| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Werbefenster öffnet sich von alleineWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
30.12.2016, 21:06
| #1 |
 |  Werbefenster öffnet sich von alleine Hallo Jungs, Seit ca. 1 Woche ich kempfe mit dem Problem das Firefox öffnet von alleine werbefenstern! Ich habe mit sämtliche Mailware entferner und Antiviruses probiert aber ich habe noch nicht geschaft das problem zu lösen! Ich habe und Firefox zurückgesetzt -> trotzdem alles bei gleiche.  Instelliert ist Windows 7 Kann mir jemand weiter helfen? Danke im voraus! Hier paar logs was ich gerade gemacht habe: Malwarebytes Anti-Malware : Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 30.12.2016 Suchlaufzeit: 18:47 Protokolldatei: Anti Malware.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.12.30.08 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Vouager Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 515700 Abgelaufene Zeit: 22 Min., 5 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Warnen PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 2 Hijack.HostFile, C:\Windows\System32\drivers\etc\hosts, Gut: (), Schlecht: (# End of entries inserted by Spybot - Search & Destroy127.0.0.1 clients2.google.com ), Keine Aktion durch Benutzer,[dfa11bd22b6f69cd6bfa90c28c74a957] PUP.Optional.SpyHunter, C:\Windows\Installer\3ea18c.msi, In Quarantäne, [017fc32a009aed494d56bdd0b44c9d63], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.0 (12.05.2016)
Operating System: Windows 7 Ultimate x64
Ran by Vouager (Administrator) on 30.12.2016 at 19:12:09,62
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 9
Successfully deleted: C:\Windows\wininit.ini (File)
Successfully deleted: C:\Users\Vouager\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\735GX8DH (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Vouager\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BPI5PP1V (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Vouager\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GL1F6JSL (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Vouager\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XGRNNJWM (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\735GX8DH (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BPI5PP1V (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GL1F6JSL (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XGRNNJWM (Temporary Internet Files Folder)
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 30.12.2016 at 19:13:10,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21-12-2016
durchgeführt von Vouager (Administrator) auf VOUAGER-PC (30-12-2016 20:43:39)
Gestartet von C:\Users\Vouager\Desktop
Geladene Profile: Vouager (Verfügbare Profile: Vouager & Martin & Antonio & UpdatusUser & Kire & Kire-Neu)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 8 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
() C:\Windows\SysWOW64\UMonit.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Saitek) C:\Program Files\Saitek\VolumeTracker\SaiVolume.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Cmaudio8788] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [UMonit] => C:\Windows\SysWOW64\UMonit.exe [49152 2011-05-25] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7541976 2014-02-21] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [SaiVolume] => C:\Program Files\Saitek\VolumeTracker\SaiVolume.exe [152064 2015-10-13] (Saitek)
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2015-10-13] (Saitek)
HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [157696 2015-10-13] (Saitek)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] ()
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-21] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {19bd5ff5-3057-11e3-8959-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2bcedc8d-301e-11e3-8e40-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2c8265b5-3054-11e3-8ea8-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9d93-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9daf-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9dfe-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {4ae7546b-bf09-11e3-93ee-90e6ba93ef79} - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {57a8be24-aa9d-11e2-9d06-806e6f6e6963} - F:\setup\rsrc\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c31617c-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c316181-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c316184-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c31618e-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9e9c2b97-296d-11e6-98fd-e03f491c0962} - K:\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed38166-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed381a1-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed38212-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ef53f3d-29a8-11e6-bf1a-e03f491c0962} - L:\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407d4-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e0-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e3-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e5-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e7-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e9-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {c3dbcd5b-40cc-11e2-8b90-806e6f6e6963} - F:\autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {d3870e78-31c6-11e3-8ef1-90e6ba93ef79} - G:\AutoRun.exe
ShellExecuteHooks: Kein Name - {3E07EA28-AB6D-11E6-B40F-64006A5CFC23} - -> Keine Datei
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-10] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-20]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
GroupPolicy: Beschränkung - Chrome <======= ACHTUNG
GroupPolicy\User: Beschränkung <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-3129012598-2279985476-2495907205-1012\User: Beschränkung <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-3129012598-2279985476-2495907205-1006\User: Beschränkung <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-3129012598-2279985476-2495907205-1005\User: Beschränkung <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-3129012598-2279985476-2495907205-1004\User: Beschränkung <======= ACHTUNG
GroupPolicyUsers\S-1-5-21-3129012598-2279985476-2495907205-1003\User: Beschränkung <======= ACHTUNG
GroupPolicyScripts: Beschränkung <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{2EC0EECB-5AED-4805-BC3E-2FBB56D1BCF1}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5241B5C5-CBB1-4BDA-B4A5-93A13806AFB0}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{FCD661AB-B021-489E-92A5-C23510B74767}: [DhcpNameServer] 192.168.42.129
ManualProxies:
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001 -> {24588FA4-10F1-41D7-B19D-6E22361E47FA} URL = hxxp://www.baidu.com/s?wd={searchTerms}&tn=site888_1_pg&cl=3&ie=utf-8
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-21] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Kein Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-21] (Oracle Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2010-05-28] (Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-21] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-21] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2010-05-28] (Hewlett-Packard Co.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: ibq6chso.default
FF ProfilePath: C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default [2016-12-30]
FF NewTab: Mozilla\Firefox\Profiles\ibq6chso.default -> about:newtab
FF Homepage: Mozilla\Firefox\Profiles\ibq6chso.default -> www.goolge.de
FF Keyword.URL: Mozilla\Firefox\Profiles\ibq6chso.default -> user_pref("keyword.URL", true);
FF Extension: (Classic Theme Restorer) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2016-12-22]
FF Extension: (IE Tab +) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\coralietab@mozdev.org [2016-12-22]
FF Extension: (Ebay Button) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\ebayHotStuff@wangtom.com [2016-12-22]
FF Extension: (Ghostery) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\firefox@ghostery.com.xpi [2016-12-22]
FF Extension: (MEGA) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\firefox@mega.co.nz.xpi [2016-12-29]
FF Extension: (YouTube™ Enhancer Plus) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\firefoxaddon@youtubeenhancer.com.xpi [2016-12-22]
FF Extension: (YouTube mp3) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\info@youtube-mp3.org.xpi [2016-05-10]
FF Extension: (Download Manager (S3)) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\s3download@statusbar.xpi [2016-07-15]
FF Extension: (translator) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\translator@dontfollowme.net.xpi [2015-08-24]
FF Extension: (1-Click YouTube Video Downloader) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2016-12-22]
FF Extension: (Flagfox) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-12-22]
FF Extension: (Youtube mp3 Toolbar Button) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{139C4B80-60ED-11E4-80EC-84041E5D46B0}.xpi [2015-11-04]
FF Extension: (YouTube High Definition) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2016-12-28]
FF Extension: (FireFTP) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2016-12-22]
FF Extension: (Adblock Plus) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-22]
FF SearchPlugin: C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\searchplugins\youtube-videosuche.xml [2014-10-21]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-10]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-10]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-20] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-23] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-21] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @videolan.org/vlc,version=2.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-23] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-10] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [223600 2016-09-10] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1447944 2016-12-23] ()
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [227104 2016-08-22] (EasyAntiCheat Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Qerzicult; C:\Program Files (x86)\Vigaghtlterk\Verqitioncmm.dll [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2012-07-03] (Google Inc)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-06-04] ()
R0 asstor64; C:\Windows\System32\DRIVERS\asstor64.sys [84816 2014-01-27] (Asmedia Technology)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-10] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [28312 2016-09-10] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [453192 2016-09-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [94720 2014-06-21] (Advanced Micro Devices) [Datei ist nicht signiert]
S3 awUSB; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [18392 2013-01-25] (Scott)
S3 CH341SER_A64; C:\Windows\System32\Drivers\CH341S64.SYS [58368 2011-11-05] (www.winchiphead.com)
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2725376 2011-03-10] (C-Media Inc)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-06-02] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-06-02] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)
S3 eustub; C:\Windows\System32\DRIVERS\eusbstub.sys [20104 2015-12-09] (ELTIMA Software)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [58368 2011-05-18] (GenesysLogic)
U5 grmnusb; C:\Windows\System32\Drivers\grmnusb.sys [19304 2012-04-18] (GARMIN Corp.)
S3 hmatap; C:\Windows\System32\DRIVERS\hmatap.sys [27136 2016-09-23] (The OpenVPN Project)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
S3 MADFULEGACYKEYBOARD; C:\Windows\System32\DRIVERS\MAudioLegacyKeyboard_DFU.sys [28680 2010-02-09] (M-Audio)
S3 MAUSBLEGACYKEYBOARD; C:\Windows\System32\DRIVERS\MAudioLegacyKeyboard.sys [196616 2010-02-09] (M-Audio)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 PortTalk; C:\Windows\SysWOW64\Drivers\PortTalk.sys [3567 2014-12-15] (Beyond Logic hxxp://www.beyondlogic.org) [Datei ist nicht signiert]
R3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [118272 2009-02-23] (QUALCOMM Incorporated)
R3 R5BaseSmc; C:\Windows\System32\DRIVERS\smccard.sys [23592 2016-01-03] (OEM)
S3 Rockusb; C:\Windows\System32\DRIVERS\rockusb.sys [65648 2011-12-08] (Fuzhou Rockchip Electronics Co,Ltd.)
S3 SaiK0728; C:\Windows\System32\DRIVERS\SaiK0728.sys [180584 2012-12-05] (Saitek)
S3 SaiK0CD5; C:\Windows\System32\DRIVERS\SaiK0CD5.sys [180584 2012-09-20] (Saitek)
R3 SaiK1107; C:\Windows\System32\DRIVERS\SaiK1107.sys [180896 2015-10-13] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [51488 2015-10-01] (Saitek)
S3 SaiU0CD5; C:\Windows\System32\DRIVERS\SaiU0CD5.sys [47208 2012-09-20] (Saitek)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-09-17] (Anchorfree Inc.)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2012-03-02] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [28160 2012-03-02] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [34816 2012-03-02] (LG Electronics Inc.)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [18392 2013-01-25] (Scott)
S3 vuhub; C:\Windows\System32\DRIVERS\vuhub.sys [77032 2013-12-10] (ELTIMA Software)
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2016-12-28] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2016-12-28] (Zemana Ltd.)
R2 zntport; C:\Windows\system32\drivers\zntport.sys [13880 2007-12-22] (Zeal SoftStudio)
R3 _hid_0738_1708; C:\Windows\System32\DRIVERS\_hid_0738_1708.sys [180928 2015-10-01] (Saitek)
R3 _usb_0738_1708; C:\Windows\System32\DRIVERS\_usb_0738_1708.sys [46528 2015-10-01] (Saitek)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
U2 V2iMount; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-30 20:43 - 2016-12-30 20:43 - 00030576 _____ C:\Users\Vouager\Desktop\FRST.txt
2016-12-30 20:42 - 2016-12-30 20:42 - 00000986 _____ C:\Users\Public\Desktop\MiniTool Partition Wizard Free.lnk
2016-12-30 20:42 - 2016-12-30 20:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Free 9.1
2016-12-30 20:42 - 2016-12-30 20:42 - 00000000 ____D C:\Program Files\MiniTool Partition Wizard Free 9.1
2016-12-30 20:15 - 2016-12-30 20:15 - 00001573 _____ C:\Windows\PWCMDLST.BAK
2016-12-30 19:13 - 2016-12-30 19:13 - 00001926 _____ C:\Users\Vouager\Desktop\JRT.txt
2016-12-30 19:10 - 2016-12-30 19:11 - 00001515 _____ C:\Users\Vouager\Desktop\Anti Malware.txt
2016-12-30 12:35 - 2016-12-30 12:35 - 00000000 ____D C:\Users\Vouager\Desktop\ProcessExplorerPortable
2016-12-30 03:43 - 2016-12-30 03:43 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Smartelectronix
2016-12-30 00:29 - 2016-12-30 00:29 - 00002051 _____ C:\Users\Public\Desktop\Vediamo StartCenter.lnk
2016-12-30 00:29 - 2016-12-30 00:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vediamo 5.1
2016-12-30 00:28 - 2016-12-30 00:28 - 00000000 ____D C:\Windows\system32\{D7762300-AFFE-C0C0-BEBE-050003010001}
2016-12-28 23:24 - 2016-12-28 23:24 - 00000886 _____ C:\Users\Public\Desktop\MegaDownloader.lnk
2016-12-28 23:24 - 2016-12-28 23:24 - 00000000 ____D C:\Users\Vouager\AppData\Local\MegaDownloader
2016-12-28 23:24 - 2016-12-28 23:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaDownloader
2016-12-28 23:24 - 2016-12-28 23:24 - 00000000 ____D C:\Program Files\MegaDownloader
2016-12-28 22:14 - 2016-12-28 22:14 - 00000000 ___DC C:\Users\Vouager\AppData\Local\MigWiz
2016-12-28 18:37 - 2016-12-28 18:37 - 00000779 _____ C:\Users\Vouager\Desktop\Vediamo_LINKS.zip
2016-12-28 01:52 - 2016-12-30 20:43 - 00000000 ____D C:\FRST
2016-12-28 01:52 - 2016-12-28 01:52 - 02420736 _____ (Farbar) C:\Users\Vouager\Desktop\FRST64.exe
2016-12-28 01:29 - 2016-12-28 01:29 - 01663040 _____ (Malwarebytes) C:\Users\Vouager\Desktop\JRT.exe
2016-12-28 01:21 - 2016-12-28 01:21 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2016-12-28 00:46 - 2016-12-30 20:43 - 00054338 _____ C:\Windows\ZAM.krnl.trace
2016-12-28 00:46 - 2016-12-30 20:43 - 00022331 _____ C:\Windows\ZAM_Guard.krnl.trace
2016-12-28 00:46 - 2016-12-28 00:46 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
2016-12-28 00:46 - 2016-12-28 00:46 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys
2016-12-28 00:46 - 2016-12-28 00:46 - 00000000 ____D C:\Users\Vouager\AppData\Local\Zemana
2016-12-27 13:17 - 2016-12-27 13:17 - 00513672 _____ C:\Users\Vouager\Desktop\fahrzeugniveau-an-der-vorder-und-hinterachse-mit-elektronischem-neigungsmessgeraet-pruefen-ggf.pdf
2016-12-23 20:24 - 2016-12-27 15:22 - 00000000 ____D C:\Users\Vouager\AppData\Local\DayZ
2016-12-23 20:24 - 2016-12-23 20:31 - 00000000 ____D C:\Users\Vouager\Documents\DayZ
2016-12-22 23:54 - 2016-12-22 23:56 - 00000000 ____D C:\Users\Vouager\Desktop\NEMESIS
2016-12-22 23:52 - 2016-12-22 23:52 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dreamboxEDIT
2016-12-22 23:25 - 2016-12-22 23:31 - 00000000 ____D C:\Program Files\Plumbytes Software
2016-12-21 21:35 - 2016-12-21 21:35 - 00000000 ____D C:\Users\Vouager\AppData\Local\Chromium
2016-12-20 00:16 - 2016-12-20 00:16 - 00001857 _____ C:\Users\Public\Desktop\GeoGebra.lnk
2016-12-20 00:16 - 2016-12-20 00:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 5
2016-12-16 21:59 - 2016-12-16 21:59 - 00003136 _____ C:\Windows\System32\Tasks\{5EBEE5CD-2B2B-4F3B-8110-0BCDDF1E1527}
2016-12-16 21:35 - 2016-12-16 23:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-16 21:18 - 2016-12-16 21:20 - 00000000 ____D C:\Users\Antonio\AppData\LocalLow\Mozilla
2016-12-14 23:55 - 2016-12-14 23:55 - 00000000 _____ C:\Windows\system32\__0000000140358AE5__C0000005.dmp
2016-12-13 23:09 - 2016-12-14 23:55 - 00000000 ____D C:\Windows\system32\SSL
2016-12-13 23:09 - 2016-12-13 23:09 - 00006006 _____ C:\Windows\System32\Tasks\Vizashkible Reports
2016-12-13 23:09 - 2016-12-13 23:09 - 00000000 ____D C:\ProgramData\Avira
2016-12-13 23:09 - 2016-12-13 23:09 - 00000000 ____D C:\ProgramData\Avg
2016-12-13 23:09 - 2016-12-13 23:09 - 00000000 _____ C:\Windows\system32\__000000014035AA91__C0000005.dmp
2016-12-13 23:08 - 2016-12-13 23:45 - 00000000 ____D C:\Program Files (x86)\Vigaghtlterk
2016-12-13 23:00 - 2016-12-13 23:12 - 00000000 ____D C:\Users\Vouager\Desktop\Chimera
2016-12-12 23:27 - 2016-12-12 23:34 - 00000000 ____D C:\Windows\4E0C6314A8B84026AC15084E8B63AFB5.TMP
2016-12-12 23:27 - 2016-12-12 23:27 - 00000000 ____D C:\Windows\0028CB34D5D3460FB308A39A095A5E01.TMP
2016-12-12 00:21 - 2016-12-12 00:21 - 00000016 _____ C:\ProgramData\mntexmp
2016-12-11 23:22 - 2016-12-11 23:22 - 00000883 _____ C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FastGSM Samsung Client.lnk
2016-12-11 23:20 - 2016-12-11 23:20 - 00000000 ____D C:\ProgramData\Samsung
2016-12-11 13:57 - 2016-12-11 13:57 - 00003620 _____ C:\Windows\System32\Tasks\InternetCFC
2016-12-11 12:50 - 2016-12-11 12:50 - 00000177 _____ C:\Users\Vouager\AppData\Local\uts.ini
2016-12-11 12:50 - 2016-12-11 12:50 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Kingosoft
2016-12-11 12:50 - 2016-12-11 12:50 - 00000000 ____D C:\Users\Vouager\AppData\Local\uts
2016-12-08 23:29 - 2016-12-08 23:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\M-Audio
2016-12-08 23:28 - 2016-12-08 23:28 - 03043731 _____ C:\Users\Vouager\Desktop\Legacy_Keyboard_5_0_0.zip
2016-12-08 23:28 - 2016-12-08 23:28 - 00000000 ____D C:\Program Files\M-Audio
2016-12-08 22:44 - 2016-12-13 23:09 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2016-12-08 22:44 - 2016-12-08 22:44 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2016-12-08 12:23 - 2016-12-13 23:09 - 00000000 ____D C:\Program Files (x86)\Manual
2016-12-08 12:23 - 2016-12-08 23:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\reFX
2016-12-08 12:23 - 2009-10-24 21:15 - 01332224 _____ (AD © 2009) C:\Windows\SysWOW64\SYNSOEMU.DLL
2016-12-08 12:23 - 2009-10-23 23:00 - 05811712 _____ (reFX) C:\Program Files (x86)\Nexus.dll
2016-12-08 12:22 - 2016-12-30 01:53 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\DAEMON Tools Lite
2016-12-08 12:20 - 2016-12-13 23:09 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-12-08 12:20 - 2016-12-08 12:20 - 00000000 ____D C:\Program Files\Common Files\VST2
2016-12-08 12:20 - 2016-12-08 12:20 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-12-08 12:19 - 2016-12-09 13:59 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-12-08 12:19 - 2016-12-09 13:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-12-08 12:19 - 2016-12-08 22:44 - 00000000 ____D C:\Program Files\Image-Line
2016-12-08 12:19 - 2016-12-08 12:19 - 00000000 ____D C:\Users\Vouager\Documents\Image-Line
2016-12-08 12:19 - 2016-12-08 12:19 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Image-Line
2016-12-07 00:10 - 2016-12-13 23:09 - 00000000 ____D C:\Program Files (x86)\Image-Line
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-30 20:42 - 2016-11-15 22:01 - 00000000 ____D C:\Users\Vouager\AppData\LocalLow\Mozilla
2016-12-30 20:42 - 2011-04-12 08:43 - 00772512 _____ C:\Windows\system32\perfh007.dat
2016-12-30 20:42 - 2011-04-12 08:43 - 00176010 _____ C:\Windows\system32\perfc007.dat
2016-12-30 20:42 - 2009-07-14 06:13 - 01806012 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-30 20:42 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-30 20:41 - 2013-11-24 20:22 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 8.1.1
2016-12-30 20:36 - 2012-12-08 01:40 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-30 20:36 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-30 19:57 - 2013-07-19 23:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-30 19:45 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-30 19:45 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-30 19:23 - 2009-07-14 05:45 - 00529672 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-30 19:21 - 2013-08-23 23:32 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-12-30 18:51 - 2014-09-15 22:03 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-12-30 18:49 - 2016-09-10 19:22 - 00000000 ____D C:\Users\Vouager\AppData\Local\Google
2016-12-30 18:49 - 2016-09-10 18:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-30 18:45 - 2015-05-02 19:17 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-30 03:32 - 2012-12-24 18:02 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\vlc
2016-12-30 02:32 - 2012-12-08 01:42 - 00149968 _____ C:\Users\Vouager\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-30 00:26 - 2013-01-12 18:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-30 00:20 - 2014-09-23 21:57 - 00000000 ____D C:\Windows\SysWOW64\{D7762300-AFFE-C0C0-BEBE-050003010001}
2016-12-29 14:32 - 2016-10-08 10:52 - 00000000 ____D C:\Users\Vouager\.junique
2016-12-29 14:01 - 2016-09-21 19:16 - 00000000 ____D C:\Users\Vouager\AppData\Local\Arma 3 Launcher
2016-12-29 14:01 - 2016-08-24 15:38 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\TS3Client
2016-12-29 14:01 - 2016-08-22 00:34 - 00000000 ____D C:\Program Files (x86)\Steam
2016-12-29 13:13 - 2016-09-21 19:21 - 00000000 ____D C:\Users\Vouager\Documents\Arma 3 - Other Profiles
2016-12-29 13:12 - 2016-09-21 19:17 - 00000000 ____D C:\Users\Vouager\AppData\Local\Arma 3
2016-12-29 12:24 - 2016-10-09 14:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArmA3Sync
2016-12-29 12:20 - 2016-09-21 19:16 - 00000000 ____D C:\Users\Vouager\AppData\Local\Bohemia_Interactive
2016-12-29 12:12 - 2016-09-21 13:10 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-12-28 01:23 - 2014-07-17 23:11 - 00000000 ____D C:\AdwCleaner
2016-12-28 00:46 - 2012-12-08 01:26 - 00000000 ____D C:\Users\Vouager
2016-12-24 19:14 - 2016-11-23 20:59 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Curse Client
2016-12-22 23:52 - 2014-11-09 21:32 - 00000000 ____D C:\Program Files (x86)\dreamboxEDIT
2016-12-22 23:21 - 2016-09-10 21:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-22 23:21 - 2016-07-14 16:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-12-22 23:21 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-12-22 22:20 - 2012-12-08 01:54 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Thunderbird
2016-12-22 22:17 - 2012-12-09 23:01 - 00000000 ____D C:\Users\Daten
2016-12-22 22:17 - 2012-12-08 01:40 - 00000000 ____D C:\Users\UpdatusUser
2016-12-22 22:05 - 2015-04-26 21:28 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Mozilla
2016-12-21 21:35 - 2016-08-24 13:34 - 00000000 ____D C:\Users\Vouager\AppData\Local\Steam
2016-12-20 00:16 - 2015-10-07 18:15 - 00000000 ____D C:\Program Files (x86)\GeoGebra 5.0
2016-12-16 22:31 - 2016-09-10 18:35 - 00000000 ____D C:\Program Files\Common Files\AV
2016-12-16 21:53 - 2016-08-21 13:40 - 00000000 ____D C:\Users\Vouager\AppData\Local\VirtualStore
2016-12-14 20:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\security
2016-12-14 00:22 - 2016-09-10 12:11 - 00000680 __RSH C:\Users\Kire-Neu\ntuser.pol
2016-12-13 23:09 - 2016-10-30 12:13 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic
2016-12-13 23:09 - 2016-10-20 22:14 - 00000000 ____D C:\Program Files (x86)\PSoft Rework
2016-12-13 23:09 - 2016-10-09 14:22 - 00000000 ____D C:\Program Files (x86)\ArmA3Sync
2016-12-13 23:09 - 2016-09-09 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2016-12-13 23:09 - 2016-08-21 20:13 - 00000000 ____D C:\Program Files (x86)\NTPort Library Driver
2016-12-13 23:09 - 2016-08-21 20:02 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-12-13 23:09 - 2016-08-21 19:46 - 00000000 ____D C:\Program Files (x86)\DipTrace
2016-12-13 23:09 - 2016-07-02 18:54 - 00000000 ____D C:\Program Files (x86)\Hex-Editor MX
2016-12-13 23:09 - 2016-04-07 17:31 - 00000000 ____D C:\Program Files (x86)\Freemake
2016-12-13 23:09 - 2016-03-11 15:08 - 00000000 ____D C:\Program Files (x86)\Elaborate Bytes
2016-12-13 23:09 - 2016-02-15 00:35 - 00000000 ____D C:\Program Files (x86)\LinuxLive USB Creator
2016-12-13 23:09 - 2016-01-14 21:25 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-13 23:09 - 2016-01-10 01:12 - 00000000 ____D C:\Program Files (x86)\Java
2016-12-13 23:09 - 2016-01-03 20:51 - 00000000 ____D C:\Program Files (x86)\USB CCID
2016-12-13 23:09 - 2016-01-03 20:51 - 00000000 ____D C:\Program Files (x86)\Feitian
2016-12-13 23:09 - 2015-12-18 16:50 - 00000000 ____D C:\Program Files (x86)\Fujitsu
2016-12-13 23:09 - 2015-08-31 23:33 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-13 23:09 - 2015-07-12 13:46 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-13 23:09 - 2015-05-26 22:05 - 00000000 ____D C:\Program Files (x86)\FrontDesign
2016-12-13 23:09 - 2015-05-17 17:44 - 00000000 ____D C:\Program Files (x86)\MELSERVO
2016-12-13 23:09 - 2015-05-06 19:30 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2016-12-13 23:09 - 2015-05-02 20:06 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2016-12-13 23:09 - 2015-05-02 19:17 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-12-13 23:09 - 2015-04-25 21:09 - 00000000 ____D C:\Program Files (x86)\Windows Installer Clean Up
2016-12-13 23:09 - 2015-04-25 20:54 - 00000000 ____D C:\Program Files (x86)\MSECACHE
2016-12-13 23:09 - 2015-04-08 23:52 - 00000000 ____D C:\Program Files (x86)\ClockworkMod
2016-12-13 23:09 - 2015-01-03 14:48 - 00000000 ____D C:\Program Files (x86)\MarkAny
2016-12-13 23:09 - 2015-01-03 14:24 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-12-13 23:09 - 2015-01-03 03:19 - 00000000 ____D C:\Program Files (x86)\Qualcomm
2016-12-13 23:09 - 2014-12-04 23:31 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-12-13 23:09 - 2014-11-10 07:31 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2016-12-13 23:09 - 2014-10-07 22:11 - 00000000 ____D C:\Program Files (x86)\Tor Browser
2016-12-13 23:09 - 2014-05-25 19:21 - 00000000 ____D C:\Program Files (x86)\ASM106xSATA
2016-12-13 23:09 - 2014-05-25 18:50 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-12-13 23:09 - 2014-05-25 18:50 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-12-13 23:09 - 2014-04-21 10:07 - 00000000 ____D C:\Program Files (x86)\AllWinnerTech
2016-12-13 23:09 - 2014-03-28 10:43 - 00000000 ____D C:\Program Files (x86)\MEDION GoPal Assistant
2016-12-13 23:09 - 2013-12-27 00:06 - 00000000 ____D C:\Program Files (x86)\UFB Code Setup
2016-12-13 23:09 - 2013-12-22 01:40 - 00000000 ____D C:\Program Files (x86)\Naviextras
2016-12-13 23:09 - 2013-11-12 21:29 - 00000000 ____D C:\Program Files (x86)\Trimax Soft
2016-12-13 23:09 - 2013-10-10 20:56 - 00000000 ____D C:\Program Files (x86)\DC-Unlocker
2016-12-13 23:09 - 2013-08-26 20:09 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2016-12-13 23:09 - 2013-07-14 12:20 - 00000000 ____D C:\Program Files (x86)\cGPSmapper
2016-12-13 23:09 - 2013-07-14 12:08 - 00000000 ____D C:\Program Files (x86)\GMapTool
2016-12-13 23:09 - 2013-06-11 22:41 - 00000000 ____D C:\Program Files (x86)\Windows Mobile 6 SDK
2016-12-13 23:09 - 2013-06-11 22:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Device Emulator
2016-12-13 23:09 - 2013-05-26 21:08 - 00000000 ____D C:\Program Files (x86)\GoogleClean
2016-12-13 23:09 - 2013-05-10 20:33 - 00000000 ____D C:\Program Files (x86)\Software Installation Information
2016-12-13 23:09 - 2013-04-27 11:55 - 00000000 ____D C:\Program Files (x86)\PDF Repair Toolbox
2016-12-13 23:09 - 2013-04-27 11:00 - 00000000 ____D C:\Program Files (x86)\PowerDataRecovery
2016-12-13 23:09 - 2013-04-23 23:01 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-12-13 23:09 - 2013-04-13 18:16 - 00000000 ____D C:\Program Files (x86)\Acer Inc
2016-12-13 23:09 - 2013-03-17 03:06 - 00000000 ____D C:\Program Files (x86)\Garmin
2016-12-13 23:09 - 2013-02-28 22:58 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-13 23:09 - 2013-02-09 21:31 - 00000000 ____D C:\Program Files (x86)\HD2 Toolkit
2016-12-13 23:09 - 2013-01-12 18:27 - 00000000 ____D C:\Program Files (x86)\LG Electronics
2016-12-13 23:09 - 2012-12-20 00:30 - 00000000 ____D C:\Program Files (x86)\PdaNet for Android
2016-12-13 23:09 - 2012-12-19 23:18 - 00000000 ____D C:\Program Files (x86)\Android
2016-12-13 23:09 - 2012-12-12 23:50 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2016-12-13 23:09 - 2012-12-10 00:27 - 00000000 ____D C:\Program Files (x86)\Totalcmd
2016-12-13 23:09 - 2012-12-10 00:26 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2016-12-13 23:09 - 2012-12-09 22:46 - 00000000 ____D C:\Program Files (x86)\HP
2016-12-13 23:09 - 2012-12-08 01:41 - 00000000 ____D C:\Program Files (x86)\OpenAL
2016-12-13 23:09 - 2012-12-08 01:40 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-13 23:09 - 2012-12-08 01:31 - 00000000 ____D C:\Program Files (x86)\MozBackup
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-12-13 23:09 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)\Windows NT
2016-12-13 20:01 - 2013-02-09 10:49 - 00001332 __RSH C:\Users\Antonio\ntuser.pol
2016-12-12 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\ModemLogs
2016-12-12 00:14 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\Downloaded Program Files
2016-12-11 13:57 - 2015-04-11 13:46 - 00000674 __RSH C:\ProgramData\ntuser.pol
2016-12-11 13:57 - 2013-02-08 14:07 - 00000680 __RSH C:\Users\Vouager\ntuser.pol
2016-12-11 12:50 - 2012-12-19 23:18 - 00000000 ____D C:\Users\Vouager\.android
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-12-08 12:23 - 2009-10-23 23:00 - 5811712 _____ (reFX) C:\Program Files (x86)\Nexus.dll
2016-11-02 22:16 - 2016-11-02 22:16 - 0007601 _____ () C:\Users\Vouager\AppData\Local\Resmon.ResmonCfg
2016-12-11 12:50 - 2016-12-11 12:50 - 0000177 _____ () C:\Users\Vouager\AppData\Local\uts.ini
2012-12-08 01:30 - 2012-12-08 01:30 - 0017408 _____ () C:\Users\Vouager\AppData\Local\WebpageIcons.db
2014-05-25 18:51 - 2014-05-25 18:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2012-12-09 22:45 - 2015-03-10 00:05 - 0033343 _____ () C:\ProgramData\hpzinstall.log
2016-12-12 00:21 - 2016-12-12 00:21 - 0000016 _____ () C:\ProgramData\mntexmp
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-12-24 13:52
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 21-12-2016
durchgeführt von Vouager (30-12-2016 20:44:26)
Gestartet von C:\Users\Vouager\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2012-12-08 00:26:37)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3129012598-2279985476-2495907205-500 - Administrator - Disabled)
Gast (S-1-5-21-3129012598-2279985476-2495907205-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3129012598-2279985476-2495907205-1002 - Limited - Enabled)
NGServer (S-1-5-21-3129012598-2279985476-2495907205-1012 - Limited - Enabled)
UpdatusUser (S-1-5-21-3129012598-2279985476-2495907205-1005 - Limited - Enabled) => C:\Users\UpdatusUser
Vouager (S-1-5-21-3129012598-2279985476-2495907205-1001 - Administrator - Enabled) => C:\Users\Vouager
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: Avast Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
4660_4680_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\{3CE0C7DC-ED5B-450E-9C5F-49702C263544}) (Version: 12.1.7.157 - Adobe Systems, Inc)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 0.7 - Google Inc.)
Arma 3 (HKLM\...\Steam App 107410) (Version: - Bohemia Interactive)
ArmA3Sync 1.5.80 (HKLM-x32\...\{F097E7D7-D093-4394-9EED-43AFCCD12B7A}_is1) (Version: 1.5.80 - The [S.o.E] team)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 2.0.8.0000 - Asmedia Technology)
ASUS Xonar D2X Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version: - )
Autodesk DWG TrueView 2016 - English (HKLM\...\DWG TrueView 2016 - English) (Version: 20.1.49.0 - Autodesk)
Avast Premier (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11b Network Adapter) (Version: 4.102.15.61 - Broadcom Corporation)
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
cGPSmapper Free 0100d (HKLM-x32\...\cGPSmapper Free_is1) (Version: - cGPSmapper)
CodeVisionAVR Evaluation (HKLM-x32\...\{DE9D2D84-EF11-40AC-B892-FE4663DB0A05}) (Version: 3.28 - HP InfoTech S.R.L.)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd)
DayZ (HKLM\...\Steam App 221100) (Version: - Bohemia Interactive)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
DipTrace (HKLM\...\DipTrace) (Version: 3.0 - Novarm)
DipTrace Language Suite (HKLM-x32\...\DipTrace Language Suite) (Version: 11.0.0.3 - Novarm Limited)
DirectWave (HKLM-x32\...\DirectWave) (Version: - Image-Line)
Discord (HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Discord) (Version: 0.0.296 - Hammer & Chisel, Inc.)
DocMgr (x32 Version: 140.0.65.000 - Ihr Firmenname) Hidden
DocProc (x32 Version: 140.0.100.000 - Hewlett-Packard) Hidden
dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version: - )
DWG TrueView 2016 - English (Version: 20.1.49.0 - Autodesk) Hidden
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fax (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.6.321 - Foxit Software Inc.)
Frontplatten Designer (HKLM-x32\...\Frontplatten Designer) (Version: 4.4.2 - Schaeffer AG)
Fujitsu Finder (HKLM-x32\...\FujitsuFinder) (Version: 4.2.0.0704 - Fujitsu Technology Solutions GmbH)
Garmin BaseCamp (HKLM-x32\...\{31A67F6C-D79D-47B9-9F0B-13C0FCF3C3A8}) (Version: 4.4.6 - Garmin Ltd or its subsidiaries)
Garmin City Navigator Europe NT 2016.10 (HKLM-x32\...\{CB19FBE1-2C75-435D-95B2-4E3D576A00B3}) (Version: 2.0.0.0 - Garmin Ltd or its subsidiaries)
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.0.2.3 - Genesys Logic)
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.307.0 - International GeoGebra Institute)
GMapTool 0.8.143 (HKLM-x32\...\{1873789F-59D5-4002-8A2F-60A827B78F98}_is1) (Version: - AP)
GoogleClean (HKLM-x32\...\{4281435C-AD1D-4C8A-B9C0-3961C08EF142}_is1) (Version: 4.0.112 - Abelssoft)
GPBaseService2 (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HD2 Toolkit Version 4.1 (HKLM-x32\...\{12EE0B2A-84C6-494E-A7AC-6771E898F6A0}_is1) (Version: 4.1 - Kaushal Subedi (KSubedi))
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP OfficeJet J4600 All-In-One Series (HKLM\...\{4945F319-A24D-454C-A411-F3689987315D}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.3.34 - Intel Corporation)
J4680 (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java SE Development Kit 7 Update 10 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170100}) (Version: 1.7.0.100 - Oracle)
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.65.3 - JMicron Technology Corp.)
LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MarketResearch (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
M-Audio Legacy Keyboard Driver 5.0.0 (x64) (HKLM\...\{2CA9F96F-AFFC-4D41-B781-47EBD2378DB8}) (Version: 5.0.0 - M-Audio)
MEDION GoPal Assistant (HKLM-x32\...\{12C77A13-A31B-4565-8E60-494FD65EBB2F}) (Version: 6.4.17.13525 - MEDION)
MegaDownloader 1.7 (HKLM\...\{C12C2297-65A4-4E64-9AE1-29F0D947FDA0}}_is1) (Version: 1.7 - AppsForMega.info)
Memory Stick Formatter (HKLM-x32\...\{27337663-2619-11D4-99DC-0000F49094C7}) (Version: 2.5.05090 - Sony Corporation)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.)
MiniTool Power Data Recovery (HKLM-x32\...\MiniTool Power Data Recovery_is1) (Version: - MiniTool Solution Ltd.)
Morphine (HKLM-x32\...\Morphine) (Version: - Image-Line bvba)
MOTSZ111E (HKLM-x32\...\{F6DB8EC3-8EEB-4082-BB62-550685F5D90A}) (Version: - )
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
Mozilla Thunderbird 45.5.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.5.1 (x86 de)) (Version: 45.5.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Naviextras Toolbox (HKLM-x32\...\Naviextras Toolbox) (Version: 3.18.0.330918 - NNG Llc.)
Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - NNG Llc.)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
NTPort Library Driver 2.8 (HKLM-x32\...\NTPort Library Driver) (Version: 2.8 - Zeal SoftStudio)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 355.82 - NVIDIA Corporation)
NVIDIA Grafiktreiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
ProductContext (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
PSoft Rework version 2.3.1 (HKLM-x32\...\{9C6888BB-0F17-4D86-8BB7-287EB8C831E4}_is1) (Version: 2.3.1 - PSoft)
QPST 2.7 (HKLM-x32\...\{8035964D-75EB-4463-91DC-3F02EE9CF103}) (Version: 2.7.378 - Qualcomm)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version: - )
ROCKEY200 Driver (Remove only) (HKLM-x32\...\B3DE3DBF-7F64-47b5-B25B-9842D2B1A045_Rockey200std) (Version: - )
Rust (HKLM\...\Steam App 252490) (Version: - Facepunch Studios)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15013.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15013.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
SatParamEditor (HKLM-x32\...\{B31EB1D9-FE7B-4723-BA08-3CB75DD3D3B8}) (Version: 1.0.0 - Trimax Soft)
Scan (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
SketchUp 2015 (HKLM\...\{A83795B9-570F-40FF-ACB4-710B568EBA22}) (Version: 15.3.331 - Trimble Navigation Limited)
Smart Technology Programming Software 7.0.45.2 (HKLM\...\{4646A4CF-BEA5-475D-96D7-70E19E481603}) (Version: 7.0.45.2 - Mad Catz)
Smart Technology Programming Software 7.0.46.0 (HKLM\...\{E3E3240A-A2D2-4F5E-8482-198A3D344D47}) (Version: 7.0.46.0 - Mad Catz)
Smart Technology Volume Tracker 7.0.46.0 (HKLM\...\{BAE210D2-5153-4B4C-BBF4-AF3F26F861BC}) (Version: 7.0.46.0 - Mad Catz)
SmartWebPrinting (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Sytrus (HKLM-x32\...\Sytrus) (Version: - Image-Line)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: - )
TrayApp (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
UFB Code Setup (HKLM-x32\...\UFB Code SetupV3.6.0) (Version: V3.6.0 - Macro Technology Ltd.)
Universal Adb Driver (HKLM-x32\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)
USB CCID Smartcard Reader - Version 1.2.1.2 (HKLM\...\{939913F9-F134-4E9E-B879-BE6755B69952}) (Version: 3.0.0.1 - USB CCID)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Vediamo Diagnosesystem 5.1 (HKLM-x32\...\InstallShield_{D7762300-AFFE-C0C0-DADA-050100000001}) (Version: 5.01.00 - DAIMLER AG PT/TVP)
Vediamo Diagnosesystem 5.1 (x32 Version: 5.01.00 - DAIMLER AG PT/TVP) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VMLAB release 3.15 (HKLM-x32\...\{5A7F39DA-AFF5-4270-85AE-5A1CE76A3249}_is1) (Version: 3.15 - Advanced MicroController Tools (AMcTools))
WebReg (x32 Version: 140.0.213.017 - Hewlett-Packard) Hidden
Windows 7 Manager (HKLM\...\{2DFFCA14-1454-43F4-A08C-F4FDA6B30DDA}) (Version: 5.1.1 - Yamicsoft)
Windows Driver Package - FTDI CDM Driver Package - Bus/D2XX Driver (07/12/2013 2.08.30) (HKLM\...\22CCD58B53472BE3FCAFF05631111C4062959A43) (Version: 07/12/2013 2.08.30 - FTDI)
Windows Driver Package - FTDI CDM Driver Package - VCP Driver (07/12/2013 2.08.30) (HKLM\...\BD00013670D26C16E19F284BF8E15DAF813497C7) (Version: 07/12/2013 2.08.30 - FTDI)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (01/19/2011 1.0.0009.0) (HKLM\...\4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20) (Version: 01/19/2011 1.0.0009.0 - Western Digital Technologies)
Windows Installer Clean Up (HKLM-x32\...\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}) (Version: 3.00.00.0000 - Microsoft Corporation)
Windows Mobile 6 Professional Emulator Images - GER (HKLM-x32\...\{79605EAD-6EF0-4E57-AEE2-E0AFE8037DC5}) (Version: 6.0.0.17740 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter: Treiberupdate (HKLM\...\{92DBCA36-9B41-4DD1-941A-AED149DD37F0}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows-Treiberpaket - FTDI CDM Driver Package - Bus/D2XX Driver (04/10/2012 2.08.24) (HKLM\...\4C8545EEB6143B6AD3858B5D1E0AEE76040B1435) (Version: 04/10/2012 2.08.24 - FTDI)
Windows-Treiberpaket - FTDI CDM Driver Package - VCP Driver (04/10/2012 2.08.24) (HKLM\...\6849F67BACD4DA5A5B9D46803E6850D0BE8B3826) (Version: 04/10/2012 2.08.24 - FTDI)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2016 - English\dwgviewr.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2016 - English\en-US\dwgviewrficn.dll (Autodesk, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00B6AA72-F094-46C8-92AD-D5860A623C11} - \ProtectedSearch\Protected Search -> Keine Datei <==== ACHTUNG
Task: {0674277B-A3A0-41AA-A170-EBD697F4B82B} - System32\Tasks\Vizashkible Reports => C:\Program Files (x86)\Vigaghtlterk\raherk.exe
Task: {29195263-7EAF-4456-80A9-FE2FE9E36B0F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-10] (AVAST Software)
Task: {353CBE8D-C063-41F8-ADC6-FB9719B30AF5} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-09-10] (AVAST Software)
Task: {4084847B-466B-4C84-BA7C-277D1802EF40} - System32\Tasks\{5EBEE5CD-2B2B-4F3B-8110-0BCDDF1E1527} => pcalua.exe -a C:\Users\Vouager\Desktop\HijackThis.exe -d C:\Users\Vouager\Desktop
Task: {552D8530-35E2-44EE-B5C7-DA16D19C8139} - System32\Tasks\{53A72405-0B23-4F91-A563-65C29EE7A41A} => pcalua.exe -a C:\Users\Kire\Desktop\wlsetup-web.exe -d C:\Users\Kire\Desktop
Task: {5660CED9-5B9E-4F86-941C-DD8E29706F69} - System32\Tasks\{073B4DB1-562E-49F5-A5B5-097CAEFE8FA7} => pcalua.exe -a G:\DataCard_Setup.exe -d G:\
Task: {84F6D1DF-B5DE-4A08-826F-C972EC3AFEB2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-23] (Adobe Systems Incorporated)
Task: {9432CE03-1181-4F99-8BCA-3326398C95CC} - System32\Tasks\{C058D899-264A-4F10-B4F5-261D42566D19} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {A06125CC-F321-48B6-88DD-5066FCDD78AD} - System32\Tasks\{9D7D23D7-025D-4263-B2C1-2173DD47B6B8} => pcalua.exe -a C:\Users\Kire\Desktop\Huawei_Driver\DriverSetup.exe -d C:\Users\Kire\Desktop\Huawei_Driver
Task: {B240B637-2412-4FBD-B232-D9C9FEC79875} - System32\Tasks\SafeZone scheduled Autoupdate 1473529191 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {BE50ADB6-E413-423E-8615-186432125460} - System32\Tasks\InternetCFC => Firefox.exe hxxp://andria-loft.ru/florida
Task: {CA438028-5840-493A-A3DD-BF0C29DB2B5A} - System32\Tasks\{F8DDC4BF-2AF4-4F1D-8213-DC5B3B808AD8} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {D06EDDBB-99F3-4E53-8937-665875E8780B} - System32\Tasks\{3B235997-BEAB-4A1E-973B-28849B4156A7} => pcalua.exe -a C:\Windows\SysWOW64\xRaidSetup.exe
Task: {D8B196DE-2645-4D76-B2B5-821BA6EC22B7} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.01.02\AsLoader.exe [2009-12-28] (ASUSTeK Computer Inc.)
Task: {E00E8A80-D9A4-4064-ACB5-CDA73FD0436E} - System32\Tasks\iSCSIAgentAutoStartup => C:\Program Files (x86)\Fujitsu\Finder\iSCSIAgent.exe
Task: {F86CB9C1-3983-4415-9153-7FDF66C68B54} - System32\Tasks\{A962AF2B-B6D6-4F6A-B289-651B2F052DC5} => pcalua.exe -a "C:\Program Files (x86)\Bianya\201407172327\Unins.exe"
Task: {FBA9B149-A193-412D-8296-80BD83C1A141} - System32\Tasks\{847C782A-A292-4E57-921A-064CCF071B4C} => pcalua.exe -a "C:\Users\Kire\Desktop\Mobilni Software\MAGICSIM_v255.exe" -d "C:\Users\Kire\Desktop\Mobilni Software"
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-05-06 22:35 - 2015-08-25 15:24 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-21 23:27 - 2011-05-25 19:09 - 00049152 _____ () C:\Windows\SysWOW64\UMonit.exe
2014-05-25 18:50 - 2013-08-20 16:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll
2016-09-10 18:34 - 2016-09-10 18:34 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-12-29 18:44 - 2016-12-29 18:44 - 03131344 _____ () C:\Program Files\AVAST Software\Avast\defs\16122901\algo.dll
2016-09-10 18:34 - 2016-09-10 18:34 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-07-06 19:35 - 2015-08-27 01:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-09-10 18:35 - 2016-09-10 18:35 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-06-06 12:41 - 2013-09-16 11:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\Users\Public\DRM:احتضان [48]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\15044960.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\58658192.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\90305368.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\15044960.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\58658192.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\90305368.sys => ""="Driver"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\Software\Classes\.scr: DWGTrueViewScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7865 mehr Seiten.
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\123simsen.com -> www.123simsen.com
Da befinden sich 7862 mehr Seiten.
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2016-12-13 23:08 - 00451323 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 validation.sls.microsoft.com
0.0.0.0 www.google-analytics.com
0.0.0.0 google-analytics.com
0.0.0.0 ssl.google-analytics.com
0.0.0.0 pagead.googlesyndication.com
0.0.0.0 pagead2.googlesyndication.com
0.0.0.0 adservices.google.com
0.0.0.0 video-stats.video.google.com
0.0.0.0 4.afs.googleadservices.com
0.0.0.0 imageads.googleadservices.com
0.0.0.0 partner.googleadservices.com
0.0.0.0 www.googleadservices.com
0.0.0.0 apps5.oingo.com
0.0.0.0 www.appliedsemantics.com
0.0.0.0 service.urchin.com127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
Da befinden sich 15476 zusätzliche Einträge.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\Services: clr_optimization_v2.0.50727_32 => 3
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{D8AA3508-8A21-42E3-BA7F-475140E94957}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{59C3D104-CB16-4349-BF8D-D233A08DEA45}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{EDF56BFE-C1A8-486A-825E-74ED04B94EFD}] => LPort=26675
FirewallRules: [{88421FD6-C3D1-4B34-AEA5-0EFF19740B9F}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{483EA1C6-6B0E-4BF3-9A6E-A02608D07690}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{8989D64F-1F12-4DF1-B7D8-7D915CC7BDA4}] => LPort=26675
FirewallRules: [{249B6A93-328D-4324-801C-06A8041829F2}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C05450B7-416B-4499-A5E2-814C21CBA74C}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{B3FCA2F5-AB52-4FAE-9096-53477BBD5CCE}C:\program files (x86)\windows mobile 6 sdk\tools\cellular emulator\cellular emulator.exe] => C:\program files (x86)\windows mobile 6 sdk\tools\cellular emulator\cellular emulator.exe
FirewallRules: [UDP Query User{A82ED560-A579-4630-9DC7-22DC3FF9554B}C:\program files (x86)\windows mobile 6 sdk\tools\cellular emulator\cellular emulator.exe] => C:\program files (x86)\windows mobile 6 sdk\tools\cellular emulator\cellular emulator.exe
FirewallRules: [TelnetServer-TlntSvr-TCP-In] => %systemroot%\system32\tlntsvr.exe
FirewallRules: [TelnetServer-Tlntadmn-RPC-In] => %systemroot%\system32\tlntsvr.exe
FirewallRules: [{7CC99027-6C8F-4BC7-B3DF-6CE465F84DDD}] => LPort=8732
FirewallRules: [{06751325-4640-4288-A574-62BA4513438B}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{D5053A27-DF75-40E8-854F-3FD989A89B56}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{9036AAF4-051A-43DD-ADDB-FC897BB00403}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{7551C0B0-FD8A-427E-A501-B63EF6A599D1}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{0F295F17-CDC6-4041-B154-CB54C489622E}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{0DE6F6EB-6E18-4891-A13D-E188F3B2D93F}] => C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{314690F2-10E4-44C4-9B67-138FC691CDFA}] => C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{301A92D8-8233-4B3E-B35D-9FF2ABB6A499}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{85187D96-59CF-40E4-80E7-303F7B293DAD}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{AFC7A2F6-3458-42B1-BA9F-09AF41B5B9FC}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{B0C307FA-3A3C-428D-A0DC-60EE97DD3681}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{BC4BA39D-2198-426F-A6E5-D3631550CD1C}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{150169B7-BDD3-4291-ADAD-C30212C00C92}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{2C5FACF4-C97B-416E-AC3A-81D3433B4FA3}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{5AE6BBFE-3C7E-49BE-8218-476F63E40A2D}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{C1A97ECF-54CE-4F9B-A165-8DE8C8AE5942}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{E9E6CDED-C6B5-4912-A2E7-C1BA8A80AD98}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{84AB8774-CFFB-4250-B5D5-454108802714}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{1CB98088-2A75-4CA4-B300-B614307C4A9C}] => C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{5AA610D6-2598-4278-AE24-FB9865257050}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F265D0BA-793B-4167-9E53-3CCA74A71237}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CA6736C4-9F6E-422C-B57A-C53E27CE103B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{84BE53D6-4547-4F6C-B4CE-04BD0BAA3894}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5F212E77-83A0-4FD8-A354-D17514532724}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{9426DC73-1924-4DB6-B9A8-E722D1E7E187}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2152DAF5-5504-488E-AFA4-BAD373735179}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0DF5B16E-63C3-416A-BF3F-8C4D26099448}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{294666D4-9BB9-4BAE-BF9E-3CF373720639}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D4EB30C9-2EAF-4D26-9DE0-0794E611FCB4}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{ACA5710F-4C7C-4753-A5AB-629B0DA46906}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0D42248C-729D-4DF2-84D2-667BBD1E4623}] => 㩃啜敳獲噜畯条牥䅜灰慄慴剜慯業杮獜湳獜湳攮數
FirewallRules: [{669DC0ED-D2CF-4DD4-8051-25F63D67659C}] => 㩃啜敳獲噜畯条牥䅜灰慄慴剜慯業杮獜湳獜癡略硥e
FirewallRules: [{98E4E345-15F5-4842-8EF1-F02C4C586C3D}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{07237562-B35D-46D2-9B67-C832DEA4B3EB}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FEDAEDA8-CF48-41F5-BB30-14125E43CD18}] => E:\SteamLibrary\steamapps\common\Rust\Rust.exe
FirewallRules: [{D7E4310B-FAC2-4B76-B82A-AB35D1A4726F}] => E:\SteamLibrary\steamapps\common\Rust\Rust.exe
FirewallRules: [TCP Query User{D4E579EF-62B9-4284-A25D-F5BA3F9A2ACF}E:\steamlibrary\steamapps\common\arma 3\arma3.exe] => E:\steamlibrary\steamapps\common\arma 3\arma3.exe
FirewallRules: [UDP Query User{2884BB2E-28F8-4867-921E-C73CA3A05EBC}E:\steamlibrary\steamapps\common\arma 3\arma3.exe] => E:\steamlibrary\steamapps\common\arma 3\arma3.exe
FirewallRules: [{AC7E60D8-8C18-4501-B818-36A44354EC67}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3C99E991-FAC9-4BB4-AD7E-D282DED2B61B}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{DC5281A8-AF27-4DC8-8F2F-32947C602D5C}] => E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{E734DCAC-98F6-4DED-8931-BBCBDB5BFA09}] => E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{268110B2-180E-42E6-967B-B52A3DC1B8AF}] => D:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{248EE905-A2B5-4E64-8851-8EE1E61FB1A6}] => D:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
==================== Wiederherstellungspunkte =========================
30-12-2016 19:12:09 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Officejet J4680 series
Description: Officejet J4680 series
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Officejet J4680 series
Description: Officejet J4680 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/30/2016 08:36:53 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (12/30/2016 07:37:49 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (12/30/2016 07:22:26 PM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (12/30/2016 07:12:17 PM) (Source: VSS) (EventID: 12305) (User: )
Description: Volumeschattenkopie-Dienstfehler: Volume bzw. Datenträger ist nicht richtig angeschlossen oder wurde nicht gefunden.
Fehlerkontext: DeviceIoControl(\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy6 - 0000000000000148,0x00530194,0000000000000000,0,000000000042E010,4096,[0]).
Vorgang:
Schattenkopien abfragen
Error: (12/30/2016 01:13:06 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x88980406) festgestellt.
Error: (12/30/2016 12:56:49 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {23d40b97-a7b5-4625-8bb7-0244cd94ce86}
Error: (12/30/2016 12:20:45 PM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x88980406) festgestellt.
Error: (12/30/2016 11:37:26 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x88980406) festgestellt.
Error: (12/30/2016 08:24:07 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x88980406) festgestellt.
Error: (12/30/2016 04:22:30 AM) (Source: Desktop Window Manager) (EventID: 9020) (User: )
Description: Der Desktopfenster-Manager hat einen schwerwiegenden Fehler (0x88980406) festgestellt.
Systemfehler:
=============
Error: (12/30/2016 08:36:45 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (12/30/2016 08:36:43 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Zeitgeber" wurde mit folgendem Fehler beendet:
Zugriff verweigert
Error: (12/30/2016 08:36:43 PM) (Source: Microsoft-Windows-Time-Service) (EventID: 46) (User: NT-AUTORITÄT)
Description: Der Zeitdienst wurde heruntergefahren, da ein Fehler aufgetreten ist. Fehler: 0x80070005: Zugriff verweigert
Error: (12/30/2016 08:36:43 PM) (Source: Microsoft-Windows-Time-Service) (EventID: 54) (User: NT-AUTORITÄT)
Description: Der Zeitdienst kann nicht gestartet werden, da ein Fehler beim Lesen der Konfiguration aus der Registrierung festgestellt wurde. Fehler: šugriff verweigert (0x80070005)
Error: (12/30/2016 08:36:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Qerzicult" wurde mit folgendem Fehler beendet:
Das angegebene Modul wurde nicht gefunden.
Error: (12/30/2016 08:36:16 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.
Error: (12/30/2016 08:13:42 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{d5ba9c60-62d0-01d2-304a-dd6a6831e900}" können nicht gelesen werden.
Error: (12/30/2016 08:13:03 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{be0b3e00-62d0-01d2-009b-045f6831e900}" können nicht gelesen werden.
Error: (12/30/2016 08:05:20 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{a8b0b930-62cf-01d2-9858-58d46731e900}" können nicht gelesen werden.
Error: (12/30/2016 08:05:17 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{ceb432d3-d2d2-489a-b566-8602c0e911a1}" können nicht gelesen werden.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 16%
Installierter physikalischer RAM: 12225.6 MB
Verfügbarer physikalischer RAM: 10196.4 MB
Summe virtueller Speicher: 24449.38 MB
Verfügbarer virtueller Speicher: 22317.75 MB
==================== Laufwerke ================================
Drive c: (Vouager) (Fixed) (Total:97.56 GB) (Free:11.31 GB) NTFS
Drive d: (Archive) (Fixed) (Total:200.43 GB) (Free:33.44 GB) NTFS
Drive e: (Daten) (Fixed) (Total:400.55 GB) (Free:27.89 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 07E940A0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=200.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=400.5 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 279.5 GB) (Disk ID: 20F38470)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
31.12.2016, 00:01
| #2 |
| /// Malwareteam   | Werbefenster öffnet sich von alleine Mein Name ist Rafael und ich werde dir bei der Bereinigung helfen. Damit ich dir optimal helfen kann, halte dich bitte an folgende Regeln:
 Schritt 1 Du hast bereits Malwarebytes auf deinem PC installiert, aber in einer alten Version. Deinstalliere es daru, bitte zuerst über die Systemsteuerung. Lade dir folgendes Programm herunter und installiere es:  Malwarebytes Anti-Malware
Schritt 2 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 3 Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen. Bitte poste in deiner nächsten Antwort also:
__________________ |
|
31.12.2016, 02:35
| #3 |
| | Werbefenster öffnet sich von alleine Ok.
__________________Alles gemacht wie beschrieben. MBAM HAt Host datei als Hijack.HostFile gefunden !Warum weiss ich nicht hier ganze datei. Ich habe sie nicht gelöscht. Muss ich oder reicht editieren? Und warend ganze tests hat sich Mozilla Firefox 3 mal von alleine geöffnte mit wonderslandads redirect . ADW CLEANUP: Code:
ATTFilter # AdwCleaner v6.041 - Bericht erstellt am 31/12/2016 um 02:03:29
# Aktualisiert am 16/12/2016 von Malwarebytes
# Datenbank : 2016-12-30.1 [Server]
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (X64)
# Benutzername : Vouager - VOUAGER-PC
# Gestartet von : C:\Users\Vouager\Desktop\AdwCleaner_6.041.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [982 Bytes] - [31/12/2016 02:03:29]
C:\AdwCleaner\AdwCleaner[S0].txt - [1362 Bytes] - [31/12/2016 02:03:11]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [1127 Bytes] ##########
Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 31.12.16
Scan-Zeit: 01:35
Protokolldatei: MBAM.txt
Administrator: Ja
-Softwaredaten-
Version: 3.0.5.1299
Komponentenversion: 1.0.43
Version des Aktualisierungspakets: 1.0.735
Lizenz: Testversion
-Systemdaten-
Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Vouager-PC\Vouager
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 544512
Abgelaufene Zeit: 14 Min., 12 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 1
Hijack.HostFile, C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS, Keine Aktion durch Benutzer, [211], [329328],0.0.0
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
(end)
FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21-12-2016
durchgeführt von Vouager (Administrator) auf VOUAGER-PC (31-12-2016 02:10:38)
Gestartet von C:\Users\Vouager\Desktop
Geladene Profile: Vouager (Verfügbare Profile: Vouager & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 8 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
() C:\Windows\SysWOW64\UMonit.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Saitek) C:\Program Files\Saitek\VolumeTracker\SaiVolume.exe
(Saitek) C:\Program Files\SmartTechnology\Software\ProfilerU.exe
(Saitek) C:\Program Files\SmartTechnology\Software\SaiMfd.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [Cmaudio8788] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [UMonit] => C:\Windows\SysWOW64\UMonit.exe [49152 2011-05-25] ()
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7541976 2014-02-21] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2634872 2015-08-27] (NVIDIA Corporation)
HKLM\...\Run: [SaiVolume] => C:\Program Files\Saitek\VolumeTracker\SaiVolume.exe [152064 2015-10-13] (Saitek)
HKLM\...\Run: [ProfilerU] => C:\Program Files\SmartTechnology\Software\ProfilerU.exe [454144 2015-10-13] (Saitek)
HKLM\...\Run: [SaiMfd] => C:\Program Files\SmartTechnology\Software\SaiMfd.exe [157696 2015-10-13] (Saitek)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43608 2010-09-07] ()
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-12-21] (Intel Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {19bd5ff5-3057-11e3-8959-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2bcedc8d-301e-11e3-8e40-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2c8265b5-3054-11e3-8ea8-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9d93-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9daf-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9dfe-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {4ae7546b-bf09-11e3-93ee-90e6ba93ef79} - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {57a8be24-aa9d-11e2-9d06-806e6f6e6963} - F:\setup\rsrc\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c31617c-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c316181-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c316184-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c31618e-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9e9c2b97-296d-11e6-98fd-e03f491c0962} - K:\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed38166-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed381a1-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed38212-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ef53f3d-29a8-11e6-bf1a-e03f491c0962} - L:\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407d4-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e0-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e3-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e5-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e7-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e9-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {c3dbcd5b-40cc-11e2-8b90-806e6f6e6963} - F:\autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {d3870e78-31c6-11e3-8ef1-90e6ba93ef79} - G:\AutoRun.exe
ShellExecuteHooks: Kein Name - {3E07EA28-AB6D-11E6-B40F-64006A5CFC23} - -> Keine Datei
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-10] (AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-02-20]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{2EC0EECB-5AED-4805-BC3E-2FBB56D1BCF1}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5241B5C5-CBB1-4BDA-B4A5-93A13806AFB0}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{FCD661AB-B021-489E-92A5-C23510B74767}: [DhcpNameServer] 192.168.42.129
ManualProxies:
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001 -> {24588FA4-10F1-41D7-B19D-6E22361E47FA} URL = hxxp://www.baidu.com/s?wd={searchTerms}&tn=site888_1_pg&cl=3&ie=utf-8
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-21] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Kein Name -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-21] (Oracle Corporation)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2010-05-28] (Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-10-21] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-21] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2010-05-28] (Hewlett-Packard Co.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\System32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
FireFox:
========
FF DefaultProfile: ibq6chso.default
FF ProfilePath: C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default [2016-12-31]
FF NewTab: Mozilla\Firefox\Profiles\ibq6chso.default -> about:newtab
FF Homepage: Mozilla\Firefox\Profiles\ibq6chso.default -> www.goolge.de
FF Keyword.URL: Mozilla\Firefox\Profiles\ibq6chso.default -> user_pref("keyword.URL", true);
FF Extension: (Classic Theme Restorer) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2016-12-22]
FF Extension: (IE Tab +) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\coralietab@mozdev.org [2016-12-22]
FF Extension: (Ebay Button) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\ebayHotStuff@wangtom.com [2016-12-22]
FF Extension: (Ghostery) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\firefox@ghostery.com.xpi [2016-12-22]
FF Extension: (MEGA) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\firefox@mega.co.nz.xpi [2016-12-29]
FF Extension: (YouTube™ Enhancer Plus) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\firefoxaddon@youtubeenhancer.com.xpi [2016-12-22]
FF Extension: (YouTube mp3) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\info@youtube-mp3.org.xpi [2016-05-10]
FF Extension: (Download Manager (S3)) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\s3download@statusbar.xpi [2016-07-15]
FF Extension: (translator) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\translator@dontfollowme.net.xpi [2015-08-24]
FF Extension: (1-Click YouTube Video Downloader) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2016-12-22]
FF Extension: (Flagfox) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-12-22]
FF Extension: (Youtube mp3 Toolbar Button) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{139C4B80-60ED-11E4-80EC-84041E5D46B0}.xpi [2015-11-04]
FF Extension: (YouTube High Definition) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2016-12-28]
FF Extension: (FireFTP) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f} [2016-12-22]
FF Extension: (Adblock Plus) - C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-12-22]
FF SearchPlugin: C:\Users\Vouager\AppData\Roaming\Mozilla\Firefox\Profiles\ibq6chso.default\searchplugins\youtube-videosuche.xml [2014-10-21]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-09-10]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-09-10]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-02-20] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-23] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-21] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @videolan.org/vlc,version=2.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-23] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-25] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-10] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [223600 2016-09-10] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1447944 2016-12-23] ()
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [227104 2016-08-22] (EasyAntiCheat Ltd)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-08-27] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544568 2015-08-27] (NVIDIA Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Qerzicult; C:\Program Files (x86)\Vigaghtlterk\Verqitioncmm.dll [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 andnetadb; C:\Windows\System32\Drivers\lgandnetadb.sys [31744 2012-07-03] (Google Inc)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2013-06-04] ()
R0 asstor64; C:\Windows\System32\DRIVERS\asstor64.sys [84816 2014-01-27] (Asmedia Technology)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-09-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-10] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [28312 2016-09-10] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [453192 2016-09-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-10] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-10] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-13] (AVAST Software)
S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [94720 2014-06-21] (Advanced Micro Devices) [Datei ist nicht signiert]
S3 awUSB; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [18392 2013-01-25] (Scott)
S3 CH341SER_A64; C:\Windows\System32\Drivers\CH341S64.SYS [58368 2011-11-05] (www.winchiphead.com)
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2725376 2011-03-10] (C-Media Inc)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-06-02] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-06-02] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2016-12-14] ()
S3 eustub; C:\Windows\System32\DRIVERS\eusbstub.sys [20104 2015-12-09] (ELTIMA Software)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [58368 2011-05-18] (GenesysLogic)
U5 grmnusb; C:\Windows\System32\Drivers\grmnusb.sys [19304 2012-04-18] (GARMIN Corp.)
S3 hmatap; C:\Windows\System32\DRIVERS\hmatap.sys [27136 2016-09-23] (The OpenVPN Project)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
S3 MADFULEGACYKEYBOARD; C:\Windows\System32\DRIVERS\MAudioLegacyKeyboard_DFU.sys [28680 2010-02-09] (M-Audio)
S3 MAUSBLEGACYKEYBOARD; C:\Windows\System32\DRIVERS\MAudioLegacyKeyboard.sys [196616 2010-02-09] (M-Audio)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176064 2016-12-31] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [102856 2016-12-31] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2016-12-31] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [250816 2016-12-31] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2016-12-31] (Malwarebytes)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-08-27] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
S3 PortTalk; C:\Windows\SysWOW64\Drivers\PortTalk.sys [3567 2014-12-15] (Beyond Logic hxxp://www.beyondlogic.org) [Datei ist nicht signiert]
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 qcusbser; C:\Windows\System32\DRIVERS\qcusbser.sys [118272 2009-02-23] (QUALCOMM Incorporated)
R3 R5BaseSmc; C:\Windows\System32\DRIVERS\smccard.sys [23592 2016-01-03] (OEM)
S3 Rockusb; C:\Windows\System32\DRIVERS\rockusb.sys [65648 2011-12-08] (Fuzhou Rockchip Electronics Co,Ltd.)
S3 SaiK0728; C:\Windows\System32\DRIVERS\SaiK0728.sys [180584 2012-12-05] (Saitek)
S3 SaiK0CD5; C:\Windows\System32\DRIVERS\SaiK0CD5.sys [180584 2012-09-20] (Saitek)
S3 SaiK1107; C:\Windows\System32\DRIVERS\SaiK1107.sys [180896 2015-10-13] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [51488 2015-10-01] (Saitek)
S3 SaiU0CD5; C:\Windows\System32\DRIVERS\SaiU0CD5.sys [47208 2012-09-20] (Saitek)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-09-17] (Anchorfree Inc.)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2012-03-02] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [28160 2012-03-02] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [34816 2012-03-02] (LG Electronics Inc.)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [18392 2013-01-25] (Scott)
S3 vuhub; C:\Windows\System32\DRIVERS\vuhub.sys [77032 2013-12-10] (ELTIMA Software)
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2016-12-28] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2016-12-28] (Zemana Ltd.)
R2 zntport; C:\Windows\system32\drivers\zntport.sys [13880 2007-12-22] (Zeal SoftStudio)
R3 _hid_0738_1708; C:\Windows\System32\DRIVERS\_hid_0738_1708.sys [180928 2015-10-01] (Saitek)
R3 _usb_0738_1708; C:\Windows\System32\DRIVERS\_usb_0738_1708.sys [46528 2015-10-01] (Saitek)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
U2 V2iMount; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-31 02:10 - 2016-12-31 02:11 - 00030730 _____ C:\Users\Vouager\Desktop\ALT FRST.txt
2016-12-31 02:09 - 2016-12-31 02:03 - 00001206 _____ C:\Users\Vouager\Desktop\AdwCleaner[C0].txt
2016-12-31 01:58 - 2016-12-31 01:58 - 03977168 _____ C:\Users\Vouager\Desktop\AdwCleaner_6.041.exe
2016-12-31 01:57 - 2016-12-31 01:58 - 00001259 _____ C:\Users\Vouager\Desktop\MBAM.txt
2016-12-31 01:34 - 2016-12-31 02:06 - 00176064 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2016-12-31 01:34 - 2016-12-31 02:05 - 00250816 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-31 01:34 - 2016-12-31 02:05 - 00102856 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2016-12-31 01:34 - 2016-12-31 02:05 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2016-12-31 01:34 - 2016-12-31 02:05 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-31 01:34 - 2016-12-31 01:34 - 00001869 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2016-12-31 01:34 - 2016-12-31 01:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2016-12-31 01:34 - 2016-12-31 01:34 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-31 01:34 - 2016-12-14 12:55 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2016-12-31 01:32 - 2016-12-31 01:34 - 54199488 _____ (Malwarebytes ) C:\Users\Vouager\Desktop\mb3-setup-consumer-3.0.5.1299.exe
2016-12-31 00:32 - 2016-12-31 00:38 - 00001024 ____H C:\SYSTAG.BIN
2016-12-30 23:51 - 2016-12-31 01:26 - 00000082 _____ C:\Windows\SysWOW64\winsevr.dat
2016-12-30 23:51 - 2016-12-22 16:24 - 00171952 _____ C:\Windows\system32\ammntdrv.sys
2016-12-30 23:51 - 2016-12-22 16:24 - 00051120 _____ C:\Windows\system32\ambakdrv.sys
2016-12-30 23:51 - 2016-12-22 16:24 - 00038320 _____ C:\Windows\system32\amwrtdrv.sys
2016-12-30 20:42 - 2016-12-30 20:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniTool Partition Wizard Free 9.1
2016-12-30 20:42 - 2016-12-30 20:42 - 00000000 ____D C:\Program Files\MiniTool Partition Wizard Free 9.1
2016-12-30 20:15 - 2016-12-30 20:15 - 00001573 _____ C:\Windows\PWCMDLST.BAK
2016-12-30 12:35 - 2016-12-30 12:35 - 00000000 ____D C:\Users\Vouager\Desktop\ProcessExplorerPortable
2016-12-30 03:43 - 2016-12-30 03:43 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Smartelectronix
2016-12-30 00:29 - 2016-12-30 00:29 - 00002051 _____ C:\Users\Public\Desktop\Vediamo StartCenter.lnk
2016-12-30 00:29 - 2016-12-30 00:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vediamo 5.1
2016-12-30 00:28 - 2016-12-30 00:28 - 00000000 ____D C:\Windows\system32\{D7762300-AFFE-C0C0-BEBE-050003010001}
2016-12-28 23:24 - 2016-12-28 23:24 - 00000886 _____ C:\Users\Public\Desktop\MegaDownloader.lnk
2016-12-28 23:24 - 2016-12-28 23:24 - 00000000 ____D C:\Users\Vouager\AppData\Local\MegaDownloader
2016-12-28 23:24 - 2016-12-28 23:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaDownloader
2016-12-28 23:24 - 2016-12-28 23:24 - 00000000 ____D C:\Program Files\MegaDownloader
2016-12-28 22:14 - 2016-12-28 22:14 - 00000000 ___DC C:\Users\Vouager\AppData\Local\MigWiz
2016-12-28 01:52 - 2016-12-31 02:10 - 00000000 ____D C:\FRST
2016-12-28 01:52 - 2016-12-28 01:52 - 02420736 _____ (Farbar) C:\Users\Vouager\Desktop\FRST64.exe
2016-12-28 01:29 - 2016-12-28 01:29 - 01663040 _____ (Malwarebytes) C:\Users\Vouager\Desktop\JRT.exe
2016-12-28 01:21 - 2016-12-28 01:21 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2016-12-28 00:46 - 2016-12-31 02:11 - 00058790 _____ C:\Windows\ZAM.krnl.trace
2016-12-28 00:46 - 2016-12-31 02:11 - 00026641 _____ C:\Windows\ZAM_Guard.krnl.trace
2016-12-28 00:46 - 2016-12-28 00:46 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
2016-12-28 00:46 - 2016-12-28 00:46 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys
2016-12-28 00:46 - 2016-12-28 00:46 - 00000000 ____D C:\Users\Vouager\AppData\Local\Zemana
2016-12-27 19:33 - 2016-12-27 19:33 - 00000000 ____D C:\Users\Vouager\Desktop\DAS.Offline.Programming.Original.2014.03
2016-12-27 19:11 - 2016-12-27 19:11 - 00172661 _____ C:\Users\Vouager\Desktop\XENTRY DAS 7 2014 ACRONIS IMAGE.zip
2016-12-27 13:17 - 2016-12-27 13:17 - 00513672 _____ C:\Users\Vouager\Desktop\fahrzeugniveau-an-der-vorder-und-hinterachse-mit-elektronischem-neigungsmessgeraet-pruefen-ggf.pdf
2016-12-23 20:24 - 2016-12-27 15:22 - 00000000 ____D C:\Users\Vouager\AppData\Local\DayZ
2016-12-23 20:24 - 2016-12-23 20:31 - 00000000 ____D C:\Users\Vouager\Documents\DayZ
2016-12-22 23:54 - 2016-12-22 23:56 - 00000000 ____D C:\Users\Vouager\Desktop\NEMESIS
2016-12-22 23:52 - 2016-12-22 23:52 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dreamboxEDIT
2016-12-22 23:25 - 2016-12-22 23:31 - 00000000 ____D C:\Program Files\Plumbytes Software
2016-12-21 21:35 - 2016-12-21 21:35 - 00000000 ____D C:\Users\Vouager\AppData\Local\Chromium
2016-12-20 00:16 - 2016-12-20 00:16 - 00001857 _____ C:\Users\Public\Desktop\GeoGebra.lnk
2016-12-20 00:16 - 2016-12-20 00:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoGebra 5
2016-12-16 21:59 - 2016-12-16 21:59 - 00003136 _____ C:\Windows\System32\Tasks\{5EBEE5CD-2B2B-4F3B-8110-0BCDDF1E1527}
2016-12-16 21:35 - 2016-12-16 23:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-12-16 21:18 - 2016-12-16 21:20 - 00000000 ____D C:\Users\Antonio\AppData\LocalLow\Mozilla
2016-12-14 23:55 - 2016-12-14 23:55 - 00000000 _____ C:\Windows\system32\__0000000140358AE5__C0000005.dmp
2016-12-13 23:09 - 2016-12-14 23:55 - 00000000 ____D C:\Windows\system32\SSL
2016-12-13 23:09 - 2016-12-13 23:09 - 00006006 _____ C:\Windows\System32\Tasks\Vizashkible Reports
2016-12-13 23:09 - 2016-12-13 23:09 - 00000000 ____D C:\ProgramData\Avira
2016-12-13 23:09 - 2016-12-13 23:09 - 00000000 ____D C:\ProgramData\Avg
2016-12-13 23:09 - 2016-12-13 23:09 - 00000000 _____ C:\Windows\system32\__000000014035AA91__C0000005.dmp
2016-12-13 23:08 - 2016-12-13 23:45 - 00000000 ____D C:\Program Files (x86)\Vigaghtlterk
2016-12-13 23:00 - 2016-12-13 23:12 - 00000000 ____D C:\Users\Vouager\Desktop\Chimera
2016-12-12 23:27 - 2016-12-12 23:34 - 00000000 ____D C:\Windows\4E0C6314A8B84026AC15084E8B63AFB5.TMP
2016-12-12 23:27 - 2016-12-12 23:27 - 00000000 ____D C:\Windows\0028CB34D5D3460FB308A39A095A5E01.TMP
2016-12-12 00:21 - 2016-12-12 00:21 - 00000016 _____ C:\ProgramData\mntexmp
2016-12-11 23:22 - 2016-12-11 23:22 - 00000883 _____ C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FastGSM Samsung Client.lnk
2016-12-11 23:20 - 2016-12-11 23:20 - 00000000 ____D C:\ProgramData\Samsung
2016-12-11 13:57 - 2016-12-11 13:57 - 00003620 _____ C:\Windows\System32\Tasks\InternetCFC
2016-12-11 12:50 - 2016-12-11 12:50 - 00000177 _____ C:\Users\Vouager\AppData\Local\uts.ini
2016-12-11 12:50 - 2016-12-11 12:50 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Kingosoft
2016-12-11 12:50 - 2016-12-11 12:50 - 00000000 ____D C:\Users\Vouager\AppData\Local\uts
2016-12-08 23:29 - 2016-12-08 23:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\M-Audio
2016-12-08 23:28 - 2016-12-08 23:28 - 03043731 _____ C:\Users\Vouager\Desktop\Legacy_Keyboard_5_0_0.zip
2016-12-08 23:28 - 2016-12-08 23:28 - 00000000 ____D C:\Program Files\M-Audio
2016-12-08 22:44 - 2016-12-13 23:09 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2016-12-08 22:44 - 2016-12-08 22:44 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2016-12-08 12:23 - 2016-12-13 23:09 - 00000000 ____D C:\Program Files (x86)\Manual
2016-12-08 12:23 - 2016-12-08 23:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\reFX
2016-12-08 12:23 - 2009-10-24 21:15 - 01332224 _____ (AD © 2009) C:\Windows\SysWOW64\SYNSOEMU.DLL
2016-12-08 12:23 - 2009-10-23 23:00 - 05811712 _____ (reFX) C:\Program Files (x86)\Nexus.dll
2016-12-08 12:22 - 2016-12-30 01:53 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\DAEMON Tools Lite
2016-12-08 12:20 - 2016-12-13 23:09 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-12-08 12:20 - 2016-12-08 12:20 - 00000000 ____D C:\Program Files\Common Files\VST2
2016-12-08 12:20 - 2016-12-08 12:20 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-12-08 12:19 - 2016-12-09 13:59 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-12-08 12:19 - 2016-12-09 13:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-12-08 12:19 - 2016-12-08 22:44 - 00000000 ____D C:\Program Files\Image-Line
2016-12-08 12:19 - 2016-12-08 12:19 - 00000000 ____D C:\Users\Vouager\Documents\Image-Line
2016-12-08 12:19 - 2016-12-08 12:19 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Image-Line
2016-12-07 00:10 - 2016-12-13 23:09 - 00000000 ____D C:\Program Files (x86)\Image-Line
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-31 02:10 - 2011-04-12 08:43 - 00772512 _____ C:\Windows\system32\perfh007.dat
2016-12-31 02:10 - 2011-04-12 08:43 - 00176010 _____ C:\Windows\system32\perfc007.dat
2016-12-31 02:10 - 2009-07-14 06:13 - 01806012 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-31 02:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-12-31 02:09 - 2016-11-15 22:01 - 00000000 ____D C:\Users\Vouager\AppData\LocalLow\Mozilla
2016-12-31 02:04 - 2012-12-08 01:40 - 00000000 ____D C:\ProgramData\NVIDIA
2016-12-31 02:04 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-31 02:03 - 2015-04-11 13:46 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-12-31 02:03 - 2014-07-17 23:11 - 00000000 ____D C:\AdwCleaner
2016-12-31 02:03 - 2013-02-08 14:07 - 00000008 __RSH C:\Users\Vouager\ntuser.pol
2016-12-31 02:03 - 2012-12-08 01:26 - 00000000 ____D C:\Users\Vouager
2016-12-31 01:57 - 2013-07-19 23:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-31 01:38 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-31 01:38 - 2009-07-14 05:45 - 00026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-31 01:34 - 2014-07-17 23:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-30 22:57 - 2016-09-21 19:16 - 00000000 ____D C:\Users\Vouager\AppData\Local\Arma 3 Launcher
2016-12-30 22:57 - 2016-08-24 15:38 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\TS3Client
2016-12-30 22:57 - 2012-12-24 18:02 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\vlc
2016-12-30 21:39 - 2016-08-22 00:34 - 00000000 ____D C:\Program Files (x86)\Steam
2016-12-30 21:36 - 2016-09-21 19:17 - 00000000 ____D C:\Users\Vouager\AppData\Local\Arma 3
2016-12-30 20:41 - 2013-11-24 20:22 - 00000000 ____D C:\Program Files (x86)\MiniTool Partition Wizard Home Edition 8.1.1
2016-12-30 19:23 - 2009-07-14 05:45 - 00529672 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-30 19:21 - 2013-08-23 23:32 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-12-30 18:51 - 2014-09-15 22:03 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-12-30 18:49 - 2016-09-10 19:22 - 00000000 ____D C:\Users\Vouager\AppData\Local\Google
2016-12-30 18:49 - 2016-09-10 18:37 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-30 02:32 - 2012-12-08 01:42 - 00149968 _____ C:\Users\Vouager\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-30 00:30 - 2014-09-23 22:44 - 00000000 ____D C:\ProgramData\I+ME Actia GmbH
2016-12-30 00:29 - 2014-09-23 21:58 - 00000000 ____D C:\ProgramData\Vediamo
2016-12-30 00:29 - 2014-09-23 21:58 - 00000000 ____D C:\Program Files (x86)\Vediamo
2016-12-30 00:26 - 2013-01-12 18:27 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-30 00:20 - 2014-09-23 21:57 - 00000000 ____D C:\Windows\SysWOW64\{D7762300-AFFE-C0C0-BEBE-050003010001}
2016-12-29 14:32 - 2016-10-08 10:52 - 00000000 ____D C:\Users\Vouager\.junique
2016-12-29 13:13 - 2016-09-21 19:21 - 00000000 ____D C:\Users\Vouager\Documents\Arma 3 - Other Profiles
2016-12-29 12:24 - 2016-10-09 14:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArmA3Sync
2016-12-29 12:20 - 2016-09-21 19:16 - 00000000 ____D C:\Users\Vouager\AppData\Local\Bohemia_Interactive
2016-12-29 12:12 - 2016-09-21 13:10 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-12-28 01:06 - 2013-07-19 22:53 - 00000989 _____ C:\Users\Vouager\Desktop\Mysee WebTV.lnk
2016-12-24 19:14 - 2016-11-23 20:59 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Curse Client
2016-12-22 23:52 - 2014-11-09 21:32 - 00000000 ____D C:\Program Files (x86)\dreamboxEDIT
2016-12-22 23:21 - 2016-09-10 21:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-12-22 23:21 - 2016-07-14 16:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-12-22 23:21 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-12-22 22:20 - 2012-12-08 01:54 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Thunderbird
2016-12-22 22:17 - 2012-12-08 01:40 - 00000000 ____D C:\Users\UpdatusUser
2016-12-22 22:05 - 2015-04-26 21:28 - 00000000 ____D C:\Users\Vouager\AppData\Roaming\Mozilla
2016-12-21 21:35 - 2016-08-24 13:34 - 00000000 ____D C:\Users\Vouager\AppData\Local\Steam
2016-12-20 00:16 - 2015-10-07 18:15 - 00000000 ____D C:\Program Files (x86)\GeoGebra 5.0
2016-12-16 22:31 - 2016-09-10 18:35 - 00000000 ____D C:\Program Files\Common Files\AV
2016-12-16 21:53 - 2016-08-21 13:40 - 00000000 ____D C:\Users\Vouager\AppData\Local\VirtualStore
2016-12-14 20:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\security
2016-12-13 23:09 - 2016-10-30 12:13 - 00000000 ____D C:\Program Files (x86)\Biet-O-Matic
2016-12-13 23:09 - 2016-10-20 22:14 - 00000000 ____D C:\Program Files (x86)\PSoft Rework
2016-12-13 23:09 - 2016-10-09 14:22 - 00000000 ____D C:\Program Files (x86)\ArmA3Sync
2016-12-13 23:09 - 2016-09-09 01:04 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2016-12-13 23:09 - 2016-08-21 20:13 - 00000000 ____D C:\Program Files (x86)\NTPort Library Driver
2016-12-13 23:09 - 2016-08-21 20:02 - 00000000 ____D C:\Program Files (x86)\Notepad++
2016-12-13 23:09 - 2016-08-21 19:46 - 00000000 ____D C:\Program Files (x86)\DipTrace
2016-12-13 23:09 - 2016-07-02 18:54 - 00000000 ____D C:\Program Files (x86)\Hex-Editor MX
2016-12-13 23:09 - 2016-04-07 17:31 - 00000000 ____D C:\Program Files (x86)\Freemake
2016-12-13 23:09 - 2016-03-11 15:08 - 00000000 ____D C:\Program Files (x86)\Elaborate Bytes
2016-12-13 23:09 - 2016-02-15 00:35 - 00000000 ____D C:\Program Files (x86)\LinuxLive USB Creator
2016-12-13 23:09 - 2016-01-14 21:25 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-13 23:09 - 2016-01-10 01:12 - 00000000 ____D C:\Program Files (x86)\Java
2016-12-13 23:09 - 2016-01-03 20:51 - 00000000 ____D C:\Program Files (x86)\USB CCID
2016-12-13 23:09 - 2016-01-03 20:51 - 00000000 ____D C:\Program Files (x86)\Feitian
2016-12-13 23:09 - 2015-12-18 16:50 - 00000000 ____D C:\Program Files (x86)\Fujitsu
2016-12-13 23:09 - 2015-08-31 23:33 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-13 23:09 - 2015-07-12 13:46 - 00000000 ____D C:\Program Files (x86)\Sony
2016-12-13 23:09 - 2015-05-26 22:05 - 00000000 ____D C:\Program Files (x86)\FrontDesign
2016-12-13 23:09 - 2015-05-17 17:44 - 00000000 ____D C:\Program Files (x86)\MELSERVO
2016-12-13 23:09 - 2015-05-06 19:30 - 00000000 ____D C:\Program Files (x86)\Foxit Software
2016-12-13 23:09 - 2015-05-02 20:06 - 00000000 ____D C:\Program Files (x86)\Tweaking.com
2016-12-13 23:09 - 2015-04-25 21:09 - 00000000 ____D C:\Program Files (x86)\Windows Installer Clean Up
2016-12-13 23:09 - 2015-04-25 20:54 - 00000000 ____D C:\Program Files (x86)\MSECACHE
2016-12-13 23:09 - 2015-04-08 23:52 - 00000000 ____D C:\Program Files (x86)\ClockworkMod
2016-12-13 23:09 - 2015-01-03 14:48 - 00000000 ____D C:\Program Files (x86)\MarkAny
2016-12-13 23:09 - 2015-01-03 14:24 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-12-13 23:09 - 2015-01-03 03:19 - 00000000 ____D C:\Program Files (x86)\Qualcomm
2016-12-13 23:09 - 2014-12-04 23:31 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-12-13 23:09 - 2014-11-10 07:31 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2016-12-13 23:09 - 2014-10-07 22:11 - 00000000 ____D C:\Program Files (x86)\Tor Browser
2016-12-13 23:09 - 2014-05-25 19:21 - 00000000 ____D C:\Program Files (x86)\ASM106xSATA
2016-12-13 23:09 - 2014-05-25 18:50 - 00000000 ___HD C:\Program Files (x86)\Temp
2016-12-13 23:09 - 2014-05-25 18:50 - 00000000 ____D C:\Program Files (x86)\Realtek
2016-12-13 23:09 - 2014-04-21 10:07 - 00000000 ____D C:\Program Files (x86)\AllWinnerTech
2016-12-13 23:09 - 2014-03-28 10:43 - 00000000 ____D C:\Program Files (x86)\MEDION GoPal Assistant
2016-12-13 23:09 - 2013-12-27 00:06 - 00000000 ____D C:\Program Files (x86)\UFB Code Setup
2016-12-13 23:09 - 2013-12-22 01:40 - 00000000 ____D C:\Program Files (x86)\Naviextras
2016-12-13 23:09 - 2013-11-12 21:29 - 00000000 ____D C:\Program Files (x86)\Trimax Soft
2016-12-13 23:09 - 2013-10-10 20:56 - 00000000 ____D C:\Program Files (x86)\DC-Unlocker
2016-12-13 23:09 - 2013-08-26 20:09 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2016-12-13 23:09 - 2013-07-14 12:20 - 00000000 ____D C:\Program Files (x86)\cGPSmapper
2016-12-13 23:09 - 2013-07-14 12:08 - 00000000 ____D C:\Program Files (x86)\GMapTool
2016-12-13 23:09 - 2013-06-11 22:41 - 00000000 ____D C:\Program Files (x86)\Windows Mobile 6 SDK
2016-12-13 23:09 - 2013-06-11 22:37 - 00000000 ____D C:\Program Files (x86)\Microsoft Device Emulator
2016-12-13 23:09 - 2013-05-26 21:08 - 00000000 ____D C:\Program Files (x86)\GoogleClean
2016-12-13 23:09 - 2013-05-10 20:33 - 00000000 ____D C:\Program Files (x86)\Software Installation Information
2016-12-13 23:09 - 2013-04-27 11:55 - 00000000 ____D C:\Program Files (x86)\PDF Repair Toolbox
2016-12-13 23:09 - 2013-04-27 11:00 - 00000000 ____D C:\Program Files (x86)\PowerDataRecovery
2016-12-13 23:09 - 2013-04-23 23:01 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-12-13 23:09 - 2013-04-13 18:16 - 00000000 ____D C:\Program Files (x86)\Acer Inc
2016-12-13 23:09 - 2013-03-17 03:06 - 00000000 ____D C:\Program Files (x86)\Garmin
2016-12-13 23:09 - 2013-02-28 22:58 - 00000000 ____D C:\Program Files (x86)\Intel
2016-12-13 23:09 - 2013-02-09 21:31 - 00000000 ____D C:\Program Files (x86)\HD2 Toolkit
2016-12-13 23:09 - 2013-01-12 18:27 - 00000000 ____D C:\Program Files (x86)\LG Electronics
2016-12-13 23:09 - 2012-12-20 00:30 - 00000000 ____D C:\Program Files (x86)\PdaNet for Android
2016-12-13 23:09 - 2012-12-19 23:18 - 00000000 ____D C:\Program Files (x86)\Android
2016-12-13 23:09 - 2012-12-12 23:50 - 00000000 ____D C:\Program Files (x86)\MSXML 4.0
2016-12-13 23:09 - 2012-12-10 00:27 - 00000000 ____D C:\Program Files (x86)\Totalcmd
2016-12-13 23:09 - 2012-12-10 00:26 - 00000000 ____D C:\Program Files (x86)\CDBurnerXP
2016-12-13 23:09 - 2012-12-09 22:46 - 00000000 ____D C:\Program Files (x86)\HP
2016-12-13 23:09 - 2012-12-08 01:41 - 00000000 ____D C:\Program Files (x86)\OpenAL
2016-12-13 23:09 - 2012-12-08 01:40 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-12-13 23:09 - 2012-12-08 01:31 - 00000000 ____D C:\Program Files (x86)\MozBackup
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2016-12-13 23:09 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files (x86)\MSBuild
2016-12-13 23:09 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files (x86)\Windows NT
2016-12-12 22:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\ModemLogs
2016-12-12 00:14 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\Downloaded Program Files
2016-12-11 12:50 - 2012-12-19 23:18 - 00000000 ____D C:\Users\Vouager\.android
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-12-08 12:23 - 2009-10-23 23:00 - 5811712 _____ (reFX) C:\Program Files (x86)\Nexus.dll
2016-11-02 22:16 - 2016-11-02 22:16 - 0007601 _____ () C:\Users\Vouager\AppData\Local\Resmon.ResmonCfg
2016-12-11 12:50 - 2016-12-11 12:50 - 0000177 _____ () C:\Users\Vouager\AppData\Local\uts.ini
2012-12-08 01:30 - 2012-12-08 01:30 - 0017408 _____ () C:\Users\Vouager\AppData\Local\WebpageIcons.db
2014-05-25 18:51 - 2014-05-25 18:51 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2012-12-09 22:45 - 2015-03-10 00:05 - 0033343 _____ () C:\ProgramData\hpzinstall.log
2016-12-12 00:21 - 2016-12-12 00:21 - 0000016 _____ () C:\ProgramData\mntexmp
Einige Dateien in TEMP:
====================
C:\Users\Vouager\AppData\Local\Temp\libeay32.dll
C:\Users\Vouager\AppData\Local\Temp\msvcr120.dll
C:\Users\Vouager\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-12-24 13:52
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 21-12-2016
durchgeführt von Vouager (31-12-2016 02:11:38)
Gestartet von C:\Users\Vouager\Desktop
Windows 7 Ultimate Service Pack 1 (X64) (2012-12-08 00:26:37)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3129012598-2279985476-2495907205-500 - Administrator - Disabled)
Gast (S-1-5-21-3129012598-2279985476-2495907205-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3129012598-2279985476-2495907205-1002 - Limited - Enabled)
NGServer (S-1-5-21-3129012598-2279985476-2495907205-1012 - Limited - Enabled)
UpdatusUser (S-1-5-21-3129012598-2279985476-2495907205-1005 - Limited - Enabled) => C:\Users\UpdatusUser
Vouager (S-1-5-21-3129012598-2279985476-2495907205-1001 - Administrator - Enabled) => C:\Users\Vouager
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: Avast Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
4660_4680_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\{3CE0C7DC-ED5B-450E-9C5F-49702C263544}) (Version: 12.1.7.157 - Adobe Systems, Inc)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.4.194 - Adobe Systems, Inc.)
AMD Catalyst Install Manager (HKLM\...\{F2A7CE36-57BF-5C86-952D-90DBF3746D82}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
Android SDK Tools (HKLM-x32\...\Android SDK Tools) (Version: 0.7 - Google Inc.)
Arma 3 (HKLM\...\Steam App 107410) (Version: - Bohemia Interactive)
ArmA3Sync 1.5.80 (HKLM-x32\...\{F097E7D7-D093-4394-9EED-43AFCCD12B7A}_is1) (Version: 1.5.80 - The [S.o.E] team)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 2.0.8.0000 - Asmedia Technology)
ASUS Xonar D2X Audio Driver (HKLM\...\C-Media Oxygen HD Audio Driver) (Version: - )
Autodesk DWG TrueView 2016 - English (HKLM\...\DWG TrueView 2016 - English) (Version: 20.1.49.0 - Autodesk)
Avast Premier (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
bpd_scan (x32 Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11b Network Adapter) (Version: 4.102.15.61 - Broadcom Corporation)
BufferChm (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.5306 - CDBurnerXP)
cGPSmapper Free 0100d (HKLM-x32\...\cGPSmapper Free_is1) (Version: - cGPSmapper)
CodeVisionAVR Evaluation (HKLM-x32\...\{DE9D2D84-EF11-40AC-B892-FE4663DB0A05}) (Version: 3.28 - HP InfoTech S.R.L.)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd)
DayZ (HKLM\...\Steam App 221100) (Version: - Bohemia Interactive)
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
DipTrace (HKLM\...\DipTrace) (Version: 3.0 - Novarm)
DipTrace Language Suite (HKLM-x32\...\DipTrace Language Suite) (Version: 11.0.0.3 - Novarm Limited)
DirectWave (HKLM-x32\...\DirectWave) (Version: - Image-Line)
Discord (HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Discord) (Version: 0.0.296 - Hammer & Chisel, Inc.)
DocMgr (x32 Version: 140.0.65.000 - Ihr Firmenname) Hidden
DocProc (x32 Version: 140.0.100.000 - Hewlett-Packard) Hidden
dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version: - )
DWG TrueView 2016 - English (Version: 20.1.49.0 - Autodesk) Hidden
eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden
Fax (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.6.321 - Foxit Software Inc.)
Frontplatten Designer (HKLM-x32\...\Frontplatten Designer) (Version: 4.4.2 - Schaeffer AG)
Fujitsu Finder (HKLM-x32\...\FujitsuFinder) (Version: 4.2.0.0704 - Fujitsu Technology Solutions GmbH)
Garmin BaseCamp (HKLM-x32\...\{31A67F6C-D79D-47B9-9F0B-13C0FCF3C3A8}) (Version: 4.4.6 - Garmin Ltd or its subsidiaries)
Garmin City Navigator Europe NT 2016.10 (HKLM-x32\...\{CB19FBE1-2C75-435D-95B2-4E3D576A00B3}) (Version: 2.0.0.0 - Garmin Ltd or its subsidiaries)
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.0.2.3 - Genesys Logic)
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.307.0 - International GeoGebra Institute)
GMapTool 0.8.143 (HKLM-x32\...\{1873789F-59D5-4002-8A2F-60A827B78F98}_is1) (Version: - AP)
GoogleClean (HKLM-x32\...\{4281435C-AD1D-4C8A-B9C0-3961C08EF142}_is1) (Version: 4.0.112 - Abelssoft)
GPBaseService2 (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HD2 Toolkit Version 4.1 (HKLM-x32\...\{12EE0B2A-84C6-494E-A7AC-6771E898F6A0}_is1) (Version: 4.1 - Kaushal Subedi (KSubedi))
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP OfficeJet J4600 All-In-One Series (HKLM\...\{4945F319-A24D-454C-A411-F3689987315D}) (Version: 14.0 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.3.34 - Intel Corporation)
J4680 (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java SE Development Kit 7 Update 10 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170100}) (Version: 1.7.0.100 - Oracle)
JMicron JMB36X Driver (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.17.65.3 - JMicron Technology Corp.)
LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)
Malwarebytes Version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
MarketResearch (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
M-Audio Legacy Keyboard Driver 5.0.0 (x64) (HKLM\...\{2CA9F96F-AFFC-4D41-B781-47EBD2378DB8}) (Version: 5.0.0 - M-Audio)
MEDION GoPal Assistant (HKLM-x32\...\{12C77A13-A31B-4565-8E60-494FD65EBB2F}) (Version: 6.4.17.13525 - MEDION)
MegaDownloader 1.7 (HKLM\...\{C12C2297-65A4-4E64-9AE1-29F0D947FDA0}}_is1) (Version: 1.7 - AppsForMega.info)
Memory Stick Formatter (HKLM-x32\...\{27337663-2619-11D4-99DC-0000F49094C7}) (Version: 2.5.05090 - Sony Corporation)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.)
MiniTool Power Data Recovery (HKLM-x32\...\MiniTool Power Data Recovery_is1) (Version: - MiniTool Solution Ltd.)
Morphine (HKLM-x32\...\Morphine) (Version: - Image-Line bvba)
MOTSZ111E (HKLM-x32\...\{F6DB8EC3-8EEB-4082-BB62-550685F5D90A}) (Version: - )
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Firefox 50.1.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 50.1.0 (x86 de)) (Version: 50.1.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.1.0.6186 - Mozilla)
Mozilla Thunderbird 45.5.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.5.1 (x86 de)) (Version: 45.5.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Naviextras Toolbox (HKLM-x32\...\Naviextras Toolbox) (Version: 3.18.0.330918 - NNG Llc.)
Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - NNG Llc.)
Network64 (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
NTPort Library Driver 2.8 (HKLM-x32\...\NTPort Library Driver) (Version: 2.8 - Zeal SoftStudio)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 355.82 - NVIDIA Corporation)
NVIDIA Grafiktreiber 355.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 355.82 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
ProductContext (x32 Version: 140.0.000.000 - Hewlett-Packard) Hidden
PSoft Rework version 2.3.1 (HKLM-x32\...\{9C6888BB-0F17-4D86-8BB7-287EB8C831E4}_is1) (Version: 2.3.1 - PSoft)
QPST 2.7 (HKLM-x32\...\{8035964D-75EB-4463-91DC-3F02EE9CF103}) (Version: 2.7.378 - Qualcomm)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7183 - Realtek Semiconductor Corp.)
reFX Nexus VSTi RTAS v2.2.0 (HKLM-x32\...\reFX Nexus_is1) (Version: - )
ROCKEY200 Driver (Remove only) (HKLM-x32\...\B3DE3DBF-7F64-47b5-B25B-9842D2B1A045_Rockey200std) (Version: - )
Rust (HKLM\...\Steam App 252490) (Version: - Facepunch Studios)
SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15013.17 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.15013.17 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
SatParamEditor (HKLM-x32\...\{B31EB1D9-FE7B-4723-BA08-3CB75DD3D3B8}) (Version: 1.0.0 - Trimax Soft)
Scan (x32 Version: 140.0.167.000 - Hewlett-Packard) Hidden
SES Driver (HKLM\...\{D8CC254C-C671-4664-9A38-FA368D1E2C97}) (Version: 1.0.0 - Western Digital)
SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden
SketchUp 2015 (HKLM\...\{A83795B9-570F-40FF-ACB4-710B568EBA22}) (Version: 15.3.331 - Trimble Navigation Limited)
Smart Technology Programming Software 7.0.45.2 (HKLM\...\{4646A4CF-BEA5-475D-96D7-70E19E481603}) (Version: 7.0.45.2 - Mad Catz)
Smart Technology Programming Software 7.0.46.0 (HKLM\...\{E3E3240A-A2D2-4F5E-8482-198A3D344D47}) (Version: 7.0.46.0 - Mad Catz)
Smart Technology Volume Tracker 7.0.46.0 (HKLM\...\{BAE210D2-5153-4B4C-BBF4-AF3F26F861BC}) (Version: 7.0.46.0 - Mad Catz)
SmartWebPrinting (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Sytrus (HKLM-x32\...\Sytrus) (Version: - Image-Line)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
Toolbox (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: - )
TrayApp (x32 Version: 140.0.213.000 - Hewlett-Packard) Hidden
UFB Code Setup (HKLM-x32\...\UFB Code SetupV3.6.0) (Version: V3.6.0 - Macro Technology Ltd.)
Universal Adb Driver (HKLM-x32\...\{D9C4202E-6D51-4B06-A8F1-22316E654BCA}) (Version: 1.0.0 - ClockworkMod)
USB CCID Smartcard Reader - Version 1.2.1.2 (HKLM\...\{939913F9-F134-4E9E-B879-BE6755B69952}) (Version: 3.0.0.1 - USB CCID)
VC_CRT_x64 (Version: 1.02.0000 - Intel Corporation) Hidden
Vediamo Diagnosesystem 5.1 (HKLM-x32\...\InstallShield_{D7762300-AFFE-C0C0-DADA-050100000001}) (Version: 5.01.00 - DAIMLER AG PT/TVP)
Vediamo Diagnosesystem 5.1 (x32 Version: 5.01.00 - DAIMLER AG PT/TVP) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VMLAB release 3.15 (HKLM-x32\...\{5A7F39DA-AFF5-4270-85AE-5A1CE76A3249}_is1) (Version: 3.15 - Advanced MicroController Tools (AMcTools))
WebReg (x32 Version: 140.0.213.017 - Hewlett-Packard) Hidden
Windows 7 Manager (HKLM\...\{2DFFCA14-1454-43F4-A08C-F4FDA6B30DDA}) (Version: 5.1.1 - Yamicsoft)
Windows Driver Package - FTDI CDM Driver Package - Bus/D2XX Driver (07/12/2013 2.08.30) (HKLM\...\22CCD58B53472BE3FCAFF05631111C4062959A43) (Version: 07/12/2013 2.08.30 - FTDI)
Windows Driver Package - FTDI CDM Driver Package - VCP Driver (07/12/2013 2.08.30) (HKLM\...\BD00013670D26C16E19F284BF8E15DAF813497C7) (Version: 07/12/2013 2.08.30 - FTDI)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Driver Package - Western Digital Technologies (WDC_SAM) WDC_SAM (01/19/2011 1.0.0009.0) (HKLM\...\4CA7CFBB29889F25ACB3DF6E3A42BAE29EB43B20) (Version: 01/19/2011 1.0.0009.0 - Western Digital Technologies)
Windows Installer Clean Up (HKLM-x32\...\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}) (Version: 3.00.00.0000 - Microsoft Corporation)
Windows Mobile 6 Professional Emulator Images - GER (HKLM-x32\...\{79605EAD-6EF0-4E57-AEE2-E0AFE8037DC5}) (Version: 6.0.0.17740 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter: Treiberupdate (HKLM\...\{92DBCA36-9B41-4DD1-941A-AED149DD37F0}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows-Treiberpaket - FTDI CDM Driver Package - Bus/D2XX Driver (04/10/2012 2.08.24) (HKLM\...\4C8545EEB6143B6AD3858B5D1E0AEE76040B1435) (Version: 04/10/2012 2.08.24 - FTDI)
Windows-Treiberpaket - FTDI CDM Driver Package - VCP Driver (04/10/2012 2.08.24) (HKLM\...\6849F67BACD4DA5A5B9D46803E6850D0BE8B3826) (Version: 04/10/2012 2.08.24 - FTDI)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2016 - English\dwgviewr.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2016 - English\en-US\dwgviewrficn.dll (Autodesk, Inc.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {00B6AA72-F094-46C8-92AD-D5860A623C11} - \ProtectedSearch\Protected Search -> Keine Datei <==== ACHTUNG
Task: {0674277B-A3A0-41AA-A170-EBD697F4B82B} - System32\Tasks\Vizashkible Reports => C:\Program Files (x86)\Vigaghtlterk\raherk.exe
Task: {29195263-7EAF-4456-80A9-FE2FE9E36B0F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-10] (AVAST Software)
Task: {353CBE8D-C063-41F8-ADC6-FB9719B30AF5} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-09-10] (AVAST Software)
Task: {4084847B-466B-4C84-BA7C-277D1802EF40} - System32\Tasks\{5EBEE5CD-2B2B-4F3B-8110-0BCDDF1E1527} => pcalua.exe -a C:\Users\Vouager\Desktop\HijackThis.exe -d C:\Users\Vouager\Desktop
Task: {5660CED9-5B9E-4F86-941C-DD8E29706F69} - System32\Tasks\{073B4DB1-562E-49F5-A5B5-097CAEFE8FA7} => pcalua.exe -a G:\DataCard_Setup.exe -d G:\
Task: {84F6D1DF-B5DE-4A08-826F-C972EC3AFEB2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-23] (Adobe Systems Incorporated)
Task: {9432CE03-1181-4F99-8BCA-3326398C95CC} - System32\Tasks\{C058D899-264A-4F10-B4F5-261D42566D19} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {A06125CC-F321-48B6-88DD-5066FCDD78AD} - System32\Tasks\{9D
Task: {B240B637-2412-4FBD-B232-D9C9FEC79875} - System32\Tasks\SafeZone scheduled Autoupdate 1473529191 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software)
Task: {BE50ADB6-E413-423E-8615-186432125460} - System32\Tasks\InternetCFC => Firefox.exe hxxp://andria-loft.ru/florida
Task: {CA438028-5840-493A-A3DD-BF0C29DB2B5A} - System32\Tasks\{F8DDC4BF-2AF4-4F1D-8213-DC5B3B808AD8} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {D06EDDBB-99F3-4E53-8937-665875E8780B} - System32\Tasks\{3B235997-BEAB-4A1E-973B-28849B4156A7} => pcalua.exe -a C:\Windows\SysWOW64\xRaidSetup.exe
Task: {D8B196DE-2645-4D76-B2B5-821BA6EC22B7} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.01.02\AsLoader.exe [2009-12-28] (ASUSTeK Computer Inc.)
Task: {E00E8A80-D9A4-4064-ACB5-CDA73FD0436E} - System32\Tasks\iSCSIAgentAutoStartup => C:\Program Files (x86)\Fujitsu\Finder\iSCSIAgent.exe
Task: {F86CB9C1-3983-4415-9153-7FDF66C68B54} - System32\Tasks\{A962AF2B-B6D6-4F6A-B289-651B2F052DC5} => pcalua.exe -a "C:\Program Files (x86)\Bianya\201407172327\Unins.exe"
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-12-31 01:34 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-12-31 01:34 - 2016-12-14 12:55 - 02247632 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2016-12-31 01:34 - 2016-12-14 12:55 - 02813904 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2014-05-06 22:35 - 2015-08-25 15:24 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-21 23:27 - 2011-05-25 19:09 - 00049152 _____ () C:\Windows\SysWOW64\UMonit.exe
2014-05-25 18:50 - 2013-08-20 16:37 - 00605496 _____ () C:\Windows\system32\audioLibVc.dll
2016-09-10 18:34 - 2016-09-10 18:34 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-12-29 18:44 - 2016-12-29 18:44 - 03131344 _____ () C:\Program Files\AVAST Software\Avast\defs\16122901\algo.dll
2016-09-10 18:34 - 2016-09-10 18:34 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2014-06-06 12:41 - 2013-09-16 11:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-07-06 19:35 - 2015-08-27 01:37 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-09-10 18:35 - 2016-09-10 18:35 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\Users\Public\DRM:احتضان [48]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\15044960.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\58658192.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\90305368.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\15044960.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\58658192.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\90305368.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\Software\Classes\.scr: DWGTrueViewScriptFile => C:\Windows\system32\notepad.exe "%1"
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7865 mehr Seiten.
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\123simsen.com -> www.123simsen.com
Da befinden sich 7862 mehr Seiten.
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2016-12-13 23:08 - 00451323 ____N C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 validation.sls.microsoft.com
0.0.0.0 www.google-analytics.com
0.0.0.0 google-analytics.com
0.0.0.0 ssl.google-analytics.com
0.0.0.0 pagead.googlesyndication.com
0.0.0.0 pagead2.googlesyndication.com
0.0.0.0 adservices.google.com
0.0.0.0 video-stats.video.google.com
0.0.0.0 4.afs.googleadservices.com
0.0.0.0 imageads.googleadservices.com
0.0.0.0 partner.googleadservices.com
0.0.0.0 www.googleadservices.com
0.0.0.0 apps5.oingo.com
0.0.0.0 www.appliedsemantics.com
0.0.0.0 service.urchin.com127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
Da befinden sich 15476 zusätzliche Einträge.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Vouager\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\Services: clr_optimization_v2.0.50727_32 => 3
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{D8AA3508-8A21-42E3-BA7F-475140E94957}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{59C3D104-CB16-4349-BF8D-D233A08DEA45}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{EDF56BFE-C1A8-486A-825E-74ED04B94EFD}] => LPort=26675
FirewallRules: [{88421FD6-C3D1-4B34-AEA5-0EFF19740B9F}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{483EA1C6-6B0E-4BF3-9A6E-A02608D07690}] => %systemroot%\WindowsMobile\wmdHost.exe
FirewallRules: [{8989D64F-1F12-4DF1-B7D8-7D915CC7BDA4}] => LPort=26675
FirewallRules: [{249B6A93-328D-4324-801C-06A8041829F2}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C05450B7-416B-4499-A5E2-814C21CBA74C}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{B3FCA2F5-AB52-4FAE-9096-53477BBD5CCE}C:\program files (x86)\windows mobile 6 sdk\tools\cellular emulator\cellular emulator.exe] => C:\program files (x86)\windows mobile 6 sdk\tools\cellular emulator\cellular emulator.exe
FirewallRules: [UDP Query User{A82ED560-A579-4630-9DC7-22DC3FF9554B}C:\program files (x86)\windows mobile 6 sdk\tools\cellular emulator\cellular emulator.exe] => C:\program files (x86)\windows mobile 6 sdk\tools\cellular emulator\cellular emulator.exe
FirewallRules: [TelnetServer-TlntSvr-TCP-In] => %systemroot%\system32\tlntsvr.exe
FirewallRules: [TelnetServer-Tlntadmn-RPC-In] => %systemroot%\system32\tlntsvr.exe
FirewallRules: [{7CC99027-6C8F-4BC7-B3DF-6CE465F84DDD}] => LPort=8732
FirewallRules: [{06751325-4640-4288-A574-62BA4513438B}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{D5053A27-DF75-40E8-854F-3FD989A89B56}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{9036AAF4-051A-43DD-ADDB-FC897BB00403}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{7551C0B0-FD8A-427E-A501-B63EF6A599D1}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{0F295F17-CDC6-4041-B154-CB54C489622E}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{0DE6F6EB-6E18-4891-A13D-E188F3B2D93F}] => C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{314690F2-10E4-44C4-9B67-138FC691CDFA}] => C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{301A92D8-8233-4B3E-B35D-9FF2ABB6A499}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{85187D96-59CF-40E4-80E7-303F7B293DAD}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{AFC7A2F6-3458-42B1-BA9F-09AF41B5B9FC}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{B0C307FA-3A3C-428D-A0DC-60EE97DD3681}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{BC4BA39D-2198-426F-A6E5-D3631550CD1C}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{150169B7-BDD3-4291-ADAD-C30212C00C92}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{2C5FACF4-C97B-416E-AC3A-81D3433B4FA3}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{5AE6BBFE-3C7E-49BE-8218-476F63E40A2D}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{C1A97ECF-54CE-4F9B-A165-8DE8C8AE5942}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{E9E6CDED-C6B5-4912-A2E7-C1BA8A80AD98}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{84AB8774-CFFB-4250-B5D5-454108802714}] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{1CB98088-2A75-4CA4-B300-B614307C4A9C}] => C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{5AA610D6-2598-4278-AE24-FB9865257050}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F265D0BA-793B-4167-9E53-3CCA74A71237}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CA6736C4-9F6E-422C-B57A-C53E27CE103B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{84BE53D6-4547-4F6C-B4CE-04BD0BAA3894}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{5F212E77-83A0-4FD8-A354-D17514532724}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{9426DC73-1924-4DB6-B9A8-E722D1E7E187}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2152DAF5-5504-488E-AFA4-BAD373735179}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0DF5B16E-63C3-416A-BF3F-8C4D26099448}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{294666D4-9BB9-4BAE-BF9E-3CF373720639}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D4EB30C9-2EAF-4D26-9DE0-0794E611FCB4}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{ACA5710F-4C7C-4753-A5AB-629B0DA46906}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0D42248C-729D-4DF2-84D2-667BBD1E4623}] => 㩃啜敳獲噜畯条牥䅜灰慄慴剜慯業杮獜湳獜湳攮數
FirewallRules: [{669DC0ED-D2CF-4DD4-8051-25F63D67659C}] => 㩃啜敳獲噜畯条牥䅜灰慄慴剜慯業杮獜湳獜癡略硥e
FirewallRules: [{98E4E345-15F5-4842-8EF1-F02C4C586C3D}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{07237562-B35D-46D2-9B67-C832DEA4B3EB}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{FEDAEDA8-CF48-41F5-BB30-14125E43CD18}] => E:\SteamLibrary\steamapps\common\Rust\Rust.exe
FirewallRules: [{D7E4310B-FAC2-4B76-B82A-AB35D1A4726F}] => E:\SteamLibrary\steamapps\common\Rust\Rust.exe
FirewallRules: [TCP Query User{D4E579EF-62B9-4284-A25D-F5BA3F9A2ACF}E:\steamlibrary\steamapps\common\arma 3\arma3.exe] => E:\steamlibrary\steamapps\common\arma 3\arma3.exe
FirewallRules: [UDP Query User{2884BB2E-28F8-4867-921E-C73CA3A05EBC}E:\steamlibrary\steamapps\common\arma 3\arma3.exe] => E:\steamlibrary\steamapps\common\arma 3\arma3.exe
FirewallRules: [{AC7E60D8-8C18-4501-B818-36A44354EC67}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{3C99E991-FAC9-4BB4-AD7E-D282DED2B61B}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{DC5281A8-AF27-4DC8-8F2F-32947C602D5C}] => E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{E734DCAC-98F6-4DED-8931-BBCBDB5BFA09}] => E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{268110B2-180E-42E6-967B-B52A3DC1B8AF}] => D:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{248EE905-A2B5-4E64-8851-8EE1E61FB1A6}] => D:\SteamLibrary\steamapps\common\Arma 3\arma3launcher.exe
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Officejet J4680 series
Description: Officejet J4680 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Officejet J4680 series
Description: Officejet J4680 series
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/31/2016 02:05:47 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (12/31/2016 02:05:11 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: Vouager-PC)
Description: Das lokale Benutzerprofil wurde nicht gefunden. Sie werden mit einem temporären Benutzerprofil angemeldet. Änderungen, die Sie am Benutzerprofil vornehmen, gehen bei der Abmeldung verloren.
Error: (12/31/2016 02:05:11 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: Vouager-PC)
Description: Dieses Benutzerprofil wurde gesichert. Bei der nächsten Anmeldung dieses Benutzers wird automatisch versucht, dieses gesicherte Profil zu verwenden.
Error: (12/31/2016 02:05:11 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1502) (User: Vouager-PC)
Description: Das lokal gespeicherte Profil kann nicht geladen werden. Mögliche Fehlerursachen sind nicht ausreichende Sicherheitsrechte oder ein beschädigtes lokales Profil.
Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
Error: (12/31/2016 02:05:11 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: NT-AUTORITÄT)
Description: Die Registrierung konnte nicht geladen werden. Dieses Problem wird oft durch zuwenig Arbeitsspeicher oder nicht ausreichende Sicherheitsberechtigungen verursacht.
Details - Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
for C:\Users\Vouager\ntuser.dat
Error: (12/31/2016 01:30:47 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (12/31/2016 01:20:19 AM) (Source: Microsoft-Windows-WMI) (EventID: 10) (User: NT-AUTORITÄT)
Description: Der Ereignisfilter mit der Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" aufgrund des Fehlers "0x80041003" nicht reaktiviert werden. Solange dieses Problem besteht, können mit diesem Filter keine Ereignisse übermittelt werden.
Error: (12/31/2016 12:39:20 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {4d027370-db2a-4d2e-8acf-574fcc84fd25}
Error: (12/31/2016 12:39:12 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {4d027370-db2a-4d2e-8acf-574fcc84fd25}
Error: (12/31/2016 12:37:52 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.
Vorgang:
Generatordaten werden gesammelt
Kontext:
Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
Generatorname: System Writer
Generatorinstanz-ID: {4d027370-db2a-4d2e-8acf-574fcc84fd25}
Systemfehler:
=============
Error: (12/31/2016 02:05:22 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom
Error: (12/31/2016 02:04:55 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows-Zeitgeber" wurde mit folgendem Fehler beendet:
Zugriff verweigert
Error: (12/31/2016 02:04:55 AM) (Source: Microsoft-Windows-Time-Service) (EventID: 46) (User: NT-AUTORITÄT)
Description: Der Zeitdienst wurde heruntergefahren, da ein Fehler aufgetreten ist. Fehler: 0x80070005: Zugriff verweigert
Error: (12/31/2016 02:04:55 AM) (Source: Microsoft-Windows-Time-Service) (EventID: 54) (User: NT-AUTORITÄT)
Description: Der Zeitdienst kann nicht gestartet werden, da ein Fehler beim Lesen der Konfiguration aus der Registrierung festgestellt wurde. Fehler: Ƃugriff verweigert (0x80070005)
Error: (12/31/2016 02:04:52 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Qerzicult" wurde mit folgendem Fehler beendet:
Das angegebene Modul wurde nicht gefunden.
Error: (12/31/2016 02:03:46 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
Error: (12/31/2016 02:03:46 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
Die Anforderung wird nicht unterstützt.
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (12/31/2016 02:03:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/31/2016 02:03:16 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (12/31/2016 02:03:16 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i7-4770K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 21%
Installierter physikalischer RAM: 12225.6 MB
Verfügbarer physikalischer RAM: 9589.42 MB
Summe virtueller Speicher: 24449.38 MB
Verfügbarer virtueller Speicher: 21683.44 MB
==================== Laufwerke ================================
Drive c: (Vouager) (Fixed) (Total:97.56 GB) (Free:11.9 GB) NTFS
Drive d: (Archive) (Fixed) (Total:200.43 GB) (Free:33.44 GB) NTFS
Drive e: (Daten) (Fixed) (Total:400.55 GB) (Free:27.81 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 07E940A0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=97.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=200.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=400.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
|
31.12.2016, 17:36
| #4 |
| /// Malwareteam | Werbefenster öffnet sich von alleine Hast du den Google Kram absichtlich in die Hosts geschrieben? Wieso? Schritt: 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter closeprocesses:
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {19bd5ff5-3057-11e3-8959-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2bcedc8d-301e-11e3-8e40-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2c8265b5-3054-11e3-8ea8-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9d93-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9daf-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {2dab9dfe-43eb-11e3-9861-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {4ae7546b-bf09-11e3-93ee-90e6ba93ef79} - K:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {57a8be24-aa9d-11e2-9d06-806e6f6e6963} - F:\setup\rsrc\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c31617c-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c316181-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c316184-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {7c31618e-3126-11e3-979c-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9e9c2b97-296d-11e6-98fd-e03f491c0962} - K:\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed38166-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed381a1-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ed38212-31df-11e3-975c-90e6ba93ef79} - G:\AutoRun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {9ef53f3d-29a8-11e6-bf1a-e03f491c0962} - L:\Autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407d4-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e0-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e3-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e5-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e7-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {b7c407e9-3124-11e3-9f03-90e6ba93ef79} - G:\.\Autorun.exe AUTORUN=1
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {c3dbcd5b-40cc-11e2-8b90-806e6f6e6963} - F:\autorun.exe
HKU\S-1-5-21-3129012598-2279985476-2495907205-1001\...\MountPoints2: {d3870e78-31c6-11e3-8ef1-90e6ba93ef79} - G:\AutoRun.exe
ShellExecuteHooks: Kein Name - {3E07EA28-AB6D-11E6-B40F-64006A5CFC23} - -> Keine Datei
S2 Qerzicult; C:\Program Files (x86)\Vigaghtlterk\Verqitioncmm.dll [X]
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
2016-12-30 19:21 - 2013-08-23 23:32 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-12-30 18:51 - 2014-09-15 22:03 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
Task: {00B6AA72-F094-46C8-92AD-D5860A623C11} - \ProtectedSearch\Protected Search -> Keine Datei <==== ACHTUNG
Task: {0674277B-A3A0-41AA-A170-EBD697F4B82B} - System32\Tasks\Vizashkible Reports => C:\Program Files (x86)\Vigaghtlterk\raherk.exe
C:\Program Files (x86)\Vigaghtlterk
Task: {4084847B-466B-4C84-BA7C-277D1802EF40} - System32\Tasks\{5EBEE5CD-2B2B-4F3B-8110-0BCDDF1E1527} => pcalua.exe -a C:\Users\Vouager\Desktop\HijackThis.exe -d C:\Users\Vouager\Desktop
Task: {5660CED9-5B9E-4F86-941C-DD8E29706F69} - System32\Tasks\{073B4DB1-562E-49F5-A5B5-097CAEFE8FA7} => pcalua.exe -a G:\DataCard_Setup.exe -d G:\
Task: {A06125CC-F321-48B6-88DD-5066FCDD78AD} - System32\Tasks\{9D
Task: {BE50ADB6-E413-423E-8615-186432125460} - System32\Tasks\InternetCFC => Firefox.exe hxxp://andria-loft.ru/florida
Task: {CA438028-5840-493A-A3DD-BF0C29DB2B5A} - System32\Tasks\{F8DDC4BF-2AF4-4F1D-8213-DC5B3B808AD8} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {D06EDDBB-99F3-4E53-8937-665875E8780B} - System32\Tasks\{3B235997-BEAB-4A1E-973B-28849B4156A7} => pcalua.exe -a C:\Windows\SysWOW64\xRaidSetup.exe
Task: {F86CB9C1-3983-4415-9153-7FDF66C68B54} - System32\Tasks\{A962AF2B-B6D6-4F6A-B289-651B2F052DC5} => pcalua.exe -a "C:\Program Files (x86)\Bianya\201407172327\Unins.exe"
C:\Program Files (x86)\Bianya
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
emptytemp:
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\Users\Public\DRM:احتضان [48]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\15044960.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\58658192.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\90305368.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\15044960.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\58658192.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\90305368.sys => ""="Driver"
FirewallRules: [{EDF56BFE-C1A8-486A-825E-74ED04B94EFD}] => LPort=26675
FirewallRules: [{8989D64F-1F12-4DF1-B7D8-7D915CC7BDA4}] => LPort=26675
FirewallRules: [{0D42248C-729D-4DF2-84D2-667BBD1E4623}] => 㩃啜敳獲噜畯条牥䅜灰慄慴剜慯業杮獜湳獜湳攮數
FirewallRules: [{669DC0ED-D2CF-4DD4-8051-25F63D67659C}] => 㩃啜敳獲噜畯条牥䅜灰慄慴剜慯業杮獜湳獜癡略硥e
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt: 2 Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen. Schritt: 3 ESET Online Scanner
Hinweis: Dieser Scan kann schon einmal mehrere Stunden dauern...
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~  Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
|
| Themen zu Werbefenster öffnet sich von alleine |
| computer, defender, downloader, ebay, failed, firefox, flash player, helper, homepage, installation, internet, mozilla, mp3, officejet, port, problem, realtek, rundll, security, services.exe, software, stick, teredo, udp, usb, werbefenster, windows |
Linear-Darstellung
