Trojaner-Board - TR/FireHooker.1825 ist trotz Quarantäne nach jedem Neustart wieder vorhanden

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:12-12-2015 01

durchgeführt von Nicole (2015-12-14 21:02:04)

Gestartet von C:\Users\Nicole\Desktop

Windows 10 Home (X64) (2015-10-22 01:13:24)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1562043431-3003063674-3361777506-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-1562043431-3003063674-3361777506-503 - Limited - Disabled)

Gast (S-1-5-21-1562043431-3003063674-3361777506-501 - Limited - Disabled)

Nicole (S-1-5-21-1562043431-3003063674-3361777506-1002 - Administrator - Enabled) => C:\Users\Nicole

UpdatusUser (S-1-5-21-1562043431-3003063674-3361777506-1001 - Limited - Enabled) => C:\Users\UpdatusUser
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation)

Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Acer Incorporated)

Acer Instant Update Service (HKLM\...\{F6100F13-F183-47A2-94A8-9AAC4976E228}) (Version: 1.00.3013 - Acer Incorporated)

Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3006 - Acer Incorporated)

Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated)

AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3115 - Acer Incorporated)

AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3201 - Acer Incorporated)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.13) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated)

ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.100.2020.212 - Alps Electric)

ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)

Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.4 - Atheros Communications Inc.)

ATKSideChainExpander version 1.0.1 (HKLM\...\ATKSideChainExpander_is1) (Version: 1.0.1 - )

Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)

AutoUpdate (HKLM-x32\...\{18D10072035C4515918F7E37EAFAACFC}) (Version: 1.1 - )

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{5b07d59f-99e0-4c52-ad25-965f7e38d6ac}) (Version: 1.1.51.19070 - Avira Operations GmbH & Co. KG)

Avira Launcher (x32 Version: 1.1.51.19070 - Avira Operations GmbH & Co. KG) Hidden

Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 2.0.4.810 - Avira Operations GmbH & Co. KG)

Backup Manager v4 (x32 Version: 4.0.0.0059 - NTI Corporation) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 3.24 - Piriform)

CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.4.4852 - CDBurnerXP)

clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3107 - Acer Incorporated)

clear.fi SDK - Video 2 (x32 Version: 2.1.1910 - CyberLink Corp.) Hidden

clear.fi SDK- Movie 2 (x32 Version: 2.1.1910 - CyberLink Corp.) Hidden

Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3103_44819 - CyberLink Corp.)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.3.1.0 - devolo AG)

DivX Codec (HKLM-x32\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.6.1 - DivX, Inc.)

Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.16 - Dolby Laboratories Inc)

Download Protect (HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\{132401a7-2006-4342-b43c-ccf5f02c2b01}) (Version:  - Download Protect)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Free Audio Converter version 5.0.45.716 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.45.716 - DVDVideoSoft Ltd.)

FXpansion GeistLite (HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\FXpansion GeistLite) (Version: 1.1.3.1 - FXpansion Audio UK Ltd)

Google Photos Backup (HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\Google Photos Backup) (Version: 1.1.1.259 - Google, Inc.)

HD Writer VE 3.0 (HKLM-x32\...\{581D6A65-AAC2-4EEA-BE6D-9882262BB6BB}) (Version: 3.00.009.1031 - Panasonic Corporation)

Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)

IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)

Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)

Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.4 - Acer Inc.)

Lightshot-5.3.0.0 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.3.0.0 - Skillbrains)

Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3003 - Acer Incorporated)

Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Microsoft Office Home and Business 2013 - de-de (HKLM\...\HomeBusinessRetail - de-de) (Version: 15.0.4771.1004 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

MJUCjr version 1.0.0 (HKLM\...\MJUCjr_is1) (Version: 1.0.0 - )

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0.0.5780 - Mozilla)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)

MT66 Software Update (HKLM-x32\...\{F2E4F3A5-A8F0-46F4-8E91-E8C1DE1FCFE5}_is1) (Version:  - )

MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden

MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden

MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)

MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden

Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version:  - Native Instruments)

Native Instruments Traktor Kontrol S4 (HKLM-x32\...\Native Instruments Traktor Kontrol S4) (Version:  - Native Instruments)

Native Instruments Traktor S4 (HKLM-x32\...\Native Instruments Traktor S4) (Version:  - Native Instruments)

Nero CoverDesigner (HKLM-x32\...\{79BB6415-00A7-413A-B278-A7EAE69F1753}) (Version: 12.0.02700 - Nero AG)

Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1003 - Nero AG)

Netzmanager (HKLM-x32\...\Netzmanager) (Version: 1.071 - Deutsche Telekom AG)

Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden

Nightly 30.0a1 (x64 en-US) (HKLM\...\Nightly 30.0a1 (x64 en-US)) (Version: 30.0a1 - Mozilla)

NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9008 - NTI Corporation)

NTI Media Maker 9 (x32 Version: 9.0.2.9008 - NTI Corporation) Hidden

NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)

NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)

ocenaudio (HKLM-x32\...\ocenaudio) (Version: 2.0.16 - ocenaudio Team)

Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4771.1004 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Licensing Component (Version: 15.0.4771.1004 - Microsoft Corporation) Hidden

Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4771.1004 - Microsoft Corporation) Hidden

Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer)

Office Addin 2003 (HKLM-x32\...\{1FCC073B-CC01-4443-AD20-E559F66E6E83}) (Version: 2.01.3200 - Acer)

PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)

Prerequisite installer (x32 Version: 12.0.0005 - Nero AG) Hidden

Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.204 - Ihr Firmenname)

Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.31 - Qualcomm Atheros)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6695 - Realtek Semiconductor Corp.)

Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.28123 - Realtek Semiconductor Corp.)

Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)

Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden

Smart View 2.0 (HKLM-x32\...\{FBAAAFAE-08A8-4C63-87EA-4AEA9DEE53E1}) (Version: 1.0.0.0 - Samsung)

Stellarium 0.11.2 (HKLM-x32\...\Stellarium_is1) (Version:  - )

TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.30992 - TeamViewer)

Text-To-Speech-Runtime (HKLM-x32\...\{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}) (Version: 1.0.0.0 - Magix Development GmbH)

Transient(Beat.de) version 1.0.1 (HKLM\...\Transient(Beat.de)_is1) (Version: 1.0.1 - )

TVCenter (HKLM\...\{18F703C3-32EC-4E5C-BC3C-C1BD72D35F5B}) (Version: 6.4.2.880 - PCTV Systems)

TX16Wx Software Sampler 2 (x64) (HKLM\...\{8D07B18E-F719-4F72-96B6-85D63DC26E08}) (Version: 2.401.3870.2580 - CWITEC)

Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)

Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)

Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)

Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)

VLC media player 2.0.4 (HKLM-x32\...\VLC media player) (Version: 2.0.4 - VideoLAN)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Nicole\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)

CustomCLSID: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll (Google Inc.)
 

==================== Wiederherstellungspunkte =========================
 
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2012-07-26 06:26 - 2013-08-01 09:16 - 00447822 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 

127.0.0.1        www.007guard.com

127.0.0.1        007guard.com

127.0.0.1        008i.com

127.0.0.1        www.008k.com

127.0.0.1        008k.com

127.0.0.1        www.00hq.com

127.0.0.1        00hq.com

127.0.0.1        010402.com

127.0.0.1        www.032439.com

127.0.0.1        032439.com

127.0.0.1        www.0scan.com

127.0.0.1        0scan.com

127.0.0.1        1000gratisproben.com

127.0.0.1        www.1000gratisproben.com

127.0.0.1        1001namen.com

127.0.0.1        www.1001namen.com

127.0.0.1        100888290cs.com

127.0.0.1        www.100888290cs.com

127.0.0.1        www.100sexlinks.com

127.0.0.1        100sexlinks.com

127.0.0.1        10sek.com

127.0.0.1        www.10sek.com

127.0.0.1        www.1-2005-search.com

127.0.0.1        1-2005-search.com

127.0.0.1        123fporn.info

127.0.0.1        www.123fporn.info

127.0.0.1        123haustiereundmehr.com

127.0.0.1        www.123haustiereundmehr.com

127.0.0.1        123moviedownload.com

127.0.0.1        www.123moviedownload.com
 

Da befinden sich 15368 zusätzliche Einträge.
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0F16DB59-9EA0-43A2-8885-996950BE1DAA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1562043431-3003063674-3361777506-1002UA => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {12AED1AD-618E-4319-B3F4-753EDD126E64} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated)

Task: {478FA25E-1494-4827-81A2-5C86B79FF891} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)

Task: {54EA9CA1-7638-4D12-BCEA-0D61465C290A} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-22] (Acer Incorporated)

Task: {6A5D8A31-3730-4BEC-ADB7-3896DA9D9DB2} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-22] ()

Task: {7CD5FFF9-DD8F-4B60-83DA-DAEDD826AEA1} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.)

Task: {81869FD8-94B6-44F4-A219-5FE1590613B6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)

Task: {921C935A-9F81-4CA6-8677-B1575B0171D6} - System32\Tasks\MT66 Software Update => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe [2009-11-18] (MedienTeam66)

Task: {938E5857-D870-4EC8-A359-96C8E33E2C68} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()

Task: {A72083A4-EC26-4FE0-B9FE-645E5102CD1A} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-07-04] (CyberLink)

Task: {A961F033-A3CC-48E9-9026-0946FFC0786B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

Task: {ACF3D49D-A2C3-4F7E-BFF5-865E04D385E8} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1562043431-3003063674-3361777506-1002Core => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {BAA731AE-CF67-4CED-B2B2-7E50DB4EF35B} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-24] ()

Task: {D0A0BC24-952B-4F8C-8E05-A87FADD7F63E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-10] (Microsoft Corporation)

Task: {DFEBE62A-641D-4FF0-9501-371B200C4C92} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)

Task: {E2EE8BBE-AEF5-444D-9053-6A0081D7A077} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG

Task: {E7B3434B-6E2D-4864-8F80-6C9DB8013FC2} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-22] ()

Task: {E7F2FC04-D2AF-4D24-A9CC-8A5C5486AF7E} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2014-07-21] (Nero AG)

Task: {E92485B7-4AFA-4B37-95F9-42CC3FE53948} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)

Task: {E9FBD0D2-6C12-4E0B-9DCE-95302432AB43} - System32\Tasks\{ACB2AA77-82D1-46CE-B8EB-A5C8DEF3DA58} => pcalua.exe -a "C:\Program Files (x86)\Windows Live\Installer\wlarp.exe"
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1562043431-3003063674-3361777506-1002Core.job => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1562043431-3003063674-3361777506-1002UA.job => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe

Task: C:\WINDOWS\Tasks\MT66 Software Update.job => C:\Program Files (x86)\Common Files\MT66 Software Update\UpdateClient.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-09-10 06:12 - 2015-09-10 06:12 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll

2015-07-13 19:45 - 2015-07-13 19:45 - 00011920 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll

2015-10-22 01:07 - 2015-07-13 18:37 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2014-06-01 18:59 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll

2015-09-10 06:12 - 2015-09-10 06:12 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll

2015-10-22 01:57 - 2015-10-22 01:57 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2015-10-22 01:57 - 2015-10-22 01:57 - 02028544 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RulesService.dll

2015-12-08 19:44 - 2015-11-25 05:17 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2015-12-08 19:44 - 2015-11-25 05:17 - 00619008 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SignalsManager.dll

2015-12-08 19:44 - 2015-11-25 05:18 - 00928768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RulesBackgroundTasks.dll

2015-10-22 01:57 - 2015-10-22 01:57 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2015-10-22 01:57 - 2015-10-22 01:57 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2015-07-10 04:13 - 2015-07-10 04:13 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll

2015-12-08 19:45 - 2015-11-25 05:20 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2015-12-08 19:44 - 2015-11-25 05:24 - 00884736 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll

2015-12-08 19:45 - 2015-11-25 05:17 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2015-10-22 01:57 - 2015-10-22 01:57 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2012-08-22 14:04 - 2012-08-22 14:04 - 00044176 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe

2012-08-22 14:04 - 2012-08-22 14:04 - 00025232 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe

2015-12-10 23:57 - 2015-12-10 23:58 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

2015-12-10 23:57 - 2015-12-10 23:58 - 11542016 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll

2015-11-20 18:59 - 2015-11-20 18:59 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll

2015-12-14 16:59 - 2015-12-14 17:00 - 08280576 _____ () C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.668.0.0_x86__kgqvnymyfvs32\candycrushsaga.exe

2012-08-22 22:26 - 2012-08-22 22:26 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll

2012-08-22 22:25 - 2012-08-22 22:25 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll

2012-08-22 22:26 - 2012-08-22 22:26 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll

2012-08-22 22:25 - 2012-08-22 22:25 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll

2012-08-22 22:25 - 2012-08-22 22:25 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll

2012-08-22 22:25 - 2012-08-22 22:25 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll

2012-08-22 22:26 - 2012-08-22 22:26 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll

2014-11-18 14:56 - 2014-11-18 14:56 - 00316576 _____ () C:\Program Files\Microsoft Office 15\root\office15\AppVIsvStream32.dll

2015-07-13 19:45 - 2015-07-13 19:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll

2015-10-22 02:32 - 2015-10-22 02:41 - 02303640 _____ () C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.668.0.0_x86__kgqvnymyfvs32\libGLESv2.dll

2015-10-22 02:32 - 2015-10-22 02:41 - 00097944 _____ () C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.668.0.0_x86__kgqvnymyfvs32\libEGL.dll

2015-10-22 02:32 - 2015-10-22 02:42 - 01288192 _____ () C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.668.0.0_x86__kgqvnymyfvs32\SB_LIBEAY32.dll

2015-10-22 02:32 - 2015-10-22 02:41 - 00257536 _____ () C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.668.0.0_x86__kgqvnymyfvs32\curl.dll

2015-10-22 02:32 - 2015-10-22 02:42 - 00293888 _____ () C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.668.0.0_x86__kgqvnymyfvs32\SB_SSLEAY32.dll

2015-10-22 02:32 - 2015-10-22 02:42 - 00066560 _____ () C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.668.0.0_x86__kgqvnymyfvs32\zlib.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\0986947df683cf918365:Win32App

AlternateDataStreams: C:\1ecff7c9ab8a2f2e5d3e45e17fa0b1:Win32App

AlternateDataStreams: C:\34fe792f51e1577ac871c8aca4:Win32App

AlternateDataStreams: C:\5ba6a151cbbcb72eb19f5c7a:Win32App

AlternateDataStreams: C:\6a7b0a69f938eb0a742f0b:Win32App

AlternateDataStreams: C:\792f4a6701a453ba360e:Win32App

AlternateDataStreams: C:\8a6937f9634ec4602fdad6:Win32App

AlternateDataStreams: C:\90e783736f12f2003f:Win32App

AlternateDataStreams: C:\913f91f6930bed5e8033:Win32App

AlternateDataStreams: C:\99299811d042f8dc478e:Win32App

AlternateDataStreams: C:\a9b3691bef93a2b8cb24:Win32App

AlternateDataStreams: C:\Dolby PCEE4:Win32App

AlternateDataStreams: C:\e88d7b78458e87cfbf:Win32App

AlternateDataStreams: C:\f65f11b79dd473d0a4a870818689f9:Win32App

AlternateDataStreams: C:\Program Files\Apoint2K:Win32App

AlternateDataStreams: C:\Program Files\ATKSideChainExpander:Win32App

AlternateDataStreams: C:\Program Files\CCleaner:Win32App

AlternateDataStreams: C:\Program Files\Microsoft Office 15:Win32App

AlternateDataStreams: C:\Program Files\Microsoft Silverlight:Win32App

AlternateDataStreams: C:\Program Files\Microsoft SQL Server Compact Edition:Win32App

AlternateDataStreams: C:\Program Files\Netzmanager:Win32App

AlternateDataStreams: C:\Program Files\Nightly:Win32App

AlternateDataStreams: C:\Program Files (x86)\Audacity:Win32App

AlternateDataStreams: C:\Program Files (x86)\Bluetooth Suite:Win32App

AlternateDataStreams: C:\Program Files (x86)\CDBurnerXP:Win32App

AlternateDataStreams: C:\Program Files (x86)\DivX:Win32App

AlternateDataStreams: C:\Program Files (x86)\DVDVideoSoft:Win32App

AlternateDataStreams: C:\Program Files (x86)\EgisTec MyWinLocker:Win32App

AlternateDataStreams: C:\Program Files (x86)\EgisTec MyWinLockerSuite:Win32App

AlternateDataStreams: C:\Program Files (x86)\EgisTec Shredder:Win32App

AlternateDataStreams: C:\Program Files (x86)\Launch Manager:Win32App

AlternateDataStreams: C:\Program Files (x86)\Microsoft SQL Server Compact Edition:Win32App

AlternateDataStreams: C:\Program Files (x86)\Mozilla Firefox:Win32App

AlternateDataStreams: C:\Program Files (x86)\MSXML 4.0:Win32App

AlternateDataStreams: C:\Program Files (x86)\Nero:Win32App

AlternateDataStreams: C:\Program Files (x86)\Qualcomm Atheros:Win32App

AlternateDataStreams: C:\Program Files (x86)\SmartView2:Win32App

AlternateDataStreams: C:\Program Files (x86)\Stellarium:Win32App

AlternateDataStreams: C:\Program Files (x86)\Windows Live:Win32App

AlternateDataStreams: C:\WINDOWS\SysWOW64:Win32App

AlternateDataStreams: C:\Program Files\Common Files\Native Instruments:Win32App

AlternateDataStreams: C:\ProgramData\Nero:Win32App

AlternateDataStreams: C:\ProgramData\Netzmanager:Win32App

AlternateDataStreams: C:\ProgramData\PCTV Systems:Win32App

AlternateDataStreams: C:\ProgramData\regid.1991-06.com.microsoft:Win32App

AlternateDataStreams: C:\Users\Nicole\AppData\Local\Temp:Win32App
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\007guard.com -> install.007guard.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\008i.com -> 008i.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\008k.com -> www.008k.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\00hq.com -> www.00hq.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\010402.com -> 010402.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\0scan.com -> www.0scan.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\10sek.com -> www.10sek.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7823 mehr Seiten.
 

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\007guard.com -> install.007guard.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\008i.com -> 008i.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\008k.com -> www.008k.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\00hq.com -> www.00hq.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\010402.com -> 010402.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\0scan.com -> www.0scan.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\10sek.com -> www.10sek.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7822 mehr Seiten.
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\Control Panel\Desktop\\Wallpaper -> 

HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\...\StartupApproved\StartupFolder: => "HD Writer.lnk"

HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\StartupApproved\Run: => "msnmsgr"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139

FirewallRules: [{18B8526B-02CF-4E01-9AFB-A16176A7EC8A}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{49913056-6871-40C7-970D-6E46AEA36FDA}] => (Allow) LPort=1900

FirewallRules: [{1E8EADC2-688B-4F1B-AFF2-96C89D267C73}] => (Allow) LPort=2869

FirewallRules: [{D7F0B7D3-D108-4A97-B224-333168655676}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{257142AA-EDA4-4F81-9AF6-BC75A88F3026}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe

FirewallRules: [{1EED47E3-6F63-43BC-89DD-A3517009A0AF}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe

FirewallRules: [{8914C574-604B-4DEC-A1D7-8CA1ED9C9C8A}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe

FirewallRules: [{2FB42FF3-FB1A-4508-AE79-90BFCD72D579}] => (Allow) C:\Program Files (x86)\SmartView2\Smart View 2.0.exe

FirewallRules: [{A6C6553A-63B9-4917-A67D-D2983552FC07}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

FirewallRules: [{80649E13-493B-4360-8558-7EE5A788667B}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

FirewallRules: [{CEA1F335-2820-46D4-91A0-1F06917BD0EB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{AC09CD20-4574-44AB-93BB-233A3277D090}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{7DF5E04A-6BEC-49CF-BEF4-B8C75FDBF402}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

FirewallRules: [{A5026717-CFAB-46CC-8B88-63189A09219C}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

FirewallRules: [{9B4BDC32-E56B-481F-ABF8-3A805C3EDD8B}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

FirewallRules: [{A883BB7F-AA6B-476B-B1DC-87576DFFC489}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

FirewallRules: [{E0C74F60-5064-414F-9240-E641136A2AC0}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe

FirewallRules: [{BFF9B3D3-89B3-49B2-A2FF-93E52587C11F}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe

FirewallRules: [UDP Query User{53AF3B06-CD97-4F7E-907F-D118679A4CB1}C:\program files (x86)\my secure\mysecure.exe] => (Allow) C:\program files (x86)\my secure\mysecure.exe

FirewallRules: [TCP Query User{39BD5D58-5460-4459-962C-977D91A400DC}C:\program files (x86)\my secure\mysecure.exe] => (Allow) C:\program files (x86)\my secure\mysecure.exe

FirewallRules: [UDP Query User{E75F6FE2-0D11-4228-ABF0-0D35F289FFCC}C:\program files (x86)\my secure\mysecure.exe] => (Allow) C:\program files (x86)\my secure\mysecure.exe

FirewallRules: [TCP Query User{ACDA05EA-522B-4C45-9EEF-882A3CA72C73}C:\program files (x86)\my secure\mysecure.exe] => (Allow) C:\program files (x86)\my secure\mysecure.exe

FirewallRules: [{16CA4FA1-769E-42D7-BDD7-3AC76A1DFF47}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManager.exe

FirewallRules: [{637D8753-A1D2-4743-9FF5-950C003DA70F}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

FirewallRules: [{1B72CEDA-053E-4F24-B919-C9C7AFA5D436}] => (Allow) C:\Program Files (x86)\NTI\Acer Backup Manager\FileExplorer.exe

FirewallRules: [{70B7B2FA-FCAD-4246-B51B-FDCAE6F531B5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{024ED124-B6EB-4F85-8A78-ECBE0BB04B3B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{4D01C52E-55F0-4AB5-84F3-A9B8554B7B69}] => (Allow) C:\Program Files (x86)\Bluetooth Suite\Win7Ui.exe

FirewallRules: [{48186141-D23D-4CCF-AE22-D47184BC66CD}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe

FirewallRules: [{76CAD9E3-6EA3-43B9-B3D0-BB79EFE8D2EF}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe

FirewallRules: [{C775B504-C8BF-4755-9EDC-DEB40D966D6F}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe

FirewallRules: [{338158E5-F278-4746-A05D-B58A0A2FEE1D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe

FirewallRules: [{8F29A8AF-63AF-4D79-854C-F00F97276891}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\VideoPlayer.exe

FirewallRules: [{F17E0308-F81F-4876-8E1D-03F535AFB11A}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe

FirewallRules: [{5B077B3E-E023-43AF-8B36-F0D541CF1CDA}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe

FirewallRules: [{FFEF8322-6C4C-4CB1-9167-E6E81B554F5E}] => (Allow) C:\Windows\SysWOW64\msiexec.exe

FirewallRules: [{F0EE447B-310F-45A6-ACFE-139E30F4CAE3}] => (Allow) C:\Windows\SysWOW64\msiexec.exe

FirewallRules: [{3444B906-4FB1-49D4-8845-53B4FC310EC5}] => (Allow) C:\Program Files (x86)\PCTV Systems\TVCenter\TVCenter.exe

FirewallRules: [{700313BA-6ABD-4658-82A9-1E66E836BB9F}] => (Allow) C:\Program Files (x86)\Common Files\PCTV Systems\PVR\VideoControl.exe

FirewallRules: [{DA3D9D7F-731C-4310-9041-F03941B921C5}] => (Allow) C:\Program Files (x86)\Common Files\PCTV Systems\StreamingServer\StrmServer.exe

FirewallRules: [{48006E90-B86D-47F9-AFC7-1E40F2A37176}] => (Allow) LPort=1900

FirewallRules: [{99FCD2F2-4FCD-490F-9178-4E6141FC015E}] => (Allow) LPort=2869

FirewallRules: [{102D681F-19F5-4CCE-B225-8833846606B7}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe

FirewallRules: [{F6689EF8-9106-4891-8537-D08C8CA74FFE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{03E94EC8-6B24-4A42-8870-8E5B2AC8390E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot-S&D 2 Tray Icon

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/14/2015 08:51:08 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
 

Error: (12/14/2015 07:13:15 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
 

Error: (12/14/2015 07:13:09 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
 

Error: (12/14/2015 07:13:08 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
 

Error: (12/14/2015 05:19:37 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
 

Error: (12/14/2015 05:19:32 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
 

Error: (12/14/2015 05:19:32 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.
 

Error: (12/14/2015 04:47:36 PM) (Source: ESENT) (EventID: 413) (User: )

Description: SettingSyncHost (8636) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.
 

Error: (12/14/2015 04:47:36 PM) (Source: ESENT) (EventID: 488) (User: )

Description: SettingSyncHost (8636) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 

Error: (12/14/2015 04:47:26 PM) (Source: ESENT) (EventID: 413) (User: )

Description: SettingSyncHost (8636) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.
 
 

Systemfehler:

=============

Error: (12/14/2015 08:48:45 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: {F3B4E234-7A68-4E43-B813-E4BA55A065F6}
 

Error: (12/14/2015 07:14:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (12/14/2015 07:14:38 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\Nicole\AppData\Local\Temp\ehdrv.sys
 

Error: (12/14/2015 07:14:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (12/14/2015 07:14:37 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\Nicole\AppData\Local\Temp\ehdrv.sys
 

Error: (12/14/2015 07:14:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (12/14/2015 07:14:37 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\Nicole\AppData\Local\Temp\ehdrv.sys
 

Error: (12/14/2015 07:14:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 

Error: (12/14/2015 07:14:37 PM) (Source: Application Popup) (EventID: 1060) (User: )

Description: \??\C:\Users\Nicole\AppData\Local\Temp\ehdrv.sys
 

Error: (12/14/2015 07:14:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1275
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz

Prozentuale Nutzung des RAM: 47%

Installierter physikalischer RAM: 5962.27 MB

Verfügbarer physikalischer RAM: 3106.78 MB

Summe virtueller Speicher: 6922.27 MB

Verfügbarer virtueller Speicher: 3514.03 MB
 

==================== Laufwerke ================================
 

Drive c: (Acer) (Fixed) (Total:677.89 GB) (Free:294.71 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 698.6 GB) (Disk ID: 46B881D1)
 

Partition: GPT.
 

==================== Ende von Addition.txt ============================

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:12-12-2015 01

durchgeführt von Nicole (Administrator) auf ORTI (14-12-2015 21:01:12)

Gestartet von C:\Users\Nicole\Desktop

Geladene Profile: UpdatusUser & Nicole (Verfügbare Profile: UpdatusUser & Nicole)

Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe

(Intel Corporation) C:\Windows\System32\igfxEM.exe

(Intel Corporation) C:\Windows\System32\igfxHK.exe

(Intel Corporation) C:\Windows\System32\igfxTray.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe

(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe

(Intel Corporation) C:\Windows\System32\igfxext.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidMonitorSvc.exe

(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\hidfind.exe

(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe

(devolo AG) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(w-lanTV) C:\Program Files (x86)\Common Files\PCTV Systems\w-lanTV\w-lanTV.exe

(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe

(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe

(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe

(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe

(Dritek System INC.) C:\Windows\RfBtnSvc64.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe

(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe

(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe

(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.3.0.0\Lightshot.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe

() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe

(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe

(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe

(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe

(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

() C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.668.0.0_x86__kgqvnymyfvs32\candycrushsaga.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [706440 2015-10-22] (Alps Electric Co., Ltd.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12937872 2012-07-27] (Realtek Semiconductor)

HKLM-x32\...\Run: [BakupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [533568 2012-08-22] (NTI Corporation)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-11-18] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [14408 2015-11-19] (Avira Operations GmbH & Co. KG)

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKU\S-1-5-21-1562043431-3003063674-3361777506-1001\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-07-10] (Microsoft Corporation)

HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\Run: [Google Update] => C:\Users\Nicole\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc.)

HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\Run: [w-lanTV] => C:\Program Files (x86)\Common Files\PCTV Systems\w-lanTV\w-lanTV.exe [208384 2009-10-02] (w-lanTV)

HKU\S-1-5-21-1562043431-3003063674-3361777506-1002\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)

AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [177088 2015-07-13] (NVIDIA Corporation)

AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [155280 2015-07-13] (NVIDIA Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Nicole\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Nicole\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Nicole\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64\FileSyncShell64.dll [2015-12-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Nicole\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Nicole\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-14] (Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Nicole\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileSyncShell.dll [2015-12-14] (Microsoft Corporation)

Startup: C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2015-12-07]

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)

CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{044e8ce7-0560-4c93-b8ab-6e9ff7ea32f3}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-10-13] (Microsoft Corporation)

BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-07-31] (Qualcomm Atheros Commnucations)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-10-13] (Microsoft Corporation)

Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
 

FireFox:

========

FF ProfilePath: C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\5z5m8v1l.default

FF DefaultSearchEngine: google

FF DefaultSearchUrl: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=

FF SelectedSearchEngine: Google

FF SelectedSearchEngine: google

FF Homepage: hxxp://www.google.de?hl=de&gl=de

FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-02-13] (Google, Inc.)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-07-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-10-15] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-1562043431-3003063674-3361777506-1002: @tools.google.com/Google Update;version=3 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)

FF Plugin HKU\S-1-5-21-1562043431-3003063674-3361777506-1002: @tools.google.com/Google Update;version=9 -> C:\Users\Nicole\AppData\Local\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-05] (Google Inc.)

FF Extension: Avira Browser Safety - C:\Users\Nicole\AppData\Roaming\Mozilla\Firefox\Profiles\5z5m8v1l.default\Extensions\abs@avira.com [2015-12-03] [ist nicht signiert]

FF Extension: Recorder Toolbar - C:\Program Files (x86)\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2015-10-15] [ist nicht signiert]
 

Chrome: 

=======

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1418560 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 ApHidMonitorService; C:\Program Files\Apoint2K\HidMonitorSvc.exe [104840 2015-10-22] (Alps Electric Co., Ltd.)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [250648 2015-11-18] (Avira Operations GmbH & Co. KG)

R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-23] (Acer Incorporated)

R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2797752 2015-10-13] (Microsoft Corporation)

S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-22] (Acer Incorporated)

R2 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [3755976 2015-07-01] (devolo AG)

R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)

R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Datei ist nicht signiert]

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-10-22] (Intel Corporation)

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG) [Datei ist nicht signiert]

R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-22] (NTI Corporation)

R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-09] (Dritek System INC.)

R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [18016 2015-11-19] (Avira Operations GmbH & Co. KG)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2015-12-01] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146696 2015-12-01] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2015-12-01] (Avira Operations GmbH & Co. KG)

R3 azvusb; C:\Windows\System32\drivers\azvusb.sys [54784 2009-08-24] (AzureWave Technologies, Inc.)

R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-14] (Malwarebytes)

R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)

R2 NPF_devolo; C:\Windows\sysWOW64\drivers\npf_devolo.sys [34048 2015-07-01] (CACE Technologies)

R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-09] (Dritek System Inc.)

S3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)

S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)

S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-12-14 21:01 - 2015-12-14 21:01 - 00018405 _____ C:\Users\Nicole\Desktop\FRST.txt

2015-12-14 20:49 - 2015-12-14 20:49 - 00016148 _____ C:\WINDOWS\system32\ORTI_Nicole_HistoryPrediction.bin

2015-12-14 19:12 - 2015-12-14 19:13 - 02870984 _____ (ESET) C:\Users\Nicole\Downloads\esetsmartinstaller_deu(1).exe

2015-12-14 19:08 - 2015-12-14 19:08 - 00001622 _____ C:\Users\Nicole\Desktop\Eset.txt

2015-12-14 17:19 - 2015-12-14 17:19 - 02870984 _____ (ESET) C:\Users\Nicole\Downloads\esetsmartinstaller_deu.exe

2015-12-14 17:19 - 2015-12-14 17:19 - 00000000 ____D C:\Program Files (x86)\ESET

2015-12-14 17:05 - 2015-12-14 17:15 - 00000000 ____D C:\ProgramData\HitmanPro

2015-12-14 17:04 - 2015-12-14 17:05 - 11323704 _____ (SurfRight B.V.) C:\Users\Nicole\Downloads\HitmanPro_x64.exe

2015-12-14 16:49 - 2015-12-14 16:49 - 00011566 _____ C:\Users\Nicole\Desktop\Fixlog.txt

2015-12-12 20:48 - 2015-12-12 20:48 - 01599336 _____ (Malwarebytes) C:\Users\Nicole\Downloads\JRT.exe

2015-12-12 20:23 - 2015-12-12 20:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-12-12 20:23 - 2015-12-12 20:23 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-12-12 20:23 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys

2015-12-12 20:23 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys

2015-12-12 20:23 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2015-12-12 20:17 - 2015-12-12 20:17 - 00001695 _____ C:\Users\Nicole\Desktop\mbam-setup-2.2.0.1024(1) - Shortcut.lnk

2015-12-12 20:15 - 2015-12-12 20:22 - 22908888 _____ (Malwarebytes ) C:\Users\Nicole\Downloads\mbam-setup-2.2.0.1024(1).exe

2015-12-12 18:36 - 2015-12-12 18:36 - 00001646 _____ C:\Users\Nicole\Desktop\AdwCleaner_5.024(2) - Shortcut.lnk

2015-12-12 18:35 - 2015-12-12 18:36 - 01738240 _____ C:\Users\Nicole\Downloads\AdwCleaner_5.024(2).exe

2015-12-11 16:38 - 2015-12-11 16:43 - 00050333 _____ C:\Users\Nicole\Downloads\Addition.txt

2015-12-11 16:34 - 2015-12-14 21:01 - 00000000 ____D C:\FRST

2015-12-11 16:34 - 2015-12-11 16:43 - 00051831 _____ C:\Users\Nicole\Downloads\FRST.txt

2015-12-11 16:30 - 2015-12-12 18:20 - 02369536 _____ (Farbar) C:\Users\Nicole\Desktop\FRST64.exe

2015-12-09 07:15 - 2015-12-09 07:15 - 00001624 _____ C:\Users\Nicole\Downloads\adwcleaner_5.024(1) - Shortcut.lnk

2015-12-08 19:46 - 2015-11-25 05:44 - 21872640 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2015-12-08 19:46 - 2015-11-25 05:42 - 24592384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2015-12-08 19:46 - 2015-11-25 05:23 - 19323392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2015-12-08 19:46 - 2015-11-25 05:10 - 18801664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2015-12-08 19:45 - 2015-12-01 08:01 - 02115936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys

2015-12-08 19:45 - 2015-12-01 06:51 - 07523840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2015-12-08 19:45 - 2015-12-01 05:59 - 05455360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2015-12-08 19:45 - 2015-11-25 06:33 - 03622272 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2015-12-08 19:45 - 2015-11-25 06:27 - 01366680 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2015-12-08 19:45 - 2015-11-25 06:12 - 04047288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2015-12-08 19:45 - 2015-11-25 06:09 - 01310880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2015-12-08 19:45 - 2015-11-25 06:01 - 02879024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2015-12-08 19:45 - 2015-11-25 05:49 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll

2015-12-08 19:45 - 2015-11-25 05:36 - 01710592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll

2015-12-08 19:45 - 2015-11-25 05:35 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2015-12-08 19:45 - 2015-11-25 05:35 - 00845824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe

2015-12-08 19:45 - 2015-11-25 05:34 - 12504576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2015-12-08 19:45 - 2015-11-25 05:31 - 00121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll

2015-12-08 19:45 - 2015-11-25 05:29 - 01649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll

2015-12-08 19:45 - 2015-11-25 05:29 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll

2015-12-08 19:45 - 2015-11-25 05:28 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll

2015-12-08 19:45 - 2015-11-25 05:27 - 02180608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2015-12-08 19:45 - 2015-11-25 05:23 - 03588096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2015-12-08 19:45 - 2015-11-25 05:23 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieui.dll

2015-12-08 19:45 - 2015-11-25 05:22 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2015-12-08 19:45 - 2015-11-25 05:22 - 01383424 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2015-12-08 19:45 - 2015-11-25 05:22 - 00603648 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll

2015-12-08 19:45 - 2015-11-25 05:19 - 01795584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll

2015-12-08 19:45 - 2015-11-25 05:18 - 01233920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll

2015-12-08 19:45 - 2015-11-25 05:17 - 00774656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll

2015-12-08 19:45 - 2015-11-25 05:16 - 01442816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll

2015-12-08 19:45 - 2015-11-25 05:16 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe

2015-12-08 19:45 - 2015-11-25 05:11 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll

2015-12-08 19:45 - 2015-11-25 05:10 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll

2015-12-08 19:45 - 2015-11-25 05:10 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll

2015-12-08 19:45 - 2015-11-25 05:05 - 11263488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2015-12-08 19:45 - 2015-11-25 05:04 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2015-12-08 19:45 - 2015-11-25 05:04 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll

2015-12-08 19:45 - 2015-11-25 05:04 - 00474624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieui.dll

2015-12-08 19:44 - 2015-12-01 07:03 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\gpuenergydrv.sys

2015-12-08 19:44 - 2015-12-01 06:54 - 00771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2015-12-08 19:44 - 2015-12-01 06:49 - 04792320 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2015-12-08 19:44 - 2015-12-01 06:02 - 03580416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2015-12-08 19:44 - 2015-11-25 06:42 - 04532304 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2015-12-08 19:44 - 2015-11-25 06:42 - 00168288 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe

2015-12-08 19:44 - 2015-11-25 06:41 - 01822280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2015-12-08 19:44 - 2015-11-25 06:40 - 00516448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS

2015-12-08 19:44 - 2015-11-25 06:32 - 00113184 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll

2015-12-08 19:44 - 2015-11-25 06:11 - 01532984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2015-12-08 19:44 - 2015-11-25 05:59 - 00092992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll

2015-12-08 19:44 - 2015-11-25 05:49 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll

2015-12-08 19:44 - 2015-11-25 05:49 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll

2015-12-08 19:44 - 2015-11-25 05:49 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll

2015-12-08 19:44 - 2015-11-25 05:48 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\EthernetMediaManager.dll

2015-12-08 19:44 - 2015-11-25 05:48 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMediaManager.dll

2015-12-08 19:44 - 2015-11-25 05:37 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll

2015-12-08 19:44 - 2015-11-25 05:36 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys

2015-12-08 19:44 - 2015-11-25 05:30 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll

2015-12-08 19:44 - 2015-11-25 05:30 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys

2015-12-08 19:44 - 2015-11-25 05:30 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys

2015-12-08 19:44 - 2015-11-25 05:28 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2015-12-08 19:44 - 2015-11-25 05:26 - 00849408 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll

2015-12-08 19:44 - 2015-11-25 05:26 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll

2015-12-08 19:44 - 2015-11-25 05:25 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2015-12-08 19:44 - 2015-11-25 05:25 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll

2015-12-08 19:44 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdgeoqw.dll

2015-12-08 19:44 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZST.DLL

2015-12-08 19:44 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZEL.DLL

2015-12-08 19:44 - 2015-11-25 05:22 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDAZE.DLL

2015-12-08 19:44 - 2015-11-25 05:19 - 00185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll

2015-12-08 19:44 - 2015-11-25 05:13 - 02153984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll

2015-12-08 19:44 - 2015-11-25 05:10 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2015-12-08 19:44 - 2015-11-25 05:08 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll

2015-12-08 19:44 - 2015-11-25 05:07 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll

2015-12-08 19:44 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdgeoqw.dll

2015-12-08 19:44 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZST.DLL

2015-12-08 19:44 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZEL.DLL

2015-12-08 19:44 - 2015-11-25 05:04 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDAZE.DLL

2015-12-08 19:44 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\SysWOW64\locale.nls

2015-12-08 19:44 - 2015-11-25 03:52 - 00775312 _____ C:\WINDOWS\system32\locale.nls

2015-12-08 19:21 - 2015-12-12 18:38 - 00000000 ____D C:\AdwCleaner

2015-12-08 19:20 - 2015-12-08 19:20 - 01738240 _____ C:\Users\Nicole\Downloads\adwcleaner_5.024(1).exe

2015-12-07 21:43 - 2015-12-07 21:43 - 01738240 _____ C:\Users\Nicole\Downloads\adwcleaner_5.024.exe

2015-12-07 20:53 - 2015-12-14 19:40 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2015-12-07 20:51 - 2015-12-07 20:53 - 22908888 _____ (Malwarebytes ) C:\Users\Nicole\Downloads\mbam-setup-2.2.0.1024.exe

2015-12-07 15:49 - 2015-12-07 17:10 - 00223894 _____ C:\WINDOWS\ntbtlog.txt

2015-12-06 21:03 - 2015-12-14 16:45 - 00004152 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5F0CCC93-F0F1-4E24-B549-127B593E12C3}

2015-12-06 20:54 - 2015-12-06 20:56 - 00772016 _____ (Reimage®) C:\Users\Nicole\Downloads\ReimageRepair.exe

2015-12-05 00:49 - 2015-12-05 00:49 - 00000000 ____D C:\Users\Nicole\Mozilla

2015-12-03 18:38 - 2015-12-03 18:40 - 00000000 ____D C:\Users\Public\Speedup Sessions

2015-12-03 18:37 - 2015-12-03 18:37 - 05229592 _____ (SuperEasy Software GmbH & Co. KG ) C:\Users\Nicole\Downloads\supereasy_driver_updater_1.1.1_8159.exe

2015-12-03 18:33 - 2015-12-03 18:36 - 05777256 _____ (SuperEasy Software GmbH & Co. KG ) C:\Users\Nicole\Downloads\supereasy_driver_updater_1.1.1_7870.exe

2015-12-03 18:32 - 2015-12-03 18:37 - 04588512 _____ (Avira Operations GmbH & Co. KG) C:\Users\Nicole\Downloads\avira_de_uppmo_3009850945_t06g7y0kejz5ms6tzm98_wd.exe

2015-12-03 01:01 - 2015-12-03 01:01 - 00000000 _____ C:\f65f11b79dd473d0a4a870818689f9

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\e88d7b78458e87cfbf

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\a9b3691bef93a2b8cb24

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\99299811d042f8dc478e

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\913f91f6930bed5e8033

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\90e783736f12f2003f

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\8a6937f9634ec4602fdad6

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\792f4a6701a453ba360e

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\6a7b0a69f938eb0a742f0b

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\5ba6a151cbbcb72eb19f5c7a

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\34fe792f51e1577ac871c8aca4

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\1ecff7c9ab8a2f2e5d3e45e17fa0b1

2015-12-03 01:00 - 2015-12-03 01:00 - 00000000 _____ C:\0986947df683cf918365

2015-11-29 12:39 - 2015-12-07 22:06 - 00001078 _____ C:\Users\Public\Desktop\Traktor S4.lnk

2015-11-29 12:39 - 2015-11-29 12:39 - 00000000 __HDC C:\ProgramData\{F168E1FD-951A-4765-8E54-46D13B7C8F72}

2015-11-29 12:38 - 2015-11-29 12:38 - 00000000 __HDC C:\ProgramData\{4A6CFAC9-055E-40CE-9B00-F4EB0B17D1BC}

2015-11-29 12:36 - 2015-11-29 12:37 - 617517199 _____ C:\Users\Nicole\Desktop\Traktor_S4_101_Win.zip

2015-11-29 12:33 - 2015-11-29 12:33 - 46096760 _____ C:\Users\Nicole\Desktop\Controller_Editor_193_Win.zip

2015-11-23 01:48 - 2015-11-23 01:48 - 00000000 __HDC C:\ProgramData\{B5F0C192-874D-49A8-88D7-8431E3714756}
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-12-14 20:59 - 2014-05-25 16:59 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1562043431-3003063674-3361777506-1002UA.job

2015-12-14 20:58 - 2013-08-09 13:26 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2015-12-14 17:00 - 2015-07-30 23:42 - 00000000 ___HD C:\Program Files\WindowsApps

2015-12-14 17:00 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\AppReadiness

2015-12-14 16:53 - 2014-11-05 22:56 - 00000000 __SHD C:\Users\Nicole\IntelGraphicsProfiles

2015-12-14 16:50 - 2015-07-30 22:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2015-12-14 16:50 - 2015-07-10 10:05 - 00786432 ___SH C:\WINDOWS\system32\config\BBI

2015-12-14 16:47 - 2014-02-01 20:24 - 00000000 ____D C:\Users\Nicole\Desktop\PC Sicherheit

2015-12-14 16:47 - 2012-11-23 13:30 - 00000000 ____D C:\Users\Nicole\Desktop\Orti

2015-12-14 07:12 - 2015-10-22 02:25 - 00002428 _____ C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2015-12-14 07:12 - 2014-11-05 23:02 - 00000000 ___RD C:\Users\Nicole\OneDrive

2015-12-13 18:24 - 2015-07-10 10:47 - 00000000 ____D C:\Windows

2015-12-13 01:14 - 2015-07-21 00:14 - 00000326 _____ C:\WINDOWS\Tasks\MT66 Software Update.job

2015-12-12 18:39 - 2015-10-22 01:41 - 00000008 __RSH C:\ProgramData\ntuser.pol

2015-12-12 18:38 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy

2015-12-12 17:15 - 2015-10-25 00:23 - 00000000 ____D C:\Users\Nicole\AppData\Local\Deployment

2015-12-12 15:59 - 2014-05-25 16:59 - 00001082 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1562043431-3003063674-3361777506-1002Core.job

2015-12-11 16:13 - 2013-02-19 19:16 - 00000000 ____D C:\Users\Nicole\Documents\Outlook-Dateien

2015-12-11 11:42 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\rescache

2015-12-11 00:15 - 2012-11-21 18:46 - 00000000 ____D C:\Users\Nicole\AppData\Local\Packages

2015-12-11 00:14 - 2015-10-22 02:02 - 00000000 ___DC C:\WINDOWS\Panther

2015-12-11 00:10 - 2015-10-30 20:27 - 00000000 ___HD C:\$WINDOWS.~BT

2015-12-10 07:09 - 2015-07-30 23:40 - 00000000 ____D C:\WINDOWS\INF

2015-12-10 06:54 - 2013-08-21 16:12 - 00000000 ____D C:\WINDOWS\system32\MRT

2015-12-10 06:48 - 2012-12-26 09:26 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2015-12-09 12:13 - 2014-11-01 09:31 - 00000000 ____D C:\Users\Nicole\Desktop\Kamera Neu

2015-12-09 06:56 - 2015-07-30 22:49 - 00310584 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2015-12-08 23:53 - 2012-07-26 06:26 - 00000246 _____ C:\WINDOWS\win.ini

2015-12-08 22:51 - 2015-10-22 01:33 - 01790124 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2015-12-08 22:51 - 2015-09-10 06:10 - 00772342 _____ C:\WINDOWS\system32\perfh007.dat

2015-12-08 22:51 - 2015-09-10 06:10 - 00154170 _____ C:\WINDOWS\system32\perfc007.dat

2015-12-08 22:43 - 2013-06-04 11:44 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2015-12-08 22:43 - 2013-06-04 11:44 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2015-12-08 22:40 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\system32\oobe

2015-12-08 22:28 - 2013-06-04 11:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-12-08 22:27 - 2015-07-30 23:25 - 00000000 ____D C:\WINDOWS\CbsTemp

2015-12-08 21:14 - 2014-02-01 20:25 - 00000000 ____D C:\Users\Nicole\Desktop\Andy

2015-12-08 19:22 - 2015-10-23 00:11 - 00000000 ____D C:\Users\Nicole\AppData\Roaming\Common

2015-12-07 22:07 - 2015-10-22 01:20 - 00001540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk

2015-12-07 22:07 - 2015-10-21 22:28 - 00001273 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk

2015-12-07 22:07 - 2015-10-13 23:34 - 00001342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk

2015-12-07 22:07 - 2015-10-13 23:33 - 00002502 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk

2015-12-07 22:07 - 2015-10-13 23:33 - 00001458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk

2015-12-07 22:07 - 2014-09-15 18:29 - 00000975 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk

2015-12-07 22:07 - 2014-07-19 14:56 - 00001855 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk

2015-12-07 22:07 - 2013-08-09 11:25 - 00001115 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-12-07 22:07 - 2013-02-06 16:38 - 00001110 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 8.lnk

2015-12-07 22:07 - 2012-11-23 12:07 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

2015-12-07 22:07 - 2012-09-09 07:34 - 00001673 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer User's Manual.lnk

2015-12-07 22:07 - 2012-08-02 12:40 - 00001655 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Quick Guide.lnk

2015-12-07 22:06 - 2015-10-06 19:13 - 00002515 _____ C:\Users\Public\Desktop\Smart View 2.0.lnk

2015-12-07 22:06 - 2015-06-11 17:08 - 00001025 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Netzmanager.lnk

2015-12-07 22:06 - 2015-05-30 23:58 - 00002145 _____ C:\Users\Public\Desktop\devolo dLAN Cockpit.lnk

2015-12-07 22:06 - 2014-08-26 12:00 - 00001109 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-12-07 22:06 - 2014-08-07 11:50 - 00002079 _____ C:\Users\Public\Desktop\HD Writer VE 3.0.lnk

2015-12-07 22:06 - 2014-07-19 14:56 - 00001911 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk

2015-12-07 22:06 - 2014-05-25 16:58 - 00001068 _____ C:\Users\Public\Desktop\Picasa 3.lnk

2015-12-06 21:30 - 2015-10-25 20:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transient

2015-12-06 21:30 - 2015-10-25 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ocenaudio

2015-12-06 21:30 - 2015-10-22 19:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line

2015-12-05 15:54 - 2014-05-25 16:59 - 00004258 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1562043431-3003063674-3361777506-1002UA

2015-12-05 15:54 - 2014-05-25 16:59 - 00003882 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1562043431-3003063674-3361777506-1002Core

2015-12-05 00:49 - 2015-10-22 01:10 - 00000000 ____D C:\Users\Nicole

2015-12-04 20:40 - 2014-04-18 15:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellarium

2015-12-04 11:07 - 2015-10-24 23:01 - 00000000 ____D C:\Program Files\Common Files\VST3

2015-12-04 00:07 - 2014-01-14 09:40 - 00000000 ____D C:\Program Files\Common Files\Native Instruments

2015-12-04 00:07 - 2014-01-14 09:39 - 00000000 ____D C:\Program Files\Native Instruments

2015-12-04 00:06 - 2014-01-14 09:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments

2015-12-03 18:55 - 2015-10-25 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ATKSideChainExpander

2015-12-03 18:55 - 2015-10-15 19:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2015-12-03 18:55 - 2015-07-30 23:42 - 00000000 ____D C:\WINDOWS\system32\MsDtc

2015-12-03 18:55 - 2014-04-18 15:05 - 00000000 ____D C:\Users\Nicole\AppData\Roaming\Stellarium

2015-12-03 18:55 - 2012-11-26 09:06 - 00000000 ____D C:\Users\Nicole\AppData\Roaming\TeamViewer

2015-12-03 18:40 - 2014-01-22 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-12-03 18:39 - 2014-01-22 16:39 - 00000000 ____D C:\ProgramData\Avira

2015-12-03 18:39 - 2014-01-22 16:39 - 00000000 ____D C:\Program Files (x86)\Avira

2015-12-03 18:39 - 2013-07-31 09:25 - 00001690 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog

2015-12-03 18:38 - 2014-10-09 11:51 - 00000000 ____D C:\ProgramData\Package Cache

2015-12-02 22:50 - 2015-10-22 19:53 - 00000000 ____D C:\Users\Nicole\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line

2015-12-02 22:49 - 2015-07-21 00:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MedienTeam66

2015-12-01 21:14 - 2014-01-22 16:39 - 00146696 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys

2015-12-01 21:14 - 2014-01-22 16:39 - 00135880 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys

2015-12-01 21:14 - 2014-01-22 16:39 - 00073032 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys

2015-12-01 21:14 - 2014-01-22 16:39 - 00035488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys

2015-12-01 01:32 - 2015-07-30 23:43 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2015-12-01 01:32 - 2015-07-30 23:43 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2015-11-28 19:47 - 2014-09-15 18:29 - 00000000 ____D C:\Users\Nicole\AppData\Roaming\Audacity

2015-11-27 22:40 - 2015-11-05 03:53 - 00000000 ____D C:\WINDOWS\Minidump

2015-11-27 22:40 - 2015-10-14 00:15 - 00000000 ____D C:\Users\Nicole\Tracing

2015-11-27 21:46 - 2014-06-10 15:26 - 00000000 ____D C:\Users\Nicole\Desktop\Kamera

2015-11-27 18:42 - 2015-07-30 23:42 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2015-11-27 18:41 - 2013-02-19 18:39 - 00000000 ____D C:\Program Files\Microsoft Office 15

2015-11-22 22:15 - 2012-11-23 13:38 - 00000000 ____D C:\Users\Nicole\AppData\Roaming\vlc

2015-11-17 10:12 - 2015-10-02 21:05 - 00000000 ____D C:\Users\Nicole\AppData\Local\ElevatedDiagnostics
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2015-12-06 21:34 - 2015-12-06 21:34 - 0000003 _____ () C:\Users\Nicole\AppData\Local\updater.log

2014-03-01 17:58 - 2015-10-02 16:06 - 0000424 _____ () C:\Users\Nicole\AppData\Local\UserProducts.xml

2012-09-09 06:59 - 2012-09-09 06:59 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

Einige Dateien in TEMP:

====================

C:\Users\Nicole\AppData\Local\Temp\avgnt.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-12-11 11:34
 

==================== Ende von FRST.txt ============================

Hallo Matthias,
habe gestern abend den Avira Pro noch angemacht.....
er läuft noch immer
ist erst bei 1,9% bei (8Std.35 Minuten)
Er hat 2763 Warnungen