| |
| |||||||
Log-Analyse und Auswertung: PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefundenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
07.12.2016, 22:27
| #16 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Es muss doch auch für einen Laien klar sein, dass wenn er ne Aussage zu seinem thematisierten Schädling haben will, er dann auch die ursprünglichen Logs posten muss. Du kannst doch dann nicht irgendein beliebiges anderes Programm starten und dann sagen, dass es genau dasselbe Ergebnis wie was im Ursprung thematisiert wurde. Meinst du nicht, dass es absolut besch... wäre, wenn es 50 AVs auf dem Markt gäbe, aber alle heißen anders, jedes hat ne andere GUI und ne andere Farbe aber trotzdem liefern alle immer zu jeder Zeit dassselbe Ergebnis? Das wäre grotesk. Also nein, verschiedene AVs arbeiten sooo unterschiedlich, da gibt es immer andere Ergebnisse. BTT: Zitat:
Das hast du doch aus einer legimtimen Quelle oder nicht? 
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
07.12.2016, 22:43
| #17 |
 | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Hallo,
__________________danke, dass Du Dir die Arbeit machst! Ich kenne die Datei nicht. Ich habe wissentlich nichts dergleichen heruntergeladen. Da sind im Windows-Temp noch andere *.exe Dateien und *.zip mit harmlosen Namen, die mir nichts sagen und die ich auch nicht heruntergeladen habe. Gruß, Lumis |
|
07.12.2016, 22:55
| #18 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefundenZitat:
Sowas muss man doch sehen
__________________ |
|
07.12.2016, 23:07
| #19 |
| | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Auf meinem Desktop ist es ein wenig voll... Aber da ist keine solche Datei, ich habe eben nachgesehen. Auf dem ganzen Laufwerk C nicht. Aber wahrscheinlich hat MSE die schon beseitigt, oder? In Panik verfallen bin ich übrigens nicht wegen den Trojanern alleine, sondern weil mit meinem PC ohne mein Wissen bei Paypal eingekauft wurde. Das war ja auch der Grund, dass ich dem McAffee nicht mehr getraut und MSE installiert habe am Samstag. |
|
07.12.2016, 23:25
| #20 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden 1. Schritt: Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers 2. Schritt: Kaspersky TDSS-Killer Downloade dir bitte  TDSSKiller.exe und speichere diese Datei auf dem Desktop
 Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.12.2016, 02:45
| #21 |
| | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Danke! Mache ich sofort! Nur eine kurze Frage: der McAfee ist noch drauf. Soll ich alles so lassen, oder soll ich den mit einem Entfernungstool von Chip runterschmeißen? Habe nun erst einmal alles so gelassen und den Scan mit Malwarebytes gestartet. Der geht sicherlich noch ein paar Stunden. Interessant ist, dass zwischendurch verdächtige Dateien gefunden wurden und beide Virenscanner zeitgleich angesprungen sind. Code:
ATTFilter 02:22:45.0382 0x2724 TDSS rootkit removing tool 3.1.0.12 Nov 7 2016 07:10:01
02:22:52.0819 0x2724 ============================================================
02:22:52.0819 0x2724 Current date / time: 2016/12/08 02:22:52.0819
02:22:52.0819 0x2724 SystemInfo:
02:22:52.0819 0x2724
02:22:52.0819 0x2724 OS Version: 6.1.7601 ServicePack: 1.0
02:22:52.0819 0x2724 Product type: Workstation
02:22:52.0819 0x2724 ComputerName: LUTZ-PC
02:22:52.0819 0x2724 UserName: Lutz
02:22:52.0819 0x2724 Windows directory: C:\Windows
02:22:52.0819 0x2724 System windows directory: C:\Windows
02:22:52.0819 0x2724 Running under WOW64
02:22:52.0819 0x2724 Processor architecture: Intel x64
02:22:52.0819 0x2724 Number of processors: 8
02:22:52.0819 0x2724 Page size: 0x1000
02:22:52.0819 0x2724 Boot type: Normal boot
02:22:52.0819 0x2724 CodeIntegrityOptions = 0x00000001
02:22:52.0819 0x2724 ============================================================
02:22:52.0897 0x2724 KLMD registered as C:\Windows\system32\drivers\15692493.sys
02:22:52.0897 0x2724 KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 7601.23418, osProperties = 0x1
02:22:53.0756 0x2724 System UUID: {E9D9001E-9896-6F0A-C52A-99320E1558CE}
02:22:54.0428 0x2724 Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
02:22:54.0444 0x2724 ============================================================
02:22:54.0444 0x2724 \Device\Harddisk0\DR0:
02:22:54.0444 0x2724 MBR partitions:
02:22:54.0444 0x2724 \Device\Harddisk0\DR0\Partition1: MBR, Type 0xC, StartLBA 0x3F, BlocksNum 0x1F77C1
02:22:54.0444 0x2724 ============================================================
02:22:54.0444 0x2724 Initialize success
02:22:54.0444 0x2724 ============================================================
02:24:26.0131 0x1fdc ============================================================
02:24:26.0131 0x1fdc Scan started
02:24:26.0131 0x1fdc Mode: Manual; SigCheck; TDLFS;
02:24:26.0131 0x1fdc ============================================================
02:24:26.0131 0x1fdc KSN ping started
02:24:26.0303 0x1fdc KSN ping finished: true
02:24:26.0334 0x1fdc ================ Scan system memory ========================
02:24:26.0334 0x1fdc System memory - ok
02:24:26.0334 0x1fdc ================ Scan services =============================
02:24:26.0334 0x1fdc 1394ohci - ok
02:24:26.0350 0x1fdc ACDaemon - ok
02:24:26.0350 0x1fdc ACPI - ok
02:24:26.0350 0x1fdc AcpiPmi - ok
02:24:26.0350 0x1fdc Adobe LM Service - ok
02:24:26.0350 0x1fdc AdobeActiveFileMonitor11.0 - ok
02:24:26.0350 0x1fdc AdobeARMservice - ok
02:24:26.0366 0x1fdc AdobeFlashPlayerUpdateSvc - ok
02:24:26.0366 0x1fdc adp94xx - ok
02:24:26.0366 0x1fdc adpahci - ok
02:24:26.0366 0x1fdc adpu320 - ok
02:24:26.0366 0x1fdc AeLookupSvc - ok
02:24:26.0381 0x1fdc Afc - ok
02:24:26.0381 0x1fdc AFD - ok
02:24:26.0381 0x1fdc agp440 - ok
02:24:26.0381 0x1fdc ALG - ok
02:24:26.0381 0x1fdc aliide - ok
02:24:26.0381 0x1fdc amdide - ok
02:24:26.0381 0x1fdc AmdK8 - ok
02:24:26.0397 0x1fdc AmdPPM - ok
02:24:26.0397 0x1fdc amdsata - ok
02:24:26.0397 0x1fdc amdsbs - ok
02:24:26.0397 0x1fdc amdxata - ok
02:24:26.0397 0x1fdc AppHostSvc - ok
02:24:26.0397 0x1fdc AppID - ok
02:24:26.0413 0x1fdc AppIDSvc - ok
02:24:26.0413 0x1fdc Appinfo - ok
02:24:26.0413 0x1fdc Apple Mobile Device Service - ok
02:24:26.0413 0x1fdc AppleCharger - ok
02:24:26.0413 0x1fdc AppleChargerSrv - ok
02:24:26.0413 0x1fdc arc - ok
02:24:26.0428 0x1fdc arcsas - ok
02:24:26.0428 0x1fdc ArcService - ok
02:24:26.0428 0x1fdc aspnet_state - ok
02:24:26.0428 0x1fdc AsyncMac - ok
02:24:26.0444 0x1fdc atapi - ok
02:24:26.0444 0x1fdc AudioEndpointBuilder - ok
02:24:26.0444 0x1fdc AudioSrv - ok
02:24:26.0444 0x1fdc avgsvc - ok
02:24:26.0444 0x1fdc avmeject - ok
02:24:26.0459 0x1fdc AxInstSV - ok
02:24:26.0459 0x1fdc azvusb - ok
02:24:26.0459 0x1fdc b06bdrv - ok
02:24:26.0459 0x1fdc b57nd60a - ok
02:24:26.0459 0x1fdc BDESVC - ok
02:24:26.0459 0x1fdc Beep - ok
02:24:26.0475 0x1fdc BEService - ok
02:24:26.0475 0x1fdc BFE - ok
02:24:26.0475 0x1fdc BITS - ok
02:24:26.0475 0x1fdc blbdrive - ok
02:24:26.0475 0x1fdc Bonjour Service - ok
02:24:26.0491 0x1fdc BootDefragDriver - ok
02:24:26.0491 0x1fdc bowser - ok
02:24:26.0491 0x1fdc BrFiltLo - ok
02:24:26.0491 0x1fdc BrFiltUp - ok
02:24:26.0491 0x1fdc Browser - ok
02:24:26.0491 0x1fdc Brserid - ok
02:24:26.0506 0x1fdc BrSerWdm - ok
02:24:26.0506 0x1fdc BrUsbMdm - ok
02:24:26.0506 0x1fdc BrUsbSer - ok
02:24:26.0506 0x1fdc BTHMODEM - ok
02:24:26.0506 0x1fdc bthserv - ok
02:24:26.0506 0x1fdc cdfs - ok
02:24:26.0522 0x1fdc cdrom - ok
02:24:26.0522 0x1fdc CertPropSvc - ok
02:24:26.0522 0x1fdc cfwids - ok
02:24:26.0522 0x1fdc CG6Service - ok
02:24:26.0522 0x1fdc chip1click - ok
02:24:26.0538 0x1fdc circlass - ok
02:24:26.0538 0x1fdc CLFS - ok
02:24:26.0538 0x1fdc clr_optimization_v2.0.50727_32 - ok
02:24:26.0538 0x1fdc clr_optimization_v2.0.50727_64 - ok
02:24:26.0538 0x1fdc clr_optimization_v4.0.30319_32 - ok
02:24:26.0553 0x1fdc clr_optimization_v4.0.30319_64 - ok
02:24:26.0553 0x1fdc CmBatt - ok
02:24:26.0553 0x1fdc cmdide - ok
02:24:26.0553 0x1fdc CNG - ok
02:24:26.0553 0x1fdc Compbatt - ok
02:24:26.0553 0x1fdc CompositeBus - ok
02:24:26.0553 0x1fdc COMSysApp - ok
02:24:26.0569 0x1fdc crcdisk - ok
02:24:26.0569 0x1fdc Creative ALchemy AL6 Licensing Service - ok
02:24:26.0569 0x1fdc Creative Audio Engine Licensing Service - ok
02:24:26.0569 0x1fdc CryptSvc - ok
02:24:26.0569 0x1fdc CT20XUT - ok
02:24:26.0569 0x1fdc CT20XUT.SYS - ok
02:24:26.0584 0x1fdc ctac32k - ok
02:24:26.0584 0x1fdc ctaud2k - ok
02:24:26.0584 0x1fdc CTAudSvcService - ok
02:24:26.0584 0x1fdc CTEXFIFX - ok
02:24:26.0584 0x1fdc CTEXFIFX.SYS - ok
02:24:26.0584 0x1fdc CTHWIUT - ok
02:24:26.0584 0x1fdc CTHWIUT.SYS - ok
02:24:26.0600 0x1fdc ctprxy2k - ok
02:24:26.0600 0x1fdc ctsfm2k - ok
02:24:26.0600 0x1fdc DcomLaunch - ok
02:24:26.0600 0x1fdc defragsvc - ok
02:24:26.0600 0x1fdc DfsC - ok
02:24:26.0600 0x1fdc Dhcp - ok
02:24:26.0616 0x1fdc discache - ok
02:24:26.0616 0x1fdc Disk - ok
02:24:26.0616 0x1fdc Dnscache - ok
02:24:26.0616 0x1fdc Dokan - ok
02:24:26.0616 0x1fdc DokanMounter - ok
02:24:26.0616 0x1fdc dot3svc - ok
02:24:26.0631 0x1fdc Dot4 - ok
02:24:26.0631 0x1fdc Dot4Print - ok
02:24:26.0631 0x1fdc Dot4Scan - ok
02:24:26.0631 0x1fdc dot4usb - ok
02:24:26.0631 0x1fdc DPS - ok
02:24:26.0647 0x1fdc drmkaud - ok
02:24:26.0647 0x1fdc DXGKrnl - ok
02:24:26.0647 0x1fdc DxVGrb - ok
02:24:26.0647 0x1fdc EagleX64 - ok
02:24:26.0647 0x1fdc EapHost - ok
02:24:26.0647 0x1fdc ebdrv - ok
02:24:26.0663 0x1fdc EFS - ok
02:24:26.0663 0x1fdc ehRecvr - ok
02:24:26.0663 0x1fdc ehSched - ok
02:24:26.0663 0x1fdc elxstor - ok
02:24:26.0663 0x1fdc emupia - ok
02:24:26.0663 0x1fdc ErrDev - ok
02:24:26.0678 0x1fdc EventSystem - ok
02:24:26.0678 0x1fdc ewusbmbb - ok
02:24:26.0678 0x1fdc ew_hwusbdev - ok
02:24:26.0678 0x1fdc exfat - ok
02:24:26.0678 0x1fdc Fabs - ok
02:24:26.0678 0x1fdc fastfat - ok
02:24:26.0694 0x1fdc Fax - ok
02:24:26.0694 0x1fdc fdc - ok
02:24:26.0694 0x1fdc fdPHost - ok
02:24:26.0694 0x1fdc FDResPub - ok
02:24:26.0694 0x1fdc FileInfo - ok
02:24:26.0694 0x1fdc Filetrace - ok
02:24:26.0694 0x1fdc FirebirdServerMAGIXInstance - ok
02:24:26.0709 0x1fdc FLEXnet Licensing Service - ok
02:24:26.0709 0x1fdc flpydisk - ok
02:24:26.0709 0x1fdc FltMgr - ok
02:24:26.0709 0x1fdc FLxHCIc - ok
02:24:26.0709 0x1fdc FLxHCIh - ok
02:24:26.0725 0x1fdc FontCache - ok
02:24:26.0725 0x1fdc FontCache3.0.0.0 - ok
02:24:26.0725 0x1fdc FsDepends - ok
02:24:26.0725 0x1fdc Fs_Rec - ok
02:24:26.0725 0x1fdc fvevol - ok
02:24:26.0725 0x1fdc fwlanusb6 - ok
02:24:26.0741 0x1fdc gagp30kx - ok
02:24:26.0741 0x1fdc GEARAspiWDM - ok
02:24:26.0741 0x1fdc GfExperienceService - ok
02:24:26.0741 0x1fdc GMSIPCI - ok
02:24:26.0741 0x1fdc gpsvc - ok
02:24:26.0756 0x1fdc GUBootStartup - ok
02:24:26.0756 0x1fdc gupdate - ok
02:24:26.0756 0x1fdc gupdatem - ok
02:24:26.0756 0x1fdc GUSBootStartup - ok
02:24:26.0756 0x1fdc ha20x22k - ok
02:24:26.0756 0x1fdc ha20x2k - ok
02:24:26.0772 0x1fdc hcw85cir - ok
02:24:26.0772 0x1fdc HdAudAddService - ok
02:24:26.0772 0x1fdc HDAudBus - ok
02:24:26.0772 0x1fdc HECIx64 - ok
02:24:26.0772 0x1fdc HidBatt - ok
02:24:26.0772 0x1fdc HidBth - ok
02:24:26.0788 0x1fdc HidIr - ok
02:24:26.0788 0x1fdc hidserv - ok
02:24:26.0788 0x1fdc HidUsb - ok
02:24:26.0788 0x1fdc HiPatchService - ok
02:24:26.0788 0x1fdc HipShieldK - ok
02:24:26.0788 0x1fdc hkmsvc - ok
02:24:26.0803 0x1fdc HomeGroupListener - ok
02:24:26.0803 0x1fdc HomeGroupProvider - ok
02:24:26.0803 0x1fdc HomeNetSvc - ok
02:24:26.0803 0x1fdc HpSAMD - ok
02:24:26.0803 0x1fdc HPSLPSVC - ok
02:24:26.0819 0x1fdc HTTP - ok
02:24:26.0819 0x1fdc huawei_enumerator - ok
02:24:26.0819 0x1fdc hwdatacard - ok
02:24:26.0819 0x1fdc HWDeviceService64.exe - ok
02:24:26.0819 0x1fdc hwpolicy - ok
02:24:26.0834 0x1fdc i8042prt - ok
02:24:26.0834 0x1fdc iaStorV - ok
02:24:26.0834 0x1fdc IDriverT - ok
02:24:26.0834 0x1fdc idsvc - ok
02:24:26.0834 0x1fdc IEEtwCollectorService - ok
02:24:26.0834 0x1fdc iirsp - ok
02:24:26.0850 0x1fdc IKEEXT - ok
02:24:26.0850 0x1fdc InnovativeSolutions_monitor - ok
02:24:26.0850 0x1fdc IntcAzAudAddService - ok
02:24:26.0850 0x1fdc intelide - ok
02:24:26.0850 0x1fdc intelppm - ok
02:24:26.0866 0x1fdc IPBusEnum - ok
02:24:26.0866 0x1fdc IpFilterDriver - ok
02:24:26.0866 0x1fdc iphlpsvc - ok
02:24:26.0866 0x1fdc IPMIDRV - ok
02:24:26.0866 0x1fdc IPNAT - ok
02:24:26.0866 0x1fdc iPod Service - ok
02:24:26.0881 0x1fdc IRENUM - ok
02:24:26.0881 0x1fdc isapnp - ok
02:24:26.0881 0x1fdc iScsiPrt - ok
02:24:26.0881 0x1fdc JMB36X - ok
02:24:26.0881 0x1fdc JRAID - ok
02:24:26.0881 0x1fdc kbdclass - ok
02:24:26.0897 0x1fdc kbdhid - ok
02:24:26.0897 0x1fdc KeyIso - ok
02:24:26.0897 0x1fdc KSecDD - ok
02:24:26.0897 0x1fdc KSecPkg - ok
02:24:26.0897 0x1fdc ksthunk - ok
02:24:26.0897 0x1fdc KtmRm - ok
02:24:26.0913 0x1fdc LanmanServer - ok
02:24:26.0913 0x1fdc LanmanWorkstation - ok
02:24:26.0913 0x1fdc LBTServ - ok
02:24:26.0913 0x1fdc LGBusEnum - ok
02:24:26.0913 0x1fdc LGCoreTemp - ok
02:24:26.0928 0x1fdc LGJoyXlCore - ok
02:24:26.0928 0x1fdc LGPBTDD - ok
02:24:26.0928 0x1fdc LGSHidFilt - ok
02:24:26.0928 0x1fdc LGVirHid - ok
02:24:26.0928 0x1fdc LHidFilt - ok
02:24:26.0928 0x1fdc lltdio - ok
02:24:26.0944 0x1fdc lltdsvc - ok
02:24:26.0944 0x1fdc lmhosts - ok
02:24:26.0944 0x1fdc LMouFilt - ok
02:24:26.0944 0x1fdc LMS - ok
02:24:26.0944 0x1fdc LogiRegistryService - ok
02:24:26.0959 0x1fdc LSI_FC - ok
02:24:26.0959 0x1fdc LSI_SAS - ok
02:24:26.0959 0x1fdc LSI_SAS2 - ok
02:24:26.0959 0x1fdc LSI_SCSI - ok
02:24:26.0959 0x1fdc luafv - ok
02:24:26.0959 0x1fdc LUsbFilt - ok
02:24:26.0975 0x1fdc LVRS64 - ok
02:24:26.0975 0x1fdc LVUVC64 - ok
02:24:26.0975 0x1fdc MarvinBus - ok
02:24:26.0975 0x1fdc massfilter - ok
02:24:26.0975 0x1fdc McAfee SiteAdvisor Service - ok
02:24:26.0991 0x1fdc McAPExe - ok
02:24:26.0991 0x1fdc McBootDelayStartSvc - ok
02:24:26.0991 0x1fdc mccspsvc - ok
02:24:26.0991 0x1fdc McMPFSvc - ok
02:24:26.0991 0x1fdc McNaiAnn - ok
02:24:27.0006 0x1fdc McODS - ok
02:24:27.0006 0x1fdc mcpltsvc - ok
02:24:27.0006 0x1fdc McProxy - ok
02:24:27.0006 0x1fdc Mcx2Svc - ok
02:24:27.0006 0x1fdc megasas - ok
02:24:27.0006 0x1fdc MegaSR - ok
02:24:27.0022 0x1fdc mfeaack - ok
02:24:27.0022 0x1fdc mfeavfk - ok
02:24:27.0022 0x1fdc mfefire - ok
02:24:27.0022 0x1fdc mfefirek - ok
02:24:27.0038 0x1fdc mfehidk - ok
02:24:27.0038 0x1fdc mfemms - ok
02:24:27.0038 0x1fdc mfencbdc - ok
02:24:27.0038 0x1fdc mfencrk - ok
02:24:27.0038 0x1fdc mfesapsn - ok
02:24:27.0038 0x1fdc mfevtp - ok
02:24:27.0053 0x1fdc mfewfpk - ok
02:24:27.0053 0x1fdc MMCSS - ok
02:24:27.0053 0x1fdc Mobile Partner. RunOuc - ok
02:24:27.0053 0x1fdc Modem - ok
02:24:27.0053 0x1fdc ModuleCoreService - ok
02:24:27.0069 0x1fdc monitor - ok
02:24:27.0069 0x1fdc mouclass - ok
02:24:27.0069 0x1fdc mouhid - ok
02:24:27.0069 0x1fdc mountmgr - ok
02:24:27.0069 0x1fdc MozillaMaintenance - ok
02:24:27.0069 0x1fdc MpFilter - ok
02:24:27.0084 0x1fdc mpio - ok
02:24:27.0084 0x1fdc mpsdrv - ok
02:24:27.0084 0x1fdc MpsSvc - ok
02:24:27.0084 0x1fdc MRxDAV - ok
02:24:27.0084 0x1fdc mrxsmb - ok
02:24:27.0084 0x1fdc mrxsmb10 - ok
02:24:27.0100 0x1fdc mrxsmb20 - ok
02:24:27.0100 0x1fdc msahci - ok
02:24:27.0100 0x1fdc msdsm - ok
02:24:27.0100 0x1fdc MSDTC - ok
02:24:27.0100 0x1fdc Msfs - ok
02:24:27.0116 0x1fdc mshidkmdf - ok
02:24:27.0116 0x1fdc msisadrv - ok
02:24:27.0116 0x1fdc MSiSCSI - ok
02:24:27.0116 0x1fdc msiserver - ok
02:24:27.0116 0x1fdc MSK80Service - ok
02:24:27.0116 0x1fdc MSKSSRV - ok
02:24:27.0131 0x1fdc MsMpSvc - ok
02:24:27.0131 0x1fdc MSPCLOCK - ok
02:24:27.0131 0x1fdc MSPQM - ok
02:24:27.0131 0x1fdc MsRPC - ok
02:24:27.0131 0x1fdc mssmbios - ok
02:24:27.0147 0x1fdc MSTEE - ok
02:24:27.0147 0x1fdc MTConfig - ok
02:24:27.0147 0x1fdc Mup - ok
02:24:27.0147 0x1fdc napagent - ok
02:24:27.0147 0x1fdc NativeWifiP - ok
02:24:27.0147 0x1fdc NDIS - ok
02:24:27.0163 0x1fdc NdisCap - ok
02:24:27.0163 0x1fdc NdisTapi - ok
02:24:27.0163 0x1fdc Ndisuio - ok
02:24:27.0163 0x1fdc NdisWan - ok
02:24:27.0163 0x1fdc NDProxy - ok
02:24:27.0163 0x1fdc Net Driver HPZ12 - ok
02:24:27.0178 0x1fdc NetBIOS - ok
02:24:27.0178 0x1fdc NetBT - ok
02:24:27.0178 0x1fdc Netlogon - ok
02:24:27.0178 0x1fdc Netman - ok
02:24:27.0178 0x1fdc NetMsmqActivator - ok
02:24:27.0178 0x1fdc NetPipeActivator - ok
02:24:27.0194 0x1fdc netprofm - ok
02:24:27.0194 0x1fdc netr28ux - ok
02:24:27.0194 0x1fdc NetTcpActivator - ok
02:24:27.0194 0x1fdc NetTcpPortSharing - ok
02:24:27.0194 0x1fdc nfrd960 - ok
02:24:27.0209 0x1fdc NisDrv - ok
02:24:27.0209 0x1fdc NisSrv - ok
02:24:27.0209 0x1fdc NlaSvc - ok
02:24:27.0209 0x1fdc NPF - ok
02:24:27.0209 0x1fdc Npfs - ok
02:24:27.0209 0x1fdc nsi - ok
02:24:27.0225 0x1fdc nsiproxy - ok
02:24:27.0225 0x1fdc Ntfs - ok
02:24:27.0225 0x1fdc Null - ok
02:24:27.0225 0x1fdc nusb3hub - ok
02:24:27.0225 0x1fdc nusb3xhc - ok
02:24:27.0241 0x1fdc nvelodiskfltr - ok
02:24:27.0241 0x1fdc nvelofsfltr - ok
02:24:27.0241 0x1fdc nveloportfltr - ok
02:24:27.0241 0x1fdc nveloSvc - ok
02:24:27.0241 0x1fdc NVHDA - ok
02:24:27.0241 0x1fdc nvlddmkm - ok
02:24:27.0256 0x1fdc NvNetworkService - ok
02:24:27.0256 0x1fdc nvraid - ok
02:24:27.0256 0x1fdc nvstor - ok
02:24:27.0256 0x1fdc NvStreamKms - ok
02:24:27.0256 0x1fdc NvStreamNetworkSvc - ok
02:24:27.0272 0x1fdc NvStreamSvc - ok
02:24:27.0272 0x1fdc nvsvc - ok
02:24:27.0272 0x1fdc nvvad_WaveExtensible - ok
02:24:27.0272 0x1fdc nv_agp - ok
02:24:27.0272 0x1fdc ohci1394 - ok
02:24:27.0288 0x1fdc Origin Client Service - ok
02:24:27.0288 0x1fdc ose - ok
02:24:27.0288 0x1fdc osppsvc - ok
02:24:27.0288 0x1fdc ossrv - ok
02:24:27.0288 0x1fdc p2pimsvc - ok
02:24:27.0303 0x1fdc p2psvc - ok
02:24:27.0303 0x1fdc Parport - ok
02:24:27.0303 0x1fdc partmgr - ok
02:24:27.0303 0x1fdc PcaSvc - ok
02:24:27.0303 0x1fdc pccsmcfd - ok
02:24:27.0303 0x1fdc pci - ok
02:24:27.0319 0x1fdc pciide - ok
02:24:27.0319 0x1fdc PCloudd - ok
02:24:27.0319 0x1fdc pcmcia - ok
02:24:27.0319 0x1fdc pcw - ok
02:24:27.0319 0x1fdc PEAUTH - ok
02:24:27.0334 0x1fdc PEFService - ok
02:24:27.0334 0x1fdc PerfHost - ok
02:24:27.0334 0x1fdc pla - ok
02:24:27.0334 0x1fdc PlugPlay - ok
02:24:27.0350 0x1fdc PMBDeviceInfoProvider - ok
02:24:27.0350 0x1fdc pmem - ok
02:24:27.0350 0x1fdc Pml Driver HPZ12 - ok
02:24:27.0350 0x1fdc PnkBstrA - ok
02:24:27.0366 0x1fdc PnkBstrB - ok
02:24:27.0366 0x1fdc PNRPAutoReg - ok
02:24:27.0366 0x1fdc PNRPsvc - ok
02:24:27.0366 0x1fdc PolicyAgent - ok
02:24:27.0366 0x1fdc Power - ok
02:24:27.0366 0x1fdc PptpMiniport - ok
02:24:27.0381 0x1fdc Processor - ok
02:24:27.0381 0x1fdc ProfSvc - ok
02:24:27.0381 0x1fdc ProtectedStorage - ok
02:24:27.0381 0x1fdc Psched - ok
02:24:27.0381 0x1fdc PSI_SVC_2 - ok
02:24:27.0397 0x1fdc PxHlpa64 - ok
02:24:27.0397 0x1fdc ql2300 - ok
02:24:27.0397 0x1fdc ql40xx - ok
02:24:27.0397 0x1fdc QPCopyEngine - ok
02:24:27.0397 0x1fdc QsFsFltr - ok
02:24:27.0413 0x1fdc QWAVE - ok
02:24:27.0413 0x1fdc QWAVEdrv - ok
02:24:27.0413 0x1fdc RasAcd - ok
02:24:27.0413 0x1fdc RasAgileVpn - ok
02:24:27.0413 0x1fdc RasAuto - ok
02:24:27.0413 0x1fdc Rasl2tp - ok
02:24:27.0428 0x1fdc RasMan - ok
02:24:27.0428 0x1fdc RasPppoe - ok
02:24:27.0428 0x1fdc RasSstp - ok
02:24:27.0428 0x1fdc rdbss - ok
02:24:27.0428 0x1fdc rdpbus - ok
02:24:27.0428 0x1fdc RDPCDD - ok
02:24:27.0444 0x1fdc RDPENCDD - ok
02:24:27.0444 0x1fdc RDPREFMP - ok
02:24:27.0444 0x1fdc RDPWD - ok
02:24:27.0444 0x1fdc rdyboost - ok
02:24:27.0444 0x1fdc RealPlayerUpdateSvc - ok
02:24:27.0459 0x1fdc RealTimes Desktop Service - ok
02:24:27.0459 0x1fdc RemoteAccess - ok
02:24:27.0459 0x1fdc RemoteRegistry - ok
02:24:27.0459 0x1fdc RichVideo64 - ok
02:24:27.0475 0x1fdc rpcapd - ok
02:24:27.0475 0x1fdc RpcEptMapper - ok
02:24:27.0475 0x1fdc RpcLocator - ok
02:24:27.0475 0x1fdc RpcSs - ok
02:24:27.0475 0x1fdc rspndr - ok
02:24:27.0475 0x1fdc RTL2832UBDA - ok
02:24:27.0491 0x1fdc RTL2832UUSB - ok
02:24:27.0491 0x1fdc RTL2832U_IRHID - ok
02:24:27.0491 0x1fdc RTL8167 - ok
02:24:27.0491 0x1fdc SamSs - ok
02:24:27.0491 0x1fdc SANDRA - ok
02:24:27.0506 0x1fdc sbp2port - ok
02:24:27.0506 0x1fdc SCardSvr - ok
02:24:27.0506 0x1fdc scfilter - ok
02:24:27.0506 0x1fdc Schedule - ok
02:24:27.0506 0x1fdc SCPolicySvc - ok
02:24:27.0522 0x1fdc SDRSVC - ok
02:24:27.0522 0x1fdc secdrv - ok
02:24:27.0522 0x1fdc seclogon - ok
02:24:27.0522 0x1fdc SENS - ok
02:24:27.0522 0x1fdc SensrSvc - ok
02:24:27.0522 0x1fdc Serenum - ok
02:24:27.0538 0x1fdc Serial - ok
02:24:27.0538 0x1fdc sermouse - ok
02:24:27.0538 0x1fdc SessionEnv - ok
02:24:27.0538 0x1fdc sffdisk - ok
02:24:27.0538 0x1fdc sffp_mmc - ok
02:24:27.0553 0x1fdc sffp_sd - ok
02:24:27.0553 0x1fdc sfloppy - ok
02:24:27.0553 0x1fdc SharedAccess - ok
02:24:27.0553 0x1fdc ShellHWDetection - ok
02:24:27.0553 0x1fdc SiSRaid2 - ok
02:24:27.0553 0x1fdc SiSRaid4 - ok
02:24:27.0569 0x1fdc SkypeUpdate - ok
02:24:27.0569 0x1fdc SLEE_17_DRIVER - ok
02:24:27.0569 0x1fdc Smb - ok
02:24:27.0569 0x1fdc SNMPTRAP - ok
02:24:27.0584 0x1fdc spldr - ok
02:24:27.0584 0x1fdc Spooler - ok
02:24:27.0584 0x1fdc sppsvc - ok
02:24:27.0584 0x1fdc sppuinotify - ok
02:24:27.0584 0x1fdc srv - ok
02:24:27.0584 0x1fdc srv2 - ok
02:24:27.0600 0x1fdc srvnet - ok
02:24:27.0600 0x1fdc SSDPSRV - ok
02:24:27.0600 0x1fdc SSMO3v2Filter - ok
02:24:27.0600 0x1fdc SstpSvc - ok
02:24:27.0600 0x1fdc Steam Client Service - ok
02:24:27.0616 0x1fdc Stereo Service - ok
02:24:27.0616 0x1fdc stexstor - ok
02:24:27.0616 0x1fdc stisvc - ok
02:24:27.0616 0x1fdc swenum - ok
02:24:27.0616 0x1fdc swprv - ok
02:24:27.0631 0x1fdc SysMain - ok
02:24:27.0631 0x1fdc TabletInputService - ok
02:24:27.0631 0x1fdc tap0901 - ok
02:24:27.0631 0x1fdc TapiSrv - ok
02:24:27.0631 0x1fdc TBS - ok
02:24:27.0647 0x1fdc Tcpip - ok
02:24:27.0647 0x1fdc TCPIP6 - ok
02:24:27.0647 0x1fdc tcpipreg - ok
02:24:27.0647 0x1fdc TDPIPE - ok
02:24:27.0647 0x1fdc TDTCP - ok
02:24:27.0663 0x1fdc tdx - ok
02:24:27.0663 0x1fdc TermDD - ok
02:24:27.0663 0x1fdc TermService - ok
02:24:27.0663 0x1fdc Themes - ok
02:24:27.0663 0x1fdc THREADORDER - ok
02:24:27.0678 0x1fdc TrkWks - ok
02:24:27.0678 0x1fdc truecrypt - ok
02:24:27.0678 0x1fdc TrustedInstaller - ok
02:24:27.0678 0x1fdc tssecsrv - ok
02:24:27.0678 0x1fdc TsUsbFlt - ok
02:24:27.0694 0x1fdc TuneUp.UtilitiesSvc - ok
02:24:27.0694 0x1fdc TuneUpUtilitiesDrv - ok
02:24:27.0694 0x1fdc tunnel - ok
02:24:27.0694 0x1fdc TwonkyMedia - ok
02:24:27.0709 0x1fdc TwonkyWebDav - ok
02:24:27.0709 0x1fdc uagp35 - ok
02:24:27.0709 0x1fdc udfs - ok
02:24:27.0709 0x1fdc UI0Detect - ok
02:24:27.0725 0x1fdc uliagpkx - ok
02:24:27.0725 0x1fdc umbus - ok
02:24:27.0725 0x1fdc UmPass - ok
02:24:27.0725 0x1fdc UMVPFSrv - ok
02:24:27.0725 0x1fdc UnlockerDriver5 - ok
02:24:27.0741 0x1fdc UNS - ok
02:24:27.0741 0x1fdc upnphost - ok
02:24:27.0741 0x1fdc USBAAPL64 - ok
02:24:27.0741 0x1fdc usbaudio - ok
02:24:27.0756 0x1fdc usbccgp - ok
02:24:27.0756 0x1fdc usbcir - ok
02:24:27.0756 0x1fdc usbehci - ok
02:24:27.0756 0x1fdc usbhub - ok
02:24:27.0756 0x1fdc usbohci - ok
02:24:27.0756 0x1fdc usbprint - ok
02:24:27.0772 0x1fdc usbscan - ok
02:24:27.0772 0x1fdc USBSTOR - ok
02:24:27.0772 0x1fdc usbuhci - ok
02:24:27.0772 0x1fdc usbvideo - ok
02:24:27.0772 0x1fdc usb_rndisx - ok
02:24:27.0788 0x1fdc utewmzu5 - ok
02:24:27.0788 0x1fdc UxSms - ok
02:24:27.0788 0x1fdc UxTuneUp - ok
02:24:27.0788 0x1fdc ValFltr - ok
02:24:27.0788 0x1fdc VaultSvc - ok
02:24:27.0803 0x1fdc vdrvroot - ok
02:24:27.0803 0x1fdc vds - ok
02:24:27.0803 0x1fdc vga - ok
02:24:27.0803 0x1fdc VgaSave - ok
02:24:27.0803 0x1fdc vhdmp - ok
02:24:27.0819 0x1fdc viaide - ok
02:24:27.0819 0x1fdc vNICdrv - ok
02:24:27.0819 0x1fdc volmgr - ok
02:24:27.0819 0x1fdc volmgrx - ok
02:24:27.0819 0x1fdc volsnap - ok
02:24:27.0819 0x1fdc vsmraid - ok
02:24:27.0834 0x1fdc VSS - ok
02:24:27.0834 0x1fdc vwifibus - ok
02:24:27.0834 0x1fdc vwififlt - ok
02:24:27.0834 0x1fdc vwifimp - ok
02:24:27.0834 0x1fdc W32Time - ok
02:24:27.0850 0x1fdc W3SVC - ok
02:24:27.0850 0x1fdc WacomPen - ok
02:24:27.0850 0x1fdc WANARP - ok
02:24:27.0850 0x1fdc Wanarpv6 - ok
02:24:27.0850 0x1fdc WAS - ok
02:24:27.0866 0x1fdc WatAdminSvc - ok
02:24:27.0866 0x1fdc wbengine - ok
02:24:27.0866 0x1fdc WbioSrvc - ok
02:24:27.0866 0x1fdc wcncsvc - ok
02:24:27.0866 0x1fdc WcsPlugInService - ok
02:24:27.0881 0x1fdc Wd - ok
02:24:27.0881 0x1fdc WDC_SAM - ok
02:24:27.0881 0x1fdc WDDriveService - ok
02:24:27.0881 0x1fdc Wdf01000 - ok
02:24:27.0897 0x1fdc WdiServiceHost - ok
02:24:27.0897 0x1fdc WdiSystemHost - ok
02:24:27.0897 0x1fdc wdm_usb - ok
02:24:27.0897 0x1fdc WebClient - ok
02:24:27.0897 0x1fdc Wecsvc - ok
02:24:27.0913 0x1fdc wercplsupport - ok
02:24:27.0913 0x1fdc WerSvc - ok
02:24:27.0913 0x1fdc WfpLwf - ok
02:24:27.0913 0x1fdc WIMMount - ok
02:24:27.0913 0x1fdc WinDefend - ok
02:24:27.0928 0x1fdc WinHttpAutoProxySvc - ok
02:24:27.0928 0x1fdc Winmgmt - ok
02:24:27.0928 0x1fdc WinRM - ok
02:24:27.0944 0x1fdc WinUsb - ok
02:24:27.0944 0x1fdc Wlansvc - ok
02:24:27.0944 0x1fdc wlidsvc - ok
02:24:27.0944 0x1fdc WmBEnum - ok
02:24:27.0944 0x1fdc WmFilter - ok
02:24:27.0959 0x1fdc WmHidLo - ok
02:24:27.0959 0x1fdc WmiAcpi - ok
02:24:27.0959 0x1fdc wmiApSrv - ok
02:24:27.0959 0x1fdc WMPNetworkSvc - ok
02:24:27.0959 0x1fdc WmVirHid - ok
02:24:27.0975 0x1fdc WmXlCore - ok
02:24:27.0975 0x1fdc WPCSvc - ok
02:24:27.0975 0x1fdc WPDBusEnum - ok
02:24:27.0975 0x1fdc ws2ifsl - ok
02:24:27.0975 0x1fdc wscsvc - ok
02:24:27.0975 0x1fdc WSearch - ok
02:24:27.0991 0x1fdc wuauserv - ok
02:24:27.0991 0x1fdc WudfPf - ok
02:24:27.0991 0x1fdc WUDFRd - ok
02:24:28.0006 0x1fdc wudfsvc - ok
02:24:28.0006 0x1fdc WwanSvc - ok
02:24:28.0006 0x1fdc ZTEusbmdm6k - ok
02:24:28.0006 0x1fdc ZTEusbnet - ok
02:24:28.0006 0x1fdc ZTEusbnmea - ok
02:24:28.0022 0x1fdc ZTEusbser6k - ok
02:24:28.0022 0x1fdc ZTEusbvoice - ok
02:24:28.0038 0x1fdc ================ Scan global ===============================
02:24:28.0038 0x1fdc [ Global ] - ok
02:24:28.0038 0x1fdc ================ Scan MBR ==================================
02:24:28.0459 0x1fdc [ 4FF574A9546F65C31184DFA0C4040168 ] \Device\Harddisk0\DR0
02:24:28.0459 0x1fdc Suspicious mbr (Forged): \Device\Harddisk0\DR0
02:24:28.0553 0x1fdc \Device\Harddisk0\DR0 - ok
02:24:28.0553 0x1fdc ================ Scan VBR ==================================
02:24:28.0553 0x1fdc [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition1
02:24:28.0553 0x1fdc \Device\Harddisk0\DR0\Partition1 - ok
02:24:28.0553 0x1fdc ================ Scan generic autorun ======================
02:24:28.0553 0x1fdc RTHDVCPL - ok
02:24:28.0553 0x1fdc NvBackend - ok
02:24:28.0553 0x1fdc EvtMgr6 - ok
02:24:28.0553 0x1fdc ShadowPlay - ok
02:24:28.0553 0x1fdc AVMWlanClient - ok
02:24:28.0553 0x1fdc AvgUi - ok
02:24:28.0553 0x1fdc mctadmin - ok
02:24:28.0553 0x1fdc mctadmin - ok
02:24:28.0553 0x1fdc mctadmin - ok
02:24:28.0584 0x1fdc AV detected via SS2: Microsoft Security Essentials, C:\Program Files\Microsoft Security Client\msseces.exe ( 4.10.209.0 ), 0x61000 ( enabled : updated )
02:24:28.0584 0x1fdc AV detected via SS2: McAfee Anti-Virus und Anti-Spyware, C:\Program Files\McAfee.com\Agent\mcupdate.exe ( ), 0x51000 ( enabled : updated )
02:24:28.0584 0x1fdc FW detected via SS2: McAfee Firewall, C:\Program Files\McAfee.com\Agent\mcupdate.exe ( ), 0x51010 ( enabled )
02:24:28.0788 0x1fdc ============================================================
02:24:28.0788 0x1fdc Scan finished
02:24:28.0788 0x1fdc ============================================================
02:24:28.0788 0x2138 Detected object count: 0
02:24:28.0788 0x2138 Actual detected object count: 0
Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2016.12.07.16
rootkit: v2016.11.20.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18376
Lutz :: LUTZ-PC [administrator]
08.12.2016 00:05:31
mbar-log-2016-12-08 (00-05-31).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 432134
Time elapsed: 1 hour(s), 29 minute(s), 47 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 4
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CHROMESETUP.EXE (RiskWare.IFEOHijack) -> Delete on reboot. [b0dcab39b3e73105625ccf869c67936d]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\ITUNES.EXE (RiskWare.IFEOHijack) -> Delete on reboot. [c0cc1dc7efab5adc376663f332d125db]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CHROMESETUP.EXE (RiskWare.IFEOHijack) -> Delete on reboot. [76163fa5811943f3348a4312af544eb2]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\ITUNES.EXE (RiskWare.IFEOHijack) -> Delete on reboot. [07856183e1b9eb4b9508470feb186c94]
Registry Values Detected: 4
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CHROMESETUP.EXE|Debugger (RiskWare.IFEOHijack) -> Data: "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" -> Delete on reboot. [b0dcab39b3e73105625ccf869c67936d]
HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\ITUNES.EXE|Debugger (RiskWare.IFEOHijack) -> Data: "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" -> Delete on reboot. [c0cc1dc7efab5adc376663f332d125db]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CHROMESETUP.EXE|Debugger (RiskWare.IFEOHijack) -> Data: "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" -> Delete on reboot. [76163fa5811943f3348a4312af544eb2]
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\ITUNES.EXE|Debugger (RiskWare.IFEOHijack) -> Data: "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe" -> Delete on reboot. [07856183e1b9eb4b9508470feb186c94]
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org
Database version:
main: v2016.12.08.01
rootkit: v2016.11.20.01
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18376
Lutz :: LUTZ-PC [administrator]
08.12.2016 01:44:35
mbar-log-2016-12-08 (01-44-35).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 431361
Time elapsed: 35 minute(s), 21 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
Erstmals erscheint im Online-Monitor der Fritz-Box 7490 fast überhaupt kein Traffic (Download 75 Upload 5). Am 7.12., obwohl überhaupt nichts heruntergeladen wurde, erscheinen nach 17 Uhr 2668 MB Download und 90 MB Upload. Könnte es sein, dass das System jetzt clean ist? Sollte das System clean sein, welchen Virenscanner soll ich installieren (kann auch ein kostenpflichtiger sein, hatte ich ja mit Livesafe bislang auch)? |
|
08.12.2016, 14:08
| #22 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.12.2016, 21:13
| #23 |
| | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefundenCode:
ATTFilter # AdwCleaner v6.040 - Bericht erstellt am 08/12/2016 um 19:36:38
# Aktualisiert am 02/12/2016 von Malwarebytes
# Datenbank : 2016-12-07.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : Lutz - LUTZ-PC
# Gestartet von : C:\Users\Lutz\Desktop\AdwCleaner_6.040.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
[-] Ordner gelöscht: C:\Users\Lutz\AppData\Local\OpenCandy
[-] Ordner gelöscht: C:\Users\Lutz\AppData\Local\StormFall
[-] Ordner gelöscht: C:\Users\Lutz\AppData\Local\YSearchUtil
[-] Ordner gelöscht: C:\Users\Lutz\AppData\Roaming\dvdvideosoftiehelpers
[-] Ordner gelöscht: C:\Users\Lutz\AppData\Roaming\OpenCandy
[-] Ordner gelöscht: C:\Users\Lutz\AppData\Roaming\0V1L2Z2Z1T1I1L1T
[-] Ordner gelöscht: C:\ProgramData\SecTaskMan
[#] Ordner mit Neustart gelöscht: C:\ProgramData\Application Data\SecTaskMan
[-] Ordner gelöscht: C:\Program Files (x86)\Free Video Converter
[-] Ordner gelöscht: C:\Program Files (x86)\GreenTree Applications
[-] Ordner gelöscht: C:\Program Files (x86)\vShare.tv plugin
[-] Ordner gelöscht: C:\Program Files (x86)\Common Files\Plasmoo
[-] Ordner gelöscht: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil
[-] Ordner gelöscht: C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj
***** [ Dateien ] *****
[-] Datei gelöscht: C:\END
[-] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\Plugins\npvsharetvplg.dll
[-] Datei gelöscht: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\11-suche.xml
[-] Datei gelöscht: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\Startsear.xml
[#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\Plugins\npvsharetvplg.dll
[#] Datei gelöscht: C:\Program Files (x86)\Mozilla Firefox\Plugins\npvsharetvplg.dll
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\BCUService
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LXImageTool.ZIPTool
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\LXImageTool.ZIPTool.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\LXImageTool.ZIPTool
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\LXImageTool.ZIPTool.1
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncher.1
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO
[#] Schlüssel mit Neustart gelöscht: [x64] HKLM\SOFTWARE\Classes\MyNewsBarLauncher.IE5BarLauncherBHO.1
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\CLSID\{A1B48071-416D-474E-A13B-BE5456E7FC31}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{231047C5-F7E9-45BE-9EFD-6E9BB6D59A9F}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{82443621-A29A-473E-8335-F5C958A7A4CA}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{0C58B7D1-D415-492B-A149-E976156BD3B8}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{79D60450-56C5-4A8C-9321-6D5BC2A81E5A}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{99C22A61-21BA-4F81-85FF-CDC9EB5DB10B}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{BB7256DD-EBA9-480B-8441-A00388C2BEC3}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{58124A0B-DC32-4180-9BFF-E0E21AE34026}]
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
[-] Wert gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]
[-] Wert gelöscht: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}]
[-] Wert gelöscht: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\APN PIP
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Appscion
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Conduit
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Iminent
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Pokki
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\PRODUCTSETUP
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Softonic
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\StartSearch
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Vittalia
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\vShare.tv
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\YahooPartnerToolbar
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Packages
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\APN PIP
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Appscion
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Conduit
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Iminent
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Pokki
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Softonic
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\StartSearch
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Vittalia
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\vShare.tv
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\YahooPartnerToolbar
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Iminent
[-] Schlüssel gelöscht: HKLM\SOFTWARE\PIP
[-] Schlüssel gelöscht: HKLM\SOFTWARE\WISECLEANER
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Packages
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vShare.tv plugin
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\APN PIP
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Appscion
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Conduit
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Iminent
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Pokki
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\PRODUCTSETUP
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Softonic
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\StartSearch
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Vittalia
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\vShare.tv
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\YahooPartnerToolbar
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Packages
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18C9E3869A16248439FE3FF9EB02207A
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3204F747B20694B8D49EF92D8DC94B
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFA531D0F3A71504DA7AC6A11CE33739
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}
[-] Schlüssel gelöscht: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Microsoft\Internet Explorer\SearchScopes\{A94277E3-1076-43b3-BF3F-54D391687391}
[-] Daten wiederhergestellt: HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A94277E3-1076-43b3-BF3F-54D391687391}
[-] Daten wiederhergestellt: HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A94277E3-1076-43b3-BF3F-54D391687391}
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2f23ab71-4ac6-41f2-a955-ea576e553146}
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A94277E3-1076-43b3-BF3F-54D391687391}
[-] Daten wiederhergestellt: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\castplatform.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\cdn.castplatform.com
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MsConfig\StartupReg\BCU
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj
***** [ Browser ] *****
[-] [C:\Users\Lutz\AppData\Local\Chromium\User Data\Default\Web data] [Search Provider] Gelöscht: de.ask.com
[-] [C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: startsear.ch
[-] [C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Gelöscht: search provided by yahoo.com
[-] [C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: kpionmjnkbpcdpcflammlgllecmejgjj
[-] [C:\Users\Lutz\AppData\Local\Vivaldi\User Data\Default] [extension] Gelöscht: kpionmjnkbpcdpcflammlgllecmejgjj
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [20241 Bytes] - [08/12/2016 19:36:38]
C:\AdwCleaner\AdwCleaner[S0].txt - [19064 Bytes] - [08/12/2016 19:35:49]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [20389 Bytes] ##########
Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Home Premium x64
Ran by Lutz (Administrator) on 08.12.2016 at 19:42:59,75
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 35
Successfully deleted: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\user.js (File)
Successfully deleted: C:\Windows\system32\Tasks\Google Update (Task)
Successfully deleted: C:\Windows\wininit.ini (File)
Successfully deleted: C:\Program Files (x86)\Common Files\innovative solutions (Folder)
Successfully deleted: C:\Program Files\reviversoft (Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Q9L3YNC (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4UVH5HPY (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5448ULKL (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\79A6V6T3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D14UPEEB (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IH48CPQ2 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JXZ1LKMB (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QTBRTL5B (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RW84AVZY (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU0Y65RW (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Lutz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YQ4WIG7X (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3Q9L3YNC (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4UVH5HPY (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5448ULKL (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\79A6V6T3 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D14UPEEB (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IH48CPQ2 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JXZ1LKMB (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QTBRTL5B (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RW84AVZY (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XU0Y65RW (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YQ4WIG7X (Temporary Internet Files Folder)
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.12.2016 at 19:45:48,02
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Aber der PC läuft wieder super. Fährt auch schnell hoch. Vielleicht ist ja alles gut. |
|
08.12.2016, 21:14
| #24 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.12.2016, 21:21
| #25 |
| | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Seit einer Weile funkt auch nichts mehr. Ist immer nur ein paar Minuten in der Stunde, dann aber volle Bandbreite in beide Richtungen. Oh, sehe gerade, das du geantwortet hast. Du kriegst sofort die Logs. Danke! Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Lutz (08-12-2016 21:18:50)
Gestartet von C:\Users\Lutz\Desktop\Fliegen
Windows 7 Home Premium Service Pack 1 (X64) (2010-12-02 18:09:54)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3438443834-875338260-1882614465-500 - Administrator - Disabled)
ASPNET (S-1-5-21-3438443834-875338260-1882614465-1004 - Limited - Enabled)
Gast (S-1-5-21-3438443834-875338260-1882614465-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3438443834-875338260-1882614465-1002 - Limited - Enabled)
Lutz (S-1-5-21-3438443834-875338260-1882614465-1000 - Administrator - Enabled) => C:\Users\Lutz
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB}
FW: McAfee Firewall (Enabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden
6500_E709_BasicWeb (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
6500_E709_Help_BasicWeb (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
A2A Wings of POWER 3 Spitfire (HKLM-x32\...\A2A Wings of POWER 3 Spitfire) (Version: - )
Accu-Sim for the WoP3 Spitfire (HKLM-x32\...\Accu-Sim for the WoP3 Spitfire) (Version: - )
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 20.0.0.233 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Photoshop Elements 11 (HKLM-x32\...\Adobe Photoshop Elements 11) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 11 (HKLM\...\PremElem110) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 11 (Version: 11.0 - Adobe Systems Incorporated) Hidden
Advanced Uninstaller PRO - Version 11 (HKLM-x32\...\AU11_is1) (Version: 11.72.0.337 - Innovative Solutions)
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)
Aerosoft's - Airbus X (HKLM-x32\...\{2336573C-3213-48AA-A306-8309BA9BD92C}) (Version: 1.21 - Aerosoft)
aerosoft's - Approaching Innsbruck X (HKLM-x32\...\{70864384-DD19-44CB-A999-A917F32F623D}) (Version: 1.10 - aerosoft)
aerosoft's - Balearic Islands X for FSX (HKLM-x32\...\{04B73EB2-7538-4CC4-BBD6-5463E508B69B}) (Version: 1.01 - aerosoft)
Aerosoft's - Corfu X (HKLM-x32\...\{8A073262-FB25-4224-AE36-C2725A616E05}) (Version: 1.10 - Aerosoft)
Aerosoft's - DHC-6 Twin Otter X (HKLM-x32\...\{3A8DED06-80E7-4555-AA1F-FF4A2A4D353C}) (Version: 1.11 - Aerosoft)
aerosoft's - FlightSim Commander 9 (HKLM-x32\...\{F941AABE-E868-42D9-9F38-884250F7898A}) (Version: 9.6.0.4 - aerosoft)
Aerosoft's - German Airfields 1 (HKLM-x32\...\{61C63F60-152B-4D28-B357-6DB81837FA9B}) (Version: 1.00 - Aerosoft)
Aerosoft's - German Airfields 2 (HKLM-x32\...\{1C5510F5-5452-4411-A54C-3DA055D8A793}) (Version: 1.00 - Aerosoft)
Aerosoft's - German Airfields 3 (HKLM-x32\...\{417FC1D9-A946-4638-B02C-FD9AE0E96E95}) (Version: 1.10 - Aerosoft)
aerosoft's - German Airports 2 X - FSX (HKLM-x32\...\{01C3630A-7FD2-46DF-B514-A4B829B0021A}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Bremen X (HKLM-x32\...\{C1F98ADD-81BF-45E1-A36B-515CA20B61AF}) (Version: 1.04 - aerosoft)
aerosoft's - German Airports 3 - Hamburg X (HKLM-x32\...\{EA6E7823-9E5B-4EDD-9750-C3C87FDF0460}) (Version: 1.03 - aerosoft)
Aerosoft's - HelgolandX (HKLM-x32\...\{61957FA7-34C1-4F46-871C-A0FD49848832}) (Version: 1.00 - Aerosoft)
Aerosoft's - Luxembourg Airports (HKLM-x32\...\{F293A032-EB67-4ADC-8646-F1AA7F9E0143}) (Version: 3.01 - Aerosoft)
Aerosoft's - Mallorca X Evolution - FSX (HKLM-x32\...\Mallorca X Evolution - FSX) (Version: 1.01 - Aerosoft)
aerosoft's - Mega Airport Amsterdam FSX (HKLM-x32\...\{0A297C87-BF52-43FD-AD75-EE72228E4457}) (Version: 1.04 - aerosoft)
aerosoft's - Mega Airport Barcelona X (HKLM-x32\...\{A8736347-B854-400E-A060-19321AD85B98}) (Version: 1.01 - aerosoft)
aerosoft's - Mega Airport Frankfurt X (HKLM-x32\...\{BAEE0C24-C8C2-4820-9DF4-887909F1A286}) (Version: 1.01 - aerosoft)
aerosoft's - Mega Airport London Heathrow X (HKLM-x32\...\{2F4AF40B-433A-494E-BB41-816D113F32BA}) (Version: 1.10 - aerosoft)
aerosoft's - Mega Airport Stockholm Arlanda X (HKLM-x32\...\{3B6F6E35-900C-4FE3-B2F6-067443353CD1}) (Version: 1.00 - aerosoft)
Aerosoft's - MyTraffic 2013 (HKLM-x32\...\{37F50C53-EDED-4FFE-9877-532A335C5C18}) (Version: 1.00 - Aerosoft)
aerosoft's - Nice Cote dAzur X (HKLM-x32\...\{90447E05-DE8E-470D-8D3E-C871D2AE74AF}) (Version: 1.03 - aerosoft)
aerosoft's - OMSI 2 - Drei Generationen (HKLM-x32\...\{C88376AA-BF64-40F4-9AD6-F8A18DA394F2}) (Version: 1.00 - aerosoft)
aerosoft's - OMSI 2 - Hamburg (HKLM-x32\...\{5BF6B590-F7F5-46B5-B5F4-B0CA93423AD6}) (Version: 2.01 - aerosoft)
aerosoft's - Venice X (HKLM-x32\...\{74F493A2-1264-4BF2-A135-0184C68BD580}) (Version: 1.00 - aerosoft)
Aerosoft's - VFR Germany 2 (HKLM-x32\...\{3BB7B4D3-C534-4700-AA1B-B01A8EA5F27C}) (Version: 1.00 - Aerosoft)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Amazon Amazon Music) (Version: 4.0.0.1205 - Amazon Services LLC)
Ansel (Version: 372.90 - NVIDIA Corporation) Hidden
AntiBrowserSpy (HKLM-x32\...\{F78B5B4F-075A-4C81-AA27-E707861EB5B7}_is1) (Version: 173 - Abelssoft)
Any Video Converter 3.1.9 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com)
Appigo Sync (HKLM-x32\...\{89A060BA-6CF3-4BDB-A94C-91C9BEF21C6A}) (Version: 1.2.0.0 - Appigo, Inc.)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
ArcSoft MediaImpression (HKLM-x32\...\{2C39F7CF-E022-4C0D-B1BA-AF6DDD931054}) (Version: 1.2.28.567 - ArcSoft)
Arma 3 (HKLM\...\Steam App 107410) (Version: - Bohemia Interactive)
Assetto Corsa (HKLM-x32\...\Steam App 244210) (Version: - Kunos Simulazioni)
AVG PC TuneUp (HKLM-x32\...\AVG PC TuneUp) (Version: 16.63.2.50050 - AVG Technologies)
AVG PC TuneUp (x32 Version: 16.63.4 - AVG Technologies) Hidden
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Bonjour-Druckdienste (HKLM\...\{4CE925AF-6519-4FEB-BEBD-DE2BFE2944EB}) (Version: 2.0.0.36 - Apple Inc.)
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
C64Classix (HKLM-x32\...\C64Classix) (Version: - )
C90B King Air HD SERIES FSX (HKLM-x32\...\C90B King Air HD SERIES FSX) (Version: 1.00.00.00 - Carenado)
Call of Duty(R) - World at War(TM) (HKLM-x32\...\InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}) (Version: 1.0 - Activision)
Call of Duty(R) - World at War(TM) (x32 Version: 1.0 - Activision) Hidden
Carenado C208B Grand Caravan (HKLM-x32\...\Carenado C208B Grand Caravan) (Version: 1.00.00.00 - Carenado)
Carenado C208B Super Cargomaster Expansion Pack HD (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Carenado C208B Super Cargomaster Expansion Pack HD) (Version: - )
Carenado C340 II FSX (HKLM-x32\...\Carenado C340 II FSX) (Version: 1.00.00.00 - Carenado)
Carenado CT210M Centurion II FSX (HKLM-x32\...\Carenado CT210M Centurion II FSX) (Version: 1.00.00.00 - Carenado)
Carenado SR22T HD SERIES FSX/P3D (HKLM-x32\...\Carenado SR22T HD SERIES FSX/P3D) (Version: 1.00.00.00 - Carenado)
Carenado TBM850 HD SERIES FSX/P3D (HKLM-x32\...\Carenado TBM850 HD SERIES FSX/P3D) (Version: 1.00.00.00 - Carenado)
CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.1.4003 - CDBurnerXP)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH)
Chromium (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Chromium) (Version: 44.0.2386.0 - Chromium)
Conexant Polaris Unused CIR Function (HKLM\...\VID_1D19&PID_6109&MI_00) (Version: 1.0.0.0 - Conexant Systems)
Corel Paint Shop Pro Photo X2 (HKLM-x32\...\{64E72FB1-2343-4977-B4A8-262CD53D0BD3}) (Version: 12.50.0001 - Corel Corporation)
Corel VideoStudio 12 (HKLM-x32\...\InstallShield_{F0FDF9C9-1DDC-401F-B638-36F1CAE8A875}) (Version: 12.0.0.0000 - Corel Corporation)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 3.00 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.41 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version: 1.03 - Creative Technology Limited)
Creative Systeminformationen (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
Curse Client (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
CyberLink PowerDirector 11 (HKLM-x32\...\InstallShield_{551F492A-01B0-4DC4-866F-875EC4EDC0A8}) (Version: 11.0.0.4930 - CyberLink Corp.)
CyberLink PowerDirector 11 (Version: 11.0.0.4930 - Ihr Firmenname) Hidden
Dataplex (HKLM\...\{6AD0B283-6BDB-47C0-9728-C1BA7A83CB8A}) (Version: 1.3.0.0 - NVELO, Inc.)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.1.44 - DivX, LLC)
DodoSim Bell 206 FSX (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\DodoSim Bell 206 FSX) (Version: - )
Dokan Library 0.6.0 (HKLM-x32\...\DokanLibrary) (Version: - )
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.00 - Creative Technology Limited)
DORNIER 228 FSX/P3D (HKLM-x32\...\DORNIER 228 FSX/P3D) (Version: 1.0 - Carenado)
DRAGON 1.7 (HKLM-x32\...\DRAGON) (Version: 1.7 - PREPAID-USENET LIMITED)
Dragon Age II (HKLM-x32\...\{F2E23139-3404-4E3C-9855-7724415D62A5}) (Version: 1.00 - Electronic Arts, Inc.)
Dropbox (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
EDEKA Foto (HKLM-x32\...\EDEKA Foto) (Version: 6.1.5 - CEWE Stiftung u Co. KGaA)
EKCH Copenhagen Airport, Kastrup X (HKLM-x32\...\{9D5BFBF1-EB38-4AE1-A833-4F564B999CE3}) (Version: 2.0 - Scansim)
Elements 11 Organizer (x32 Version: 11.0 - Ihr Firmenname) Hidden
Elite Dangerous Launcher version 0.4.5499.0 (HKLM-x32\...\{696F8871-C91D-4CB1-825D-36BE18065575}_is1) (Version: 0.4.5499.0 - Frontier Developments)
Empire: Total War (HKLM\...\Steam App 10500) (Version: - The Creative Assembly)
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden
Euro Truck Simulator 2 (HKLM-x32\...\Steam App 227300) (Version: - SCS Software)
European Ship Simulator (HKLM-x32\...\Steam App 299250) (Version: - Excalibur)
EVE Online (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\{e9a55721-260b-4e0e-99ed-977140edf3ef}) (Version: 1.0.0 - CCP)
Fahrzeit Vol.1 'Metronom Frühschicht' 1.0 (HKLM-x32\...\ABFE3B59-DCAA-4EF5-82D5-5A07FE08E789_is1) (Version: 1.0 - 3DZUG)
Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{6C5F8503-55D2-4398-858C-362B7A7AF51C}) (Version: 2.1.31.0 - MAGIX AG)
Flight1 ATR 72-500 for FSX (Includes SP1) (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Flight1 ATR 72-500 for FSX (Includes SP1)) (Version: - )
Flight1 Citation Mustang (HKLM-x32\...\f1mustang_FSX) (Version: 1.01 - Flight One Software)
Flight1 Downloader (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Flight1 Downloader) (Version: - )
FMW 1 (Version: 1.143.3 - AVG Technologies) Hidden
Fokker 70-100 FSX (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Fokker 70-100 FSX) (Version: - )
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Free Audio CD to MP3 Converter version 1.3.12.1228 (HKLM-x32\...\Free Audio CD to MP3 Converter_is1) (Version: 1.3.12.1228 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.9.37.426 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: - DVDVideoSoft Limited.)
Fresco Logic USB3.0 Host Controller (HKLM\...\{6E9E1B70-59C4-403E-ABFB-C08012BC7F8A}) (Version: 3.0.89.14 - Fresco Logic Inc.)
FSXFollow 1.1 (HKLM-x32\...\FSXFollow) (Version: 1.1 - PositionGames)
Fw190A (HKLM-x32\...\Fw190A) (Version: - )
Glary Utilities 5.6 (HKLM-x32\...\Glary Utilities 5) (Version: 5.6.0.13 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
GoogleClean (HKLM-x32\...\{4281435C-AD1D-4C8A-B9C0-3961C08EF142}_is1) (Version: 5.0.000 - Abelssoft)
Grob SPn --- rel. 3.00 (HKLM-x32\...\Grob SPn --- rel. 3.00) (Version: - )
Grob SPn --- UPDATE to rel. 3.1.1 (HKLM-x32\...\Grob SPn --- UPDATE to rel. 3.1.1) (Version: - )
Guardian Of Data v2.2 (HKLM-x32\...\Guardian Of Data_is1) (Version: - ASCOMP Software GmbH)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.6.4 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
HP Officejet 6500 E709 Series (HKLM\...\{4C8C6D37-CA3C-4EF6-A1E5-0D188E7B6021}) (Version: 14.0 - HP)
iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.)
iFunbox (v1.95.901.639), iFunbox DevTeam (HKLM-x32\...\iFunbox_is1) (Version: v1.95.901.639 - )
Inkscape 0.48.1 (HKLM-x32\...\Inkscape) (Version: 0.48.1 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Interaktive Sprachreise - Español Sprachkurs 1 (HKLM-x32\...\ISRS1_15_676867) (Version: - digital publishing AG)
Iomega QuikProtect (HKLM\...\Iomega QuikProtect) (Version: 1.3.4.19745 - EMC)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.30 - Irfan Skiljan)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation)
JFritz 0.7.5 Rev. 1 (HKLM-x32\...\{AF5B3ED5-70D3-48CF-A00F-FC29F5261A37}_is1) (Version: - JFritz Team)
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.63.1 - JMicron Technology Corp.)
Just Flight - Phenom 100 for FSX (HKLM-x32\...\{C6A0A43F-EBBA-4A32-BFE2-01BA3CFCD26C}) (Version: 1.00.0000 - Just Flight)
JustFlight DC-3 Legends of Flight (HKLM-x32\...\JustFlight DC-3 Legends of Flight) (Version: - )
Kernel Outlook PST Viewer ver 10.09.01 (HKLM-x32\...\Kernel Outlook PST Viewer_is1) (Version: - Nucleus Data Recovery .com)
Lanikai (64-bit) (3.1.1) (HKLM-x32\...\Lanikai (64-bit) (3.1.1)) (Version: 3.1.1 (en-US) - Mozilla)
LenovoEMC Storage Manager (HKLM\...\LenovoEMC Storage Manager) (Version: 1.4.3.9580 - EMC)
LFKJ Ajaccio Napoleon Bonaparte (HKLM-x32\...\LFKJ_AJACCIO_NAPOLEON_BONAPARTE_is1) (Version: 1.0.0.0 - SimMarket)
Live 8.2.6 (HKLM-x32\...\Live 8.2.6) (Version: - )
Live Lite 4 for M-Audio 4.0.4 (HKLM-x32\...\Live Lite 4 for M-Audio 4.0.4) (Version: - )
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Logitech Gaming Software 8.79 (HKLM\...\Logitech Gaming Software) (Version: 8.79.77 - Logitech Inc.)
Logitech SetPoint 6.65 (HKLM\...\sp6) (Version: 6.65.62 - Logitech)
MAGIX 3D Maker (embedded MSI) (HKLM-x32\...\{2D266DB5-0C7E-45D3-939E-79DD342EC081}) (Version: 6.0.0.10 - MAGIX AG)
MAGIX Content und Soundpools (HKLM-x32\...\MAGIX_GlobalContent) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Fotos auf CD & DVD 9 (HKLM-x32\...\MAGIX_MSI_Fotos_auf_CD_DVD_9) (Version: 9.0.4.4 - MAGIX AG)
MAGIX Fotos auf CD & DVD 9 (x32 Version: 9.0.4.4 - MAGIX AG) Hidden
MAGIX Online Druck Service (HKLM-x32\...\{9BA2456A-EBDD-4B22-B379-80785D465517}) (Version: 3.4.3.0 - MAGIX AG)
MAGIX Screenshare (HKLM-x32\...\MAGIX_{341D13B7-3C84-4D68-90B7-1F4B6C2BCB21}) (Version: 4.3.6.1987 - MAGIX AG)
MAGIX Screenshare (Version: 4.3.6.1987 - MAGIX AG) Hidden
MAGIX Speed 2 (MSI) (HKLM-x32\...\{9BB8F86C-A246-4D3E-9EF5-1117CE67C6F4}) (Version: 6.0.1.4 - MAGIX AG)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MAGIX_{DA6B1FF0-27E8-4272-8D06-37C53FCFD507}) (Version: 7.0.2.6 - MAGIX AG)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
MAGIX Video deluxe MX Plus Sonderedition (HKLM-x32\...\MAGIX_{E41712A1-DEEB-4D10-BCF1-046BA0611F94}) (Version: 11.0.5.0 - MAGIX AG)
MAGIX Video deluxe MX Plus Sonderedition (x32 Version: 11.0.5.0 - MAGIX AG) Hidden
MAGIX Web Designer 6 (HKLM-x32\...\MAGIX_MSI_Web_Designer_6) (Version: 6.0.1.14443 - MAGIX AG)
MAGIX Web Designer 6 (x32 Version: 6.0.1.14443 - MAGIX AG) Hidden
McAfee LiveSafe (HKLM-x32\...\MSC) (Version: 14.0.9042 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.164 - McAfee, Inc.)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.6 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft Flight Simulator SimConnect Client v10.0.61242.0 (HKLM-x32\...\{85DF6786-66AA-42EE-8616-AE456B07BD99}) (Version: 10.0.61242.0 - Microsoft Corporation)
Microsoft Flight Simulator X Service Pack 2 (HKLM-x32\...\{E7CC4B85-DC2F-463F-8FEB-E7398E25C19A}) (Version: 10.0.61472.0 - Microsoft Game Studios)
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version: - Microsoft)
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
MilViz - Northrop T-38 Talon (HKLM-x32\...\MilViz - Northrop T-38 Talon1.1 Full) (Version: 1.1 Full - The SW)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 21.005.15.00.705 - Huawei Technologies Co.,Ltd)
MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)
Mozilla Firefox 50.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 50.0.2 (x86 en-US)) (Version: 50.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.2.6177 - Mozilla)
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
My Net View (HKLM-x32\...\{7F9C9908-69E3-4474-A081-256F27995A18}) (Version: 1.0.12.0 - Western Digital)
MyKeyFinder (HKLM-x32\...\MyKeyFinder_is1) (Version: 2014 - Abelssoft)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.17.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.17.0 - NEC Electronics Corporation) Hidden
NeoSetup Updater (HKLM-x32\...\RPD_is1) (Version: 3.9.0.0 - Innovative Solutions)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
Nokia Connectivity Cable Driver (HKLM-x32\...\{2D99A593-C841-43A7-B7C9-D6F3AE70B756}) (Version: 7.1.45.0 - Nokia)
Nokia Ovi Suite (HKLM-x32\...\Nokia Ovi Suite) (Version: 3.1.1.78 - Nokia)
Nokia Ovi Suite (x32 Version: 3.1.1.78 - Nokia) Hidden
Nokia Ovi Suite Software Updater (HKLM-x32\...\{A8F7FCEF-3CA6-4CE9-8FEA-8BB18F8686F0}) (Version: 02.07.004.45780 - Nokia Corporation)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.90 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.4.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OMSI 2 (HKLM-x32\...\Steam App 252530) (Version: - MR-Software GbR)
ON_OFF Charge B10.0427.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice.org 3.2 (HKLM-x32\...\{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}) (Version: 3.2.9502 - OpenOffice.org)
Orbiter 2010-P1 (HKLM-x32\...\{4D27CE85-F519-42C1-B4AB-C0BD976FB0BA}) (Version: 1.1.0.0 - Martin Schweiger)
Ovi Desktop Sync Engine (x32 Version: 1.5.266.0 - Nokia) Hidden
OviMPlatform (x32 Version: 2.7.72.0 - Nokia) Hidden
PA-28-181 ARCHER II FSX (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\PA-28-181 ARCHER II FSX) (Version: - )
PA28RT ARROW IV FSX (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\PA28RT ARROW IV FSX) (Version: - )
paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)
Paladins (HKLM\...\Steam App 444090) (Version: - Hi-Rez Studios)
Phoenix R/C® (HKLM-x32\...\PhoenixRC) (Version: 5.0.v - Runtime Games Ltd)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
Pinnacle Instant DVD Recorder (HKLM-x32\...\{C1212AE3-DBB9-4365-8473-F8ABC7B06BBB}) (Version: 2.6.0.118 - Pinnacle Systems)
Pinnacle Studio 12 (HKLM-x32\...\{D041EB9E-890A-4098-8F94-51DA194AC72A}) (Version: 12.1.3.6605 - Pinnacle Systems)
Pinnacle Video Treiber (HKLM\...\{6DE721A5-5E89-4D74-994C-652BB3C0672E}) (Version: 12.1.0.029 - Pinnacle Systems)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.8.02.10270 - Sony Corporation)
PMB-Aktualisierungsprogramm (HKLM-x32\...\{A0BB1E68-1DD0-4acd-AD82-EDA0E49F0615}) (Version: 5.6.01.03300 - Sony Corporation)
PMDG 737 6700 NGX RTM (HKLM-x32\...\{C7EE862A-D83D-4A9F-B746-CBDE39BD7001}) (Version: 1.00.3219 - PMDG Simulations, LLC.)
PMDG 737 8900 NGX (HKLM-x32\...\{20708FD5-E94D-4097-A21E-E28564CDBC06}) (Version: 1.00.3219 - PMDG Simulations, LLC.)
PMDG 747-400/400F for FSX (HKLM-x32\...\{EDCEE320-0FB3-4197-9F86-8C1CCF2278FB}) (Version: 2.10.0040 - Precision Manuals Development Group)
PMDG 777-200LR/F Base Package FSX (HKLM-x32\...\{0F16340B-5B5B-4531-8D87-4952E3BCA6E6}) (Version: 1.10.6155 - PMDG Simulations, LLC.)
PMDG744X_GE_AF (HKLM-x32\...\{70D78DCD-8369-4857-BFEF-021C9899DA75}) (Version: 1.10.0000 - Precision Manuals Development Group)
PMDG744X_GE_BR2 (HKLM-x32\...\{4A7EA2A2-221D-437C-8727-B033E6679124}) (Version: 1.00.0000 - Precision Manuals Development Group)
PMDG744X_GE_LH (HKLM-x32\...\{20372FAA-3AF4-4B3D-9B1D-564CDEA5957C}) (Version: 1.00.0000 - Precision Manuals Development Group)
PMDG744X_GE_OZ2 (HKLM-x32\...\{4DA93734-2293-4016-B8B9-720BDEBFCD80}) (Version: 1.10.0000 - Precision Manuals Development Group)
PMDG744X_PW_FJ2 (HKLM-x32\...\{F66D065A-162C-4539-84BB-9A8B51BAEAD9}) (Version: 1.00.0000 - Precision Manuals Development Group)
PMDG744X_PW_IB (HKLM-x32\...\{1D67FB28-58DA-4425-B426-99E894468197}) (Version: 1.00.0000 - Precision Manuals Development Group)
PMDG744X_PW_KA (HKLM-x32\...\{1681B05D-683B-422B-9565-98B1DBF29713}) (Version: 1.10.0000 - Precision Manuals Development Group)
PMDG744X_RR_QF (HKLM-x32\...\{EC65FAF7-F12F-4C81-9E9D-2FE1115CFBA9}) (Version: 1.10.0000 - Precision Manuals Development Group)
PMDG744XF_GE_BRF (HKLM-x32\...\{1AF39B3E-954C-4ADB-BD31-D29F653D4B22}) (Version: 1.00.0000 - Precision Manuals Development Group)
PRE11 STI 64Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Pro Evolution Soccer 2015 (HKLM\...\Steam App 287680) (Version: - KONAMI Digital Entertainment)
Project CARS (HKLM-x32\...\Steam App 234630) (Version: - Slightly Mad Studios)
PSE11 STI Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Quick Startup 5.3.1.96 (HKLM-x32\...\Quick Startup) (Version: 5.3.1.96 - Glarysoft Ltd)
Real Environment Xtreme + Overdrive (HKLM-x32\...\{256FA569-AAAA-43D5-B1D8-57406A9D3A9A}) (Version: 2.5.2010.1027 - Real Environment Simulations, Inc.)
RealDownloader (x32 Version: 18.1.3.103 - RealNetworks, Inc.) Hidden
RealDownloader (x32 Version: 18.1.4.144 - RealNetworks) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (RealTimes) (HKLM-x32\...\RealPlayer 18.1) (Version: 18.1.3 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.58.411.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6662 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RollerCoaster Tycoon 3 (HKLM-x32\...\{907B4640-266B-4A21-92FB-CD1A86CD0F63}) (Version: 1.00.000 - )
RollerCoaster Tycoon World (HKLM\...\Steam App 282560) (Version: - Nvizzio Creations)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samplitude Music Studio 17 (HKLM-x32\...\MAGIX_MSI_ms17dlx) (Version: 17.0.0.0 - MAGIX AG)
Samplitude Music Studio 17 (x32 Version: 17.0.0.0 - MAGIX AG) Hidden
Samplitude Music Studio 2013 (HKLM-x32\...\MAGIX_{C02AB3DD-D476-4EF0-B59B-D4D58A71A5F9}) (Version: 19.0.0.10 - MAGIX AG)
Samplitude Music Studio 2013 (Version: 19.0.0.10 - MAGIX AG) Hidden
Samplitude Music Studio 2013 Soundpools (Version: 1.0.0.0 - MAGIX AG) Hidden
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.0 - Samsung)
Scan (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
Screenshot Captor 3.03.01 (HKLM-x32\...\ScreenshotCaptor_is1) (Version: - )
Secure Eraser v4.0 (HKLM-x32\...\Secure Eraser_is1) (Version: - ASCOMP Software GmbH)
Shark007 STANDARD Codecs (HKLM-x32\...\{898E81AD-6DB9-4750-866B-B8958C5DC7AA}) (Version: 3.0.1 - Shark007)
Shark007 STANDARD x64Components (HKLM\...\STANDARD x64Components_is1) (Version: 3.0.1 - Shark007)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.1 - NVIDIA Corporation) Hidden
Sid Meier's Civilization 4 Complete (HKLM-x32\...\{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}) (Version: 1.74 - Firaxis Games)
Sid Meier's Civilization IV Colonization (HKLM-x32\...\{EF36A836-BF89-4A4F-B079-057B0C68C1E0}) (Version: 1.00 - Firaxis Games)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)
Sid Meier's Pirates! (HKLM-x32\...\Steam App 3920) (Version: - Firaxis Games)
SiSoftware Sandra Lite 2012.SP5c (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2396}_is1) (Version: 18.74.2012.10 - SiSoftware)
Skype Toolbars (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.3.7555 - Skype Technologies S.A.)
Skype™ 7.24 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
SmartSound Quicktracks Plugin (HKLM-x32\...\InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}) (Version: 3.0.5.0 - SmartSound Software Inc)
SmartSound Quicktracks Plugin (x32 Version: 3.0.5.0 - SmartSound Software Inc) Hidden
SMPlayer 0.6.9 (HKLM-x32\...\SMPlayer) (Version: 0.6.9 - RVM)
Soccer Manager 2016 (HKLM-x32\...\Steam App 407120) (Version: - Soccer Manager Ltd)
Sound Blaster X-Fi (HKLM-x32\...\{20288888-A7AF-4B24-8AEB-398D20CD563C}) (Version: 1.0 - Creative Technology Limited)
Spintires (HKLM-x32\...\Steam App 263280) (Version: - Oovee® Game Studios)
Spotify (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Spotify) (Version: 0.9.11.27.g2b1a638c - Spotify AB)
SRWare Iron Version SRWare Iron 21.0.1200.0 (HKLM-x32\...\{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1) (Version: SRWare Iron 21.0.1200.0 - SRWare)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
supra IPCam (HKLM-x32\...\{B0024EE6-6018-4FD6-BC5C-DFE6F0375A95}) (Version: 1.8.4.0 - SUPRA Foto-Elektronik-Vertriebs-GmbH)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version: - Nadeo)
Tom Clancy's The Division (HKLM-x32\...\Uplay Install 568) (Version: - Ubisoft)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
Train Fever (HKLM-x32\...\Steam App 304730) (Version: - Urban Games)
Train Simulator 2015 (HKLM-x32\...\Steam App 24010) (Version: - Dovetail Games)
TransOcean - The Shipping Company (HKLM-x32\...\Steam App 289930) (Version: - Deck 13 Hamburg)
Treiber-Studio 2013 (HKLM\...\{7BD95F83-10BC-43FB-9654-D1702EC2B555}) (Version: 8.0.415 - Publish Data)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 10.0.4500.45 - TuneUp Software) Hidden
TVCenter (HKLM\...\{18F703C3-32EC-4E5C-BC3C-C1BD72D35F5B}) (Version: 6.4.2.880 - PCTV Systems)
TwonkyMedia (HKLM-x32\...\TwonkyMediaTwonkyMedia) (Version: 6.0.39.0 - PacketVideo)
UK2000 Gatwick Xtreme FSX (HKLM-x32\...\UK2000 Gatwick Xtreme FSX) (Version: 3.00 - UK2000 Scenery)
Ultimate Terrain X - Europe (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Ultimate Terrain X - Europe) (Version: - )
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version: - )
Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)
UpdateService (x32 Version: 1.0.0 - RealNetworks, Inc.) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
USB Media Adaptor for Microsoft Windows (HKLM-x32\...\USB Media Adaptor) (Version: - )
Vasco da Gama 5 HDPro (HKLM-x32\...\{067D2172-F8F3-477D-B4EE-0B0AA967D544}) (Version: 5.20.0000 - MotionStudios)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Video Downloader (x32 Version: 1.2.0 - RealNetworks) Hidden
Video Grabber (HKLM\...\VID_1D19&PID_6109&MI_01) (Version: 1.0.0.0 - Conexant Systems)
VideoStudio (x32 Version: 12.0.0.0000 - Corel Corporation) Hidden
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Vita 2 (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita 2 Zusatzcontent (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Bass Machine (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita Rock Drums (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita String Ensemble (Version: 1.0.0.0 - MAGIX AG) Hidden
Vita World Percussion (Version: 1.0.0.0 - MAGIX AG) Hidden
Vivaldi (HKLM-x32\...\Vivaldi) (Version: 1.5.658.56 - Vivaldi)
Vivaldi (HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Vivaldi) (Version: 1.1.453.52 - Vivaldi)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
VLC media player 2.0.8 (HKLM\...\VLC media player) (Version: 2.0.8 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Watermark Image software version 1.9.9.3 (HKLM-x32\...\Watermark Image_is1) (Version: - )
WD Link (HKLM-x32\...\WD Link) (Version: 1.00.03 - Western Digital)
WD Quick View (HKLM-x32\...\{19A2103A-A588-421C-B4CD-30E02FA401A3}) (Version: 1.6.3.4 - Western Digital)
WebReg (x32 Version: 140.0.213.017 - Hewlett-Packard) Hidden
WildStar (HKLM-x32\...\WildStar) (Version: - NCSOFT)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version: - )
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
Wireshark 1.6.1 (HKLM-x32\...\Wireshark) (Version: 1.6.1 - The Wireshark developer community, hxxp://www.wireshark.org)
Wise Folder Hider 1.53 (HKLM-x32\...\Wise Folder Hider_is1) (Version: 1.53 - WiseCleaner.com, Inc.)
WoLoSoft SuperEdi 4.3.1 (HKLM-x32\...\SuperEdi_is1) (Version: 4.3.1 - WoLoSoft International)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
Xtreme FSX PC 2.8.0.0 (HKLM-x32\...\Xtreme FSX PC) (Version: 2.8.0.0 - FSPS)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{04d81769-8002-4b11-b48d-3e6c2c21a025}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{05bc9a36-21d8-486e-a2dc-b4f063a56008}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{084ab9bc-d32b-4c22-b969-60e2a16868e7}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{09a35d61-ec85-4aa1-8b3e-b392a5966344}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{1185dfb4-b03c-42ab-93e9-5006faf85fea}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{191fb2f6-c15d-4a75-ad24-e87d987f6b72}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{19d01be8-cdd7-47e9-81cc-ca4e868b59ee}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{1aaf5769-b4d7-4e4a-9178-a1b2ee412d05}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{1d47af89-1345-463f-b6f7-fc7bf23b754e}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{214ace60-285c-4524-b7aa-c699e724b8d2}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{21760e92-8a0f-4f01-ba84-e745e9d34115}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{24d6a94c-110d-43c3-8c8b-441aa3cae286}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{26f62c12-38d0-4cb3-88d2-c774961c6704}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{2787ee41-647c-4ed9-95f5-fb01f7ca5098}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{4274700d-5697-4158-87a0-915d3583633e}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{447b5088-476d-4e17-a031-d982064588c6}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{4bdfd52a-c9cc-4eca-a472-529b8beed1c9}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{503b8954-030c-4c02-8b7b-d22bebc05f38}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{503dfae7-19b8-4963-a9a0-2acd3598d571}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{522eb9c7-d1a2-43c7-8623-125312449816}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{62f6f3f3-39bf-4339-b385-3faa8c0859fc}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{64dcd37c-6014-4dc0-9c69-02295abb2890}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{6595589b-261d-4dd5-ba63-68a553e40b51}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{6ac3ae6d-eb71-481d-a89d-899f46acdb0d}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{6ae5ef15-470d-48a2-900e-0189cdf8ffbf}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{6b0cdc28-f7f0-4a4f-bb2e-0176a49a06bd}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{6c62dc8b-dcec-40e4-8a0f-9dd350e77d7b}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{70226c5a-ae82-4905-b186-01ada693a175}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{79bd353f-6e09-4e70-9a97-4c71711033b7}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{79c83bfb-366f-4baf-b017-454cf8dff90a}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{7c3d3156-bd5c-445f-bac2-4756e374c11b}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{7c55d38c-f135-43bc-aa33-459c3086755e}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{7c8c38d6-5814-4d2a-a012-eb989e2efb37}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{8d179a5a-3950-4e8f-a9e8-2149b702fcf1}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{8fe16fc5-40dc-487b-bb9a-d3b66acc0cf3}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{908cc787-3106-48d6-8921-a09b6ef98166}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{97df3c16-9ed8-47e0-a4ef-95ac48bcb88f}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{9b6c38cb-cd0d-4bcc-b5b3-9d5bcc7cbfe9}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{a06038cd-518a-4760-aba3-5235ecd95b1d}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{a1ac59fb-a02d-4649-aa82-a2bc488699ce}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{a2e43181-a9e6-400e-97dc-82e244c18f85}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{a761a701-af33-4805-970d-a17db83d6535}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{ab6c9590-0341-4941-bd9e-83baa685cf1f}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{ad7a45fc-f682-44a4-82e0-d6d8a728a016}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{b60e8a40-e50b-4830-bbda-94e237749874}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{b618d331-3a28-426b-be3e-9a2c04a8d2b7}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{b8e490ae-be4e-487d-9339-d78d6d7f3739}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{b997f64d-91ca-4cf2-a128-dafaba1dacf2}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{b9ef413a-5682-4f47-a938-75d8b52c4595}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{ba7f4f0b-a36b-4b15-b3a1-3bb6c8da4390}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{ba9284d1-4dff-4065-8f31-0dc741a720ce}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{bd37d3c7-fcd6-40fc-936a-341ea3a36357}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{be989282-1c1e-4515-868a-317f33eda17f}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{c6765c7b-394f-4b94-8774-5a2ab413856f}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{cc2029a1-a1ba-43a1-97eb-8c4791053181}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{cc6dff49-7a5d-4e6c-a742-2f0d0e4504d2}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{dcd01d5c-81ce-4f2f-9eee-c625a5d3a70b}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{e22e6d55-df7d-430c-9a6e-a521877d9e63}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{e3e74351-b8bb-4a14-bfe3-9cd2ce280618}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{e92f2613-fd44-4bf2-88b9-aa488cd881bb}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{ef715f28-ee88-452a-9bef-566124e936cf}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{f3a433b0-9802-4841-93ae-5e578b1673d0}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3438443834-875338260-1882614465-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {07996DB4-129C-4F75-8158-B9DD98DFB6F1} - System32\Tasks\{1FEE1EFD-5BE9-480F-AF0C-C2C0344A1630} => E:\Program Files (x86)\Matrix Games\Uncommon Valor\start.exe
Task: {09AFD1CB-746B-4985-922F-D35A1B9E6BF8} - System32\Tasks\{22C953FD-90E9-4CE8-B2B3-82E6D793B2AB} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2016-05-17] (Skype Technologies S.A.)
Task: {09D74595-A61D-461B-9B6F-59BBC7160D58} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3438443834-875338260-1882614465-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {1940FF79-2C54-4203-AEA4-AF07AE78A871} - System32\Tasks\{3EE7C121-4A7B-49B0-9D74-44D92D444EA4} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\jre-8u91-windows-au.exe -d "C:\Program Files (x86)\Common Files\Java\Java Update" -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {233C5B3D-EE00-46E3-B5C0-3B0D10D1D996} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-13] (Adobe Systems Incorporated)
Task: {24721D18-852B-4F33-B2E5-D6AE4315700A} - System32\Tasks\{467E043D-D2B3-489B-B92A-9F0CB6FEDD64} => pcalua.exe -a "C:\Program Files (x86)\OkayFreedom\setuptool.exe" -d "C:\Program Files (x86)\OkayFreedom"
Task: {2890947D-296B-4C10-B39C-06038784272F} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2014-08-18] (Glarysoft Ltd)
Task: {2E03AD65-6C75-416C-AF13-B819AC01C819} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)
Task: {300C1EA2-E9FE-40F2-A858-2FCD59C8D95A} - System32\Tasks\{75A6B6D7-647D-42F5-A293-5D4420F57EF7} => pcalua.exe -a C:\Users\Lutz\Downloads\vcredist_x64(2).exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {3E0BA044-717C-44CA-A230-C0A0E9608558} - System32\Tasks\{E8789EBD-96FE-4E00-9384-33F050458B82} => E:\Program Files (x86)\Matrix Games\Uncommon Valor\uncommonvalor.exe
Task: {414D97F2-E33D-4B2F-91C7-9D2337326F5D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {460FB276-EBCC-4B2A-9F06-DFB8741E6DEE} - System32\Tasks\{037ED4FC-AEDC-4B7F-8659-7E4E99BB364E} => pcalua.exe -a C:\Users\Lutz\Downloads\Fokker70-100-SP2.exe -d C:\Users\Lutz\Downloads
Task: {4A9A0799-E4E3-4231-B666-8BBC87ABD1D8} - System32\Tasks\{2191C3FC-2D8A-4319-B8E3-6E81637CB2F4} => E:\Program Files (x86)\Matrix Games\Uncommon Valor\uncommonvalor.exe
Task: {4BCC6BD6-C99A-4544-9757-C9CEEE48F0CC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-03] (Google Inc.)
Task: {4EAB6E52-8128-49B4-BF0C-C378A0C28527} - System32\Tasks\{38597039-AE79-46D8-925F-8E2B6093EEF8} => E:\Program Files (x86)\Matrix Games\Uncommon Valor\start.exe
Task: {5013F281-F998-4854-BC2D-6E164B066060} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [2016-04-23] (McAfee, Inc.)
Task: {53C06319-69AF-4FBA-95AE-9066890ACEF1} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {591975F3-49FE-4E98-8748-54E977FE5BBD} - System32\Tasks\NeoSetup Updater => C:\Program Files (x86)\Innovative Solutions\NeoSetup Updater\NeoSetup_Updater.exe [2015-06-26] (Innovative Solutions)
Task: {6147FA48-9E89-41B3-852E-511278DE3F1A} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2014-08-18] (Glarysoft Ltd)
Task: {631FD255-E27C-4C81-8C6E-9CFCF9D7A13F} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {6B3E7727-BF5E-4A6F-97FB-C9027C2AA286} - System32\Tasks\ArcSoft Connect Daemon => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [2010-03-18] (ArcSoft Inc.)
Task: {6DDA85FF-A476-4586-856D-EDEDBBD7E173} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-03] (Google Inc.)
Task: {71A76E68-95C5-4547-82C6-AF23D822412E} - System32\Tasks\{6121CC0B-6581-489E-908C-3F0450821362} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\jre-8u111-windows-au.exe -d "C:\Program Files (x86)\Common Files\Java\Java Update" -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {7A2F978F-3368-4426-BF80-F531EC961C83} - System32\Tasks\InstallShield Update Service => C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [2005-02-17] (InstallShield Software Corporation)
Task: {7F772FB4-E2D6-4737-B856-5E26516A7991} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {837D85D4-21E4-4F2D-8D11-B9ED717BD77B} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3438443834-875338260-1882614465-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {8F74DB31-DA82-4889-BCF7-B08E5DD2705A} - System32\Tasks\{434EC527-19D8-4152-AAE0-EAADDABFA758} => pcalua.exe -a C:\Users\Lutz\Downloads\setup.exe -d C:\Users\Lutz\Downloads
Task: {8FBAD392-F023-4AD8-8256-06BA4AC4D2E8} - System32\Tasks\{41D0D454-F664-4B57-927A-8D7434112D05} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\Temp1_um304x86.zip\um304x86\setup.exe <==== ACHTUNG
Task: {940424C1-22E3-4D2C-AE92-DCCF1EDEBC96} - System32\Tasks\{0DF8895D-E20F-4191-9EA0-500C282D8D76} => E:\Program Files (x86)\Matrix Games\Uncommon Valor\start.exe
Task: {97294692-DF92-4376-91AB-73DC9957A794} - System32\Tasks\{AC696D6F-E62F-448A-BE83-794BD22DDB39} => Chrome.exe hxxp://ui.skype.com/ui/0/5.8.0.158/en/abandoninstall?page=tsMain
Task: {97DC5329-4509-4BEB-A8DF-1E2CB824EDE8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {990B475B-9764-4149-9510-9FF97D2A6A4F} - System32\Tasks\{96C8B12C-FED4-4877-9404-AED55A581635} => pcalua.exe -a "C:\Users\Lutz\Documents\downloads\complete\carenado\PA-28-181 ARCHER II.exe" -d C:\Users\Lutz\Documents\downloads\complete\carenado
Task: {9E9E5679-73F1-41F1-ACD5-0A94CC77FDDE} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3438443834-875338260-1882614465-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {A91127AF-E844-43EF-8C95-BCEC6438FBBA} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2013-02-13] ()
Task: {A9CDBCC2-49B3-41A2-BBDA-2A893398008B} - System32\Tasks\{5795B20E-DE83-4FF0-8002-72B0D065C0F4} => pcalua.exe -a F:\setup.exe -d F:\
Task: {BD49F3FF-4CE2-4708-8187-9E3968755C34} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [2016-07-05] ()
Task: {C1935ADB-EEDA-4DA8-913E-BD1A221A54D4} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe [2016-11-25] (AVG Technologies CZ, s.r.o.)
Task: {C1F5A065-F7E5-41FD-97D8-1F2151064B79} - System32\Tasks\{E91865F8-96CE-4304-94E8-B1368CACDDD0} => pcalua.exe -a C:\Users\Lutz\Documents\downloads\complete\1330271862\wop3_p40.EXE -d C:\Users\Lutz\Documents\downloads\complete\1330271862
Task: {C9C21059-BB15-4997-80E2-A1CB1B0A9B9B} - System32\Tasks\UninstallMonitor => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\Uninstaller.exe [2016-04-11] (Innovative Solutions)
Task: {CAF77BA2-94DF-4D2A-BCE5-854BFBA01A06} - System32\Tasks\AdobeAAMUpdater-1.0-Lutz-PC-Lutz => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-08-05] (Adobe Systems Incorporated)
Task: {CC4A0E94-5BBD-4059-8DD9-6B5709721650} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {CE12364A-0D3C-4FE1-9AA3-079D066618AA} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3438443834-875338260-1882614465-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2016-02-03] (RealNetworks, Inc.)
Task: {D78CF1C2-B8A5-4D00-A1FC-A3858E6E9B24} - System32\Tasks\{80B6C8F2-C1FA-49FC-9E3D-C7BDA86F1B30} => pcalua.exe -a "H:\FSX - 747-400X v2.10.0040 - PMDG\FSX - 747-400X v2.10.0040 - PMDG\PMDG747_400_FSX.exe" -d "H:\FSX - 747-400X v2.10.0040 - PMDG\FSX - 747-400X v2.10.0040 - PMDG"
Task: {D82E5F2D-32D1-42E7-8D36-F15C0FABAE65} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-04-01] (Oracle Corporation)
Task: {E1AECECA-8F96-41AC-9E7B-A17247B595CC} - System32\Tasks\McAfee\McAfee Idle Detection Task
Task: {E53062DD-C8D1-4B82-B0BA-5982FAFEE707} - System32\Tasks\{0FE70729-25B3-4A5D-BFE2-55976F8FA017} => pcalua.exe -a F:\setup.exe -d F:\
Task: {E651F558-3D82-42FC-9A97-06C91B999198} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {ECE1E9F5-6992-431C-8A6F-D4C7BEC96619} - System32\Tasks\{574CE011-1F26-48FB-836C-A9F5EDF8BF1B} => pcalua.exe -a C:\Users\Lutz\Downloads\Diablo-III-Setup-deDE.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {FB4E00C8-BC32-4129-ADD6-C99C72ED3DA4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3438443834-875338260-1882614465-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2016-02-03] (RealNetworks, Inc.)
Task: {FBB7D511-4945-4143-9889-EAC1F3ACAA79} - System32\Tasks\{0C6B6228-F57E-42EC-A95D-E3AD20AD688C} => pcalua.exe -a "C:\Users\Lutz\Desktop\World of Warcraft Beta Setup(4).exe" -d C:\Users\Lutz\Desktop
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 5.job => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Lutz\Desktop\Dateien\WEB.DE.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://go.web.de/tb/ie_desktop_portal
ShortcutWithArgument: C:\Users\Lutz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> -user-agent="Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.22 anonymized by Abelssoft 1691702640"
ShortcutWithArgument: C:\Users\Lutz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> -user-agent="Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.22 anonymized by Abelssoft 1691702640"
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-07-05 13:44 - 2011-05-28 06:52 - 00557280 _____ () C:\Program Files (x86)\ASCOMP Software\Secure Eraser\SecEraser64.dll
2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2011-03-14 16:27 - 2011-03-14 16:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2013-10-29 18:28 - 2013-10-29 18:28 - 00246112 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
2016-03-01 17:53 - 2016-06-15 02:14 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-03-29 20:27 - 2016-06-15 02:14 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-03-01 17:53 - 2016-06-15 02:14 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2015-12-21 18:50 - 2016-06-15 02:14 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2011-05-11 18:21 - 2015-12-30 16:27 - 00066872 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2011-05-11 18:21 - 2015-12-30 16:27 - 00107832 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2016-02-03 18:49 - 2016-02-03 18:49 - 00032544 _____ () C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
2015-09-26 16:23 - 2013-03-06 13:42 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2016-03-29 20:27 - 2016-06-15 02:14 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-03-29 20:27 - 2016-06-15 02:14 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-03-29 20:27 - 2016-06-15 02:14 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-01-19 21:41 - 2016-06-15 02:14 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-03-29 20:27 - 2016-06-15 02:14 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-03-29 20:27 - 2016-06-15 02:14 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-11-30 20:39 - 2016-11-30 20:39 - 01484776 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\Battle.net Helper.exe
2013-10-29 18:28 - 2013-10-29 18:28 - 00011362 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\mingwm10.dll
2013-10-29 18:28 - 2013-10-29 18:28 - 00043008 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\libgcc_s_dw2-1.dll
2013-10-29 18:28 - 2013-10-29 18:28 - 02415104 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\QtCore4.dll
2013-10-29 18:28 - 2013-10-29 18:28 - 01148416 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\QtNetwork4.dll
2013-10-29 18:28 - 2013-10-29 18:28 - 00384512 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\QueryStrategy.dll
2013-10-29 18:28 - 2013-10-29 18:28 - 00398336 _____ () C:\ProgramData\Mobile Partner\OnlineUpdate\QtXml4.dll
2016-02-03 18:48 - 2016-02-03 18:48 - 00037688 _____ () C:\Program Files (x86)\Real\UpdateService\DL2UpdatePlugin.dll
2016-02-03 18:48 - 2016-02-03 18:48 - 00039224 _____ () C:\Program Files (x86)\Real\UpdateService\RealDownloaderUpdatePlugin.dll
2016-02-03 18:49 - 2016-02-03 18:49 - 00037192 _____ () C:\Program Files (x86)\Real\UpdateService\VideoDLUpdatePlugin.dll
2015-03-31 16:29 - 2016-06-15 02:14 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-11-28 17:42 - 2016-11-28 17:42 - 48920064 _____ () C:\Program Files (x86)\AVG\UiDll\2623\libcef.dll
2016-11-30 20:40 - 2016-11-30 20:40 - 00540336 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\ortp.dll
2016-11-30 20:39 - 2016-11-30 20:40 - 37247976 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\libcef.dll
2016-11-30 20:39 - 2016-11-30 20:39 - 06402560 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\battle.net.dll
2016-11-30 20:40 - 2016-11-30 20:40 - 00133632 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\libEGL.dll
2016-11-30 20:40 - 2016-11-30 20:40 - 03384832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\libGLESv2.dll
2016-11-30 20:40 - 2016-11-30 20:40 - 03384832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\libglesv2.dll
2016-11-30 20:40 - 2016-11-30 20:40 - 00133632 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\libegl.dll
2016-11-30 20:39 - 2016-11-30 20:39 - 00990696 _____ () C:\Program Files (x86)\Battle.net\Battle.net.8180\ffmpegsumo.dll
2015-12-02 17:58 - 2015-11-16 19:32 - 00919040 _____ () C:\Windows\mod_frst.exe
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData:gs5sys [2560]
AlternateDataStreams: C:\Users\All Users:gs5sys [2560]
AlternateDataStreams: C:\Users\Lutz:gs5sys [3074]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:gs5sys [2560]
AlternateDataStreams: C:\ProgramData\Application Data:gs5sys [2560]
AlternateDataStreams: C:\ProgramData\TEMP:05EE1EEF [268]
AlternateDataStreams: C:\Users\Lutz\Anwendungsdaten:gs5sys [3074]
AlternateDataStreams: C:\Users\Lutz\Cookies:gs5sys [3074]
AlternateDataStreams: C:\Users\Lutz\Lokale Einstellungen:gs5sys [3074]
AlternateDataStreams: C:\Users\Lutz\Vorlagen:gs5sys [3074]
AlternateDataStreams: C:\Users\Lutz\AppData\Local:gs5sys [3074]
AlternateDataStreams: C:\Users\Lutz\AppData\Roaming:gs5sys [3074]
AlternateDataStreams: C:\Users\Lutz\AppData\Local\Anwendungsdaten:gs5sys [3074]
AlternateDataStreams: C:\Users\Lutz\AppData\Local\Verlauf:gs5sys [1792]
AlternateDataStreams: C:\Users\Lutz\Documents\desktop.ini:gs5sys [3074]
AlternateDataStreams: C:\Users\Public\Documents\desktop.ini:gs5sys [3074]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcapexe => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McNaiAnn => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2016-11-23 20:54 - 00000895 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 google-analytics.com
127.0.0.1 www.google-analytics.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lutz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\Services: Adobe LM Service => 3
MSCONFIG\Services: AdobeActiveFileMonitor11.0 => 2
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AeLookupSvc => 3
MSCONFIG\Services: ALG => 3
MSCONFIG\Services: AppHostSvc => 2
MSCONFIG\Services: AppIDSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: aspnet_state => 3
MSCONFIG\Services: AudioEndpointBuilder => 2
MSCONFIG\Services: AudioSrv => 2
MSCONFIG\Services: BDESVC => 3
MSCONFIG\Services: BFE => 2
MSCONFIG\Services: BITS => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: CertPropSvc => 3
MSCONFIG\Services: CGVPNCliSrvc => 3
MSCONFIG\Services: Creative ALchemy AL6 Licensing Service => 3
MSCONFIG\Services: Creative Audio Engine Licensing Service => 3
MSCONFIG\Services: CTAudSvcService => 2
MSCONFIG\Services: DokanMounter => 2
MSCONFIG\Services: FirebirdServerMAGIXInstance => 3
MSCONFIG\Services: FLEXnet Licensing Service => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: JMB36X => 2
MSCONFIG\Services: LBTServ => 3
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: nvUpdatusService => 2
MSCONFIG\Services: PMBDeviceInfoProvider => 2
MSCONFIG\Services: PSI_SVC_2 => 2
MSCONFIG\Services: QPCopyEngine => 2
MSCONFIG\Services: rpcapd => 3
MSCONFIG\Services: SandraAgentSrv => 3
MSCONFIG\Services: ServiceLayer => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\Services: TuneUp.UtilitiesSvc => 2
MSCONFIG\Services: UNS => 2
MSCONFIG\Services: VMCService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^LenovoEMC Storage Manager.lnk => C:\Windows\pss\LenovoEMC Storage Manager.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Nach Updates suchen.lnk => C:\Windows\pss\Nach Updates suchen.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^SetPointII.lnk => C:\Windows\pss\SetPointII.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Twonky Tray Control.lnk => C:\Windows\pss\Twonky Tray Control.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Lutz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Lutz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^CurseClientStartup.ccip => C:\Windows\pss\CurseClientStartup.ccip.Startup
MSCONFIG\startupfolder: C:^Users^Lutz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Lutz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Lutz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk => C:\Windows\pss\OpenOffice.org 3.2.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Lutz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^simplicheck.lnk => C:\Windows\pss\simplicheck.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AntiBrowserSpy - BrowserMask => C:\Program Files (x86)\AntiBrowserSpy\BrowserMask.exe
MSCONFIG\startupreg: AppleSyncNotifier => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: AvgUi => "C:\Program Files (x86)\AVG\Framework\Common\avguix.exe" /fmw.trayonly
MSCONFIG\startupreg: Badoo Desktop => C:\ProgramData\Badoo\Badoo Desktop\1.6.58.1220\Badoo.Desktop.exe
MSCONFIG\startupreg: Bing Bar => "C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe"
MSCONFIG\startupreg: BrowserMask => "C:\Program Files (x86)\AntiBrowserSpy\AntiBrowserSpyBrowserMaske.exe" -delayed
MSCONFIG\startupreg: Corel File Shell Monitor => D:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
MSCONFIG\startupreg: Corel Photo Downloader => "C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe" -startup
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart /min
MSCONFIG\startupreg: EADM => "C:\Program Files (x86)\Origin\Origin.exe" -AutoStart
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: Google Update => "C:\Users\Lutz\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: GUDelayStartup => "C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe" -delayrun
MSCONFIG\startupreg: iCloudDrive => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
MSCONFIG\startupreg: iCloudServices => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
MSCONFIG\startupreg: ISUSPM Startup => C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: JMB36X IDE Setup => C:\Windows\RaidTool\xInsIDE.exe
MSCONFIG\startupreg: Microsoft Default Manager => "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
MSCONFIG\startupreg: MobileConnect => %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent
MSCONFIG\startupreg: MobileDocuments => C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
MSCONFIG\startupreg: Nikon Message Center 2 => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s
MSCONFIG\startupreg: NokiaMServer => C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup
MSCONFIG\startupreg: NokiaOviSuite2 => C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: QuiKProtect => C:\Program Files\Iomega\Quikprotect\StartQuikProtect.exe
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SOS Browser Monitor => "C:\Program Files (x86)\Steganos Online Shield\SteganosBrowserMonitor.exe"
MSCONFIG\startupreg: SOS_Agent => "C:\Program Files (x86)\Steganos Online Shield\OnlineShieldClient.exe" -agent
MSCONFIG\startupreg: Spotify => "C:\Users\Lutz\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Lutz\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SSS2009 Browser Monitor => "C:\Program Files (x86)\Steganos Privacy Suite 11\SteganosBrowserMonitor.exe"
MSCONFIG\startupreg: SSS2009 File Redirection Starter => "C:\Program Files (x86)\Steganos Privacy Suite 11\fredirstarter.exe"
MSCONFIG\startupreg: SSS2009 HotKeys => "C:\Program Files (x86)\Steganos Privacy Suite 11\SteganosHotKeyService.exe"
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: TkBellExe => "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
MSCONFIG\startupreg: TrayServer => C:\Program Files (x86)\MAGIX\Video_deluxe_MX_Plus_Sonderedition\TrayServer_de.exe
MSCONFIG\startupreg: UVS12 Preload => D:\Program Files (x86)\Corel\Corel VideoStudio 12\uvPL.exe
MSCONFIG\startupreg: VolPanel => "C:\Program Files (x86)\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" /r
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{183864FC-C601-49A7-B3CF-E19CBB897891}] => C:\Users\Lutz\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{39FAD13A-7155-4FF0-88C1-D4E33FDEBAD5}] => C:\Users\Lutz\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{FEFBB719-A62B-46B6-854D-98635D7CF1CA}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{BBBAC07C-2D00-4C57-9322-EFE8E10106B2}] => E:\Program Files (x86)\Pinnacle\Studio 12\Programs\RM.exe
FirewallRules: [{94F934D9-74E5-454F-9A8A-6DDA88262FC9}] => E:\Program Files (x86)\Pinnacle\Studio 12\Programs\RM.exe
FirewallRules: [{78B041CD-E5E4-4056-97AE-EC9C6CBDC169}] => E:\Program Files (x86)\Pinnacle\Studio 12\Programs\Studio.exe
FirewallRules: [{A4DCB407-4515-45BA-965B-0F696629E64D}] => E:\Program Files (x86)\Pinnacle\Studio 12\Programs\Studio.exe
FirewallRules: [{E90C2F03-5C6F-4E30-82B7-5ABBA5CA6E20}] => E:\Program Files (x86)\Pinnacle\Studio 12\Programs\umi.exe
FirewallRules: [{7EED8958-3B7F-4D8B-9974-A5BF2EF2C901}] => E:\Program Files (x86)\Pinnacle\Studio 12\Programs\umi.exe
FirewallRules: [{5AC85760-EDED-4BF5-B3E5-4C836A06506C}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{7D30EF9B-FB83-4A9E-82A3-543B1B6DDFE9}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{DF658F46-35DE-49CC-A982-6769A212CE87}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{ACF2607B-1C7D-4E88-ACE9-2880F6F8AEF5}] => C:\Program Files (x86)\nokia\nokia ovi suite\nokiaovisuite.exe
FirewallRules: [{991DD234-82CB-49D9-B3FE-D8051B990A4A}] => C:\Program Files (x86)\Common Files\nokia\service layer\a\nsl_host_process.exe
FirewallRules: [{F5922D62-93B5-47AF-AFE6-167F8F607A6D}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{6CE206D9-6FD9-4584-B90D-59462403F013}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F0BF4541-FB32-4102-9E94-C6218647E6DB}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3DD14BB2-8B00-412A-9A8B-27E441327A3C}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{EA54779E-8533-4AB0-BF36-9CC287D4D141}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{00018741-BA45-488E-9D25-06A3F7ECDD3E}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B92FC33C-6682-4077-A98F-BE1DDAFBD5FA}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{7AD07F50-745C-491D-B028-358EADCAC731}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{18F0F321-702D-4525-BA4A-C644067D541D}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5F731816-12B5-488E-BCA1-E2B09576ED28}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1E2A9D55-9537-4B19-9F24-D742F5CF8B11}] => C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
FirewallRules: [{B3616504-B0D7-48D9-88A1-795EFD78F744}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6E57D672-708B-4411-8952-78533B7BB23A}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{16BEBC66-AE36-4BCC-9AB7-628CBC6AD0E8}] => D:\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{C77CCC54-01A8-44DA-B553-AFCC99DC5D38}] => D:\Steam\SteamApps\common\pCars\pCARS64.exe
FirewallRules: [{A26471DB-0259-4BFA-9F4E-39DB0E5C708C}] => D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{CE119BB2-CEF2-422F-BAA2-8830EE795E51}] => D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{5A443AD9-A50B-4FA0-BD59-AAF38AC17188}] => D:\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{8B698DAD-D2CC-4B49-8E1A-FF755DD521AF}] => D:\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{78F72C60-F084-41C5-AB3E-F5F9EF0F6918}] => D:\Steam\SteamApps\common\Spintires\SpinTires.exe
FirewallRules: [{44B7D166-C59E-4B93-A847-FCCD27613D6B}] => D:\Steam\SteamApps\common\Spintires\SpinTires.exe
FirewallRules: [{AAE69F65-F1B4-4A87-BA8E-EC0010DE00A0}] => E:\CIV 5\steamapps\common\RailWorks\RailWorks.exe
FirewallRules: [{D040F1EF-374E-4CE1-9051-A8264B7CFE97}] => E:\CIV 5\steamapps\common\RailWorks\RailWorks.exe
FirewallRules: [{EDF1C4A2-D1F8-46F1-92D5-435C1FD5F80F}] => D:\Steam\SteamApps\common\OMSI 2\Omsi.exe
FirewallRules: [{01E3360E-15E4-42DB-A96D-38A8E0CE23E8}] => D:\Steam\SteamApps\common\OMSI 2\Omsi.exe
FirewallRules: [{12195342-7516-44F1-AF40-36E2102986AC}] => D:\Steam\SteamApps\common\Train Fever\TrainFever.exe
FirewallRules: [{58C09F16-6775-4581-AB7C-8128EC00D8DD}] => D:\Steam\SteamApps\common\Train Fever\TrainFever.exe
FirewallRules: [{DEC04915-1CCB-4B98-90D7-9A479F8872AB}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{47C0ABC3-9B4A-417C-B10B-CABA10CA62B9}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{667CACB5-0730-4A52-851F-F250150943BF}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{8C40FE4A-4266-476C-BDEC-72FD05A59718}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{182A7BE0-41D6-4DC0-B203-08FD063D2FE1}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{7A7B4AC7-8030-48D0-99A7-968C9884207B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A34FF7BA-1432-47AE-A1D7-33E8F49AFD53}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F4ADC216-086B-43A7-9495-4C4AE28D0268}] => D:\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{D72AB6A4-F503-49FE-9C99-044D408349EB}] => D:\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{31E0A09C-AE74-4CF6-8DBD-72BE48A320B0}] => E:\Program Files (x86)\Tom Clancy's The Division\TheDivision.exe
FirewallRules: [{7905E67F-8364-4418-91DC-255299987E1D}] => c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe
FirewallRules: [{410765E6-CC8B-47AB-84E6-1725BD42C5CF}] => D:\Steam\SteamApps\common\RollerCoaster Tycoon World\RollerCoaster Tycoon World.exe
FirewallRules: [{0D901DAE-9977-4093-B1CE-00A444CB914B}] => D:\Steam\SteamApps\common\RollerCoaster Tycoon World\RollerCoaster Tycoon World.exe
FirewallRules: [{693B1927-12F7-439F-A6DB-7F2D10989BAD}] => D:\Steam\SteamApps\common\assettocorsa\AssettoCorsa.exe
FirewallRules: [{A8F1D02B-7609-4F35-B1AC-C982CAEB5B4C}] => D:\Steam\SteamApps\common\assettocorsa\AssettoCorsa.exe
FirewallRules: [{0FD2DEA8-49E9-4AEA-9475-6E874CC9A403}] => D:\Steam\SteamApps\common\Depth\Binaries\Win32\DepthGame.exe
FirewallRules: [{1EDAC775-C4DD-49C0-B98E-C4535DB512E6}] => D:\Steam\SteamApps\common\Depth\Binaries\Win32\DepthGame.exe
FirewallRules: [{741C7860-05F0-4DB0-B32F-3A9A2C1ABE7E}] => C:\Program Files\Vivaldi\Application\vivaldi.exe
FirewallRules: [{CE173514-206B-497A-A31B-AFE5E5D87B22}] => D:\Steam\SteamApps\common\Pro Evolution Soccer 2015\PES2015.exe
FirewallRules: [{EB0A216E-194E-458F-9EEB-8E4BC0A49CA9}] => D:\Steam\SteamApps\common\Pro Evolution Soccer 2015\PES2015.exe
FirewallRules: [{507AFCCA-B48B-47D9-82C5-F197A4052843}] => D:\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{335DA974-A73A-4094-BADF-C888AA52A1CE}] => D:\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{63272A13-0FFB-45A3-A46C-F994C4DD7A00}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{B4685677-8E59-424D-9BF3-133CD1265A3D}] => D:\Steam\SteamApps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{4608D19C-EB00-4DD7-874E-C76B7B16033E}] => D:\Steam\SteamApps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{84F51808-9DE4-4292-ACB5-15BBB37CB3A7}] => D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{4E93BACC-0494-4AAD-BCFF-A6808C947F45}] => D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{C2C0A577-FED6-4D96-933F-EC4005B7CBA9}] => D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{389E12B1-10FC-4310-82FD-EDEBAE5CEF3C}] => D:\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{CB72CD40-85F8-4EF9-896B-C251911AB396}] => C:\Program Files\Vivaldi\Application\vivaldi.exe
==================== Wiederherstellungspunkte =========================
05-12-2016 19:18:36 Windows Update
08-12-2016 00:21:24 Microsoft Antimalware Checkpoint
08-12-2016 01:35:32 Malwarebytes Anti-Rootkit Restore Point
08-12-2016 19:43:01 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: AppleCharger
Description: AppleCharger
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: AppleCharger
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/08/2016 07:45:19 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (12/08/2016 07:45:19 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (12/08/2016 07:45:19 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (12/08/2016 06:46:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.23418, Zeitstempel: 0x5708a7e4
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c54f
ID des fehlerhaften Prozesses: 0x1ae4
Startzeit der fehlerhaften Anwendung: 0x01d2517b12c9029a
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\MobileMeServices.exe
Pfad des fehlerhaften Moduls: C:\Windows\syswow64\KERNELBASE.dll
Berichtskennung: 507a5328-bd6e-11e6-8d21-000000740200
Error: (12/08/2016 06:46:54 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (12/08/2016 06:46:54 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (12/08/2016 06:46:54 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Error: (12/08/2016 06:46:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.23418, Zeitstempel: 0x5708a7e4
Ausnahmecode: 0xc06d007e
Fehleroffset: 0x0000c54f
ID des fehlerhaften Prozesses: 0x194c
Startzeit der fehlerhaften Anwendung: 0x01d2517affbfbc02
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\MobileMeServices.exe
Pfad des fehlerhaften Moduls: C:\Windows\syswow64\KERNELBASE.dll
Berichtskennung: 3dbfba2a-bd6e-11e6-8d21-000000740200
Error: (12/08/2016 01:44:36 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)
Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
Error: (12/08/2016 01:44:36 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)
Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
Systemfehler:
=============
Error: (12/08/2016 07:38:31 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
AppleCharger
nvelofsfltr
Error: (12/08/2016 07:38:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Mobile Partner. OUC" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (12/08/2016 07:38:30 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Mobile Partner. OUC erreicht.
Error: (12/08/2016 07:37:19 PM) (Source: Microsoft Antimalware) (EventID: 2001) (User: )
Description: Beim Aktualisieren der Signaturen wurde von Microsoft-Antischadsoftware ein Fehler festgestellt.
Neue Signaturversion:
Vorherige Signaturversion: 1.233.1746.0
Aktualisierungsquelle: Microsoft Update Server
Aktualisierungsphase: Suchen
Quellpfad: hxxp://www.microsoft.com
Signaturtyp: AntiVirus
Aktualisierungstyp: Vollständig
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
Vorherige Modulversion: 1.1.13303.0
Fehlercode: 0x8024001e
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".
Error: (12/08/2016 07:36:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Office Software Protection Platform" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/08/2016 07:36:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "McAfee SiteAdvisor Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/08/2016 07:36:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/08/2016 07:36:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/08/2016 07:36:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "AVG PC TuneUp Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 250 Millisekunden durchgeführt: Neustart des Diensts.
Error: (12/08/2016 07:36:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Cyberlink RichVideo64 Service(CRVS)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7 CPU 870 @ 2.93GHz
Prozentuale Nutzung des RAM: 26%
Installierter physikalischer RAM: 16343.05 MB
Verfügbarer physikalischer RAM: 12003.09 MB
Summe virtueller Speicher: 32684.29 MB
Verfügbarer virtueller Speicher: 27997.56 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:204.98 GB) (Free:15.44 GB) NTFS
Drive d: (Volume) (Fixed) (Total:363.18 GB) (Free:16.01 GB) NTFS
Drive e: (Volume) (Fixed) (Total:363.25 GB) (Free:9.94 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 5889D043)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=205 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=363.2 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=363.3 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
08.12.2016, 21:22
| #26 |
| | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefundenCode:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
durchgeführt von Lutz (Administrator) auf LUTZ-PC (08-12-2016 21:17:47)
Gestartet von C:\Users\Lutz\Desktop\Fliegen
Geladene Profile: Lutz & DefaultAppPool (Verfügbare Profile: Lutz & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Windows (R) Win 7 DDK provider) C:\Windows\System32\Dataplex\NveloSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
() C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.9.741.0\McCSPServiceHost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.5296\Agent.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.8180\Battle.net.exe
() C:\Program Files (x86)\Battle.net\Battle.net.8180\Battle.net Helper.exe
() C:\Program Files (x86)\Battle.net\Battle.net.8180\Battle.net Helper.exe
(Microsoft Corporation) C:\Windows\System32\inetsrv\w3wp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Security) C:\Program Files\Common Files\McAfee\ClientAnalytics\McClientAnalytics.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-15] (NVIDIA Corporation)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3100440 2014-05-19] (Logitech, Inc.)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [nveloApp] => C:\Program Files\Dataplex\CacheFilter\nveloApp.exe [117952 2015-01-16] (Windows (R) Win 7 DDK provider)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15112312 2016-02-09] (Logitech Inc.)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2013-06-14] (AVM Berlin)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [240400 2016-12-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Run: [] => [X]
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Run: [GUSDelayStartup] => C:\Program Files (x86)\Glarysoft\Quick Startup\StartupManager.exe [37152 2014-08-20] (Glarysoft Ltd)
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Run: [Amazon Music] => C:\Users\Lutz\AppData\Local\Amazon Music\Amazon Music Helper.exe [5890368 2015-12-15] ()
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: L - L:\LaunchU3.exe -a
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: {011ac20a-306a-11e0-af04-1c6f654b6b74} - G:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: {41c17a89-40af-11e3-b040-000000360200} - G:\AutoRun.exe
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: {41c17a9a-40af-11e3-b040-000000360200} - G:\AutoRun.exe
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: {56da7206-883a-11e3-aa2d-000000880200} - G:\AutoRun.exe
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: {81f25f56-ff05-11df-bc06-1c6f654b6b74} - "G:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: {85f8dda4-400b-11e3-8dbc-000000210200} - G:\AutoRun.exe
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: {ad4bb9f3-7a56-11e0-93ff-1c6f654b6b74} - L:\LaunchU3.exe -a
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\MountPoints2: {ba47202e-d852-11e3-95a1-000000520200} - G:\pushinst.exe
IFEO\acrun.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\acstart.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\arcrepair.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\cyberghost.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\cyberghost_6.0.3.2124.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\fileencrypt.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\filesplitter.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\hirezgamesdiagandsupport.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\integrator.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\lenovoemcstoragemanager.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\mediaimpression.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\neosetup_updater.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\originer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\photoviewer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\realconverter.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\realplay.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\realtrimmer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\rnxproc.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\rpsystray.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\setup.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\sidebar.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\skype.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\slideshowplayer.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\steam.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
IFEO\wddmstatus.exe: [Debugger] "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Lutz\AppData\Roaming\Dropbox\bin\DropboxExt.25.dll [2015-02-11] (Dropbox, Inc.)
BootExecute: autocheck autochk * BootDefrag.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1B090B5E-27DB-4D25-9137-02111A82FE0C}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{B95865FF-C877-44B8-8779-DE6FB2B89925}: [NameServer] 193.189.244.206 193.189.244.225
Tcpip\..\Interfaces\{DF0F7ED1-4D85-4830-BFF3-E2526D9175AB}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{E102E7EA-629C-438B-9D5C-E9260B75A44E}: [NameServer] 193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{F750D2D5-FD48-465B-A44E-C52A3A23968B}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{FD661E04-31D3-47C1-9D98-FFDDC4CED1F5}: [DhcpNameServer] 192.168.178.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {FD6E7837-A203-4098-9FF7-1488A50FF4EB} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE0D20151106&p={searchTerms}
SearchScopes: HKU\.DEFAULT -> {FD6E7837-A203-4098-9FF7-1488A50FF4EB} URL = hxxps://de.search.yahoo.com/search?fr=mcafee&type=C011DE0D20151106&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3438443834-875338260-1882614465-1000 -> {0048620A-CF1A-4D69-A9C5-5DA83311764F} URL = hxxp://go.web.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3438443834-875338260-1882614465-1000 -> {13DA3995-D9D0-4C53-9412-47ECD9BFC808} URL = hxxp://go.gmx.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3438443834-875338260-1882614465-1000 -> {46ACC4B2-2869-44B6-94CA-4A3F5BEE9C04} URL = hxxp://go.1und1.de/tb/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3438443834-875338260-1882614465-1000 -> {8A244612-A1F7-11E0-95C0-E71F4824019B} URL = hxxp://badoo.com/startpage/?source=bsb&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3438443834-875338260-1882614465-1000 -> {CDF501C7-DA57-4305-B098-33C851941150} URL = hxxp://go.mail.com/tb/en-us/ie_searchplugin/?q={searchTerms}&enc=UTF-8
SearchScopes: HKU\S-1-5-21-3438443834-875338260-1882614465-1000 -> {E5006287-6B48-45FF-AE9A-99C3E5BED4EE} URL = hxxp://search.gmx.com/web?q={searchTerms}&origin=tb_splugin_ie
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2016-02-03] (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-04-25] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-25] (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2016-02-03] (RealDownloader)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> D:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\ArcPluginIE.dll [2015-09-15] (Perfect World Entertainment Inc)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16] (Skype Technologies S.A.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2014-05-19] (Logitech, Inc.)
BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-12-21] (Microsoft Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {0F2AAAE3-7E9E-4B64-AB5D-1CA24C6ACB9C} hxxp://dominosrv02.wm-fahrzeugteile.de/dwa85W.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/130321/CTPID.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2016-10-24] (McAfee, Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16] (Skype Technologies S.A.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2016-05-24] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2016-05-24] (McAfee, Inc.)
FireFox:
========
FF DefaultProfile: t3851jul.default
FF ProfilePath: C:\ProgramData\Kaspersky Lab\SafeBrowser\S-1-5-21-3438443834-875338260-1882614465-1000\FireFox [nicht gefunden]
FF ProfilePath: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default [2016-12-08]
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\t3851jul.default -> Sichere Suche
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\t3851jul.default -> Sichere Suche
FF Homepage: Mozilla\Firefox\Profiles\t3851jul.default -> hxxp://heise.de/
FF Keyword.URL: Mozilla\Firefox\Profiles\t3851jul.default -> hxxp://badoo.com/startpage/?source=bsb&q=
FF Extension: (ADB Helper) - C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\Extensions\adbhelper@mozilla.org [2016-11-03]
FF Extension: (Ghostery) - C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\Extensions\firefox@ghostery.com.xpi [2016-11-29]
FF Extension: (Valence) - C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\Extensions\fxdevtools-adapters@mozilla.org [2016-05-07]
FF Extension: (HTTPS Everywhere) - C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\Extensions\https-everywhere-eff@eff.org.xpi [2016-12-02]
FF Extension: (Mailvelope) - C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\Extensions\jid1-AQqSMBYb0a8ADg@jetpack.xpi [2016-12-03]
FF Extension: (Garmin Communicator) - C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2016-04-28]
FF Extension: (Google Analytics Opt-out Browser Add-on) - C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\Extensions\{6d96bb5e-1175-4ebf-8ab5-5f56f1c79f65}.xpi [2016-07-29]
FF Extension: (Adblock Plus) - C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24]
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2016-11-10]
FF SearchPlugin: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\badoo.xml [2012-12-08]
FF SearchPlugin: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\duckduckgo.xml [2013-08-26]
FF SearchPlugin: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\englische-ergebnisse.xml [2011-12-19]
FF SearchPlugin: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\google-images.xml [2014-08-11]
FF SearchPlugin: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\google-maps.xml [2014-08-11]
FF SearchPlugin: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\McSiteAdvisor.xml [2016-03-20]
FF SearchPlugin: C:\Users\Lutz\AppData\Roaming\Mozilla\Firefox\Profiles\t3851jul.default\searchplugins\webde-suche.xml [2011-12-19]
FF Extension: (Skype extension) - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2011-07-05] [ist nicht signiert]
FF Extension: (Java Console) - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-10-01] [ist nicht signiert]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [{09F060FA-566D-42D7-BF79-97AB30863433}] - C:\Program Files (x86)\Steganos Privacy Suite 11\pfplugin => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 11\spmplugin3 => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2014-08-15] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: (RealPlayer Browser Record Plugin) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2014-08-01] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}] - C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension
FF Extension: (Thunderbird Address Book Synchronisation Extension) - C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension [2011-07-21] [ist nicht signiert]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2016-05-28] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-13] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-25] (Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2016-05-24] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-08-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-08-16] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-13] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-25] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2016-05-24] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> D:\Program Files (x86)\Perfect World Entertainment\Arc\plugins\npArcPluginFF.dll [2015-09-15] (Perfect World Entertainment Inc)
FF Plugin-x32: @real.com/nppl3260;version=18.1.3.100 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2016-03-18] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=12.0.1.660 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2011-07-21] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=12.0.1.660 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2011-07-21] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.1.3.100 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2016-03-18] (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3438443834-875338260-1882614465-1000: amazon.com/AmazonMP3DownloaderPlugin -> C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101721.dll [2013-01-23] (Amazon.com, Inc.)
FF Plugin HKU\S-1-5-21-3438443834-875338260-1882614465-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-11-17] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll [2015-11-20] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2015-11-20] (RealPlayer)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://heise.de/
CHR StartupUrls: Default -> "hxxp://heise.de/"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t
CHR DefaultSuggestURL: Default -> hxxp://suggestqueries.google.com/complete/search?q={searchTerms}
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\ppGoogleNaClPluginChrome.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\pdf.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\gcswf32.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_233.dll => Keine Datei
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.462_0\plugin/npUrlAdvisor.dll => Keine Datei
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.374_0\plugin/npVKPlugin.dll => Keine Datei
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin/npABPlugin.dll => Keine Datei
CHR Plugin: (vShare.tv plug-in) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj\1.3_0\chvsharetvplg.dll => Keine Datei
CHR Plugin: (vShare.tv plug-in) - C:\Program Files (x86)\Mozilla Firefox\plugins\npvsharetvplg.dll => Keine Datei
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll => Keine Datei
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll => Keine Datei
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll => Keine Datei
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll => Keine Datei
CHR Plugin: (RealNetworks(tm) RealPlayer Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll => Keine Datei
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll => Keine Datei
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll => Keine Datei
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll => Keine Datei
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll => Keine Datei
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll => Keine Datei
CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll => Keine Datei
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll => Keine Datei
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (ESN Launch Mozilla Plugin) - C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll => Keine Datei
CHR Plugin: (ESN Sonar API) - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.3\npesnsonar.dll => Keine Datei
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll => Keine Datei
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll => Keine Datei
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Google Update) - C:\Users\Lutz\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll => Keine Datei
CHR Profile: C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default [2016-12-08]
CHR Extension: (OkayFreedom) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\bckipplcmnfhblnpibpbehenelnkpecd [2015-05-09]
CHR Extension: (YouTube) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]
CHR Extension: (Google-Suche) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Logitech SetPoint) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\edaibbiobngpbmeonadpbfafbkimjbdd [2012-12-01]
CHR Extension: (Booking.com for Chrome™) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip [2015-09-17]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2016-12-04]
CHR Extension: (Deaktivierungs-Add-on von Google Analytics) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fllaojicojecljbmefodhfapmkghcbnh [2015-11-10]
CHR Extension: (AdBlock) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-11-28]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2016-03-19]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-04]
CHR Extension: (Better Pop Up Blocker) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmpeeekfhbmikbdhlpjbfmnpgcbeggic [2012-03-10]
CHR Extension: (Google Mail) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-03]
CHR Extension: (Chrome Media Router) - C:\Users\Lutz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-27]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-05-27]
CHR HKLM-x32\...\Chrome\Extension: [edaibbiobngpbmeonadpbfafbkimjbdd] - C:\ProgramData\Logitech\LogiSmoothChromeExt.crx [2012-11-29]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2016-05-27]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-07-21]
CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe -user-agent=Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.22 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.22 anonymized by Abelssoft 1449098014
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S4 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-19] (Adobe Systems) [Datei ist nicht signiert]
S4 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
S4 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S4 ArcService; D:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2015-09-15] (Perfect World Entertainment Inc)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1146128 2016-12-06] (AVG Technologies CZ, s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1863688 2016-05-15] ()
S4 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [76336 2016-11-28] (CyberGhost S.R.L)
S4 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert]
S4 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2010-12-02] (Creative Labs) [Datei ist nicht signiert]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2010-12-02] (Creative Labs) [Datei ist nicht signiert]
S4 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [Datei ist nicht signiert]
S4 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] () [Datei ist nicht signiert]
S4 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1840128 2011-05-24] (MAGIX AG) [Datei ist nicht signiert]
S4 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-06-15] (NVIDIA Corporation)
S4 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-11-15] (Hi-Rez Studios) [Datei ist nicht signiert]
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
S4 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] ()
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2016-02-09] (Logitech Inc.)
R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [187840 2016-10-24] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [989192 2016-05-24] (McAfee, Inc.)
R2 McBootDelayStartSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.9.741.0\\McCSPServiceHost.exe [1903320 2016-04-18] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [795528 2016-04-20] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [232688 2016-03-07] (McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [382456 2016-04-01] (McAfee, Inc.)
R3 mfevtp; C:\Windows\system32\mfevtps.exe [277744 2016-03-07] (McAfee, Inc.)
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [246112 2013-10-29] ()
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1424352 2016-04-21] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [599864 2016-04-23] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [Datei ist nicht signiert]
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 nveloSvc; C:\Windows\System32\Dataplex\nveloSvc.exe [33984 2015-01-16] (Windows (R) Win 7 DDK provider)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-06-15] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-15] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-15] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2057736 2015-09-13] (Electronic Arts)
S4 PCloudd; C:\Program Files (x86)\LenovoEMC Storage Manager\pCloudd.exe [221536 2013-03-27] (LenovoEMC Ltd.)
S4 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1029856 2016-04-21] (Intel Security, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [Datei ist nicht signiert]
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2015-12-30] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2015-12-30] ()
S4 QPCopyEngine; C:\Program Files\Iomega\Quikprotect\QpMonitor.exe [458240 2012-09-07] () [Datei ist nicht signiert]
R2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [32544 2016-02-03] ()
S4 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1095440 2016-03-18] (RealNetworks, Inc.)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
S4 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [4788496 2016-11-25] (AVG Technologies CZ, s.r.o.)
S4 TwonkyMedia; C:\Program Files (x86)\TwonkyMedia\twonkymediaserverwatchdog.exe [512840 2012-02-03] (PacketVideo)
S4 TwonkyWebDav; C:\Program Files (x86)\TwonkyMedia\twonkywebdav.exe [250696 2012-02-03] ()
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [56080 2016-11-25] (AVG Technologies CZ, s.r.o.)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [48912 2016-11-25] (AVG Technologies CZ, s.r.o.)
S4 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [248248 2012-08-23] (Western Digital)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 InnovativeSolutions_monitor; C:\Program Files (x86)\Common Files\Innovative Solutions\Advanced Uninstaller\InnovativeSolutions_monitor_Svr.exe [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-27] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2013-06-10] (AVM Berlin)
R3 azvusb; C:\Windows\System32\DRIVERS\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [17600 2014-07-18] (Glarysoft Ltd)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [78632 2016-03-11] (McAfee, Inc.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
S3 DxVGrb; C:\Windows\System32\drivers\DxVGrb.sys [227456 2014-04-08] (Dexetek )
S3 FLxHCIh; C:\Windows\System32\DRIVERS\FLxHCIh.sys [44544 2010-04-17] (Fresco Logic)
S3 fwlanusb6; C:\Windows\System32\DRIVERS\fwlanusb6.sys [1330656 2013-09-13] (AVM GmbH)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20672 2014-08-08] (Glarysoft Ltd)
R1 GUSBootStartup; C:\Windows\System32\drivers\GUSBootStartup.sys [20672 2014-08-26] (Glarysoft Ltd)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [207968 2016-02-24] (McAfee, Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.)
S3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
S3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [419624 2016-03-11] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [349480 2016-03-11] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [493352 2016-03-11] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [842536 2016-03-11] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [543488 2016-02-10] (McAfee, Inc.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [109480 2016-02-10] (McAfee, Inc.)
R3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [46240 2016-06-06] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [243496 2016-03-11] (McAfee, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
R0 nvelodiskfltr; C:\Windows\System32\DRIVERS\nvelodiskfltr.sys [299712 2015-01-16] (Windows (R) Win 7 DDK provider)
S0 nvelofsfltr; C:\Windows\System32\DRIVERS\nvelofsfltr.sys [111296 2015-01-16] (Windows (R) Win 7 DDK provider)
R0 nveloportfltr; C:\Windows\System32\DRIVERS\nveloportfltr.sys [25280 2015-01-16] (Windows (R) Win 7 DDK provider)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-15] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
S3 QsFsFltr; C:\Windows\System32\DRIVERS\QsFsFltr.sys [22584 2012-08-20] (Windows (R) Win 7 DDK provider)
R1 SLEE_17_DRIVER; C:\Windows\Sleen1764.sys [108256 2010-02-17] (Softwareentwicklung Remus - ArchiCrypt - )
S3 SSMO3v2Filter; C:\Windows\System32\drivers\MO3v2Driver.sys [23040 2010-11-22] (Sagatek Co. Ltd.) [Datei ist nicht signiert]
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2016-02-15] (AVG Netherlands B.V.)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 utewmzu5; C:\Windows\SysWOW64\Drivers\utewmzu5.sys [7168 2015-11-26] () [Datei ist nicht signiert]
S3 ValFltr; C:\Windows\System32\drivers\ValoFltr.sys [14720 2009-04-10] (ROCCAT Development, Inc.)
R3 vNICdrv; C:\Windows\System32\DRIVERS\vNICdrv.sys [20048 2012-09-09] (Iomega Corporation)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [151184 2016-03-10] (MBB)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS [X]
S3 pccsmcfd; system32\DRIVERS\pccsmcfdx64.sys [X]
S3 pmem; \??\C:\Users\Lutz\AppData\Local\Temp\_MEI74002\drivers\winpmem64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-08 19:45 - 2016-12-08 19:45 - 00005846 _____ C:\Users\Lutz\Desktop\JRT.txt
2016-12-08 19:41 - 2016-12-08 19:41 - 01631928 _____ (Malwarebytes) C:\Users\Lutz\Desktop\JRT.exe
2016-12-08 19:29 - 2016-12-08 19:36 - 00000000 ____D C:\AdwCleaner
2016-12-08 19:29 - 2016-12-08 19:29 - 03968464 _____ C:\Users\Lutz\Desktop\AdwCleaner_6.040.exe
2016-12-08 19:24 - 2016-12-08 19:24 - 01496584 _____ C:\Users\Lutz\Desktop\McAfee Consumer Product Removal Tool - CHIP-Installer.exe
2016-12-08 02:22 - 2016-12-08 02:27 - 00052004 _____ C:\TDSSKiller.3.1.0.12_08.12.2016_02.22.45_log.txt
2016-12-08 00:05 - 2016-12-08 18:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-12-08 00:05 - 2016-12-08 01:44 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-08 00:05 - 2016-12-08 00:05 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-08 00:04 - 2016-12-08 02:20 - 00000000 ____D C:\Users\Lutz\Desktop\mbar
2016-12-08 00:04 - 2016-12-08 01:43 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-12-07 23:41 - 2016-12-07 23:41 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Lutz\Desktop\tdsskiller.exe
2016-12-07 23:30 - 2016-12-07 23:31 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Lutz\Desktop\mbar-1.09.3.1001.exe
2016-12-06 22:34 - 2016-12-08 21:17 - 00000000 ____D C:\FRST
2016-12-06 00:51 - 2016-12-06 00:51 - 00000000 ____D C:\Users\Lutz\AppData\Roaming\QuickScan
2016-12-05 19:15 - 2016-12-05 19:15 - 00002077 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2016-12-05 19:15 - 2016-12-05 19:15 - 00001912 _____ C:\Windows\epplauncher.mif
2016-12-05 19:15 - 2016-12-05 19:15 - 00000000 ____D C:\Program Files\Microsoft Security Client
2016-12-05 19:15 - 2016-12-05 19:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2016-12-05 19:14 - 2016-12-05 19:14 - 00000000 ____D C:\Program Files (x86)\Chip Digital GmbH
2016-12-05 19:07 - 2016-12-05 19:09 - 00000000 ____D C:\Users\Lutz\AppData\Roaming\McAfee TechCheck
2016-12-05 19:07 - 2016-12-05 19:09 - 00000000 _____ C:\Users\Lutz\Desktop\iphist.dat
2016-12-05 19:05 - 2016-12-05 19:05 - 03408408 _____ C:\Users\Lutz\Desktop\McAfee_TechCheck.exe
2016-12-05 19:02 - 2016-12-05 19:02 - 01496584 _____ C:\Users\Lutz\Desktop\Microsoft Security Essentials - CHIP-Installer.exe
2016-12-02 20:32 - 2016-12-05 20:08 - 00000000 __SHD C:\ProgramData\CPU Temp Monitor Service
2016-12-02 18:33 - 2016-12-02 18:33 - 11451644 _____ C:\Users\Lutz\Desktop\CE2300X.zip
2016-11-30 20:52 - 2016-11-30 20:52 - 00433419 ____N C:\Users\Lutz\Documents\Scan 30.11.2016, 19.14.pdf
2016-11-27 16:19 - 2016-11-27 16:19 - 00417599 _____ C:\Users\Lutz\Desktop\aktuelle-zahlen-zu-asyl-oktober-2016.pdf
2016-11-23 20:53 - 2016-11-23 20:53 - 00001079 _____ C:\Users\Public\Desktop\AntiBrowserSpy.lnk
2016-11-23 20:53 - 2016-11-23 20:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AntiBrowserSpy
2016-11-23 20:53 - 2016-11-23 20:53 - 00000000 ____D C:\Program Files (x86)\AntiBrowserSpy
2016-11-20 11:57 - 2016-11-20 11:57 - 00000222 _____ C:\Users\Lutz\Desktop\Paladins.url
2016-11-19 12:20 - 2016-11-19 13:12 - 00000000 ____D C:\Users\Lutz\Documents\Overwatch
2016-11-19 10:55 - 2016-12-08 20:17 - 00000000 ____D C:\Users\Lutz\AppData\LocalLow\Mozilla
2016-11-13 23:50 - 2016-11-13 23:50 - 00000000 ____D C:\Users\Lutz\.QtWebEngineProcess
2016-11-13 23:50 - 2016-11-13 23:50 - 00000000 ____D C:\Users\Lutz\.EVE
2016-11-13 23:49 - 2016-11-13 23:49 - 00000641 _____ C:\Users\Lutz\Desktop\EVE Launcher.lnk
2016-11-13 23:49 - 2016-11-13 23:49 - 00000000 ____D C:\Users\Lutz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EVE Launcher
2016-11-13 20:28 - 2016-11-13 20:28 - 08974809 _____ C:\Users\Lutz\Desktop\EVE-Online-Einsteiger-Kompendium.pdf
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-08 21:17 - 2015-06-08 18:10 - 00000000 ____D C:\Users\Lutz\Desktop\Fliegen
2016-12-08 21:13 - 2014-01-27 18:42 - 00000000 ____D C:\Users\Lutz\AppData\Local\Battle.net
2016-12-08 21:03 - 2014-10-14 15:44 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-12-08 21:02 - 2012-04-06 09:32 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-08 19:46 - 2009-07-14 05:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-08 19:46 - 2009-07-14 05:45 - 00015344 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-08 19:45 - 2009-07-14 18:58 - 32652226 _____ C:\Windows\system32\perfh007.dat
2016-12-08 19:45 - 2009-07-14 18:58 - 10279762 _____ C:\Windows\system32\perfc007.dat
2016-12-08 19:45 - 2009-07-14 06:13 - 00007312 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-08 19:38 - 2010-12-02 19:24 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-08 19:38 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-08 19:16 - 2016-10-27 18:38 - 00000000 ____D C:\Users\Lutz\Desktop\Planung 2017
2016-12-08 19:16 - 2011-05-13 12:13 - 00000000 ____D C:\Users\Lutz\Documents\Outlook-Dateien
2016-12-08 18:46 - 2015-12-22 20:02 - 00000000 ____D C:\Users\Lutz\AppData\Local\CrashDumps
2016-12-08 18:46 - 2013-11-10 09:41 - 00000000 ____D C:\Users\Lutz\AppData\Local\F87799D3-C920-4E93-B73C-2721F6CBD519.aplzod
2016-12-08 02:33 - 2016-10-30 09:16 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-12-08 02:22 - 2012-09-18 16:35 - 00000000 ____D C:\Users\Lutz\Desktop\Dateien
2016-12-08 02:01 - 2014-08-16 13:46 - 00000000 ____D C:\Users\Lutz\AppData\Local\Adobe
2016-12-08 01:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME
2016-12-08 01:07 - 2011-06-22 14:52 - 00003694 _____ C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2016-12-08 01:06 - 2014-12-25 10:05 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-12-07 23:34 - 2015-12-09 17:18 - 00000000 ____D C:\Users\Lutz\Desktop\Planung 2016
2016-12-07 22:29 - 2016-09-20 18:00 - 00003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2016-12-07 20:13 - 2016-04-27 00:12 - 00002209 _____ C:\Users\Lutz\Desktop\Vivaldi.lnk
2016-12-06 11:13 - 2012-04-11 23:27 - 00000058 _____ C:\Users\Lutz\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2016-12-06 10:18 - 2014-08-08 22:27 - 00000330 _____ C:\Windows\Tasks\GlaryInitialize 5.job
2016-12-06 00:59 - 2014-08-08 22:27 - 00002970 _____ C:\Windows\System32\Tasks\GU5SkipUAC
2016-12-06 00:59 - 2014-08-08 22:27 - 00002624 _____ C:\Windows\System32\Tasks\GlaryInitialize 5
2016-12-05 22:58 - 2014-08-08 22:27 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-12-05 20:32 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-12-05 19:56 - 2015-12-30 19:13 - 00002106 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2016-12-05 19:56 - 2015-12-30 19:13 - 00002094 _____ C:\Users\Public\Desktop\Vivaldi.lnk
2016-12-05 19:56 - 2015-12-30 19:13 - 00000000 ____D C:\Program Files\Vivaldi
2016-12-05 19:54 - 2015-12-30 19:13 - 00000000 ____D C:\Users\Lutz\AppData\Local\Vivaldi
2016-12-05 19:14 - 2011-01-31 22:59 - 00000000 ____D C:\Users\Lutz\AppData\Local\Downloaded Installations
2016-12-05 19:08 - 2011-03-23 12:04 - 00000000 ____D C:\Users\Lutz\AppData\Local\Corel
2016-12-05 19:07 - 2011-03-23 12:01 - 00000000 ____D C:\Users\Lutz\Documents\My PSP Files
2016-12-04 21:17 - 2016-03-19 11:59 - 00003380 _____ C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3438443834-875338260-1882614465-1000
2016-12-04 21:17 - 2016-03-18 22:11 - 00003422 _____ C:\Windows\System32\Tasks\RealDownloader Update Check
2016-12-04 21:17 - 2016-03-18 17:49 - 00003360 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3438443834-875338260-1882614465-1000
2016-12-04 21:17 - 2016-03-18 17:49 - 00003224 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3438443834-875338260-1882614465-1000
2016-12-04 18:15 - 2011-04-13 00:50 - 00000000 ____D C:\Users\Lutz\.smplayer
2016-12-04 16:12 - 2010-12-02 21:52 - 00000000 ____D C:\Users\Lutz\Documents\Flight Simulator X-Dateien
2016-12-04 12:28 - 2016-09-27 21:29 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2016-12-04 11:30 - 2016-10-28 23:55 - 00000000 ____D C:\Program Files\CyberGhost 6
2016-12-04 11:18 - 2013-06-08 13:22 - 00000000 ____D C:\Program Files (x86)\Steam
2016-12-03 14:02 - 2016-04-14 22:25 - 00003432 _____ C:\Windows\System32\Tasks\NeoSetup Updater
2016-12-02 20:33 - 2012-05-02 20:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-02 20:33 - 2010-12-02 21:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-02 20:19 - 2016-10-28 23:55 - 00001732 _____ C:\Users\Lutz\Desktop\CyberGhost 6.lnk
2016-12-01 20:01 - 2014-08-08 22:27 - 00000000 ____D C:\Users\Lutz\AppData\Roaming\DiskDefrag
2016-11-30 19:54 - 2012-01-25 12:00 - 00002579 _____ C:\Users\Lutz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-25 13:45 - 2016-02-08 00:48 - 00053008 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\TURegOpt.exe
2016-11-25 13:39 - 2016-02-16 21:39 - 00056080 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\uxtuneup.dll
2016-11-25 13:39 - 2016-02-16 21:39 - 00048912 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\SysWOW64\uxtuneup.dll
2016-11-25 13:39 - 2016-02-08 00:48 - 00044304 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\authuitu.dll
2016-11-25 13:39 - 2016-02-08 00:48 - 00042256 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\SysWOW64\authuitu.dll
2016-11-24 11:10 - 2016-05-03 21:10 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-24 11:10 - 2016-05-03 21:10 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-24 01:21 - 2013-06-30 15:48 - 00000000 ____D C:\Users\Lutz\AppData\Local\Ubisoft Game Launcher
2016-11-23 20:54 - 2016-05-03 21:10 - 00004118 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-11-23 20:54 - 2016-05-03 21:10 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-11-23 20:53 - 2014-08-11 15:54 - 00000000 ____D C:\Users\Lutz\AppData\Roaming\Abelssoft
2016-11-23 20:53 - 2010-12-03 12:39 - 00000000 ____D C:\Users\Lutz\AppData\Local\Abelssoft
2016-11-23 20:30 - 2016-10-28 23:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6
2016-11-20 11:57 - 2012-10-27 23:45 - 00000000 ____D C:\Users\Lutz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-11-17 01:58 - 2010-12-03 18:39 - 00000000 ____D C:\Users\Lutz\AppData\Local\Deployment
2016-11-15 16:29 - 2016-05-03 21:11 - 00002187 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-15 16:29 - 2016-05-03 21:11 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-13 23:50 - 2010-12-02 19:09 - 00000000 ____D C:\Users\Lutz
2016-11-13 15:46 - 2013-07-30 22:22 - 00000000 ____D C:\Users\Lutz\AppData\Roaming\vlc
2016-11-13 12:47 - 2012-04-06 09:32 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-13 12:47 - 2012-04-06 09:32 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-11-13 12:47 - 2011-11-06 22:32 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-13 12:47 - 2011-05-16 16:23 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-13 12:47 - 2010-12-02 21:15 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-10 18:13 - 2015-11-06 16:11 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-11-09 20:00 - 2015-12-07 17:10 - 00000000 ____D C:\Program Files\McAfee
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2012-11-28 20:41 - 2012-11-28 20:41 - 0000268 ___RH () C:\Users\Lutz\AppData\Roaming\Clips
2012-11-28 20:41 - 2012-11-28 20:41 - 0000268 ___RH () C:\Users\Lutz\AppData\Roaming\Cocoa
2012-11-28 20:41 - 2012-11-28 20:41 - 0000268 ___RH () C:\Users\Lutz\AppData\Roaming\ColorSync
2014-12-25 11:12 - 2014-12-25 11:21 - 0000012 ____T () C:\Users\Lutz\AppData\Roaming\Samsung Magician Installer.lockfile
2012-09-11 14:31 - 2012-09-11 15:59 - 11624448 _____ () C:\Users\Lutz\AppData\Roaming\Sandra.mdb
2012-09-11 15:05 - 2012-09-11 15:05 - 0186077 _____ () C:\Users\Lutz\AppData\Local\ars.cache
2012-09-11 15:06 - 2012-09-11 15:06 - 0915999 _____ () C:\Users\Lutz\AppData\Local\census.cache
2012-04-11 23:27 - 2016-12-06 11:13 - 0000058 _____ () C:\Users\Lutz\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2011-06-13 08:00 - 2011-06-13 08:00 - 0000092 _____ () C:\Users\Lutz\AppData\Local\fusioncache.dat
2012-09-11 14:53 - 2012-09-11 14:53 - 0000036 _____ () C:\Users\Lutz\AppData\Local\housecall.guid.cache
2011-07-27 18:45 - 2013-04-07 23:06 - 0007593 _____ () C:\Users\Lutz\AppData\Local\Resmon.ResmonCfg
2013-02-22 15:28 - 2013-02-22 15:28 - 0000011 _____ () C:\ProgramData\.tv6
2012-11-28 20:41 - 2012-11-28 20:41 - 0000268 ___RH () C:\ProgramData\Colors
2012-11-28 20:41 - 2012-11-28 20:41 - 0000268 ___RH () C:\ProgramData\Comedy Noises
2012-11-28 20:41 - 2012-11-28 20:41 - 0000268 ___RH () C:\ProgramData\Command Line Utility
2011-02-26 19:51 - 2011-02-26 19:51 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2011-03-23 12:03 - 2012-08-16 19:01 - 0000900 ___SH () C:\ProgramData\KGyGaAvL.sys
2012-11-28 20:41 - 2012-11-28 20:41 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2012-11-28 20:41 - 2012-11-28 20:45 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2012-11-28 20:41 - 2012-11-28 20:41 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Lutz\CGWebInstall (1).exe
C:\Users\Lutz\CGWebInstall.exe
Einige Dateien in TEMP:
====================
C:\Users\Lutz\AppData\Local\Temp\jre-8u111-windows-au.exe
C:\Users\Lutz\AppData\Local\Temp\libeay32.dll
C:\Users\Lutz\AppData\Local\Temp\msvcr120.dll
C:\Users\Lutz\AppData\Local\Temp\ScanBy.dll
C:\Users\Lutz\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-09-19 17:29
==================== Ende von FRST.txt ============================
|
|
08.12.2016, 21:40
| #27 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Task: {1940FF79-2C54-4203-AEA4-AF07AE78A871} - System32\Tasks\{3EE7C121-4A7B-49B0-9D74-44D92D444EA4} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\jre-8u91-windows-au.exe -d "C:\Program Files (x86)\Common Files\Java\Java Update" -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {71A76E68-95C5-4547-82C6-AF23D822412E} - System32\Tasks\{6121CC0B-6581-489E-908C-3F0450821362} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\jre-8u111-windows-au.exe -d "C:\Program Files (x86)\Common Files\Java\Java Update" -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {8FBAD392-F023-4AD8-8256-06BA4AC4D2E8} - System32\Tasks\{41D0D454-F664-4B57-927A-8D7434112D05} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\Temp1_um304x86.zip\um304x86\setup.exe <==== ACHTUNG
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Run: [] => [X]
S4 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert]
C:\Program Files (x86)\Chip Digital GmbH
C:\Users\Lutz\CGWebInstall (1).exe
C:\Users\Lutz\CGWebInstall.exe
emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.12.2016, 21:50
| #28 |
| | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefundenCode:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Lutz (08-12-2016 21:44:40) Run:1
Gestartet von C:\Users\Lutz\Desktop\Fliegen
Geladene Profile: Lutz & DefaultAppPool (Verfügbare Profile: Lutz & DefaultAppPool)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
Task: {1940FF79-2C54-4203-AEA4-AF07AE78A871} - System32\Tasks\{3EE7C121-4A7B-49B0-9D74-44D92D444EA4} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\jre-8u91-windows-au.exe -d "C:\Program Files (x86)\Common Files\Java\Java Update" -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {71A76E68-95C5-4547-82C6-AF23D822412E} - System32\Tasks\{6121CC0B-6581-489E-908C-3F0450821362} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\jre-8u111-windows-au.exe -d "C:\Program Files (x86)\Common Files\Java\Java Update" -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {8FBAD392-F023-4AD8-8256-06BA4AC4D2E8} - System32\Tasks\{41D0D454-F664-4B57-927A-8D7434112D05} => pcalua.exe -a C:\Users\Lutz\AppData\Local\Temp\Temp1_um304x86.zip\um304x86\setup.exe <==== ACHTUNG
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\...\Run: [] => [X]
S4 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [Datei ist nicht signiert]
C:\Program Files (x86)\Chip Digital GmbH
C:\Users\Lutz\CGWebInstall (1).exe
C:\Users\Lutz\CGWebInstall.exe
emptytemp:
*****************
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1940FF79-2C54-4203-AEA4-AF07AE78A871}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1940FF79-2C54-4203-AEA4-AF07AE78A871}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{3EE7C121-4A7B-49B0-9D74-44D92D444EA4} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3EE7C121-4A7B-49B0-9D74-44D92D444EA4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{71A76E68-95C5-4547-82C6-AF23D822412E}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{71A76E68-95C5-4547-82C6-AF23D822412E}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{6121CC0B-6581-489E-908C-3F0450821362} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6121CC0B-6581-489E-908C-3F0450821362}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8FBAD392-F023-4AD8-8256-06BA4AC4D2E8}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8FBAD392-F023-4AD8-8256-06BA4AC4D2E8}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{41D0D454-F664-4B57-927A-8D7434112D05} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{41D0D454-F664-4B57-927A-8D7434112D05}" => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-3438443834-875338260-1882614465-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ => Wert erfolgreich entfernt
chip1click => Dienst erfolgreich entfernt
C:\Program Files (x86)\Chip Digital GmbH => erfolgreich verschoben
C:\Users\Lutz\CGWebInstall (1).exe => erfolgreich verschoben
C:\Users\Lutz\CGWebInstall.exe => erfolgreich verschoben
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 30713667 B
Java, Flash, Steam htmlcache => 256496405 B
Windows/system/drivers => 2384734 B
Edge => 0 B
Chrome => 41386203 B
Firefox => 442875496 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 88492 B
Public => 0 B
ProgramData => 0 B
systemprofile => 45187056 B
systemprofile32 => 1824169 B
LocalService => 0 B
NetworkService => 6535427 B
Lutz => 122938149 B
UpdatusUser.Lutz-PC => 0 B
UpdatusUser.Lutz-PC => 0 B
DefaultAppPool => 66228 B
RecycleBin => 131565188 B
EmptyTemp: => 1 GB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 21:45:03 ====
|
|
08.12.2016, 21:52
| #29 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte: 1. Schritt: MBAM Downloade Dir bitte  Malwarebytes Anti-Malware
2. Schritt: ESET ESET Online Scanner
3. Schritt: SecurityCheck Downloade Dir bitte  SecurityCheck und:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
08.12.2016, 23:15
| #30 |
| | PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden Läuft. Danke, dass Du Dir die Zeit nimmst, mir zu helfen, cosinus! Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 08.12.2016 Suchlaufzeit: 22:05 Protokolldatei: mbam.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.12.08.14 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Lutz Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 426053 Abgelaufene Zeit: 23 Min., 28 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 9 PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, In Quarantäne, [935b91532d6ddd59bb555105c2409d63], PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, In Quarantäne, [c72711d3bedc52e47b9af95d778b1ce4], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CCLEANER64.EXE, In Quarantäne, [dc12f2f2bfdb49edc930d676a95a41bf], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SKYPE.EXE, In Quarantäne, [e80617cda1f99a9ce69b80b4cf340000], PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STEAM.EXE, In Quarantäne, [9856677d6634a492e79cef454ab9a957], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CCLEANER64.EXE, In Quarantäne, [b5397f65178355e1df1a490317ec07f9], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SKYPE.EXE, In Quarantäne, [16d839abc6d459dd334e45ef7a89a858], PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STEAM.EXE, In Quarantäne, [5b93f2f2ddbd58de8cf70d27d1329070], PUP.Optional.DownloadGuide, HKU\S-1-5-21-3438443834-875338260-1882614465-1000\SOFTWARE\J3S\COMPUTER BILD Account-Alarm, In Quarantäne, [6d8127bd85153df95469670639cab947], Registrierungswerte: 6 PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CCLEANER64.EXE|Debugger, "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe", In Quarantäne, [dc12f2f2bfdb49edc930d676a95a41bf] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SKYPE.EXE|Debugger, "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe", In Quarantäne, [e80617cda1f99a9ce69b80b4cf340000] PUP.Optional.IFEO, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STEAM.EXE|Debugger, "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe", In Quarantäne, [9856677d6634a492e79cef454ab9a957] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\CCLEANER64.EXE|Debugger, "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe", In Quarantäne, [b5397f65178355e1df1a490317ec07f9] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\SKYPE.EXE|Debugger, "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe", In Quarantäne, [16d839abc6d459dd334e45ef7a89a858] PUP.Optional.IFEO, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\STEAM.EXE|Debugger, "C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe", In Quarantäne, [5b93f2f2ddbd58de8cf70d27d1329070] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 3 PUP.Optional.DownloadSponsor, C:\Users\Lutz\Desktop\McAfee Consumer Product Removal Tool - CHIP-Installer.exe, In Quarantäne, [747a1aca5c3e59dde29d029e28d82ed2], PUP.Optional.DownloadSponsor, C:\$Recycle.Bin\S-1-5-21-3438443834-875338260-1882614465-1000\$R2RIV59.exe, In Quarantäne, [8965d410aaf0ee483847ecb439c72ad6], PUP.Optional.WinYahoo, C:\Users\Lutz\AppData\LocalLow\Microsoft\Internet Explorer\Services\Wincy.ico, In Quarantäne, [6b836e767327d561f17b88c7c73cf808], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
|
| Themen zu PC ist gehackt worden und Trojaner Multiinjector.A!rfn und Neurevt gefunden |
| erkannt, essen, fritz box, funktioniert, gehackt, gen, hallo zusammen, heute, hängen, log-file, löschen, microsoft, nichts, paypal, plötzlich, programm, rechner, recht, samstag, schnell, schnelltest, security, thema, trojaner, ziehen |
Linear-Darstellung
