Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
durchgeführt von Alex (Administrator) auf ASUSX751L (14-12-2016 17:19:35)
Gestartet von C:\Users\Alex\Downloads
Geladene Profile: Alex (Verfügbare Profile: Alex)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Agent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Mega Limited) C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSPanel.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-05-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ASUSWSLoader.exe [63272 2014-12-04] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-11-11] (LogMeIn Inc.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [IEHelper] => "javaw -jar C:\Users\Alex\Downloads\boot.jar"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\MountPoints2: {4cdea4e1-a988-11e5-8252-806e6f6e6963} - "E:\start.exe" 
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-12] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-05-11]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{33046791-40E4-440D-8253-ACF61356C78B}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [DhcpNameServer] 192.168.112.254
Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [DhcpNameServer] 192.168.2.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540276230&GUID=26D1A6A5-25F9-4376-8440-41555517F554
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540591989&GUID=26D1A6A5-25F9-4376-8440-41555517F554
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-65538100-1531695327-3227344209-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-20] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-10-30] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-01-29] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-30] (Microsoft Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-12-13]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-12-13]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-20] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] ()
FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy.dll [2012-12-31] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher64 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy64.dll [2012-12-31] ( ROBLOX Corporation)

Chrome: 
=======
CHR HomePage: Default -> hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..
CHR StartupUrls: Default -> "hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..","hxxp://www.trotux.com/?z=9ebbd55a21dd395f401bd15g9zcqbt0e4z5o4gdb9g&from=isr&uid=HGSTXHTS545050A7E680_TMA51DTFGAYNTRGAYNTRX&type=hp"
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default [2016-12-14]
CHR Extension: (Google Präsentationen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-31]
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-31]
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\binlebahppinoanabipmieceeaakflee [2016-04-01]
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-31]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-08]
CHR Extension: (Google-Suche) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod,  Bots) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-12-08]
CHR Extension: (Floating for YouTube™ Extension) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2016-12-08]
CHR Extension: (Google Tabellen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-31]
CHR Extension: (EditThisCookie) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-12-08]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-10]
CHR Extension: (Floating for YouTube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2016-12-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-31]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-08]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\System Profile [2016-12-08]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch [2016-12-08] <==== ACHTUNG
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-03]
CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\binlebahppinoanabipmieceeaakflee [2016-06-19]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod,  Bots) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-10-01]
CHR Extension: (Floating for YouTube™ Extension) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2016-09-02]
CHR Extension: (Avast SafePrice) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-14]
CHR Extension: (EditThisCookie) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-10-22]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-03]
CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-10-26]
CHR Extension: (Floating for YouTube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2016-09-02]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-27]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden>

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [737984 2016-06-03] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe [71168 2014-12-04] (ASUS Cloud Corporation) [Datei ist nicht signiert]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-12] (AVAST Software)
S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2016-10-30] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
S2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2627080 2016-11-11] (LogMeIn Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-11-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-11-11] (LogMeIn, Inc.)
S3 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [157928 2015-12-02] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [438272 2015-08-06] (PowerUp Software, LLC) [Datei ist nicht signiert]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-12-12] (AVAST Software)
R3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-12] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-12] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-16] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4226560 2014-10-17] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2014-09-19] (ASUS Corporation)
S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. )
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-01-27] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-01-27] (Disc Soft Ltd)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2016-11-11] (LogMeIn Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
S3 Larmkanal; C:\Windows\system32\DRIVERS\Larmkanal.sys [33144 2015-04-23] (Adoriasoft LLC)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-12-04] (Malwarebytes)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
S3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-12-02] (McAfee, Inc.)
R3 mt7612US; C:\Windows\system32\DRIVERS\mt7612US.sys [376200 2015-12-08] (MediaTek Inc.)
S3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [22600 2014-01-14] ()
S3 Phosgene; C:\Windows\system32\DRIVERS\Phosgene.sys [32120 2015-06-08] ()
S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
R1 VBoxUSBMon; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 xb1usb; C:\Windows\System32\drivers\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation)
R1 XQHDrv; C:\Windows\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-14 17:18 - 2016-12-14 17:18 - 00000000 ____D C:\Users\Alex\Downloads\FRST-OlderVersion
2016-12-13 16:03 - 2016-10-16 21:08 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AC8.tmp
2016-12-13 16:03 - 2016-09-22 13:09 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AC7.tmp
2016-12-13 16:03 - 2016-09-15 16:37 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AB2.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-12-13 16:03 - 2016-09-12 09:08 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AD8.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AC5.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AB3.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AC6.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AB4.tmp
2016-12-13 12:59 - 2016-12-12 18:40 - 00082936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2016-12-13 12:34 - 2016-12-13 12:34 - 00000000 _____ C:\Users\Alex\AppData\Local\{4D578369-82B8-442F-815C-D854DB09072C}
2016-12-12 13:45 - 2016-12-14 12:18 - 00001539 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk
2016-12-10 17:36 - 2016-12-10 17:36 - 03968464 _____ C:\Users\Alex\Downloads\AdwCleaner_6.040.exe
2016-12-10 16:20 - 2016-12-10 16:20 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\uTorrent
2016-12-10 16:04 - 2016-12-10 16:36 - 00000000 ____D C:\Users\Alex\AppData\Local\Undertale_Yellow
2016-12-08 18:40 - 2016-12-10 19:27 - 00000000 ____D C:\Users\Alex\Documents\BioWare
2016-12-08 17:22 - 2016-12-08 17:26 - 00049164 _____ C:\Users\Alex\Downloads\Addition.txt
2016-12-08 17:14 - 2016-12-14 17:19 - 00033412 _____ C:\Users\Alex\Downloads\FRST.txt
2016-12-07 12:39 - 2016-12-07 12:39 - 00001228 _____ C:\Users\Alex\Desktop\Google Chrome.lnk
2016-12-05 16:52 - 2016-12-05 16:52 - 00000000 ____D C:\Program Files (x86)\ESET
2016-12-05 16:51 - 2016-12-05 16:51 - 02870984 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe
2016-12-05 16:11 - 2016-12-14 17:19 - 00000000 ____D C:\FRST
2016-12-05 16:10 - 2016-12-14 17:18 - 02420224 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2016-12-04 20:53 - 2016-12-04 20:53 - 00001217 _____ C:\is wichtig und so.txt
2016-12-04 17:07 - 2016-12-04 19:35 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-04 17:06 - 2016-12-04 17:06 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-12-04 17:06 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-12-04 17:06 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-12-04 17:06 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-03 16:40 - 2016-12-03 16:40 - 444596224 _____ C:\Users\Alex\Downloads\Nicht bestätigt 169885.crdownload
2016-12-03 15:54 - 2016-12-03 15:54 - 00272124 _____ C:\unp30559605717924792.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00270611 _____ C:\unp30559605729800083.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269666 _____ C:\unp30559605730424954.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269591 _____ C:\unp30559605736363221.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269060 _____ C:\unp30559605737612769.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00268582 _____ C:\unp30559605729175048.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00268139 _____ C:\unp30559605736831665.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267808 _____ C:\unp30559605727768539.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267711 _____ C:\unp30559605728706276.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267546 _____ C:\unp30559605728237747.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267008 _____ C:\unp30559605720893214.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00266473 _____ C:\unp30559605719955665.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00266333 _____ C:\unp30559605727143706.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265623 _____ C:\unp30559605723081011.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265521 _____ C:\unp30559605722612551.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265485 _____ C:\unp30559605720424630.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265375 _____ C:\unp30559605719330832.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00264885 _____ C:\unp30559605718862051.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00263909 _____ C:\unp30559605718393090.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00260151 _____ C:\unp30559605707611521.mdmp
2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2016-11-23 12:06 - 2016-11-23 12:06 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2016-11-22 13:06 - 2016-11-22 13:06 - 00002074 _____ C:\Users\Alex\Desktop\FL Studio 12 (64bit).lnk
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\VST2
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\Documents\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Program Files\Image-Line
2016-11-21 20:44 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-11-21 19:46 - 2016-11-21 19:46 - 00000000 _____ C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A}
2016-11-18 13:59 - 2016-11-18 13:59 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Doborog
2016-11-15 18:28 - 2016-11-15 18:28 - 00000000 ____D C:\Users\Alex\Documents\OhSir
2016-11-15 14:45 - 2016-11-25 12:45 - 00000159 _____ C:\Users\Alex\AppData\Roaming\WB.CFG

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-12-14 16:37 - 2016-05-21 07:20 - 00001138 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-14 14:15 - 2015-12-29 16:48 - 00000093 _____ C:\Users\Alex\AppData\Roaming\sp_data.sys
2016-12-14 12:52 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2016-12-14 12:28 - 2015-12-29 16:50 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-65538100-1531695327-3227344209-1001
2016-12-14 12:26 - 2016-10-07 13:12 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-12-14 12:21 - 2016-06-27 09:39 - 00000000 ____D C:\Users\Alex\AppData\Local\LogMeIn Hamachi
2016-12-14 12:18 - 2016-05-21 07:20 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-14 12:17 - 2015-12-29 16:50 - 00000000 __RDO C:\Users\Alex\OneDrive
2016-12-13 21:17 - 2015-12-29 16:41 - 00000000 ____D C:\Users\Alex
2016-12-13 16:05 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\WhatsApp
2016-12-13 16:03 - 2016-05-10 06:00 - 00001940 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-12-13 16:03 - 2016-01-06 19:47 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-12-13 16:02 - 2016-10-25 18:01 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2016-12-13 15:21 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-13 12:31 - 2005-04-26 02:05 - 00053248 _____ C:\Windows\SysWOW64\zlib.dll
2016-12-12 16:51 - 2016-06-26 15:42 - 00002211 _____ C:\Users\Alex\Desktop\WhatsApp.lnk
2016-12-12 16:51 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2016-12-12 16:51 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Local\WhatsApp
2016-12-12 16:49 - 2016-06-26 15:41 - 00000000 ____D C:\Users\Alex\AppData\Local\SquirrelTemp
2016-12-11 19:50 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-12-10 20:19 - 2016-01-07 14:32 - 00189952 ___SH C:\Users\Alex\Documents\Thumbs.db
2016-12-10 17:47 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-12-10 17:46 - 2016-08-09 11:22 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-12-10 17:46 - 2016-05-15 10:31 - 00000000 ____D C:\AdwCleaner
2016-12-10 17:45 - 2016-03-04 13:31 - 00000000 ____D C:\Users\Alex\AppData\Roaming\uTorrent
2016-12-10 16:01 - 2016-01-11 13:56 - 00000000 ____D C:\Games
2016-12-10 14:59 - 2016-04-09 17:01 - 00000000 ____D C:\Program Files\PeerBlock
2016-12-10 14:58 - 2016-01-02 13:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TS3Client
2016-12-08 15:24 - 2016-09-02 21:01 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-12-07 12:39 - 2015-12-29 16:44 - 00001056 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-04 21:09 - 2016-07-20 20:16 - 00000000 ____D C:\Users\Alex\AppData\Local\uhitghojotypcsp
2016-12-04 21:08 - 2016-08-09 11:22 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71}
2016-12-04 21:08 - 2016-05-15 09:37 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CentralPicture
2016-12-03 19:11 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2016-12-03 16:23 - 2015-04-11 13:00 - 00773008 _____ C:\Windows\system32\perfh007.dat
2016-12-03 16:23 - 2015-04-11 13:00 - 00162310 _____ C:\Windows\system32\perfc007.dat
2016-12-03 16:23 - 2014-11-22 02:01 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-03 15:46 - 2016-08-09 11:23 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99}
2016-12-03 11:30 - 2016-10-20 17:32 - 00000000 _____ C:\Windows\SysWOW64\nativelog.txt
2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2016-12-03 10:53 - 2016-09-15 16:25 - 00000940 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2016-11-26 19:07 - 2015-12-29 17:03 - 00000000 ____D C:\Users\Alex\AppData\Roaming\.minecraft
2016-11-26 17:25 - 2016-09-28 18:12 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Landfall
2016-11-24 20:54 - 2016-08-05 12:47 - 00000000 ____D C:\Users\Alex\Desktop\Fusion364
2016-11-24 19:48 - 2015-12-29 16:51 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2016-11-24 19:21 - 2015-04-11 05:37 - 00000000 ____D C:\ProgramData\Skype
2016-11-24 19:20 - 2016-02-17 16:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-11-23 15:58 - 2015-12-23 16:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-11-23 12:07 - 2013-08-22 16:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-11-23 12:06 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-11-23 12:05 - 2016-04-28 15:33 - 00000000 ____D C:\Program Files\Microsoft Office
2016-11-16 17:46 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2016-11-15 18:56 - 2016-01-11 13:45 - 00000000 ____D C:\Windows\system32\MRT
2016-11-15 18:51 - 2016-01-11 13:45 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-14 13:38 - 2016-05-21 07:21 - 00002227 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-14 13:38 - 2015-12-31 19:27 - 00002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-14 13:13 - 2016-05-11 15:37 - 00000000 ____D C:\Users\Alex\AppData\Local\MEGAsync

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2016-06-25 07:49 - 2016-06-25 07:49 - 0000000 _____ () C:\Users\Alex\AppData\Roaming\dc.ogt
2015-12-29 16:48 - 2016-12-14 14:15 - 0000093 _____ () C:\Users\Alex\AppData\Roaming\sp_data.sys
2016-11-15 14:45 - 2016-11-25 12:45 - 0000159 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG
2016-02-04 18:29 - 2016-02-04 18:29 - 0000003 _____ () C:\Users\Alex\AppData\Local\updater.log
2016-02-04 18:29 - 2016-02-05 12:16 - 0000059 _____ () C:\Users\Alex\AppData\Local\UserProducts.xml
2016-07-27 14:21 - 2016-07-27 14:21 - 0000000 _____ () C:\Users\Alex\AppData\Local\{127B88D2-2B72-44AB-825B-326071D547F3}
2016-12-13 12:34 - 2016-12-13 12:34 - 0000000 _____ () C:\Users\Alex\AppData\Local\{4D578369-82B8-442F-815C-D854DB09072C}
2016-11-21 19:46 - 2016-11-21 19:46 - 0000000 _____ () C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A}
2015-12-30 13:30 - 2015-12-30 13:30 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-23 16:46 - 2015-12-23 16:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-11 05:36 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Einige Dateien in TEMP:
====================
C:\Users\Alex\AppData\Local\Temp\libeay32.dll
C:\Users\Alex\AppData\Local\Temp\msvcr120.dll
C:\Users\Alex\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2016-12-06 16:48

==================== Ende von FRST.txt ============================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Alex (14-12-2016 17:22:34)
Gestartet von C:\Users\Alex\Downloads
Windows 8.1 (Update) (X64) (2015-12-29 15:43:21)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-65538100-1531695327-3227344209-500 - Administrator - Disabled)
Alex (S-1-5-21-65538100-1531695327-3227344209-1001 - Administrator - Enabled) => C:\Users\Alex
Gast (S-1-5-21-65538100-1531695327-3227344209-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-65538100-1531695327-3227344209-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\uTorrent) (Version: 3.4.9.42973 - BitTorrent Inc.)
Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.29.0 - Mirillis)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.7.0.272 - Adobe Systems Incorporated)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Assassin's Creed IV Black Flag Version 1.07 (HKLM-x32\...\{0616F772-5099-41A0-A20F-339C74FDAE95}_is1) (Version: 1.07 - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Assassin's Creed Liberation HD_is1) (Version:  - )
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.2 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.8 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.0.8 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.01.0003 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0034 - ASUS)
Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version:  - Audacity Team)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Clustertruck (HKLM-x32\...\1661530902_is1) (Version: 2.0.0.2 - GOG.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.20 - ASUSTek Computer Inc.)
DkZ Studio (HKLM-x32\...\DkZ Studio0.9.0) (Version:  - )
Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Evernote v. 5.8.3 (HKLM-x32\...\{404B3FB8-A820-11E4-83FC-00163E98E7D6}) (Version: 5.8.3.6507 - Evernote Corp.)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit PhantomPDF (HKLM-x32\...\{045A0488-55C1-45B1-9992-4B4134904D61}) (Version: 7.0.59.127 - Foxit Software Inc.)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gunman Clive (HKLM-x32\...\R3VubWFuQ2xpdmU=_is1) (Version: 1 - )
HashCheck Shell Extension (x86-32) (HKLM-x32\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HashCheck Shell Extension (x86-64) (HKLM\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{FD79E5D2-5CFE-49C2-9461-D011D1355696}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.37 - Hewlett-Packard Company)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4013 - Intel Corporation)
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version:  - )
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.541 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.541 - LogMeIn, Inc.) Hidden
LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mass Effect 2 Ultimate Edition Version 1.02 (HKLM-x32\...\Mass Effect 2 Ultimate Edition_is1) (Version: 1.02 - Bioware)
Mass Effect Ultimate Edition Version 1.02 (HKLM-x32\...\Mass Effect Ultimate Edition_is1) (Version: 1.02 - Bioware)
Maxx Audio Installer (x64) (Version: 1.6.4882.94 - Waves Audio Ltd.) Hidden
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.207 - McAfee, Inc.)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft Office Professional 2016 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 16.0.7466.2038 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\OneDriveSetup.exe) (Version: 17.3.6517.0809 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.1 - Notepad++ Team)
NVIDIA Graphics Driver 333.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 333.02 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
One Piece Pirate Warriors 3 (HKLM-x32\...\One Piece Pirate Warriors 3_is1) (Version:  - )
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version:  - )
PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)
Pinnacle Game Profiler (HKLM-x32\...\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}) (Version: 8.2.8 - PowerUp Software)
Project64 version 2.1.0.1 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.1.0.1 - )
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7409 - Realtek Semiconductor Corp.)
ROBLOX Player for Alex (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version:  - ROBLOX Corporation)
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version:  - )
Shovel Knight (HKLM-x32\...\1207664823_is1) (Version: 2.11.0.18 - GOG.com)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Turbo Dismount (HKLM-x32\...\Turbo Dismount 1.0.0) (Version: 1.0.0 - Predator101)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.15.458 - ASUS Cloud Corporation)
WhatsApp (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\WhatsApp) (Version: 0.2.2732 - WhatsApp)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse  (07/02/2014 1.0.0.228) (HKLM\...\7504488B89E0121B0737D63957491C9CD2633065) (Version: 07/02/2014 1.0.0.228 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\RobloxProxy64.dll (ROBLOX Corporation)
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {08C5E6FF-0744-43FB-ACBD-6ED57CB97FF0} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2014-11-03] ()
Task: {138BFF39-3FF9-40A2-942F-21694D15D97B} - \Vwpystzach Debuger -> Keine Datei <==== ACHTUNG
Task: {17696075-8254-4000-8B5B-63068DCE559A} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-12-19] (Realtek Semiconductor)
Task: {4571B958-254C-4EE4-92C9-6A648ACA1108} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-04] (AVAST Software)
Task: {472673E9-9F76-49A4-B669-BD65F4FF2A6E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {591BDDA3-A3A5-497F-91C1-45DCC644321A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-12] (AVAST Software)
Task: {7EBF6CE4-7D81-4023-9E40-37F631A03283} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.)
Task: {8880B942-3D1F-4025-966A-93C0B8FB4029} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.)
Task: {892C9053-7FAA-49D4-9C2D-44DE9367CC26} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {9498B1B7-7650-45D3-8F5B-DFE3600CC88E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-11-15] (Microsoft Corporation)
Task: {9EE072A7-9208-48CB-9415-2A708510A52B} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-03-03] (ASUSTek Computer Inc.)
Task: {9F4E33A6-7BA5-45A6-97CF-19938518AB70} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-12-19] (Realtek Semiconductor)
Task: {A507A68E-6030-454E-B007-2DC8D03BD35F} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {AF5E162A-B56A-4D05-8C34-31F11559CAB5} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-04-02] (ASUS)
Task: {BBB403B1-8F83-43C3-A303-2E026B32295A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {BCE0555C-1697-4960-BBBF-E309345F9A90} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {CF463C07-116E-41A4-8E32-9098C771F735} - System32\Tasks\{B44B185C-A133-48DB-A9BF-DFC8FC7F4A2A} => pcalua.exe -a C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71}\uninst.exe -c -FN="C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99}\updater.exe"-P=/Uninstall /s /noun /DelSelfDir
Task: {D677EB6A-2AEA-4458-BA8E-43CBA342E7E0} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)
Task: {DE91AF5B-E72D-4B0C-B0FA-62E3A561D74A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {E27BB922-3130-40D9-93FB-EBB3DB37C5D9} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-09-19] (AsusTek)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™ (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=tazoygroulychabch --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2ef8a18a9f0d801f\user0 - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-12-23 16:43 - 2014-04-08 22:06 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-01 15:13 - 2016-11-14 13:13 - 00592384 _____ () C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll
2015-04-15 21:13 - 2015-04-15 21:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-08-26 12:00 - 2016-08-26 12:00 - 01864384 _____ () C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2014-12-19 11:51 - 2014-11-19 08:26 - 00457616 _____ () C:\Windows\system32\igfxTray.exe
2012-03-08 03:27 - 2012-03-08 03:27 - 00016384 _____ () C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ACVsWin.dll
2015-12-23 16:38 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2016-09-15 12:38 - 2016-03-09 07:28 - 03306496 _____ () C:\Program Files (x86)\Bluestacks\libGLESv2.dll
2016-07-21 06:05 - 2016-07-21 06:05 - 00482304 _____ () C:\Users\Alex\AppData\Local\MEGAsync\libsodium.dll
2016-07-01 11:26 - 2016-07-01 11:26 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-09-12 09:07 - 2016-09-12 09:07 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-12 09:07 - 2016-09-12 09:07 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-11-14 13:38 - 2016-11-08 21:29 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libglesv2.dll
2016-11-14 13:38 - 2016-11-08 21:29 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libegl.dll
2014-11-03 18:37 - 2014-11-03 18:37 - 00012288 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [346]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:DocumentSummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:SummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [346]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT [40]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT2 [346]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT2 [346]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [346]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2016-05-15 09:38 - 00001331 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "Skype"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{10FC833E-F9E2-4FEE-9DAC-AF89EBA0BCBF}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [UDP Query User{4E95F239-9A72-4C40-9C08-51B99134B707}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [TCP Query User{ECB50DC9-C441-4532-A58A-FD387BDA158A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4C7FF8A7-2D16-4306-9ED6-3913802FF09A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{492AF373-065B-4568-A0BA-CF9EB78095FA}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C73240A8-9B78-4F52-9468-A1E5D0072F8A}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{93586F52-7596-4530-91AC-F1659962FAEF}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{51183177-4B7B-49C9-9F65-E8C52D3DC189}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{708ABD37-971E-47FB-851C-8A7FA665F7A8}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [UDP Query User{957FA785-64C5-45FF-8740-D0C4B2FB3743}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [{44097252-FF8C-4B5B-9435-41076632DB8C}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{8F7E90A6-E953-4CF5-A6A0-DBE7677FE715}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{38A8E932-7339-43FC-9BC7-62CADDD2273C}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8336F72D-E587-44F2-99CF-C912AAAD38E4}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{123B1990-6A5B-4C2F-9263-97D28ADF029B}] => C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{EE80C755-D545-4ED6-BC4C-7B42029C7E46}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{44E30B9F-5110-436F-B5A6-FE86E85FD5CC}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{348FA613-40D1-4BB9-8938-6C0D61F013F5}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe
FirewallRules: [UDP Query User{92DDF0AF-6971-43F5-901A-FC5B5FF3AE0D}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe
FirewallRules: [TCP Query User{06AB6670-7C78-487A-9778-D1B264DC1564}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe
FirewallRules: [UDP Query User{5DD73249-CBCF-483E-9D5E-466567462FD5}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe
FirewallRules: [{AF281303-EF8A-42D3-988D-20A720653E07}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8C22FCE4-FA04-47DD-9A0C-A2C7338EA604}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4E8F4B42-E7FB-4008-ADDA-DA8E1E1AC516}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{FDC807DB-6969-4D61-80C6-D75B4A6A9330}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{46B04A58-C9CE-4CD5-A4B4-C21106760EB3}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [UDP Query User{FC98FC04-44C9-4F6B-89CE-5520FFC4A9C5}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [{A3637EF4-BA68-4B46-8A46-84A34E9E509E}] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [{EAAB586C-26F3-4EBD-94F3-619E7A56BFCA}] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [TCP Query User{562D5B8F-C1E3-45D7-ACD4-FD4847CEC60B}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [UDP Query User{9F51ED2F-3210-4DBB-92BC-40EACEC24B23}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [{09A128FE-1EDB-4CF9-AC9E-2EFFF2FF4BA4}] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [{9A9D565D-EB97-4EC5-A7AB-704F40B14396}] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [TCP Query User{E90A6FEC-AA2D-4318-BD9B-C53F8445909A}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [UDP Query User{14B552A8-3800-4317-95ED-E7BEFFE1E9F8}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{6B48CA46-5BA9-4A6F-BDA5-BD49402F373F}] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{C4ED96A8-AC9A-403E-BA28-EB470B19C710}] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [TCP Query User{38EEAEEE-F0D5-41D0-8A3F-64A023AB7140}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [UDP Query User{3DD759D5-DBEA-422B-8448-E96864834E66}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{8C1BFAF2-FC3B-41B1-861C-5A9C730B4D5B}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{8ED35984-2E2D-44EC-BFC0-50565EC306BF}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [TCP Query User{6CF85764-FFCC-40E4-98FA-01F7DE67BE9F}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [UDP Query User{9CAE8DBC-7A57-4607-BD69-ABCEA29F4623}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{D09E4530-3635-47D0-AA76-F0AC06FF9BB3}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{E2FE6283-80DA-4CA0-9D6B-5D0AF06C5C4D}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{E4260829-F65D-46E8-BD46-EB5A18637349}] => C:\Users\Alex\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [{1E2E4FB0-4182-4CA7-9C99-A000BA9130D0}] => C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [TCP Query User{5E9EE161-F7CD-4CB9-A81A-A091FB558042}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [UDP Query User{CA95F2C1-3664-42C1-ABD8-799C7897002D}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [TCP Query User{511C5FB3-5A2C-402E-BDC9-1989EED92863}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{E26A0133-AD60-49D8-9B16-896246D0B02B}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{2DA21112-708B-4C66-94B3-72FC838FC360}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{F92C3270-7638-485B-9C9A-00EBDAE0AA0C}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{68B32EC2-969B-4FC6-967E-DC18878481B4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{879C8EA9-14CA-4759-A86E-68CC0DAA2086}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{9F6CABDD-24C8-42E9-AF25-4E11FB34AB8D}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3AF1C123-E7D0-4EE5-BDB9-1A75BB178688}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{235EAAC9-2DB5-478F-A2FA-A24CFB3CF803}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [UDP Query User{AD535FD8-0C56-4B8D-A3FE-A044ADD5D361}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [{7E85E748-E50E-4C6B-88C4-BD4D3977433B}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [{B82DAB3D-C9F8-4B7B-B998-3711AFECEAB7}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [TCP Query User{6895FE96-7D04-4F24-B9AB-780D0D34DACA}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [UDP Query User{A76252D1-07B5-4531-B3F3-6C1CF6986284}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [{08C356DF-1F2B-4FEA-B065-B471F29FE441}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [{EB1BD660-F2F8-4C8A-BB76-8131224014C1}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [TCP Query User{D075E647-5DE2-4C24-A105-CECEBAAFB7DC}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [UDP Query User{E2FB1262-C4AD-405F-B277-0AB109678383}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [{6C8D0102-0373-469B-923B-757C3C8322D0}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [{CBB8D6AE-F29B-40E1-9914-3E7FE8B4C049}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [TCP Query User{202F6B8E-560A-4AFB-BC1C-E8832762581D}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [UDP Query User{B9E91BC9-CA3A-4C7D-B27C-B755161F68D6}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{88CB5F26-EE0C-4927-907E-0C1F71A70CE4}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{B1A64F2D-BD6B-473E-A828-DB70DDDA667B}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{83A6B535-D986-42EB-87C2-5F29E07DD75C}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{517A5D30-3101-4522-BACA-6EBA31A0F9BA}D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [UDP Query User{24968FF8-F546-44F7-B79C-32C877E09383}D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [{A30C7F9C-9523-4A82-A4DA-09DA8ED62831}] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [{12964674-CBD6-4054-AD0D-8F7713C335B8}] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe

==================== Wiederherstellungspunkte =========================

24-11-2016 19:19:06 ASU_MSI_TRAN
07-12-2016 13:01:35 Geplanter Prüfpunkt
10-12-2016 19:27:58 Microsoft Visual C++ 2005 Redistributable wird installiert

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/14/2016 01:43:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MassEffect2.exe, Version: 1.2.1604.0, Zeitstempel: 0x4bd60ba2
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1fd8
Startzeit der fehlerhaften Anwendung: 0x01d25607b40d0563
Pfad der fehlerhaften Anwendung: D:\Games\Mass Effect 2 Ultimate Edition\Binaries\MassEffect2.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: f7ea1e54-c1fa-11e6-8346-af3847b06635
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (12/14/2016 12:18:19 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/14/2016 12:18:17 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.

Error: (12/14/2016 12:18:16 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (12/14/2016 12:18:16 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\Windows\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/14/2016 12:18:14 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/14/2016 12:18:14 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ESENT" in der DLL "C:\Windows\system32\esentprf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/14/2016 12:18:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.

Error: (12/14/2016 12:18:05 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updatercore.dll" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm AAM Updates Notifier Application wurde wegen dieses Fehlers geschlossen.

Programm: AAM Updates Notifier Application
Datei: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updatercore.dll

Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
	- diese sich im Netzwerk befindet, 
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
	- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. 
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.

Zusätzliche Daten
Fehlerwert: C000009C
Datenträgertyp: 3

Error: (12/14/2016 12:18:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AAM Updates Notifier.exe, Version: 10.0.0.26, Zeitstempel: 0x573eba17
Name des fehlerhaften Moduls: UpdaterCore.dll, Version: 9.0.0.29, Zeitstempel: 0x572a07d8
Ausnahmecode: 0xc0000006
Fehleroffset: 0x00069c10
ID des fehlerhaften Prozesses: 0x2c40
Startzeit der fehlerhaften Anwendung: 0x01d255fbab0bba6d
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterCore.dll
Berichtskennung: fba18198-c1ee-11e6-8346-af3847b06635
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (12/14/2016 01:00:07 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 01:00:03 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 12:59:03 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 12:58:59 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 12:45:39 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 12:45:35 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 12:45:32 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 12:18:03 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 12:18:00 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (12/14/2016 12:17:56 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.


CodeIntegrity:
===================================
  Date: 2016-12-08 15:21:47.862
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-07 13:13:58.605
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-06 16:52:22.444
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-27 20:14:51.521
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-11-16 14:17:00.091
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-28 22:43:42.354
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-10-27 19:08:55.719
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-03-06 18:41:03.241
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-03-06 18:41:03.149
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-03-06 18:41:02.970
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 3979.25 MB
Verfügbarer physikalischer RAM: 1567.31 MB
Summe virtueller Speicher: 5643.25 MB
Verfügbarer virtueller Speicher: 3072.48 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:55.75 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:263.35 GB) (Free:183.74 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 560A1A50)

Partition: GPT.

==================== Ende von Addition.txt ============================