| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Seit kurzem VerbindungsabbrücheWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
30.08.2016, 16:22
| #16 |
 |  Seit kurzem Verbindungsabbrüche Mahlzeit. Erstmal zu deiner Frage. Mir ist aufgefallen das Spybot trotz Deinstallation immer noch in meinem System gegenwärtig ist. Wie kann ich das Programm entgültig entfernen? Über Windows geht dies anscheinend nicht... Es ist halt so, das Spybot bekannter Maßen zu Verbindgsproblemen führen kann, da es ungewollt im Hintergrund läuft und dort macht was es will. Hier die angeforderten Logs: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 29-08-2016
durchgeführt von Christopher (30-08-2016 03:54:37) Run:1
Gestartet von C:\Users\Christopher\Desktop
Geladene Profile: Christopher & (Verfügbare Profile: Christopher)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
========= RemoveProxy: =========
HKU\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
========= Ende von RemoveProxy: =========
========= ipconfig /flushdns =========
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
========= Ende von CMD: =========
========= netsh winsock reset =========
Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.
========= Ende von CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 1134528 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12752219 B
Java, Flash, Steam htmlcache => 149881754 B
Windows/system/drivers => 14153246 B
Edge => 2105179 B
Chrome => 369615334 B
Firefox => 379431136 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 28024684 B
NetworkService => 17580 B
Christopher => 1980741677 B
RecycleBin => 2499205 B
EmptyTemp: => 2.7 GB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 03:54:55 ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a86d0546f843ed459739780a4052944f
# end=init
# utc_time=2016-08-30 01:58:13
# local_time=2016-08-30 03:58:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 30580
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a86d0546f843ed459739780a4052944f
# end=updated
# utc_time=2016-08-30 02:01:10
# local_time=2016-08-30 04:01:10 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=a86d0546f843ed459739780a4052944f
# engine=30580
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-08-30 02:41:08
# local_time=2016-08-30 04:41:08 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1305 16777213 100 100 0 36747120 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 4060225 26339011 0 0
# scanned=256285
# found=0
# cleaned=0
# scan_time=2397
Code:
ATTFilter HitmanPro 3.7.14.265
www.hitmanpro.com
Computer name . . . . : DESKTOP-ET7TCK9
Windows . . . . . . . : 10.0.0.10586.X64/8
User name . . . . . . : DESKTOP-ET7TCK9\Christopher
UAC . . . . . . . . . : Enabled
License . . . . . . . : Free
Scan date . . . . . . : 2016-08-30 04:42:48
Scan mode . . . . . . : Normal
Scan duration . . . . : 1m 15s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 2
Traces . . . . . . . : 6
Objects scanned . . . : 1.651.378
Files scanned . . . . : 54.348
Remnants scanned . . : 431.322 files / 1.165.708 keys
Malware _____________________________________________________________________
C:\Users\Christopher\AppData\Local\PunkBuster\BC2\pb\pbclold.dll
Size . . . . . . . : 891.962 bytes
Age . . . . . . . : 114.6 days (2016-05-07 15:06:16)
Entropy . . . . . : 7.6
SHA-256 . . . . . : A324BDA2B890227F72D9F12323AD3FF51582CE312286C296F6558BD3F3927616
> HitmanPro . . . . : App/Punkbust-B
Fuzzy . . . . . . : 129.0
C:\Users\Christopher\Documents\BFBC2\pb\pbcl.dll
Size . . . . . . . : 891.962 bytes
Age . . . . . . . : 114.6 days (2016-05-07 15:06:16)
Entropy . . . . . : 7.6
SHA-256 . . . . . : A324BDA2B890227F72D9F12323AD3FF51582CE312286C296F6558BD3F3927616
> HitmanPro . . . . : App/Punkbust-B
Fuzzy . . . . . . : 129.0
Suspicious files ____________________________________________________________
C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCache\IE\9F89G0P9\FRST64[1].exe
Size . . . . . . . : 2.397.696 bytes
Age . . . . . . . : 0.0 days (2016-08-30 03:54:23)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 7F1680C23BD158CC4B4AC4747148F073FA45153F3AF2C0269FCE357D4C1D585F
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
-1.0s C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCache\IE\H341MH51\up64[1]
-0.5s C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCookies\ZR5JMD4X.txt
-0.5s C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCache\IE\LFNHKTI9\82[1].htm
-0.2s C:\Users\Christopher\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AF4EE75E3A4ABA658C0087EB9A0BB5B_4F8D4D4F8A055DA96F5FDDC885E626A4
-0.2s C:\Users\Christopher\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AF4EE75E3A4ABA658C0087EB9A0BB5B_4F8D4D4F8A055DA96F5FDDC885E626A4
0.0s C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCache\IE\9F89G0P9\FRST64[1].exe
0.0s C:\Users\Christopher\Desktop\FRST64.exe
14.2s C:\FRST\Logs\ct
14.2s C:\Users\Christopher\Desktop\Fixlog.txt
15.9s C:\Windows\Prefetch\BITSADMIN.EXE-61856B04.pf
15.9s C:\Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf
C:\Users\Christopher\AppData\Local\PunkBuster\BC2\pb\dll\wc002305.dll
Size . . . . . . . : 962.185 bytes
Age . . . . . . . : 114.5 days (2016-05-07 15:30:36)
Entropy . . . . . : 7.6
SHA-256 . . . . . : C8E59E65AE451CE761E7C48F8BA802CD17513057DEA65A4D4B4F6001153FD414
Fuzzy . . . . . . : 29.0
The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Program contains PE structure anomalies. This is not typical for most programs.
C:\Users\Christopher\AppData\Local\PunkBuster\BC2\pb\pbcl.dll
Size . . . . . . . : 962.185 bytes
Age . . . . . . . : 114.5 days (2016-05-07 15:30:36)
Entropy . . . . . : 7.6
SHA-256 . . . . . : C8E59E65AE451CE761E7C48F8BA802CD17513057DEA65A4D4B4F6001153FD414
Fuzzy . . . . . . : 29.0
The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Program contains PE structure anomalies. This is not typical for most programs.
C:\Users\Christopher\Desktop\FRST64.exe
Size . . . . . . . : 2.397.696 bytes
Age . . . . . . . : 0.0 days (2016-08-30 03:54:23)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 7F1680C23BD158CC4B4AC4747148F073FA45153F3AF2C0269FCE357D4C1D585F
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
-1.0s C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCache\IE\H341MH51\up64[1]
-0.5s C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCookies\ZR5JMD4X.txt
-0.5s C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCache\IE\LFNHKTI9\82[1].htm
-0.2s C:\Users\Christopher\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6AF4EE75E3A4ABA658C0087EB9A0BB5B_4F8D4D4F8A055DA96F5FDDC885E626A4
-0.2s C:\Users\Christopher\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6AF4EE75E3A4ABA658C0087EB9A0BB5B_4F8D4D4F8A055DA96F5FDDC885E626A4
0.0s C:\Users\Christopher\AppData\Local\Microsoft\Windows\INetCache\IE\9F89G0P9\FRST64[1].exe
0.0s C:\Users\Christopher\Desktop\FRST64.exe
14.2s C:\FRST\Logs\ct
14.2s C:\Users\Christopher\Desktop\Fixlog.txt
15.9s C:\Windows\Prefetch\BITSADMIN.EXE-61856B04.pf
15.9s C:\Windows\Prefetch\IPCONFIG.EXE-BFEC2AD0.pf
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-08-2016 durchgeführt von Christopher (Administrator) auf DESKTOP-ET7TCK9 (30-08-2016 04:44:30) Gestartet von C:\Users\Christopher\Desktop Geladene Profile: Christopher (Verfügbare Profile: Christopher) Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (LogMeIn Inc.) D:\LogMeIn - Hamachi\x64\hamachi-2.exe (LogMeIn, Inc.) D:\LogMeIn - Hamachi\x64\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avpui.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Spotify Ltd) C:\Users\Christopher\AppData\Roaming\Spotify\SpotifyWebHelper.exe () C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe (LogMeIn Inc.) D:\LogMeIn - Hamachi\hamachi-2-ui.exe (Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe (LogMeIn, Inc.) D:\LogMeIn - Hamachi\LMIGuardianSvc.exe (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PDVD12Serv.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15053944 2016-01-06] (Logitech Inc.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor) HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [1009632 2016-08-08] (DivX, LLC) HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [75264 2016-04-07] () HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => D:\LogMeIn - Hamachi\hamachi-2-ui.exe [5565960 2016-07-20] (LogMeIn Inc.) HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29494400 2016-07-13] (Skype Technologies S.A.) HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\Run: [Spotify Web Helper] => C:\Users\Christopher\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1553520 2016-07-02] (Spotify Ltd) HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\RunOnce: [Uninstall C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\amd64" HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\RunOnce: [Uninstall C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1" HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\RunOnce: [Uninstall C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64" HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\RunOnce: [Uninstall C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64" HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\MountPoints2: {bbc2e950-c50a-11e5-9bd0-806e6f6e6963} - "F:\pushinst.exe" BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{0b6bddda-e6cf-4a32-85ae-4f1373cd9a3f}: [DhcpNameServer] 192.168.2.250 Tcpip\..\Interfaces\{7e92a605-b6f7-4210-981c-4520ca04fb3c}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2564916610-632317685-2770380230-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-2564916610-632317685-2770380230-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://localoem.msn.com HKU\S-1-5-21-2564916610-632317685-2770380230-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.hyrican.de HKU\S-1-5-21-2564916610-632317685-2770380230-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.hyrican.de SearchScopes: HKU\S-1-5-21-2564916610-632317685-2770380230-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab) BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab) Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\IEExt\ie_plugin.dll [2015-12-08] (AO Kaspersky Lab) FireFox: ======== FF ProfilePath: C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default FF NewTab: hxxp://www.google.de/ FF DefaultSearchEngine: Google FF SelectedSearchEngine: Google FF Homepage: hxxp://www.google.de/ FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] () FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.) FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2016-08-08] (DivX, LLC) FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-11] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-11] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF SearchPlugin: C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\searchplugins\google-lavasoft.xml [2016-01-28] FF Extension: (ReloadEvery) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}.xpi [2016-03-13] FF Extension: (BetterPrivacy) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2016-05-08] FF Extension: (NoScript) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-08-10] FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox [2016-05-24] FF Extension: (YouTube Video and Audio Downloader) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2016-08-18] FF Extension: (HTML5 Video Everywhere!) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\Extensions\html5-video-everywhere@lejenome.me.xpi [2016-01-29] FF Extension: (ProxTube) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\Extensions\ich@maltegoetz.de.xpi [2016-08-25] FF Extension: (WOT) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-01-27] FF Extension: (Adblock Plus) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\boz54ecb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-29] FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\FFExt\light_plugin_firefox Chrome: ======= CHR Profile: C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-29] CHR Extension: (Google Docs) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-29] CHR Extension: (Google Drive) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-29] CHR Extension: (YouTube) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-29] CHR Extension: (Google-Suche) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-29] CHR Extension: (Kaspersky Protection) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\eahebamiopdhefndnmappcihfajigkka [2016-01-29] CHR Extension: (Google Tabellen) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-29] CHR Extension: (Google Docs Offline) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-29] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-29] CHR Extension: (Google Mail) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-29] CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\avp.exe [194000 2015-12-08] (Kaspersky Lab ZAO) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1345056 2016-02-13] () R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation) R2 Hamachi2Svc; D:\LogMeIn - Hamachi\x64\hamachi-2.exe [2554376 2016-07-20] (LogMeIn Inc.) R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2016-01-06] (Logitech Inc.) R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation) S3 Origin Client Service; F:\Origin\OriginClientService.exe [2122248 2016-06-29] (Electronic Arts) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert] R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2016-05-13] () S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation) S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2013-12-17] (AVM Berlin) S3 bulkadi; C:\Windows\System32\drivers\bulkrazer_x64.sys [25088 2011-02-09] (Windows (R) Codename Longhorn DDK provider) R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO) R0 dcrypt; C:\Windows\System32\drivers\dcrypt.sys [210632 2014-07-09] () S3 fwlanusb6; C:\Windows\system32\DRIVERS\fwlanusb6.sys [1327744 2014-03-27] (AVM GmbH) [Datei ist nicht signiert] R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2016-07-20] (LogMeIn Inc.) S3 HtcVCom32; C:\Windows\system32\DRIVERS\HtcVComV64.sys [121800 2010-03-09] (QUALCOMM Incorporated) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO) R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO) R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70512 2015-06-27] (Kaspersky Lab ZAO) R2 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [77728 2016-04-20] (AO Kaspersky Lab) S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [30328 2015-06-24] (Kaspersky Lab) R3 klflt; C:\Windows\system32\DRIVERS\klflt.sys [181640 2015-12-08] (AO Kaspersky Lab) R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [238000 2016-05-24] (AO Kaspersky Lab) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [933808 2016-05-24] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\system32\DRIVERS\klim6.sys [49240 2016-05-24] (AO Kaspersky Lab) R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [41656 2015-06-06] (Kaspersky Lab ZAO) R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [41656 2015-06-07] (Kaspersky Lab ZAO) R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-12-08] (AO Kaspersky Lab) R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [87984 2016-05-24] (AO Kaspersky Lab) R1 Klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [102584 2015-06-16] (Kaspersky Lab ZAO) R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 LGSHidFilt; C:\Windows\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.) R3 LGSUsbFilt; C:\Windows\system32\DRIVERS\LGSUsbFilt.Sys [41752 2013-05-30] (Logitech Inc.) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-08-30] (Malwarebytes) R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [895256 2015-06-23] (Realtek ) R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation ) R1 SDHookDriver; D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\SDHookDrv64.sys [64160 2014-04-25] () S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) U4 klkbdflt2; \SystemRoot\system32\DRIVERS\klkbdflt2.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-08-30 04:44 - 2016-08-30 04:44 - 00022012 _____ C:\Users\Christopher\Desktop\FRST.txt 2016-08-30 04:42 - 2016-08-30 04:44 - 00000000 ____D C:\ProgramData\HitmanPro 2016-08-30 04:40 - 2016-08-30 04:40 - 00000093 _____ C:\WINDOWS\wininit.ini 2016-08-30 04:39 - 2016-08-30 04:42 - 11438608 _____ (SurfRight B.V.) C:\Users\Christopher\Desktop\HitmanPro_x64.exe 2016-08-30 03:58 - 2016-08-30 03:58 - 00000000 ____D C:\Program Files (x86)\ESET 2016-08-30 03:57 - 2016-08-30 03:58 - 02870984 _____ (ESET) C:\Users\Christopher\Desktop\esetsmartinstaller_deu(1).exe 2016-08-30 03:54 - 2016-08-30 03:54 - 00002496 _____ C:\Users\Christopher\Desktop\Fixlog.txt 2016-08-29 16:58 - 2016-08-30 03:54 - 02397696 _____ (Farbar) C:\Users\Christopher\Desktop\FRST64.exe 2016-08-29 16:56 - 2016-08-29 16:56 - 01610560 _____ (Malwarebytes) C:\Users\Christopher\Desktop\JRT.exe 2016-08-29 16:55 - 2016-08-29 16:55 - 00001594 _____ C:\mbam2.txt 2016-08-29 16:42 - 2016-08-29 16:43 - 03826240 _____ C:\Users\Christopher\Desktop\adwcleaner_6.010.exe 2016-08-28 10:49 - 2016-08-28 10:49 - 00000000 ____D C:\Users\Christopher\AppData\Local\ActiveSync 2016-08-28 10:48 - 2012-02-14 19:37 - 00594432 _____ (Realtek Semiconductor Corp. ) C:\WINDOWS\SysWOW64\Rtlihvs.dll 2016-08-28 09:30 - 2016-08-29 18:14 - 00000000 ____D C:\Users\Christopher\AppData\Local\Battle.net 2016-08-28 09:30 - 2016-08-28 09:30 - 00000804 _____ C:\Users\Public\Desktop\Battle.net.lnk 2016-08-28 09:30 - 2016-08-28 09:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net 2016-08-28 09:29 - 2016-08-28 09:31 - 00000000 ____D C:\Users\Christopher\AppData\Roaming\Battle.net 2016-08-28 09:29 - 2016-08-28 09:29 - 03012080 _____ (Blizzard Entertainment) C:\Users\Christopher\Downloads\Battle.net-Setup(1).exe 2016-08-27 12:15 - 2016-08-27 12:15 - 00267170 _____ C:\TDSSKiller.3.1.0.11_27.08.2016_12.15.23_log.txt 2016-08-27 12:13 - 2016-08-30 04:44 - 00000000 ____D C:\FRST 2016-08-26 16:34 - 2016-08-26 16:34 - 00000000 ____D C:\Users\Christopher\AppData\Roaming\Geek Uninstaller 2016-08-26 16:33 - 2016-08-26 16:34 - 06500888 _____ (Geek Uninstaller) C:\Users\Christopher\Desktop\geek.exe 2016-08-25 19:06 - 2016-08-26 16:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-08-25 16:42 - 2016-08-25 16:42 - 00000072 _____ C:\pathping.txt 2016-08-18 03:51 - 2016-08-11 13:30 - 00138808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2016-08-18 03:50 - 2016-08-18 03:50 - 00000000 ____D C:\WINDOWS\LastGood.Tmp 2016-08-18 03:48 - 2016-08-11 16:33 - 40070200 _____ C:\WINDOWS\system32\nvcompiler.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 35182648 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 34837952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 28236856 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 10728856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 10530960 _____ C:\WINDOWS\system32\nvptxJitCompiler.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 10273096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 09086344 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 08681720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 08644456 _____ C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 02914752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 02553912 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 01922616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437254.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 01585088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437254.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 01023544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00961080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00945088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00897592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00803096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00802072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00694952 _____ C:\WINDOWS\system32\nvfatbinaryLoader.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00644648 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00642904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00612528 _____ C:\WINDOWS\system32\nvmcumd.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00584712 _____ C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00574120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00471424 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00442816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00413256 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00393664 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00386104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00348728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00345936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00181488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00159352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00153184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00131536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00054728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2016-08-18 03:48 - 2016-08-11 16:33 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2016-08-18 03:48 - 2016-08-11 16:33 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2016-08-17 17:56 - 2016-08-28 10:48 - 00000000 ____D C:\Program Files (x86)\TOTOLINK PCIE Wireless LAN Driver 2016-08-17 17:56 - 2016-08-17 17:56 - 00000000 ____D C:\Program Files (x86)\Cisco 2016-08-17 17:56 - 2015-03-03 12:32 - 00456560 _____ (Realtek) C:\WINDOWS\SwUSB.exe 2016-08-17 17:56 - 2014-12-12 17:24 - 00044760 _____ () C:\WINDOWS\runSW.exe 2016-08-17 17:56 - 2012-02-14 19:37 - 00594432 _____ (Realtek Semiconductor Corp. ) C:\WINDOWS\system32\Rtlihvs.dll 2016-08-17 17:56 - 2010-12-01 09:31 - 00451072 _____ C:\WINDOWS\SysWOW64\ISSRemoveSP.exe 2016-08-17 17:56 - 2007-04-26 14:05 - 00100000 _____ C:\WINDOWS\SysWOW64\EAPPkt9x.VXD 2016-08-17 17:56 - 2001-09-26 11:03 - 00012981 _____ C:\WINDOWS\SysWOW64\REALPKT.VXD 2016-08-10 18:56 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2016-08-10 18:56 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2016-08-10 18:56 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2016-08-10 18:56 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-08-10 18:56 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys 2016-08-10 18:56 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2016-08-10 18:56 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2016-08-10 18:56 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-08-10 18:56 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-08-10 18:56 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2016-08-10 18:56 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2016-08-10 18:56 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2016-08-10 18:56 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2016-08-10 18:56 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2016-08-10 18:56 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-08-10 18:56 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2016-08-10 18:56 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll 2016-08-10 18:56 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-08-10 18:56 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2016-08-10 18:56 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-08-10 18:56 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-08-10 18:56 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2016-08-10 18:56 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe 2016-08-10 18:56 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2016-08-10 18:56 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-08-10 18:56 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll 2016-08-10 18:56 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2016-08-10 18:56 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-08-10 18:56 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2016-08-10 18:56 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2016-08-10 18:56 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-08-10 18:56 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-08-10 18:56 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll 2016-08-10 18:56 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2016-08-10 18:56 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll 2016-08-10 18:56 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2016-08-10 18:56 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll 2016-08-10 18:56 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-08-10 18:56 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2016-08-10 18:56 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll 2016-08-10 18:56 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-08-10 18:56 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-08-10 18:56 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtutil.exe 2016-08-10 18:56 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll 2016-08-10 18:56 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll 2016-08-10 18:56 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-08-10 18:56 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-08-10 18:56 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-08-10 18:56 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-08-10 18:56 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2016-08-10 18:56 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2016-08-10 18:56 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2016-08-10 18:56 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-08-10 18:56 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-08-10 18:56 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-08-10 18:56 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2016-08-10 18:56 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-08-10 18:56 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-08-10 18:56 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-08-10 18:56 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll 2016-08-10 18:56 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-08-10 18:56 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-08-10 18:56 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2016-08-10 18:56 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2016-08-10 18:56 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2016-08-10 18:56 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-08-10 18:56 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-08-10 18:56 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll 2016-08-10 18:56 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-08-10 18:56 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll 2016-08-10 18:56 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe 2016-08-10 18:56 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-08-10 18:56 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2016-08-10 18:56 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-08-10 18:56 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdlrecover.exe 2016-08-10 18:56 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll 2016-08-10 18:56 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-08-10 18:56 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2016-08-10 18:56 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll 2016-08-10 18:56 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll 2016-08-10 18:56 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-08-10 18:56 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtutil.exe 2016-08-10 18:56 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-08-10 18:56 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll 2016-08-10 18:56 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-08-10 18:56 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-08-10 18:56 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll 2016-08-10 18:56 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2016-08-10 18:56 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2016-08-10 18:56 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2016-08-10 18:56 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-08-10 18:56 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-08-10 18:56 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2016-08-10 18:56 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2016-08-10 18:56 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-08-10 18:56 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-08-10 18:56 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-08-10 18:56 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll 2016-08-10 18:56 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2016-08-10 18:55 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll 2016-08-10 18:55 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-08-10 18:55 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-08-10 18:55 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2016-08-10 18:55 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-08-10 18:55 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll 2016-08-10 18:55 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-08-10 18:55 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-08-10 18:55 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-08-10 18:55 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-08-10 18:55 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-08-10 18:55 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-08-10 18:55 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-08-10 18:55 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-08-10 18:55 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-08-10 18:55 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-08-10 18:55 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2016-08-10 18:55 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll 2016-08-10 18:55 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2016-08-10 18:55 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-08-10 18:55 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-08-10 18:55 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-08-10 18:55 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll 2016-08-10 18:55 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-08-10 18:55 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-08-10 18:55 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-08-10 18:55 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-08-10 18:55 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll 2016-08-10 18:55 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-08-10 18:55 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-08-04 17:57 - 2016-08-04 17:57 - 00000000 ____D C:\Overwatch 2016-08-03 04:06 - 2016-08-03 04:07 - 00558328 _____ (Safer-Networking Ltd. ) C:\Users\Christopher\Downloads\spybot2-license.exe 2016-08-01 06:18 - 2016-08-01 06:18 - 00365536 _____ (DivX, LLC) C:\WINDOWS\SysWOW64\DivXControlPanelApplet.cpl 2016-08-01 04:09 - 2016-08-01 04:09 - 00001178 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-08-01 04:09 - 2016-08-01 04:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2016-08-01 04:09 - 2016-08-01 04:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-08-01 04:09 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys 2016-08-01 04:09 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-08-01 04:09 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2016-08-01 04:08 - 2016-08-01 04:09 - 22851472 _____ (Malwarebytes ) C:\Users\Christopher\Downloads\mbam-setup-2.2.1.1043(2).exe ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-08-30 04:38 - 2016-01-29 17:18 - 00001150 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-08-30 04:38 - 2016-01-29 17:18 - 00001146 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-08-30 04:33 - 2016-01-30 19:37 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-08-30 04:31 - 2016-01-27 19:00 - 00000000 ____D C:\Users\Christopher\AppData\Roaming\Skype 2016-08-30 04:26 - 2016-01-28 15:08 - 00000000 ____D C:\Users\Christopher 2016-08-30 04:19 - 2016-04-19 04:40 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-08-30 04:02 - 2015-12-01 13:09 - 00005430 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-08-30 04:02 - 2015-10-30 20:35 - 01793332 _____ C:\WINDOWS\system32\perfh007.dat 2016-08-30 04:02 - 2015-10-30 20:35 - 00451502 _____ C:\WINDOWS\system32\perfc007.dat 2016-08-30 03:57 - 2016-01-28 04:57 - 00000000 ____D C:\Users\Christopher\AppData\Local\LogMeIn Hamachi 2016-08-30 03:55 - 2016-04-20 04:12 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2016-08-30 03:55 - 2016-04-08 17:35 - 00000000 ____D C:\Users\Christopher\AppData\Local\HTC MediaHub 2016-08-30 03:55 - 2016-01-28 15:46 - 00000000 ____D C:\ProgramData\NVIDIA 2016-08-30 03:55 - 2016-01-28 15:10 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-08-30 03:55 - 2015-10-30 08:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI 2016-08-30 03:54 - 2016-05-15 13:13 - 00000000 ____D C:\Users\Christopher\AppData\LocalLow\Temp 2016-08-29 16:47 - 2016-05-01 13:26 - 00000000 ____D C:\AdwCleaner 2016-08-29 16:37 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-08-29 16:31 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-08-28 10:49 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-08-27 12:05 - 2016-03-31 03:37 - 00000000 ____D C:\Users\Christopher\AppData\LocalLow\boost_interprocess 2016-08-27 07:40 - 2016-01-29 04:30 - 00000000 ____D C:\Users\Christopher\AppData\Local\CrashDumps 2016-08-26 16:48 - 2016-04-19 04:27 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2016-08-26 16:48 - 2016-01-27 18:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-08-26 16:47 - 2016-04-19 04:24 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2016-08-23 03:46 - 2016-01-28 16:17 - 00003696 _____ C:\WINDOWS\System32\Tasks\DivXUpdate 2016-08-23 03:46 - 2016-01-28 16:17 - 00001428 _____ C:\Users\Christopher\Desktop\DivX Movies.lnk 2016-08-23 03:46 - 2016-01-28 16:17 - 00001167 _____ C:\Users\Public\Desktop\DivX Converter.lnk 2016-08-23 03:46 - 2016-01-28 16:17 - 00001142 _____ C:\Users\Public\Desktop\DivX Player.lnk 2016-08-23 03:46 - 2016-01-28 16:17 - 00000000 ____D C:\Users\Christopher\AppData\Roaming\DivX 2016-08-23 03:46 - 2016-01-28 16:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX 2016-08-23 03:46 - 2016-01-28 16:16 - 00000000 ____D C:\ProgramData\DivX 2016-08-23 03:46 - 2016-01-28 16:16 - 00000000 ____D C:\Program Files (x86)\DivX 2016-08-18 03:51 - 2016-06-29 17:16 - 00000000 ____D C:\Temp 2016-08-18 03:51 - 2016-01-28 15:08 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-08-18 03:51 - 2015-12-01 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-08-18 03:50 - 2016-03-13 09:58 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2016-08-17 17:55 - 2015-12-01 13:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-08-16 17:06 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache 2016-08-16 04:20 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-08-13 07:36 - 2016-01-28 04:34 - 00000000 ____D C:\ProgramData\Origin 2016-08-13 04:54 - 2016-01-28 15:45 - 14199360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2016-08-11 16:33 - 2016-07-16 16:19 - 01588688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2016-08-11 16:33 - 2016-05-15 14:19 - 17619464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll 2016-08-11 16:33 - 2016-05-15 14:19 - 14476904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2016-08-11 16:33 - 2016-05-15 13:51 - 20208360 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll 2016-08-11 16:33 - 2016-05-15 13:51 - 03443152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2016-08-11 16:33 - 2016-01-28 15:45 - 23699584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2016-08-11 16:33 - 2016-01-28 15:45 - 03901520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2016-08-11 16:33 - 2016-01-28 15:45 - 00040827 _____ C:\WINDOWS\system32\nvinfo.pb 2016-08-11 16:33 - 2016-01-28 13:21 - 00223304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2016-08-11 16:13 - 2016-01-27 19:00 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-08-11 16:13 - 2016-01-27 19:00 - 00000000 ____D C:\ProgramData\Skype 2016-08-11 14:27 - 2016-01-28 15:45 - 06386048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2016-08-11 14:27 - 2016-01-28 15:45 - 02468288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2016-08-11 14:27 - 2016-01-28 15:45 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2016-08-11 14:27 - 2016-01-28 15:45 - 01365048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe 2016-08-11 14:27 - 2016-01-28 15:45 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2016-08-11 14:27 - 2016-01-28 15:45 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2016-08-11 14:27 - 2016-01-28 13:22 - 00548920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2016-08-11 14:27 - 2016-01-28 13:22 - 00081856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2016-08-11 03:31 - 2015-12-01 13:02 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-08-10 19:39 - 2015-10-30 20:44 - 00000000 ____D C:\Program Files\Windows Journal 2016-08-10 19:39 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-08-10 19:39 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-08-10 19:11 - 2016-01-28 04:10 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-08-10 19:11 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2016-08-10 19:11 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-08-10 19:09 - 2016-01-28 04:10 - 147640136 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-08-10 17:39 - 2016-01-29 17:18 - 00002271 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-08-10 17:39 - 2016-01-29 17:18 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-08-10 16:51 - 2015-07-10 11:05 - 00000000 ____D C:\Users\Default.migrated 2016-08-09 18:06 - 2016-01-28 15:45 - 07255045 _____ C:\WINDOWS\system32\nvcoproc.bin ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-02-06 12:17 - 2016-02-06 12:17 - 0000017 _____ () C:\Users\Christopher\AppData\Local\resmon.resmoncfg 2016-01-28 15:08 - 2016-01-28 15:08 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-08-26 03:43 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 29-08-2016
durchgeführt von Christopher (30-08-2016 04:44:46)
Gestartet von C:\Users\Christopher\Desktop
Windows 10 Home Version 1511 (X64) (2016-01-28 13:12:48)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2564916610-632317685-2770380230-500 - Administrator - Disabled)
Christopher (S-1-5-21-2564916610-632317685-2770380230-1001 - Administrator - Enabled) => C:\Users\Christopher
DefaultAccount (S-1-5-21-2564916610-632317685-2770380230-503 - Limited - Disabled)
Gast (S-1-5-21-2564916610-632317685-2770380230-501 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Kaspersky Internet Security (Enabled - Up to date) {86367591-4BE4-AE08-2FD9-7FCB8259CD98}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Kaspersky Internet Security (Enabled - Up to date) {3D579475-6DDE-A186-1569-44B9F9DE8725}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {BE0DF4B4-018B-AF50-0486-D6FE7C8A8AE3}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Ansel (Version: 372.54 - NVIDIA Corporation) Hidden
Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.26.1 - Asmedia Technology)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.1.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM\...\Steam App 240) (Version: - Valve)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5522.05 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Discord (HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\Discord) (Version: 0.0.292 - Hammer & Chisel, Inc.)
DiskCryptor 1.1 (HKLM\...\DiskCryptor_is1) (Version: 1.1 - hxxp://diskcryptor.net/)
DivX Setup (HKLM\...\DivX Setup) (Version: 3.0.0.83 - DivX, LLC)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Far Cry 4 (HKLM-x32\...\Steam App 298110) (Version: - Ubisoft Montreal, Red Storm, Shanghai, Toronto, Kiev)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Freemake Video Converter Version 4.1.9 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.9 - Ellora Assets Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.17.0.001 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.69.5 - HTC)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1162 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{77E7AE5C-181C-4CAF-ADBF-946F11C1CE26}) (Version: 16.0.0.614 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 16.0.0.614 - Kaspersky Lab) Hidden
Logitech Gaming Software 8.78 (HKLM\...\Logitech Gaming Software) (Version: 8.78.129 - Logitech Inc.)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.493 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.493 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4693.1005 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 48.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 de)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.54 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.11.2.10120 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Razer Megalodon Firmware Updater (HKLM-x32\...\{C67A3F9D-E55D-4288-B4EC-1B9863EFB288}) (Version: 2.12.02 - Razer USA Ltd.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
RenSim 3 (HKLM-x32\...\RenSim_is1) (Version: - mugvieh)
Samsung Data Migration (HKLM-x32\...\{3B304604-0BF5-488E-AB95-F2F2E31206F3}) (Version: 3.0 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
Sanctum 2 (HKLM-x32\...\Steam App 210770) (Version: - Coffee Stain Studios)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\Spotify) (Version: 1.0.32.96.g3c8a06e6 - Spotify AB)
STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.5.13082 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Terraria (HKLM-x32\...\Steam App 105600) (Version: - Re-Logic)
Tom Clancy's The Division (HKLM\...\Steam App 365590) (Version: - Massive Entertainment)
TOTOLINK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0262 - )
Uplay (HKLM-x32\...\Uplay) (Version: 15.0 - Ubisoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Websuche (HKLM-x32\...\Websuche) (Version: - Websuche)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
X Codec Pack (HKLM\...\X Codec Pack) (Version: 2.7.4 - X Codec Pack team)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2564916610-632317685-2770380230-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\FileCoAuth.exe (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1AC06B6B-1A81-4C86-B45F-84254FB03F4C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-29] (Google Inc.)
Task: {6C378737-2686-4312-A85F-19E7A22E22F2} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-12] (Adobe Systems Incorporated)
Task: {794CF662-D9A5-4431-A250-B7C8C1812F30} - System32\Tasks\DivXUpdate => C:\Program Files (x86)\Common Files\DivX Shared\Qt4.8\DivXUpdate.exe [2016-08-01] (DivX, LLC)
Task: {7E6B4114-4B19-4A7E-8433-1A27C298AB34} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-10] (Microsoft Corporation)
Task: {A188AB40-18CB-4DE8-8A19-3501A53097E0} - System32\Tasks\PDVDServ12 Task => C:\Program Files (x86)\CyberLink\PowerDVD12\PDVD12Serv.exe [2015-07-22] (CyberLink Corp.)
Task: {CF625969-BF6D-4189-B611-EB3348E0F287} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)
Task: {DD6F95D2-CBE5-4481-900E-CBA4D81E891E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-29] (Google Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.7.4\Useful links\Download Codecs & Tools.lnk -> hxxp://www.codecs.com/
Shortcut: C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.7.4\Useful links\Talk about Codecs.lnk -> hxxp://codecs.com/forum
Shortcut: C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\X Codec Pack 2.7.4\Useful links\X Codec Pack homepage.lnk -> hxxp://www.xpcodecpack.com/
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-01-28 15:45 - 2016-08-11 14:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-10-17 15:27 - 2013-10-17 15:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2016-02-20 13:56 - 2016-06-14 22:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-01-28 05:39 - 2016-06-14 22:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-04-11 17:28 - 2016-06-14 22:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-02-20 13:56 - 2016-06-14 22:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-05-07 15:04 - 2016-05-13 19:48 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2016-04-11 17:28 - 2016-06-14 22:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-04-11 17:28 - 2016-06-14 22:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-04-11 17:28 - 2016-06-14 22:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-01-28 05:39 - 2016-06-14 22:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-07-13 16:33 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-13 16:33 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-04-26 10:09 - 2016-04-26 10:09 - 00959176 _____ () C:\Users\Christopher\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\ClientTelemetry.dll
2016-07-13 16:33 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-04-19 18:19 - 2016-04-19 18:19 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-04-11 17:28 - 2016-06-14 22:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-04-11 17:28 - 2016-06-14 22:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-01-28 15:05 - 2016-01-28 15:05 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-13 16:34 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-07-13 16:33 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-13 16:33 - 2016-07-01 05:22 - 00936960 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2016-07-13 16:33 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-13 16:33 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-03-09 14:41 - 2016-03-09 14:41 - 00821240 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2016-01-06 21:43 - 2016-01-06 21:43 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2016-01-06 21:43 - 2016-01-06 21:43 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2015-12-01 13:19 - 2016-06-14 22:03 - 00165824 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll
2015-12-01 13:19 - 2016-06-14 22:03 - 00861120 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll
2016-04-18 18:07 - 2016-04-07 13:20 - 00075264 _____ () C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
2015-07-08 23:18 - 2015-07-08 23:18 - 00794920 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 16.0.0\kpcengine.2.3.dll
2016-03-09 14:40 - 2016-03-09 14:40 - 00030720 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2016-03-09 14:40 - 2016-03-09 14:40 - 00607016 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2016-03-09 14:40 - 2016-03-09 14:40 - 00059392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2016-03-09 14:40 - 2016-03-09 14:40 - 00035864 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2016-03-09 14:40 - 2016-03-09 14:40 - 00079888 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2016-03-09 14:41 - 2016-03-09 14:41 - 00129016 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2016-03-09 14:42 - 2016-03-09 14:42 - 00223240 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2016-04-19 18:19 - 2016-04-19 18:19 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 18:19 - 2016-04-19 18:19 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-12-01 13:19 - 2016-06-14 22:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-06-29 16:49 - 2014-09-28 17:59 - 00019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\localhost -> localhost
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2015-07-10 13:04 - 2015-07-10 13:02 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2564916610-632317685-2770380230-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\...\StartupApproved\Run32: => "SDTray"
HKU\S-1-5-21-2564916610-632317685-2770380230-1001\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{09811033-1B59-4F19-B9BB-434A5E5D9F36}] => (Allow) D:\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{A23DB1BD-8982-47DB-B386-A6AF3E2FFDF0}] => (Allow) D:\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{11E79639-B336-4838-BB56-18750D0CCBD2}] => (Allow) D:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{9CCF1718-24EA-4CD7-815C-DE3DA8A3A053}] => (Allow) D:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{6D0EC56D-E61B-4B52-B96C-B43A914445D8}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{E0C641D1-B8A0-4022-9BFB-D9C40B071648}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{2DF23958-F5B9-46EF-A12A-6BD6E6C536C4}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{B8B6ACDF-1942-45BF-A8A5-70B6C9CC4E58}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [UDP Query User{F28E5CF5-018C-44AE-9C15-BA187DB21080}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{5B5E5E35-C1B6-41F2-96D4-86928598397E}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{371DBA45-F0C4-4166-BC00-5207CC684770}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{82A1BB21-05D2-461B-B3FE-E6333BF4D48A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4D27F2D5-9A90-459E-80D2-85C9CA75F6E9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{73FDEDEF-A6A2-4C55-8343-319B8F727B9C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7FF5BE84-DA05-4993-8890-D1313E3FF8FA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{766DDECA-1A97-4E63-9B34-5658877117FD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{2E2421F3-A90A-447B-A025-2FF4249A9F10}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{6DDB4A4E-9B6D-4900-9E03-0E1150CAD9CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5C41000C-D35A-44E9-BF4E-2A27AAA88285}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0D6E8706-C242-4427-A450-A56587A19ED0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{150258D5-36D1-4B2A-916B-0477016BA7A6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe
FirewallRules: [{85C3C269-7470-466E-8EF9-3DA56C5D500D}] => (Allow) D:\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{C4C388F8-5496-404B-BC56-15B3E2A1532B}] => (Allow) D:\Steam\steamapps\common\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{272B17A2-25DC-4446-AD0B-422B6A9B5601}] => (Allow) D:\Steam\steamapps\common\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{C68A5436-441F-4E99-8156-504BAAE25623}] => (Allow) D:\Steam\steamapps\common\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{19868B47-ACC3-48AA-9C23-538945A75E8F}] => (Allow) D:\Steam\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{C5FAE611-707E-4C6C-A95B-E97AB008E2B5}] => (Allow) D:\Steam\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{005B2EE4-7457-4826-A283-6E6D73207D85}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{224BCECC-D23A-490B-AAE9-649B99849FCF}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{F0554A3E-800B-44E5-B6CC-017A11CF65EF}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{35FD1250-D0AA-40BA-8549-A8FBA74C53FC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{3509B271-838C-431A-9000-A2A6B83CE9B3}] => (Allow) LPort=2869
FirewallRules: [{8BA740C8-01BC-4340-BB99-09373FC7FEF3}] => (Allow) LPort=1900
FirewallRules: [{A5A0D459-F873-4128-8858-B521E4C20FE8}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E0FC11FE-53C7-489F-A5F8-C022BC2D51A3}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{24C81CD7-480C-4553-A422-2DB3AADE5159}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{5F4C0B88-5CCD-4353-8BE3-358C49406CE2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{4963F6BF-4526-457F-BB74-66D5D7B40B05}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0660A4E5-C17E-4499-A56D-9DB4E65A1BAF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{848D40AF-AAE1-47F3-914C-DD1CE48E9E14}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{21EFE4DE-7BEB-4958-9163-7BEDDFFE5E3D}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{FA1AC2C5-26AE-44F0-B258-59E31A1EF37D}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{504265BE-4E61-4033-BB5A-E0CC126661E7}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{7526D881-7209-4A28-A28F-1C51907A21B4}] => (Allow) D:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{19B18B3C-EEBE-4F71-8A51-E875C4093EE6}] => (Allow) D:\Steam\steamapps\common\Tom Clancy's The Division\thedivision.exe
FirewallRules: [{4F526D49-55D9-44CB-9ACA-C675ADEAABBB}] => (Allow) D:\Steam\steamapps\common\Tom Clancy's The Division\thedivision.exe
FirewallRules: [{1C10F5FA-7E5A-4A17-BE3A-48B996B5046C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E2DDF10A-3445-4125-9D61-1F9A50ECE0E6}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{44027470-C47D-4D39-B0EB-07BE8D1577C3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E87B7CBC-B213-4A02-9326-4ADDE926C9DD}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{94B66A57-A538-44BD-91D0-1AA275160F18}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [{A609B162-E20D-4A60-B41F-0CFEB3C290EE}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [{234D7DA8-6D5A-4839-A0A1-5A143E9E8835}] => (Allow) F:\Steam\bin\steamwebhelper.exe
FirewallRules: [{6BE3C2B0-89ED-456F-9FDE-DC897A8E4E75}] => (Allow) F:\Steam\bin\steamwebhelper.exe
FirewallRules: [{C675C024-4583-4866-847D-3069688C15E3}] => (Allow) F:\Steam\steamapps\common\Tom Clancy's The Division\thedivision.exe
FirewallRules: [{37F5E299-BDE1-4332-B6DF-663CE12F3D69}] => (Allow) F:\Steam\steamapps\common\Tom Clancy's The Division\thedivision.exe
FirewallRules: [{793BD0B8-FEBC-4D3E-B19E-6CA1F2DF7598}] => (Allow) F:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{28F24C64-8817-484F-AB7F-21BADFECE4DE}] => (Allow) F:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A8DBA440-7A63-4AEF-BE2D-FB4B718E0330}] => (Allow) F:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{202CE830-5167-4750-824E-B113A3CFE1A4}] => (Allow) F:\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{7666DACB-0BBF-4591-A0C1-68D17F97DE1A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{879B1104-5526-4A56-B645-92C0ADDA70BD}F:\blizzard\overwatch\overwatch.exe] => (Allow) F:\blizzard\overwatch\overwatch.exe
FirewallRules: [UDP Query User{04B17B96-2E3A-4B1D-9136-D265A5E7D869}F:\blizzard\overwatch\overwatch.exe] => (Allow) F:\blizzard\overwatch\overwatch.exe
FirewallRules: [{00C39097-EE9F-40B2-B345-951681AC618B}] => (Block) F:\blizzard\overwatch\overwatch.exe
FirewallRules: [{220C5BDE-6C30-4785-B34E-7F5B721E43F0}] => (Block) F:\blizzard\overwatch\overwatch.exe
==================== Wiederherstellungspunkte =========================
10-08-2016 19:09:00 Windows Update
17-08-2016 17:56:03 Installed TOTOLINK PCIE Wireless LAN Driver
23-08-2016 03:46:15 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
28-08-2016 10:48:31 Installiert TOTOLINK PCIE Wireless LAN Driver
29-08-2016 16:56:43 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/30/2016 04:41:54 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.
Error: (08/30/2016 04:41:44 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.
Error: (08/30/2016 04:41:38 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.
Error: (08/30/2016 04:02:13 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (08/30/2016 04:02:13 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/30/2016 04:02:13 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (08/30/2016 03:59:13 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.
Error: (08/30/2016 03:58:48 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.
Error: (08/30/2016 03:58:11 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\users\christopher\desktop\esetsmartinstaller_deu(1).exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.
Error: (08/30/2016 03:58:10 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Christopher\Desktop\esetsmartinstaller_deu(1).exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.
Systemfehler:
=============
Error: (08/30/2016 04:01:03 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (08/30/2016 04:01:03 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys
Error: (08/30/2016 04:01:02 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys
Error: (08/30/2016 04:01:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (08/30/2016 04:01:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (08/30/2016 04:01:02 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys
Error: (08/30/2016 03:59:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (08/30/2016 03:59:10 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys
Error: (08/30/2016 03:59:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (08/30/2016 03:59:10 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys
CodeIntegrity:
===================================
Date: 2016-08-25 17:20:04.685
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\ClipUp.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll that did not meet the Windows signing level requirements.
Date: 2016-08-25 16:39:13.192
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-08-25 16:21:52.839
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-08-24 16:22:51.734
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-08-24 16:11:41.653
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-08-23 17:53:13.878
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-08-23 17:33:54.362
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-08-23 16:24:25.350
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-08-23 16:12:53.675
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-08-23 03:47:38.313
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDHook64.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-6700 CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 16335.48 MB
Verfügbarer physikalischer RAM: 12090.09 MB
Summe virtueller Speicher: 18767.48 MB
Verfügbarer virtueller Speicher: 13763.86 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:223.02 GB) (Free:159.78 GB) NTFS
Drive d: (Daten) (Fixed) (Total:1863.02 GB) (Free:1524.22 GB) NTFS
Drive f: (Spiele) (Fixed) (Total:465.63 GB) (Free:314.62 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: A02AA8B2)
Partition: GPT.
========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: B7642A19)
Partition: GPT.
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
30.08.2016, 19:53
| #17 |
| /// TB-Ausbilder   | Seit kurzem Verbindungsabbrüche Servus,
__________________wir suchen noch nach Spybot: Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit) | SystemLook (64 bit)
|
|
31.08.2016, 03:01
| #18 |
| | Seit kurzem Verbindungsabbrüche Guten Morgen.
__________________Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 03:59 on 31/08/2016 by Christopher
Administrator - Elevation successful
========== filefind ==========
Searching for "*spybot*"
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-install-av-update-2015b.exe --a---- 11199712 bytes [04:21 06/08/2016] [12:41 25/03/2015] 36C8905BD85146BB168B7E2C2AA2A610
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-install-av-update.exe --a---- 542264 bytes [04:21 06/08/2016] [16:05 25/03/2015] B5457E15B904E9AD5245FD1536C7D7C1
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-install-bdcore-update-2016.exe --a---- 586224 bytes [04:35 06/08/2016] [13:05 22/07/2016] 8937249783868D7BD12C007593A11457
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-install-bdcore-update.exe --a---- 578056 bytes [04:21 06/08/2016] [09:57 20/05/2014] F10DC0556BDF4AF01E76A54980C871CF
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-install-iefreezefix.exe --a---- 6466576 bytes [04:35 06/08/2016] [12:02 02/05/2016] F711AC99662584ACEE990EF90299228C
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-install-scannerservice.exe --a---- 1144808 bytes [04:35 06/08/2016] [07:56 01/10/2014] F5071554AC2306050D8A702F78D74867
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-translation-hux2.exe --a---- 250744 bytes [04:36 06/08/2016] [22:00 24/08/2014] 20126C09FAD8F8C1EE2056095D9029D6
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-translation-nlx2.exe --a---- 246160 bytes [04:36 06/08/2016] [22:00 30/09/2014] E1E4DB780571A82DF922F878641016E1
C:\Program Files (x86)\Spybot - Search & Destroy 2\spybotsd2-windows-upgrade-installer.exe --a---- 1778776 bytes [04:36 06/08/2016] [16:41 28/07/2015] 9DF4BD88C9DE41ACEEF155BB50295DEE
C:\Users\Christopher\Downloads\spybot-2.4.40.exe --a---- 46525608 bytes [02:22 19/04/2016] [02:23 19/04/2016] E0797E7358557BE996F1F367D1F1E0FC
C:\Users\Christopher\Downloads\spybot2-license.exe --a---- 558328 bytes [02:06 03/08/2016] [02:07 03/08/2016] 6EE8CA3C1C514B0A8B8D6DA61D84BC09
C:\Windows\System32\winevt\Logs\Spybot - Search and Destroy.evtx --a---- 69632 bytes [02:24 19/04/2016] [02:45 19/04/2016] D90396A8639343CFB3BA649ECF5F6EF8
========== folderfind ==========
Searching for "*spybot*"
C:\Program Files\Common Files\AV\Spybot - Search and Destroy d------ [02:28 19/04/2016]
C:\Program Files (x86)\Spybot - Search & Destroy 2 d-a---- [02:27 19/04/2016]
C:\ProgramData\Spybot - Search & Destroy d------ [02:24 19/04/2016]
C:\Users\All Users\Spybot - Search & Destroy d------ [02:24 19/04/2016]
C:\Windows\System32\Tasks\Safer-Networking\Spybot - Search and Destroy d------ [02:24 19/04/2016]
========== regfind ==========
Searching for "spybot"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2dfc63be_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3420e8c9_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\39e63c64_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume5\Spybot - Search & Destroy 2\SDScan.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\7f4004ec_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDSettings.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotPostWindows10UpgradeReInstall"=""C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe""
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"3"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"4"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Create System Report.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLogReport.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"5"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\File Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFiles.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"6"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Immunization.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"7"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Rootkit Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDRootAlyzer.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"8"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Spybot-S&D Start Center.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"9"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\System Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"D:\Spybot - Search & Destroy 2\SDScan.exe"="$ IgnoreFreeLibrary<SDScanLibrary.dll>"
[HKEY_CURRENT_USER\SOFTWARE\Safer Networking Limited\Localization]
"C:\Program Files\Common Files\AV\Spybot - Search and Destroy\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.sds]
@="Spybot2.SDSFile"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.sdsb]
@="Spybot2.SDSBFile"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSBFile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSBFile]
@="Spybot compiled script"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSBFile\DefaultIcon]
@=""C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe",0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSFile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSFile]
@="Spybot script"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSFile\DefaultIcon]
@=""C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScript.exe",0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSFile\shell\compile\command]
@=""C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScript.exe" "%1" /compile"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSFile\shell\edit\command]
@=""C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScript.exe" "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Spybot2.SDSFile\shell\open\command]
@=""C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScript.exe" "%1" /execute /automate"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Safer Networking Limited\HiveManager]
"Apps"="D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\SDTools.exe C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTools.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Safer Networking Limited\SpybotSnD]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Safer Networking Limited\SpybotSnD\Debug\Cleaning]
"Path"="C:\ProgramData\Spybot - Search & Destroy\Cleaning\*.xml"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Safer Networking Limited\SpybotSnD\Debug\Cleaning]
"Items"="C:\ProgramData\Spybot - Search & Destroy\Cleaning\160420-033426.xml
"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\Application\Spybot - Search & Destroy 2]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SDHookDriver]
"ImagePath"="\??\D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\SDHookDrv64.sys"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Application\Spybot - Search & Destroy 2]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SDHookDriver]
"ImagePath"="\??\D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\SDHookDrv64.sys"
[HKEY_USERS\.DEFAULT\Software\Safer Networking Limited\Localization]
"D:\Spybot - Search & Destroy 2\"="de_DE"
[HKEY_USERS\.DEFAULT\Software\Safer Networking Limited\Localization]
"C:\Program Files\Common Files\AV\Spybot - Search and Destroy\"=""
[HKEY_USERS\.DEFAULT\Software\Safer Networking Limited\Localization]
"D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\"="de_DE"
[HKEY_USERS\.DEFAULT\Software\Safer Networking Limited\Localization]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\"="de_DE"
[HKEY_USERS\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Safer Networking Limited\Localization]
"D:\Spybot - Search & Destroy 2\"="de_DE"
[HKEY_USERS\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Safer Networking Limited\Localization]
"C:\Program Files\Common Files\AV\Spybot - Search and Destroy\"=""
[HKEY_USERS\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Safer Networking Limited\Localization]
"D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\"="de_DE"
[HKEY_USERS\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Safer Networking Limited\Localization]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\"="de_DE"
[HKEY_USERS\S-1-5-19\SOFTWARE\Safer Networking Limited\Localization]
"D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\"="en_IE"
[HKEY_USERS\S-1-5-19\SOFTWARE\Safer Networking Limited\Localization]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\"=""
[HKEY_USERS\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Safer Networking Limited\Localization]
"D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\"="en_IE"
[HKEY_USERS\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Safer Networking Limited\Localization]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\"=""
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2dfc63be_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3420e8c9_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\39e63c64_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume5\Spybot - Search & Destroy 2\SDScan.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\7f4004ec_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDSettings.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotPostWindows10UpgradeReInstall"=""C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe""
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"3"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"4"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Create System Report.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLogReport.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"5"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\File Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFiles.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"6"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Immunization.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"7"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Rootkit Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDRootAlyzer.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"8"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Spybot-S&D Start Center.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"9"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\System Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"D:\Spybot - Search & Destroy 2\SDScan.exe"="$ IgnoreFreeLibrary<SDScanLibrary.dll>"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001\SOFTWARE\Safer Networking Limited\Localization]
"C:\Program Files\Common Files\AV\Spybot - Search and Destroy\"=""
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\2dfc63be_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\3420e8c9_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\39e63c64_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume5\Spybot - Search & Destroy 2\SDScan.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\7f4004ec_0]
@="{2}.\\?\hdaudio#func_01&ven_10ec&dev_0887&subsys_1458a182&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\singlelineouttopo/00010001|\Device\HarddiskVolume3\Program Files (x86)\Spybot - Search & Destroy 2\SDSettings.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SpybotPostWindows10UpgradeReInstall"=""C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe""
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"3"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"4"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Create System Report.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDLogReport.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"5"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\File Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFiles.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"6"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Immunization.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"7"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Rootkit Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDRootAlyzer.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"8"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\Spybot-S&D Start Center.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\UFH\SHC]
"9"="C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2\System Scan.lnk C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers]
"D:\Spybot - Search & Destroy 2\SDScan.exe"="$ IgnoreFreeLibrary<SDScanLibrary.dll>"
[HKEY_USERS\S-1-5-21-2564916610-632317685-2770380230-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Safer Networking Limited\Localization]
"C:\Program Files\Common Files\AV\Spybot - Search and Destroy\"=""
[HKEY_USERS\S-1-5-18\Software\Safer Networking Limited\Localization]
"D:\Spybot - Search & Destroy 2\"="de_DE"
[HKEY_USERS\S-1-5-18\Software\Safer Networking Limited\Localization]
"C:\Program Files\Common Files\AV\Spybot - Search and Destroy\"=""
[HKEY_USERS\S-1-5-18\Software\Safer Networking Limited\Localization]
"D:\Spybot - Search & Destroy 2\Spybot - Search & Destroy 2\"="de_DE"
[HKEY_USERS\S-1-5-18\Software\Safer Networking Limited\Localization]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\"="de_DE"
Searching for " "
[HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 1\Target Id 0\Logical Unit Id 0]
"SerialNumber"=" Y5QKJZMTS"
[HKEY_LOCAL_MACHINE\SOFTWARE\DivX\Install\Converter]
"Description"="
<p>Easily convert footage to DivX video for playback on more than 1 billion DivX devices</p>
<ul>
<li>Create high-quality DivX videos, including DivX HEVC video up to 4K</li>
<li>Customize your encodes with premium audio and video components</li>
<li>Rotate, combine, add subtitles and audio to your video</li>
</ul>
"
[HKEY_LOCAL_MACHINE\SOFTWARE\DivX\Install\Player]
"Description"="
<p>High-quality playback and streaming of DivX, DivX Plus HD and DivX HEVC video up to 4K</p>
<ul>
<li>Optimized to play the web’s most popular video formats</li>
<li>Integrated DivX Media Server streams video to Chromecast, Smart TVs, PS3, Xbox and other DLNA devices</li>
<li>Use less CPU and battery with DivX AcceleratedTM playback</li>
</ul>
"
[HKEY_LOCAL_MACHINE\SOFTWARE\DivX\Install\Setup\BundleGroups\divx.com]
"BundleGroupDescription"="
<p>Play, create and stream high-quality DivX video, including HEVC at up to 4K resolutions. For the best DivX video experience, please install all components.</p>
<!-- Leave the 1st <p> tag line, because it is used on other installer page. -->
<p>A new version of DivX (10.6.2) is available. See a full list of <a href="hxxp://go.divx.com/WhatsNew/en" target="_blank">what’s new</a>:</p>
<ul>
<li>Improved performance for transcoding-on-the-fly in DivX Media Server to DivX Mobile</li>
<li>New ability to drag-n-drop SRT subtitles in DivX Player</li>
<li>Fix Converter crash in transcode module for vorbis audio</li>
<li>Improved Converter logic for audio track recognition</li>
<li>Improved Converter logic for output filesize estimation</li>
<li>Improved workflow for Mac OSX uninstallation process</li>
<
[HKEY_LOCAL_MACHINE\SOFTWARE\DivX\Install\Setup\InstallGroups\SharedLibraries]
"Description"="
<ul>
<li>The DivX VOD Plug-in enables a better user experience for customers purchasing or renting content from DivX VOD retail stores.</li>
</ul>
"
[HKEY_LOCAL_MACHINE\SOFTWARE\DivX\Install\WebPlayer]
"Description"="
<p>Efficient, smooth MKV streaming in your browser</p>
<ul>
<li>Adaptive bitrate streaming, with support for DivX HEVC streams up to 4K</li>
<li>Supports smooth FF/RW, chapter points, multiple subtitles and audio tracks</li>
<li>Download and save videos to your computer</li>
</ul>
"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"=" <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Enabled="true" > <InitializationParameters> <Param Name="PSVersion" Value="5.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;IU)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/> <Capability Type="Shell"/>
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell.Workflow]
"ConfigXML"=" <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell.workflow" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" UseSharedProcess="true" ProcessIdleTimeoutSec="1209600" RunAsUser="" RunAsPassword="" AutoRestart="false" Enabled="true" > <InitializationParameters> <Param Name="PSVersion" Value="5.0"/> <Param Name="AssemblyName" Value="Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL"/> <Param Name="PSSessionConfigurationTypeName" Value="Microsoft.PowerShell.Workflow.PSWorkflowSessionConfiguration"/> <Param Name="SessionConfigurationData" Value="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Architecture="32" Enabled="true" > <InitializationParameters> <Param Name="PSVersion" Value="5.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;IU)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>
-= EOF =-
|
|
31.08.2016, 12:54
| #19 | ||||||||||
| /// TB-Ausbilder | Seit kurzem Verbindungsabbrüche Servus, ich empfehle dir, Spybot nochmal zu installieren und dann über die Systemsteuerung zu deinstallieren. Wenn das nicht hilft, dann wende dich bitte an die Entwickler von Spybot selbst oder verwende den RevoUninstaller. Ansonsten ist da keine Malware. Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.  Cleanup: Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.  Absicherung: Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen: Browser Java Flash-Player PDF-Reader Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen. Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig. Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:
Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür. Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen. Optional:  Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren. NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.Lade Software von einem sauberen Portal wie  .Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner . Abschließend noch ein paar grundsätzliche Bemerkungen:
Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.  Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
31.08.2016, 15:40
| #20 |
| | Seit kurzem Verbindungsabbrüche Vielen Dank. Hat jetzt alles geklappt und auch Spybot ist endgültig runter. Du kannst das Thema aus deinen Abos löschen. Schönen Abend noch, Christopher |
|
31.08.2016, 15:41
| #21 |
| /// TB-Ausbilder | Seit kurzem Verbindungsabbrüche Ich bin froh, dass wir helfen konnten  In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest: Lob, Kritik und Wünsche Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!  Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM. Jeder andere bitte hier klicken und einen eigenen Thread erstellen. |
|
| Themen zu Seit kurzem Verbindungsabbrüche |
| abgebrochen, abhilfe, adware, bereits, erstell, erstellen, folge, folgendes, hardware, kaspersky, kurzem, malware, malwarebytes, netzwerk, qualität, ratlos, sekunden, skype, spiel, spybot, stark, thema, thread, unterforum, verbindungsabbrüche |
Linear-Darstellung
