Fehlermeldung nach dem Start igfxtray.exe, igfpers.exe, RAVCpl64.exe u.a.

andreara · 05.12.2017, 12:08

Hallo,

seit einigen Tagen bekomme ich auf meinem Laptop nach dem Hochfahren die oben genannten Fehlermeldungen. Ich klicke sie weg, aber z.B. funktioniert jetzt mein Aldi Talk Web Stick nicht mehr, und auch der VCL Player. ICh vermute das hängt damit zusammen dass diese RAV Dateien zum Windows , ek Audio Manager gehören. Ich habe versucht, den ALdi Stick zu deinstallieren, aber er hängt sich beim Deinstallationsversuch auf. Ich habe gegoogelt, und es wurde mir hier empfohlen https://www.solvusoft.com/de/download/winthruster/ die REgistry zu bereinigen und den Winthruster runterzuladen. ICh habe ihn runtergeladen, aber dann hat er nicht gestartet. Ich wurde gefragt ob ich dem winthruster erlaube Änderungen am System vorzunehmen, habe bejaht, aber dann geschah nichts weiter. ICh habe eine Avira System Prüfung durchgeführt, ohne Funde. Ich habe noch den reimageplus registry cleaner runtergeladen und laufen lassen, der mir bestätigt hat, dass die Festplattenkapazitäten und die Geschwindigkeit meines Laptops excellent sind, aber eben die oben genannten Programme gecrasht sind. Wie kann ich das jetzt bereinigen? Bin dankbar für Tips wie z.B. die Empfehlung eines kostenlosen Registry Cleaners, denn reimage möchte dann am Ende eine Kreditkarte sehen, bevor er die Schäden repariert.
Herzlichen Dank schon mal,
Andrea

cosinus · 05.12.2017, 13:39

Zitat:

Bin dankbar für Tips wie z.B. die Empfehlung eines kostenlosen Registry Cleaners,

Sry aber welcher Depp empfiehlt euch immer irgendwelche gefährlichen Registry-Cleaner?

Die Dinger bringen NIX an Leistung dafür aber ein ordentliches Risiko, dass mal ein wichtiger Schlüssel als unnötig eingestuft wird und das gesamt System dann instabil wird oder ein nicht mehr erklärbares Verhalten hat!

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

andreara · 06.12.2017, 11:48

Hallo Cosinus,

erstmal danke für Deine Einschätzung und Deine Hilfe.
Hier die Farbar logfiles.
frst.txt:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-04-2016
Ran by super (administrator) on USER (06-12-2017 11:36:42)
Running from C:\Users\super\Downloads
Loaded Profiles: super (Available Profiles: super)
Platform: Windows 8 N (X64) Language: English (United Kingdom)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Nitro PDF Software) C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe
() C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
() C:\Program Files\KMSpico\Service_KMS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
() C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\Grameenphone Internet\CancelAutoPlay.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Solvusoft Corporation) C:\Program Files (x86)\Solvusoft\Tray\SolvusoftTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\consent.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-11-13] (Realtek Semiconductor)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [114048 2013-10-18] (Intel Corporation)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [387832 2013-11-02] (IVT Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-08-04] (Hewlett-Packard Company)
HKLM-x32\...\Run: [{0E0B0BE1-1F90-40C3-86C9-33E24A80906C}] => "C:\Program Files (x86)\Teletalk 3G-new\UUShell.exe" /CallBySystem
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [CancelAutoPlay] => C:\Program Files (x86)\Grameenphone Internet\CancelAutoPlay.exe [450304 2013-07-11] ()
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [226816 2016-05-23] (Geek Software GmbH)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3567928 2017-11-13] (Dropbox, Inc.)
HKLM-x32\...\Run: [ALDITALKVerbindungsassistent_ALDITALKVerbindungsassistent_Launcher.exe] => C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe [989872 2017-07-14] ()
HKLM-x32\...\Run: [CommonToolkitTray_Solvusoft] => C:\Program Files (x86)\Solvusoft\Tray\SolvusoftTray.exe [1685144 2017-11-09] (Solvusoft Corporation)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [65120 2017-12-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-01-24] (Qualcomm®Atheros®)
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832272 2017-08-25] (Skype Technologies S.A.)
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {3017d664-a6ac-11e4-b31d-9cad97a9afa8} - "H:\LaunchU3.exe" -a
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {48489fe0-9a83-11e6-b334-9cad97a9afa8} - "H:\iStudio.exe" 
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {531e890f-dcdf-11e4-b320-9cad97a9afa8} - "I:\AutoRun.exe" 
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {531e895d-dcdf-11e4-b320-9cad97a9afa8} - "I:\AutoRun.exe" 
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {531e8985-dcdf-11e4-b320-9cad97a9afa8} - "I:\AutoRun.exe" 
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {64a03cd4-f931-11e4-b325-9cad97a9afa8} - "J:\.\Setup.exe" AUTORUN=1
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {a440c1f1-6d23-11e4-b311-9cad97a9afa7} - "H:\Windows\AutoRun.exe" 
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {a440c233-6d23-11e4-b311-9cad97a9afa7} - "H:\Windows\AutoRun.exe" 
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {cdfb166f-ebf8-11e5-b32c-9cad97a9afa8} - "H:\AutoRun.exe" 
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {d05d0cc1-6d27-11e4-b312-9cad97a9afa8} - "H:\Windows/AutoRun.exe" 
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\...\MountPoints2: {d05d0cec-6d27-11e4-b312-9cad97a9afa8} - "H:\Windows/AutoRun.exe" 
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.19.0.dll [2017-11-13] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Launcher.lnk [2015-05-25]
ShortcutTarget: Launcher.lnk -> C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe ()
Startup: C:\Users\super\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Cartridge Alerts - HP DeskJet 2600 series.lnk [2017-12-05]
ShortcutTarget: Monitor Cartridge Alerts - HP DeskJet 2600 series.lnk -> C:\Program Files\HP\HP DeskJet 2600 series\Bin\HPStatusBL.dll (HP Inc.)
Startup: C:\Users\super\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Monitor Ink Alerts - HP Deskjet 1010 series.lnk [2017-12-05]
ShortcutTarget: Monitor Ink Alerts - HP Deskjet 1010 series.lnk -> C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1C23F7AE-F58E-4EEE-BC57-3C8C2370BE39}: [NameServer] 62.109.121.17
Tcpip\..\Interfaces\{46268A86-0369-4F54-9BC4-7B41D6A3C0B0}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{513345D8-35C3-45A8-82AF-87A699578A88}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{5250BF10-E818-43DF-9C44-E33DFA2D8386}: [NameServer] 62.109.121.17 

Internet Explorer:
==================
HKU\S-1-5-21-78175480-4144623691-3298621344-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.benefind.de/index.php?org=307&shopurl=
SearchScopes: HKLM -> DefaultScope {9687B05D-ED82-4837-922F-B2ED8159F2AD} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {9687B05D-ED82-4837-922F-B2ED8159F2AD} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-78175480-4144623691-3298621344-1001 -> DefaultScope {9687B05D-ED82-4837-922F-B2ED8159F2AD} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-78175480-4144623691-3298621344-1001 -> {9687B05D-ED82-4837-922F-B2ED8159F2AD} URL = hxxp://www.sm.de/?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-01-23] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-01-21] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-07-12] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-07-18] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\super\AppData\Roaming\Mozilla\Firefox\Profiles\h4f8zmuj.default
FF Homepage: hxxp://www.startfenster.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_183.dll [2017-10-25] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_183.dll [2017-10-25] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-02] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF -> C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll [2014-05-19] (Nitro PDF)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-27] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-02] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-24] (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\super\AppData\Roaming\Mozilla\Firefox\Profiles\h4f8zmuj.default\Extensions\abs@avira.com.xpi [2017-12-05]
FF Extension: Xpert-Web - C:\Users\super\AppData\Roaming\Mozilla\Firefox\Profiles\h4f8zmuj.default\Extensions\{58e3c1c9-2dc1-4762-bd45-1df9da9d0820} [2014-12-17] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [not signed]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 ALDITALKVerbindungsassistent_Service; C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Service.exe [638128 2017-07-14] ()
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128944 2017-11-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-11-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-11-26] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1526832 2017-11-26] (Avira Operations GmbH & Co. KG)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-01-24] (Windows (R) Win 7 DDK provider) [File not signed]
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [434248 2017-11-06] (Avira Operations GmbH & Co. KG)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1706744 2013-11-02] (IVT Corporation)
S3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [145656 2013-11-02] (IVT Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-03] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-03] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51016 2017-11-13] (Dropbox, Inc.)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [117704 2013-10-18] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116680 2013-10-18] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148160 2013-10-18] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [126952 2013-10-18] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 NitroDriverReadSpool9; C:\Program Files\Nitro\Pro 9\NitroPDFDriverService9x64.exe [230920 2014-05-19] (Nitro PDF Software)
R2 NitroUpdateService; C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe [417800 2014-05-19] ()
R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [98304 2013-04-13] () [File not signed]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [74256 2017-12-04] (Avira Operations GmbH & Co. KG)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7534864 2016-08-25] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2015-07-06] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-01-24] (Atheros) [File not signed]
R2 ZDServ; C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe [432384 2014-02-25] ()

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [70928 2013-12-12] (ASUS Corporation)
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [60920 2017-06-21] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [176224 2017-09-27] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [167464 2017-09-15] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [44488 2017-03-23] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [88488 2017-03-23] (Avira Operations GmbH & Co. KG)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [33968 2012-12-20] (IVT Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-01-24] (Qualcomm Atheros)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
S3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [54064 2013-04-27] (Ralink Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [49584 2013-03-25] (Ralink Corporation)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [145640 2013-10-18] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [116752 2013-10-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [289744 2013-10-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494296 2013-10-18] (Intel Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3265256 2012-09-20] (Broadcom Corporation)
S3 massfilter; C:\Windows\System32\drivers\ztembbmassfilter.sys [15360 2012-11-23] (MBB Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
S3 mtkmbim; C:\Windows\system32\DRIVERS\mtkmbim7_x64.sys [209920 2015-05-25] (MBB)
S3 mtkmbim6.2; C:\Windows\system32\DRIVERS\mtkmbim7.sys [209920 2012-12-15] (MBB)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-12-24] (Marvell Semiconductor, Inc.)
S3 NMgamingmsFltr; C:\Windows\system32\drivers\NMgamingms.sys [13312 2013-12-09] (LXD Development, Inc.)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [1204424 2013-12-03] (Ralink Technology, Corp.)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-06] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [281944 2015-07-06] (Microsoft Corporation)
S3 wdf_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [82944 2012-12-14] (MBB)
S3 wmbclass; C:\Windows\system32\DRIVERS\wmbclass.sys [230912 2013-04-09] (Microsoft Corporation)
S3 ZTEusbmdm6k; C:\Windows\system32\DRIVERS\ztembbusbmdm.sys [123264 2012-11-23] (ZTE Incorporated)
S3 ZTEusbnmea; C:\Windows\system32\DRIVERS\ztembbusbnmea.sys [123264 2012-11-23] (ZTE Incorporated)
S3 ZTEusbser6K; C:\Windows\system32\DRIVERS\ztembbusbser6k.sys [123264 2012-11-23] (ZTE Incorporated)
S3 ZTEusbvoice; C:\Windows\system32\DRIVERS\ztembbusbvoice.sys [123264 2012-11-23] (ZTE Incorporated)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [33968 2012-12-20] (IVT Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 ewusbnet; \SystemRoot\system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; \SystemRoot\system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
S3 hwdatacard; \SystemRoot\system32\DRIVERS\ewusbmdm.sys [X]
S0 MBAMSwissArmy; system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-12-06 11:36 - 2017-12-06 11:38 - 00025822 _____ C:\Users\super\Downloads\FRST.txt
2017-12-06 11:36 - 2017-12-06 11:36 - 00000000 ____D C:\FRST
2017-12-06 11:33 - 2017-12-06 11:34 - 02375168 _____ (Farbar) C:\Users\super\Downloads\FRST64.exe
2017-12-05 11:44 - 2017-12-05 11:44 - 00000000 ____D C:\ProgramData\Reimage Protector
2017-12-05 11:43 - 2017-12-05 11:43 - 00001942 _____ C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk
2017-12-05 11:43 - 2017-12-05 11:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair
2017-12-05 11:43 - 2017-12-05 11:43 - 00000000 ____D C:\Program Files\Reimage
2017-12-05 11:42 - 2017-12-05 11:45 - 00000000 ____D C:\rei
2017-12-05 11:39 - 2017-12-05 11:45 - 00000150 _____ C:\Windows\Reimage.ini
2017-12-05 11:38 - 2017-12-05 11:38 - 00605424 _____ (Reimage) C:\Users\super\Downloads\ReimageRepair.exe
2017-12-05 11:33 - 2017-12-05 11:33 - 00000000 ____D C:\Windows\System32\Tasks\Avira
2017-12-05 11:32 - 2017-12-05 11:33 - 00000000 ____D C:\Users\Public\Speedup Sessions
2017-12-05 11:32 - 2017-12-05 11:32 - 00003660 _____ C:\Windows\System32\Tasks\AviraSystemSpeedupUpdate
2017-12-05 11:25 - 2017-12-05 11:26 - 05348656 _____ (Avira Operations GmbH & Co. KG) C:\Users\super\Downloads\avira_de_asu80_575d1c1a93ef9__adw.exe
2017-12-05 11:00 - 2017-12-05 11:00 - 00000000 ____D C:\Users\super\AppData\Roaming\Solvusoft
2017-12-05 10:59 - 2017-12-05 10:59 - 00002022 _____ C:\Users\Public\Desktop\WinThruster.lnk
2017-12-05 10:59 - 2017-12-05 10:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Solvusoft
2017-12-05 10:59 - 2017-12-05 10:59 - 00000000 ____D C:\Program Files\Solvusoft
2017-12-05 10:59 - 2017-12-05 10:59 - 00000000 ____D C:\Program Files (x86)\Solvusoft
2017-12-05 10:58 - 2017-12-05 11:00 - 00000000 ____D C:\ProgramData\Solvusoft
2017-12-05 10:56 - 2017-12-05 10:58 - 23195976 _____ (Solvusoft Corporation) C:\Users\super\Downloads\Setup_WinThruster_2017.exe
2017-11-26 15:31 - 2017-11-26 15:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-11-13 11:26 - 2017-11-13 11:26 - 00051016 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2017-11-13 11:26 - 2017-11-13 11:26 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2017-11-13 11:26 - 2017-11-13 11:26 - 00045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-11-13 11:26 - 2017-11-13 11:26 - 00045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2017-11-08 12:25 - 2017-11-08 12:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALDI TALK Verbindungsassistent

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-12-06 11:28 - 2014-11-16 01:31 - 00004268 _____ C:\Windows\SysWOW64\LOCALSERVICE.INI
2017-12-06 11:28 - 2014-11-16 01:31 - 00000043 _____ C:\Windows\SysWOW64\LOCALDEVICE.INI
2017-12-06 11:28 - 2013-11-20 19:44 - 00000966 _____ C:\Windows\SysWOW64\bscs.ini
2017-12-05 12:45 - 2015-06-23 14:24 - 00000370 _____ C:\Windows\SysWOW64\REMOTEDEVICE.INI
2017-12-05 12:11 - 2016-11-03 04:52 - 00000916 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2017-12-05 11:33 - 2014-11-27 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-12-05 11:33 - 2014-11-27 20:24 - 00000000 ____D C:\ProgramData\Avira
2017-12-05 11:33 - 2014-11-27 20:24 - 00000000 ____D C:\Program Files (x86)\Avira
2017-12-05 11:31 - 2014-11-16 02:18 - 00000000 ____D C:\ProgramData\Package Cache
2017-12-05 11:28 - 2012-07-26 09:13 - 00000000 ____D C:\Windows\system32\NDF
2017-12-05 11:09 - 2014-11-16 01:15 - 00000000 ____D C:\Users\super\AppData\Local\CrashDumps
2017-12-05 10:44 - 2015-04-30 14:50 - 00000000 ____D C:\Users\super\AppData\Roaming\Skype
2017-12-05 10:43 - 2017-05-24 20:35 - 00000000 ____D C:\Users\super\AppData\LocalLow\Mozilla
2017-12-05 10:43 - 2014-11-27 18:27 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
2017-12-05 10:40 - 2016-11-03 04:52 - 00000912 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2017-11-30 11:13 - 2014-11-27 18:50 - 00000000 ____D C:\Users\super\Documents\Outlook Files
2017-11-30 11:13 - 2012-07-26 06:37 - 00000000 ____D C:\Windows\Inf
2017-11-30 11:09 - 2014-12-25 12:13 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-11-30 11:07 - 2016-01-31 12:10 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-11-27 12:16 - 2014-11-28 04:51 - 00000000 ____D C:\Users\super\Desktop\aktuelles
2017-11-26 15:32 - 2016-11-03 04:52 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-11-26 15:27 - 2012-07-26 08:27 - 00848230 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-20 10:56 - 2014-11-16 00:28 - 00000000 ____D C:\Users\super\AppData\Local\Packages
2017-11-08 12:25 - 2015-05-17 08:29 - 00002196 _____ C:\Users\Public\Desktop\ALDI TALK Verbindungsassistent.lnk
2017-11-06 08:29 - 2014-11-16 02:31 - 00000000 ____D C:\Program Files\KMSpico
2017-11-06 08:23 - 2015-05-07 18:40 - 00427888 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-06 08:23 - 2012-07-26 08:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-06 08:21 - 2017-06-30 13:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-11-06 08:21 - 2014-11-16 00:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

==================== Files in the root of some directories =======

2015-04-11 04:41 - 2015-04-11 04:41 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-11-16 01:09 - 2014-11-16 01:09 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\super\AppData\Local\Temp\ALDITALKVerbindungsassistent_Cloned.exe
C:\Users\super\AppData\Local\Temp\avgnt.exe
C:\Users\super\AppData\Local\Temp\ReimagePackage.exe
C:\Users\super\AppData\Local\Temp\SkypeSetup.exe
C:\Users\super\AppData\Local\Temp\Uninstaller.exe


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2017-11-03 11:21

==================== End of FRST.txt ============================

--- --- ---

hier addition.txt

[CODE]Additional
FRST Logfile:

Code:

ATTFilter

scan result of Farbar Recovery Scan Tool (x64) Version:13-04-2016
Ran by super (2017-12-06 11:38:22)
Running from C:\Users\super\Downloads
Windows 8 N (X64) (2014-11-15 23:28:30)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-78175480-4144623691-3298621344-500 - Administrator - Disabled)
Guest (S-1-5-21-78175480-4144623691-3298621344-501 - Limited - Disabled)
super (S-1-5-21-78175480-4144623691-3298621344-1001 - Administrator - Enabled) => C:\Users\super

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.183 - Adobe Systems Incorporated)
ALDI TALK Verbindungsassistent (HKLM-x32\...\ALDITALKVerbindungsassistent) (Version: 5.1 - ALDI TALK Verbindungsassistent)
Algorithms Unlimited (HKLM-x32\...\ST5UNST #1) (Version:  - )
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.8 - ASUS)
Avira (HKLM-x32\...\{638c58eb-e71e-4b96-8f16-c5a7dbc4293f}) (Version: 1.2.100.18354 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.2.100.18354 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.33.24 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 4.4.0.6828 - Avira Operations GmbH & Co. KG)
Caillou entdeckt die 4 Jahreszeiten (HKLM-x32\...\{2C02055C-1CBC-4E8A-BCE9-C83E8A52C69C}) (Version: 1.00 - )
Dropbox (HKLM-x32\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
FastStone Image Viewer 5.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.5 - FastStone Soft)
Grameenphone Internet (HKLM-x32\...\{81B8C136-712F-4A20-8DFE-C0F1387380A7}) (Version: 1.0.0.1 - ZTE)
HP Deskjet 1010 series Basic Device Software (HKLM\...\{CFD917BE-F1F6-410E-ABEC-9EC819507D0D}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Deskjet 1010 series Help (HKLM-x32\...\{BFB6C2B0-9643-4B59-A706-71DEB3017A99}) (Version: 30.0.0 - Hewlett Packard)
HP DeskJet 2600 series Basic Device Software (HKLM\...\{8DA7A239-79C2-49FC-826B-DD26A559FF60}) (Version: 43.2.2474.17192 - HP Inc.)
HP DeskJet 2600 series Help (HKLM-x32\...\{9A36A9D9-787C-4E75-914B-CF133FA88FC9}) (Version: 44.0.0 - HP)
HP Dropbox Plugin (HKLM-x32\...\{C68BD3B6-3CC4-4871-94D1-3412A571001F}) (Version: 36.0.100.66344 - HP)
HP EmailSMTP Plugin (HKLM-x32\...\{763E42DC-F6DB-49E5-AAFD-CC3273F858CB}) (Version: 43.0.0.0 - HP)
HP FTP Plugin (HKLM-x32\...\{1E02EFE9-1EDB-4EE4-B02F-1B23C9AF3CD5}) (Version: 43.0.0.0 - HP)
HP Google Drive Plugin (HKLM-x32\...\{ADA6C223-3EEA-4CAF-822A-5380A7A40342}) (Version: 36.0.100.66344 - HP)
HP LaserJet Professional P1100-P1560-P1600 Series (HKLM\...\HP LaserJet Professional P1100-P1560-P1600 Series) (Version:  - )
HP OneDrive Plugin (HKLM-x32\...\{16DB1A9B-1180-43E7-BE29-7201EE339206}) (Version: 36.0.0.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP SharePoint Plugin (HKLM-x32\...\{1F73FB9B-71BC-47F8-8AA6-DA9076E4E52B}) (Version: 43.0.0.0 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
hppP1100P1560P1600SeriesLaserJetService (x32 Version: 001.001.0.0 - Hewlett-Packard) Hidden
hppusgP1100P1560P1600Series (x32 Version: 1.0.0.1 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}) (Version: 2.1.1.0000 - Hewlett Packard Development Company L.P.)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2105 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation)
KMSpico 5.1 (HKLM\...\KMSpico v5.1_is1) (Version: 5.1 - )
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Mediatek Bluetooth (HKLM\...\{E0B1ECF5-766A-5464-BFE2-2C1BED6A49FB}) (Version: 11.0.748.2 - Mediatek)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 56.0.2 (x64 de) (HKLM\...\Mozilla Firefox 56.0.2 (x64 de)) (Version: 56.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 56.0.2.6506 - Mozilla)
Nitro Pro 9 (HKLM-x32\...\{64e83b8f-8315-4011-88fa-45923055b005}) (Version: 9.5.1.5 - Nitro)
Nitro Pro 9 (Version: 9.5.1.5 - Nitro) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF24 Creator 7.8.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Pixum Fotowelt (HKLM-x32\...\Pixum Fotowelt) (Version: 6.1.2 - CEWE Stiftung u Co. KGaA)
Product Improvement Study for HP Deskjet 1010 series (HKLM\...\{37839D69-6DA4-4125-B33A-30DE86345DF4}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
Product Improvement Study for HP DeskJet 2600 series (HKLM\...\{DF44980B-A87A-4945-937A-4812C29F4F32}) (Version: 43.2.2474.17192 - HP Inc.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.316 - Qualcomm Atheros Communications)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7095 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0239 - REALTEK Semiconductor Corp.)
Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.7.1 - Reimage) <==== ATTENTION
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
Startfenster (HKLM\...\Startfenster) (Version:  - Startfenster)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.65452 - TeamViewer)
Teletalk 3G (HKLM-x32\...\{0E0B0BE1-1F90-40C3-86C9-33E24A80906C}) (Version: 1.0.0.1 - ZTE)
The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version:  - )
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUSR_{0FA8AE0C-69AE-4F60-A1AB-F79C6BA5A999}) (Version:  - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Windows Driver Package - ASUS (ATP) Mouse  (11/20/2013 1.0.0.194) (HKLM\...\8BA9C239ED04E09F06755E1497239BEFC08085C2) (Version: 11/20/2013 1.0.0.194 - ASUS)
WinThruster (HKLM\...\WinThruster) (Version: 1.26.1 - Solvusoft Corporation) <==== ATTENTION
WinThruster (Version: 1.26.1 - Solvusoft Corporation) Hidden <==== ATTENTION
ZDServer (HKLM-x32\...\{C8197F5F-E0DC-44f1-8AF2-1AA5A84F695D}) (Version: 1.0.1.2 - ZTE Corporation)
ZTE Mobile Broadband Device Drivers 1.0.0.17 (HKLM-x32\...\{9194B665-5134-4B6B-AD73-A5292CB072D3}_is1) (Version:  - ZTE)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {056350CE-1C41-47EE-A019-21FECF778F89} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2014-11-27] ()
Task: {097722D0-4364-40BA-B8CE-A46BB15784E2} - System32\Tasks\HPCustParticipation HP DeskJet 2600 series => C:\Program Files\HP\HP DeskJet 2600 series\Bin\HPCustPartic.exe [2017-07-11] (HP Inc.)
Task: {19BFC85B-5497-438B-898E-9D1C30D9C2C8} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {1ECF8C48-668E-4F8C-9078-4BA2C721ADE5} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe
Task: {32C9A2C1-89C1-496A-B933-BDEC030A1BE2} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {5A107F53-0D27-4BF4-BE48-F8D4ADEB698C} - System32\Tasks\{111BE16A-1262-44A7-8BC9-338C758EFA8B} => pcalua.exe -a "C:\Program Files\HP\HP LaserJet P1100 Series\Uninstall.exe"
Task: {5CD790B8-1265-4DB1-A79F-C3D459E577B1} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-03] (Dropbox, Inc.)
Task: {62D08D4E-15D4-4FAB-9E67-33D0487DE740} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-25] (Adobe Systems Incorporated)
Task: {6598B75F-EE6A-4BC4-ADB9-7D3104D7E3E5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
Task: {69BC259F-2954-47D0-87E8-9D90908B823B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {73E75111-332C-4903-8227-CBCA74EFBA3D} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [2017-12-05] (Avira Operations GmbH & Co. KG                              )
Task: {8903CAED-D886-4FC3-952D-622D5EF2CFA2} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-12-12] (AsusTek)
Task: {8B357FA4-4DCC-4B80-80EC-902DA27EDC65} - System32\Tasks\HPCustParticipation HP Deskjet 1010 series => C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPCustPartic.exe [2014-03-06] (Hewlett-Packard Co.)
Task: {9F8BF2E0-F784-412E-8564-71590FAB7F9C} - System32\Tasks\Avira\System Speedup\TestScheduler => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [2017-12-04] (Avira Operations GmbH & Co. KG)
Task: {A2205F52-FFAA-4E6A-AB13-D464B3CE66F1} - System32\Tasks\{90B9AA04-FC51-4150-A2BC-81F419538FAD} => Firefox.exe hxxps://www.skype.com/go/downloading?source=lightinstaller&amp;ver=7.35.0.103&amp;LastError=12002
Task: {AB65ECC2-939E-45CF-9D8C-4765FA96C5FA} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2017-11-26] (Avira Operations GmbH & Co. KG)
Task: {C1CA422A-4776-4261-9C7C-B4782EBCE518} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {DCA52854-27BD-4C28-A7D3-81BD78FCA98A} - System32\Tasks\Avira\System Speedup\SpeedupSysTray => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [2017-12-04] (Avira Operations GmbH & Co. KG)
Task: {E7A97FCF-3D45-407E-B31B-495755E21E46} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-11-03] (Dropbox, Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2014-12-20 08:16 - 2012-08-31 10:03 - 00288768 _____ () C:\Windows\System32\HP1100LM.DLL
2014-12-20 06:55 - 2012-08-31 10:02 - 00074240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\HP1100PP.DLL
2014-05-19 22:27 - 2014-05-19 22:27 - 00417800 _____ () C:\Program Files\Nitro\Pro 9\Nitro_UpdateService.exe
2014-11-16 02:31 - 2013-04-13 03:41 - 00098304 ___SH () C:\Program Files\KMSpico\Service_KMS.exe
2016-03-14 05:19 - 2014-02-25 12:12 - 00432384 _____ () C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe
2016-07-12 17:40 - 2016-07-12 17:40 - 08909504 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00029432 _____ () C:\Windows\system32\BsTrace.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00371448 _____ () C:\Windows\system32\BsExtendFunc.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00062200 _____ () C:\Windows\system32\BlueSoleilCSps.dll
2014-01-24 12:24 - 2014-01-24 12:24 - 00011264 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-01-24 12:21 - 2014-01-24 12:21 - 00086016 _____ () C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2014-01-24 12:27 - 2014-01-24 12:27 - 00012928 _____ () C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
2015-05-17 08:28 - 2017-07-14 13:00 - 00989872 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\ALDITALKVerbindungsassistent_Launcher.exe
2016-03-14 05:18 - 2013-07-11 12:12 - 00450304 _____ () C:\Program Files (x86)\Grameenphone Internet\CancelAutoPlay.exe
2013-11-02 00:48 - 2013-11-02 00:48 - 00029432 _____ () C:\Windows\SYSTEM32\BsTrace.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00062200 _____ () C:\Windows\SYSTEM32\BlueSoleilCSps.dll
2013-05-24 19:22 - 2013-05-24 19:22 - 00334648 _____ () C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\Driver\USB\tl_filter.dll
2014-11-16 00:58 - 2013-10-23 22:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2017-08-17 15:51 - 2017-08-17 15:51 - 01993184 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2015-11-24 10:22 - 2017-07-14 12:59 - 00275456 _____ () C:\Program Files (x86)\ALDITALKVerbindungsassistent\WtgMobileBroadband7.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00080120 _____ () C:\Windows\SYSTEM32\BsProfilefunc.dll
2013-11-02 00:48 - 2013-11-02 00:48 - 00371448 _____ () C:\Windows\SYSTEM32\BsExtendFunc.dll
2015-03-14 05:55 - 2016-05-23 08:25 - 00075264 _____ () C:\Program Files (x86)\PDF24\zlib.dll
2015-03-14 05:55 - 2016-05-23 08:24 - 00053248 _____ () C:\Program Files (x86)\PDF24\OperationUI.dll
2017-11-26 15:30 - 2017-11-13 11:26 - 00725312 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2017-11-26 15:30 - 2017-11-13 11:26 - 02075456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2017-11-26 15:31 - 2017-11-13 11:26 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00130512 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 01856848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-11-26 15:30 - 2017-11-13 11:26 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2017-11-26 15:31 - 2017-11-13 11:26 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-11-26 15:30 - 2017-11-13 11:26 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00021824 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00066392 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00022856 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 01796920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 01956152 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 03859264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00155464 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00521024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00050496 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00042304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00131384 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00218944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00204096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-11-26 15:31 - 2017-11-13 11:26 - 00349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00101184 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2017-11-26 15:31 - 2017-11-13 11:29 - 00023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00025424 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-11-26 15:30 - 2017-11-13 11:26 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-11-26 15:30 - 2017-11-13 11:28 - 00181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-11-26 15:31 - 2017-11-13 11:29 - 00030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2017-11-26 15:30 - 2017-11-13 11:28 - 00024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL
2017-11-26 15:30 - 2017-11-13 11:28 - 01638200 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2017-11-26 15:31 - 2017-11-13 11:29 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00545080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00359224 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-11-26 15:31 - 2017-11-13 11:28 - 00038208 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.pyd

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Windows:nlsPreferences [386]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 06:26 - 2012-07-26 06:26 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-78175480-4144623691-3298621344-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\super\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{ACB55BA6-4F49-418F-9EEE-CBC27F036D9F}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{5FFCB71E-7F19-473E-944C-5047CDD32018}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
FirewallRules: [{436BACCB-DAD6-4BF8-91FC-783A19BB982E}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{6C5DC3F6-F968-475E-B13E-53F7EDFDB92A}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{16929B70-B08F-4549-AEA0-F0EC59F78B2B}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{F5C8612C-2061-49F7-951C-7DC59B3A4D70}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{CA660A95-DED0-4E1D-9FCD-4B5674104EBF}] => (Allow) C:\Program Files\HP\HP Deskjet 1010 series\Bin\USBSetup.exe
FirewallRules: [{DF8DE36B-6553-4BF0-9E6C-C9445B57A94C}] => (Allow) C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{3DEE0857-1A31-4C2C-8C2C-D217F30D72E0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4E92E778-2982-4576-AE03-D11CC65CF777}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{17B704B0-A9B8-4B9F-8CB9-E7F13467CE2C}C:\users\super\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\super\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{98A299E0-2BDD-4C31-8816-9DACE7DAA70B}C:\users\super\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\super\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{02494BA1-C414-4264-9A35-6E409397E27D}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{4BF6AB60-47A2-400B-B72A-B61FF3463D63}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{78A7FEE2-1089-441E-B8AD-CABE6FB22AA4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{9C172AE3-A81F-4DF6-8201-D9C01DA35E3A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{BDD198E3-5EBD-4E17-9FCC-5468AA481F49}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{9BD1A157-49A2-471C-B49D-770C56CC1BD0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{D18072AC-A2E6-46B5-B043-34EADC0DC316}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{788082E2-A8C6-42FC-A4DC-02E7D728B46B}] => (Allow) C:\Users\super\AppData\Local\Temp\7zS47C4\HP.EasyStart.exe
FirewallRules: [{999E13AC-09F4-4F57-8E20-E8A8D0ECCC0C}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\bin\DigitalWizards.exe
FirewallRules: [{2683167E-7605-46C6-AC93-4592982C9053}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\Bin\DeviceSetup.exe
FirewallRules: [{8248CDA3-422D-4A70-98B6-4B313678D53C}] => (Allow) LPort=5357
FirewallRules: [{D47DE6CD-4680-40A9-84A2-9E1EDD769C1F}] => (Allow) C:\Program Files\HP\HP DeskJet 2600 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{B1FB49FA-9F0E-43A7-A12A-5E8A891CDB2D}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{9F164615-2EBF-431B-956A-BE2571A5C68B}] => (Allow) C:\Program Files\KMSpico\KMSServer.exe
FirewallRules: [{DAFFD2C9-2218-4173-B921-3CAFA6DA31EE}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Restore Points =========================

18-09-2017 11:33:47 Scheduled Checkpoint
25-09-2017 12:28:03 Scheduled Checkpoint
05-12-2017 10:58:44 Installed WinThruster.

==================== Faulty Device Manager Devices =============

Name: Bluetooth Profile Interface Driver
Description: Bluetooth Profile Interface Driver
Class Guid: {5b0e08fd-59eb-47af-b743-965f15c0f8f1}
Manufacturer: Ralink Corporation
Service: BthL2caScoIfSrv
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: iPhone Audio/Video Remote Control HID
Description: Bluetooth Audio/Video Remote Control HID
Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
Manufacturer: Microsoft
Service: BthAvrcpTg
Problem: : A driver (service) for this device has been disabled. An alternate driver may be providing this functionality (Code 32)
Resolution: The start type for this driver is set to disabled in the registry.
Uninstall the driver from Device Manager, and then scan for new hardware to install the driver again. If this does not work, you might have to change the device start type parameter in the registry.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/06/2017 11:31:21 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/06/2017 11:30:26 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: user)
Description: Activation of application Microsoft.BingWeather_8wekyb3d8bbwe!App failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (12/06/2017 11:30:26 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: user)
Description: Activation of application Microsoft.BingSports_8wekyb3d8bbwe!AppexSports failed with error: -2144927142 See the Microsoft-Windows-TWinUI/Operational log for additional information.

Error: (12/05/2017 12:10:23 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/05/2017 11:48:36 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/05/2017 11:48:33 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/05/2017 11:34:54 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/05/2017 11:22:53 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/05/2017 11:15:33 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: License Activation (slui.exe) failed with the following error code:
hr=0xC004F074
Command-line arguments:
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=197390a0-65f6-4a95-bdc4-55d58a3b0253;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (12/05/2017 11:09:38 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: igfxsrvc.exe, version: 8.15.10.3412, time stamp: 0x52e048ae
Faulting module name: ntdll.dll, version: 6.2.9200.17581, time stamp: 0x5644f0f7
Exception code: 0xc0000018
Fault offset: 0x00000000000e1e80
Faulting process ID: 0x2574
Faulting application start time: 0xigfxsrvc.exe0
Faulting application path: igfxsrvc.exe1
Faulting module path: igfxsrvc.exe2
Report ID: igfxsrvc.exe3
Faulting package full name: igfxsrvc.exe4
Faulting package-relative application ID: igfxsrvc.exe5


System errors:
=============
Error: (12/06/2017 11:29:48 AM) (Source: DCOM) (EventID: 10010) (User: user)
Description: AppexSports.AppXzwt95zf827jx8vevssdmkdacbwrgjgeb.mca

Error: (12/06/2017 11:29:48 AM) (Source: DCOM) (EventID: 10010) (User: user)
Description: App.AppXckhq7ex47a0jh2z0wj5cd086mqkeegzy.mca

Error: (12/05/2017 11:10:14 AM) (Source: DCOM) (EventID: 10010) (User: user)
Description: {078AEF33-C48A-49F7-AFF3-A0EE810BFE7C}

Error: (12/05/2017 11:08:25 AM) (Source: DCOM) (EventID: 10005) (User: user)
Description: 1053BsHelpCS-Service{1CE3EB56-16B9-40A0-8110-284EF53ACF04}

Error: (12/05/2017 11:08:25 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the BsHelpCS service to connect.

Error: (12/05/2017 11:08:12 AM) (Source: DCOM) (EventID: 10005) (User: user)
Description: 1053BsHelpCS-Service{1CE3EB56-16B9-40A0-8110-284EF53ACF04}

Error: (12/05/2017 11:08:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the BsHelpCS service to connect.

Error: (12/05/2017 11:07:39 AM) (Source: DCOM) (EventID: 10005) (User: user)
Description: 1053BsHelpCS-Service{1CE3EB56-16B9-40A0-8110-284EF53ACF04}

Error: (12/05/2017 11:07:39 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the BsHelpCS service to connect.

Error: (12/05/2017 11:07:36 AM) (Source: DCOM) (EventID: 10005) (User: user)
Description: 1053BsHelpCS-Service{1CE3EB56-16B9-40A0-8110-284EF53ACF04}


CodeIntegrity:
===================================
  Date: 2015-07-05 00:35:47.706
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-07-05 00:35:17.811
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-07-05 00:33:35.771
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-07-05 00:32:16.020
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-07-05 00:31:33.839
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-07-05 00:30:24.337
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-07-03 22:22:32.580
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-07-03 22:10:08.394
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2015-07-03 16:11:46.278
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\Drivers\dumpfve.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Percentage of memory in use: 72%
Total physical RAM: 3979.79 MB
Available physical RAM: 1077.78 MB
Total Virtual: 6283.79 MB
Available Virtual: 1538.62 MB

==================== Drives ================================

Drive c: (win) (Fixed) (Total:247.58 GB) (Free:113.57 GB) NTFS
Drive d: (DATA_I) (Fixed) (Total:195.31 GB) (Free:85.05 GB) NTFS
Drive e: (DATA_II) (Fixed) (Total:244.14 GB) (Free:206.51 GB) NTFS
Drive f: (DATA_III) (Fixed) (Total:244.14 GB) (Free:135.2 GB) NTFS
Drive h: () (Removable) (Total:3.68 GB) (Free:2.61 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 50B617F5)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=247.6 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=683.6 GB) - (Type=OF Extended)

========================================================
Disk: 1 (Size: 3.7 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

--- --- ---

Bin gespannt zu lesen, was dir das sagt. Bitte wundere dich nicht, wenn ich immer etwas Zeit zum antworten brauche, bin allein mit drei Kindern. Aber ich freue mich sehr über deine Hilfe.
viele grüße,
andrea

cosinus · 06.12.2017, 12:23

Code:

ATTFilter

R2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe

Das ist sehr bekannter Microsoft-Office-Crack

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

andreara · 06.12.2017, 12:33

Hallo Cosinus,

ich benutze einen PC den mir mein Büro eingerichtet hat, ich habe die meiste SOftware nicht selbst draufgemacht. Wenn ich jetzt diesen Crack entferne, stürzt mir dann das MS Office ab? Ich bin eigentlich davon ausgegangen eine legale Office Version zu haben. Wenn mein Office dann nicht mehr funktioniert sollte ich vielleicht erst die Daten sichern. ALso gib mir bitte mal kurz einen Hinweis über die Folgen, wenn ich diesen Crack entferne und wo ich ihn finde.
Also was genau ich entfernen muss.
Danke dir,
Andrea

cosinus · 06.12.2017, 12:47

Ich weiß echt nicht was man zu soviel Doofheit von deiner Firma noch sagen soll. Gewebrlich gecrackte Software zu verwenden ist schon hochgradig kriminell.

Deinstalliere Microsoft Office und wenn möglich den Crack. Wenn du das nicht willst/kannst/sollst ist hier leider Schluss, weil es keine Hilfe bei gecrackten Systemen gibt. Dann kannst du deinem Chef den Rechner um die Ohren hauen und ihn drauf hinweisen, dass die (gewerbliche) Nutzung von gecrackter Software strafbar ist!

Fehlermeldung nach dem Start igfxtray.exe, igfpers.exe, RAVCpl64.exe u.a.

Plagegeister aller Art und deren Bekämpfung: Fehlermeldung nach dem Start igfxtray.exe, igfpers.exe, RAVCpl64.exe u.a.