A}] => (Allow) C:\Program Files\Hola\app\hola_updater.exe
FirewallRules: [{5025E05C-37BF-462E-9B9E-81C84F3FCCC7}] => (Allow) C:\Users\Philipp\AppData\Local\Hola\firefox\app\hola_plugin.exe
FirewallRules: [{D8EE1FEA-FF59-4402-8724-A24B5EC30F61}] => (Allow) C:\Users\Philipp\AppData\Local\Hola\firefox\app\hola_plugin.exe
FirewallRules: [{5E58771C-7B9B-4501-A47A-6A526824D8B3}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Clicker\Sakura Clicker.exe
FirewallRules: [{B488E962-A617-46BA-A931-4068384329E5}] => (Allow) D:\Games\Steam\steamapps\common\Sakura Clicker\Sakura Clicker.exe
FirewallRules: [{43A6E85D-1775-40CD-BF77-1F2B372EB369}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B2F4AF75-718A-4468-99CB-7D723CD2167F}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1F6E4E49-111D-4A02-87CB-8C29A5C6A042}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E6E8F995-ED72-407D-AA2C-53C555DB70F4}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{56D61BFA-A284-406C-AEF7-99CF48FC2DE7}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{76A4B3E8-3B21-4668-AFBA-47F2952FE37A}] => (Allow) C:\Users\Philipp\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{624C203D-D8C0-4C8F-B9A5-B44EDE475799}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{B5460446-65EE-43DE-B372-7E9EA2FD101C}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\dota.exe
FirewallRules: [{DD5E84B9-BE4C-4B98-B1E2-D31D1616B1A2}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{9F9CEFBB-A7FC-469A-BBC0-2A5E0514224E}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win32\dota2.exe
FirewallRules: [{09EBF58A-441F-401E-87EB-4A1C2BE3084F}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{A867F091-84C6-45B2-84FC-625223BC56AB}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{B42F72D3-89FC-4AE0-B8CF-A063FC4EBCAA}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0129647E-B711-45DE-862E-F6BF8788754A}] => (Allow) D:\Games\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{69FA3D4B-3337-403E-95D1-C05F5AB85274}C:\users\philipp\desktop\isboxer_server_v2.exe] => (Allow) C:\users\philipp\desktop\isboxer_server_v2.exe
FirewallRules: [UDP Query User{27FD86CC-403F-426C-9BF7-745DBE4CC923}C:\users\philipp\desktop\isboxer_server_v2.exe] => (Allow) C:\users\philipp\desktop\isboxer_server_v2.exe
FirewallRules: [{877A745B-B2F0-4C4D-B733-316478436AF3}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{33DA439A-D9FE-4F0C-B5E5-815F9CA3A7CA}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{F8067172-889B-4923-9F03-F535321712BF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{BF05525D-1FBB-4CA6-B638-C52603035E34}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{94024D1B-F804-4AEB-B342-CAE64DA29BAB}] => (Allow) C:\Users\Philipp\Downloads\sweg\EloBuddy-Setup.exe
FirewallRules: [{5BB8F3F6-9CA4-4170-9D3D-E9863DD040BF}] => (Allow) C:\Users\Philipp\Downloads\sweg\EloBuddy-Setup.exe
FirewallRules: [{0D820EBD-F953-4FFD-9DA3-1E47863F2CCF}] => (Allow) C:\Users\Philipp\Downloads\sweg\EloBuddy-Setup.exe
FirewallRules: [{49976E7B-4A1B-4DC1-91CC-E029A3E13160}] => (Allow) C:\Users\Philipp\Downloads\sweg\EloBuddy-Setup.exe
FirewallRules: [TCP Query User{BAE164AD-0A66-4930-8A83-83F1EDD7E224}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [UDP Query User{943C0954-22F8-47F3-B25B-8E4D5842F84C}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe
FirewallRules: [{6C13FC77-7837-4FCE-BFB6-DD7CDA28129A}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{B7110E8D-19B3-48FA-8610-CBC880B5DABF}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{3F84D472-57D9-433F-B5AD-A7B6752DCBE1}] => (Allow) D:\Games\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{4E3BE5E5-FB73-40E7-8868-DAD0855EC7C2}] => (Allow) D:\Games\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{94CB36F4-AD53-4F0C-901E-6BD0D9733424}] => (Allow) C:\Users\Philipp\Desktop\RSBot-7019.exe
FirewallRules: [{82CFD2B0-9A29-4B58-B408-C5A8B2989CDE}] => (Allow) C:\Users\Philipp\Desktop\RSBot-7019.exe
FirewallRules: [{0581695B-1C8E-49FF-BB5E-2B4BF61EDE15}] => (Allow) C:\Users\Philipp\Desktop\RSBot-7019.exe
FirewallRules: [{4157F46E-C6D4-4192-A38B-439E8D35FC56}] => (Allow) C:\Users\Philipp\Desktop\RSBot-7019.exe
FirewallRules: [TCP Query User{69AE046A-6D46-4AAB-AA97-5CEB75EAB9FE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{826AB844-5BF1-459D-A700-9659EE79F2BC}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{C65E4720-A447-493A-8373-89F1FD0E7A9F}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{FDF080DE-5431-470D-ABBA-82F05B969F8D}C:\users\philipp\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\philipp\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{56623CD0-A940-43D9-9FC8-4B8D9328A76D}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{02E17A1A-4613-4F2F-A779-A0B27D83CA14}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{DA044059-81A6-45A2-8A2F-CCD179102BAD}D:\games\warlame 5.4.8\botterino\wrobot auth.exe] => (Allow) D:\games\warlame 5.4.8\botterino\wrobot auth.exe
FirewallRules: [UDP Query User{774880DD-187A-4010-BCE5-6B083C1564AB}D:\games\warlame 5.4.8\botterino\wrobot auth.exe] => (Allow) D:\games\warlame 5.4.8\botterino\wrobot auth.exe
FirewallRules: [{7FE50949-16FC-4301-8BEE-FBAE2B0B421E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{2E1164A3-C7C4-4490-B420-81D02C184C40}] => (Allow) D:\Games\Steam\steamapps\common\Dungeon Defenders 2\DunDefLauncher.exe
FirewallRules: [{8C21F9F1-F50E-4A2C-8AA8-33354A864CFD}] => (Allow) D:\Games\Steam\steamapps\common\Dungeon Defenders 2\DunDefLauncher.exe

==================== Wiederherstellungspunkte =========================

26-06-2016 14:28:32 Geplanter Prüfpunkt
05-07-2016 18:32:03 Geplanter Prüfpunkt
14-07-2016 18:59:24 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (07/17/2016 01:43:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\windows\system32\wbem\wmiaprpl.dll8

Error: (07/17/2016 01:43:13 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (07/17/2016 01:43:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\windows\system32\msdtcuiu.DLL8

Error: (07/17/2016 01:43:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: LsaC:\Windows\System32\Secur32.dll8

Error: (07/17/2016 01:43:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: ESENTC:\windows\system32\esentprf.dll8

Error: (07/17/2016 01:43:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (07/16/2016 06:52:33 PM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "Windows RE tools" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (07/16/2016 02:13:49 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: WmiApRplC:\windows\system32\wbem\wmiaprpl.dll8

Error: (07/16/2016 02:13:49 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: 

Error: (07/16/2016 02:13:49 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: MSDTCC:\windows\system32\msdtcuiu.DLL8


Systemfehler:
=============
Error: (07/16/2016 01:16:27 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung vom Remoteendpunkt empfangen. Die schwerwiegende Warnung hat folgenden für das TLS-Protokoll definierten Code: 20.

Error: (07/15/2016 08:12:06 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎15.‎07.‎2016 um 20:02:27 unerwartet heruntergefahren.

Error: (07/15/2016 04:44:14 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst MBAMScheduler erreicht.

Error: (07/11/2016 04:48:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053 = Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


Error: (07/11/2016 04:48:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (07/09/2016 11:18:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053 = Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


Error: (07/09/2016 11:18:44 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (07/06/2016 04:21:57 PM) (Source: Ntfs) (EventID: 55) (User: NT-AUTORITÄT)
Description: In der Dateisystemstruktur auf Volume "D:" wurde eine Beschädigung erkannt.

Die genaue Art der Beschädigung ist unbekannt. Die Dateisystemstrukturen müssen offline überprüft und repariert werden.

Error: (07/06/2016 04:21:57 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT-AUTORITÄT)
Description: D:\Device\HarddiskVolume53

Error: (07/06/2016 04:24:31 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎06.‎07.‎2016 um 16:08:22 unerwartet heruntergefahren.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 15%
Installierter physikalischer RAM: 16325.74 MB
Verfügbarer physikalischer RAM: 13829.62 MB
Summe virtueller Speicher: 18757.74 MB
Verfügbarer virtueller Speicher: 15693.69 MB

==================== Laufwerke ================================

Drive c: (OSDisk) (Fixed) (Total:118.34 GB) (Free:17.56 GB) NTFS
Drive d: () (Fixed) (Total:931.51 GB) (Free:253.86 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: A897B8DE)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

burningice · 18.07.2016, 12:54

Schritt: 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\Run: [AdobeBridge] => [X]
ProxyServer: [S-1-5-21-1509964601-4050779672-1784354819-1002] => http=127.0.0.1:49410;https=127.0.0.1:49410
removeproxy:
S3 1IHD10ozPX1IHD10; \??\F:\1IHD10ozPX1IHD10.sys [X]
S3 3Al6ZgZt; \??\F:\3Al6ZgZt.sys [X]
S3 4IvGvSSb; \??\F:\4IvGvSSb.sys [X]
S3 AIDA64Driver; \??\C:\Users\Administrator\Desktop\X13\Aida64Business\kerneld.x64 [X]
S3 g1iyJepl; \??\F:\g1iyJepl.sys [X]
S3 gTAxs5ymQ5gTAxs; \??\F:\gTAxs5ymQ5gTAxs.sys [X]
S3 hFHJ6S0b3thFH; \??\F:\hFHJ6S0b3thFH.sys [X]
S3 HkZFWAHDZ; \??\F:\HkZFWAHDZ.sys [X]
S3 hlxuFUjphlhlxuFU; \??\F:\hlxuFUjphlhlxuFU.sys [X]
S3 hy6osD2GGfhy6os; \??\F:\hy6osD2GGfhy6os.sys [X]
S3 JvPvSCds; \??\F:\JvPvSCds.sys [X]
S3 KdR4by2P; \??\F:\KdR4by2P.sys [X]
S3 KIsYE; \??\F:\KIsYE.sys [X]
S3 LNBO4EqeTzLN; \??\F:\LNBO4EqeTzLN.sys [X]
S3 oYbfoGPz3ioYbfo; \??\F:\oYbfoGPz3ioYbfo.sys [X]
S3 Q16gyb; \??\F:\Q16gyb.sys [X]
S3 RXc7k9; \??\F:\RXc7k9.sys [X]
S3 sdnb8thLH; \??\F:\sdnb8thLH.sys [X]
S3 TDN4Z3r0SgTDN4; \??\F:\TDN4Z3r0SgTDN4.sys [X]
S3 UA1dPNjsU; \??\F:\UA1dPNjsU.sys [X]
S3 WinRing0_1_2_0; \??\C:\Users\Administrator\Desktop\X13\OpenHardwareMonitor\OpenHardwareMonitor.sys [X]
S3 wSyAetjsyHwSyAet; \??\F:\wSyAetjsyHwSyAet.sys [X]
S3 X20CmmMaVSX20Cmm; \??\F:\X20CmmMaVSX20Cmm.sys [X]
S3 X8XBpMzmmuX8XB; \??\F:\X8XBpMzmmuX8XB.sys [X]
S3 Ya8ZwDzk3lY; \??\F:\Ya8ZwDzk3lY.sys [X]
emptytemp:
IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\hola.org -> hxxp://hola.org
IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1509964601-4050779672-1784354819-1002\...\webcompanion.com -> hxxp://webcompanion.com

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt: 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hinweis: Dieser Scan kann schon einmal mehrere Stunden dauern...

Schritt: 3
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

PriceSparrow ohn PriceSparrow?

Alles rund um Windows: PriceSparrow ohn PriceSparrow?

Problem: PriceSparrow ohn PriceSparrow?