| raichu93 | 24.03.2015 13:47 |
Code:
ComboFix 15-03-23.01 - samsung 24.03.2015 13:18:41.3.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8172.5627 [GMT 1:00]
ausgeführt von:: c:\users\samsung\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\{25b6f467-8cba-6c49-25b6-6f4678cbd19e}\C4E8.exe
c:\programdata\{2739418c-c9c5-995b-2739-9418cc9c0633}\2900.exe
c:\programdata\{2ad8ce83-02bc-c541-2ad8-8ce8302b3a0c}\F400.exe
c:\programdata\{310ae1a4-9be7-3a10-310a-ae1a49be8692}\3040.exe
c:\programdata\{37e867ac-df1d-3393-37e8-867acdf19eb3}\C800.exe
c:\programdata\{3b749108-61d5-c959-3b74-4910861d4421}\8940.exe
c:\programdata\{3d21c522-369a-2756-3d21-1c5223691488}\B5E4.exe
c:\programdata\{3dc2e248-e13f-ccc0-3dc2-2e248e138923}\4480.exe
c:\programdata\{47214d76-caa3-d869-4721-14d76caa35db}\E460.exe
c:\programdata\{6375be98-7e01-8abb-6375-5be987e0fa61}\DDC0.exe
c:\programdata\{66bd2f5b-a18e-04db-66bd-d2f5ba18bd6e}\DB40.exe
c:\programdata\{77fa9000-2abd-30b0-77fa-a90002ab4000}\E10C.exe
c:\programdata\{78bbc887-39c0-ae0c-78bb-bc88739c221c}\D400.exe
c:\programdata\{7cdbc312-1577-7c6f-7cdb-bc3121570c48}\6530.exe
c:\programdata\{7e2449f2-c80f-57aa-7e24-449f2c8027cb}\2A88.exe
c:\programdata\{83498530-7ccf-1c94-8349-985307cc14c1}\8FF0.exe
c:\programdata\{840c7c44-8928-4d0b-840c-c7c44892f112}\A480.exe
c:\programdata\{90047c6f-3290-62ea-9004-47c6f329f1bc}\76C0.exe
c:\programdata\{9996ecb7-0822-9bc2-9996-6ecb7082b2dc}\7780.exe
c:\programdata\{9bf90886-86f0-9c7a-9bf9-9088686f221a}\2218.exe
c:\programdata\{a359ae22-5a56-6148-a359-9ae225a5b889}\DD98.exe
c:\programdata\{a3d74497-b871-bc3e-a3d7-74497b87125e}\8800.exe
c:\programdata\{a88d9984-3c4b-e4ef-a88d-d99843c46610}\5310.exe
c:\programdata\{b5850b80-22a4-b3be-b585-50b8022a2e00}\D310.exe
c:\programdata\{c65335cc-4213-50d6-c653-335cc421d731}\5968.exe
c:\programdata\{c7034222-6696-6c57-c703-342226690889}\8BEC.exe
c:\programdata\{d080dd14-3907-2e97-d080-0dd143907450}\F710.exe
c:\programdata\{d25940eb-d77f-fd72-d259-940ebd7703af}\CF00.exe
c:\programdata\{de4b45d0-690b-f56e-de4b-b45d06901741}\B4B0.exe
c:\programdata\{e497a27d-455b-ffbd-e497-7a27d45589f5}\9AE0.exe
c:\programdata\{fb5830c8-e6da-a5a2-fb58-830c8e6dc323}\6200.exe
c:\programdata\{fca97404-fe1b-252d-fca9-97404fe1d013}\ABE8.exe
c:\users\samsung\AppData\Local\Temp\nsp17A7.tmp\System.dll
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2218.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2900.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\2A88.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3040.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\4480.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5310.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\5968.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6200.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6530.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\76C0.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\7780.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8800.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8940.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8BEC.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8FF0.lnk
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\9AE0.lnk
.
.
((((((((((((((((((((((( Dateien erstellt von 2015-02-24 bis 2015-03-24 ))))))))))))))))))))))))))))))
.
.
2015-03-24 12:35 . 2015-03-24 12:35 -------- d-----w- c:\users\Public\AppData\Local\temp
2015-03-24 12:35 . 2015-03-24 12:35 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp
2015-03-24 12:35 . 2015-03-24 12:35 -------- d-----w- c:\users\Gast\AppData\Local\temp
2015-03-24 12:35 . 2015-03-24 12:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-03-24 12:35 . 2015-03-24 12:35 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{25b6f467-8cba-6c49-25b6-6f4678cbd19e}
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{d080dd14-3907-2e97-d080-0dd143907450}
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{c65335cc-4213-50d6-c653-335cc421d731}
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{7cdbc312-1577-7c6f-7cdb-bc3121570c48}
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{9bf90886-86f0-9c7a-9bf9-9088686f221a}
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{7e2449f2-c80f-57aa-7e24-449f2c8027cb}
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{78bbc887-39c0-ae0c-78bb-bc88739c221c}
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{a88d9984-3c4b-e4ef-a88d-d99843c46610}
2015-03-24 12:03 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{2ad8ce83-02bc-c541-2ad8-8ce8302b3a0c}
2015-03-24 12:02 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{840c7c44-8928-4d0b-840c-c7c44892f112}
2015-03-24 12:02 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{de4b45d0-690b-f56e-de4b-b45d06901741}
2015-03-24 12:02 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{d25940eb-d77f-fd72-d259-940ebd7703af}
2015-03-24 12:02 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{6375be98-7e01-8abb-6375-5be987e0fa61}
2015-03-24 12:02 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{3d21c522-369a-2756-3d21-1c5223691488}
2015-03-24 12:02 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{2739418c-c9c5-995b-2739-9418cc9c0633}
2015-03-24 12:02 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{3dc2e248-e13f-ccc0-3dc2-2e248e138923}
2015-03-23 16:54 . 2015-03-23 16:54 -------- d-----w- c:\program files (x86)\InterLok
2015-03-23 16:53 . 2015-03-23 16:53 -------- d-----w- c:\users\samsung\AppData\Roaming\Antares
2015-03-23 16:53 . 2015-03-23 16:53 -------- d-----w- c:\program files (x86)\Antares Audio Technologies
2015-03-23 16:04 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{77fa9000-2abd-30b0-77fa-a90002ab4000}
2015-03-23 16:04 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{a359ae22-5a56-6148-a359-9ae225a5b889}
2015-03-23 16:04 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{c7034222-6696-6c57-c703-342226690889}
2015-03-23 16:04 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{fca97404-fe1b-252d-fca9-97404fe1d013}
2015-03-23 16:04 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{b5850b80-22a4-b3be-b585-50b8022a2e00}
2015-03-23 16:04 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{a3d74497-b871-bc3e-a3d7-74497b87125e}
2015-03-23 16:04 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{fb5830c8-e6da-a5a2-fb58-830c8e6dc323}
2015-03-23 16:04 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{83498530-7ccf-1c94-8349-985307cc14c1}
2015-03-23 15:57 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{e497a27d-455b-ffbd-e497-7a27d45589f5}
2015-03-23 15:57 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{37e867ac-df1d-3393-37e8-867acdf19eb3}
2015-03-23 15:57 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{310ae1a4-9be7-3a10-310a-ae1a49be8692}
2015-03-23 15:57 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{47214d76-caa3-d869-4721-14d76caa35db}
2015-03-23 15:30 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{9996ecb7-0822-9bc2-9996-6ecb7082b2dc}
2015-03-23 15:30 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{90047c6f-3290-62ea-9004-47c6f329f1bc}
2015-03-23 15:24 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{66bd2f5b-a18e-04db-66bd-d2f5ba18bd6e}
2015-03-22 15:12 . 2015-03-24 12:34 -------- d-----w- c:\programdata\{3b749108-61d5-c959-3b74-4910861d4421}
2015-03-22 15:11 . 2015-03-22 15:11 -------- d-----w- c:\program files (x86)\Morphyre
2015-03-22 15:11 . 2015-03-22 15:11 -------- d-----w- c:\users\samsung\AppData\Local\Morphyre
2015-03-21 22:20 . 2015-03-21 22:20 -------- d-----w- c:\users\samsung\AppData\Roaming\Ohm Force
2015-03-19 17:47 . 2015-03-19 17:47 17189552 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe
2015-03-15 20:37 . 2015-02-03 03:31 215552 ----a-w- c:\windows\system32\ubpm.dll
2015-03-15 20:37 . 2015-02-03 03:12 171520 ----a-w- c:\windows\SysWow64\ubpm.dll
2015-03-15 20:37 . 2015-02-20 04:41 41984 ----a-w- c:\windows\system32\lpk.dll
2015-03-15 20:37 . 2015-02-20 04:40 100864 ----a-w- c:\windows\system32\fontsub.dll
2015-03-15 20:37 . 2015-02-20 04:40 14336 ----a-w- c:\windows\system32\dciman32.dll
2015-03-15 20:37 . 2015-02-20 04:40 46080 ----a-w- c:\windows\system32\atmlib.dll
2015-03-15 20:37 . 2015-02-20 04:13 70656 ----a-w- c:\windows\SysWow64\fontsub.dll
2015-03-15 20:37 . 2015-02-20 04:13 10240 ----a-w- c:\windows\SysWow64\dciman32.dll
2015-03-15 20:37 . 2015-02-20 04:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2015-03-15 20:37 . 2015-02-20 04:12 25600 ----a-w- c:\windows\SysWow64\lpk.dll
2015-03-15 20:37 . 2015-02-20 03:29 372224 ----a-w- c:\windows\system32\atmfd.dll
2015-03-15 20:37 . 2015-02-20 03:09 299008 ----a-w- c:\windows\SysWow64\atmfd.dll
2015-03-15 20:34 . 2015-01-17 02:48 1067520 ----a-w- c:\windows\system32\msctf.dll
2015-03-15 20:30 . 2015-02-04 03:16 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2015-03-15 20:30 . 2015-02-04 02:54 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2015-02-22 16:31 . 2015-02-22 16:31 -------- d-----w- c:\program files (x86)\iTunes
2015-02-22 16:31 . 2015-02-22 16:31 -------- d-----w- c:\program files\iPod
2015-02-22 16:31 . 2015-02-22 16:32 -------- d-----w- c:\programdata\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-02-22 16:31 . 2015-02-22 16:32 -------- d-----w- c:\program files\iTunes
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-19 17:47 . 2012-09-05 20:19 701616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2015-03-19 17:47 . 2012-09-05 20:19 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-03-14 10:02 . 2015-03-24 12:09 12002392 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{991EFDBC-0FBB-439E-B12C-2D13EF2D8942}\mpengine.dll
2015-02-24 03:17 . 2010-11-21 03:27 295552 ------w- c:\windows\system32\MpSigStub.exe
2015-02-04 03:16 . 2015-02-13 14:28 609280 ----a-w- c:\windows\system32\generaltel.dll
2015-02-04 03:16 . 2015-02-13 14:28 762368 ----a-w- c:\windows\system32\invagent.dll
2015-02-04 03:16 . 2015-02-13 14:28 414720 ----a-w- c:\windows\system32\devinv.dll
2015-02-04 03:16 . 2015-02-13 14:28 894976 ----a-w- c:\windows\system32\appraiser.dll
2015-02-04 03:16 . 2015-02-13 14:28 227328 ----a-w- c:\windows\system32\aepdu.dll
2015-02-04 03:16 . 2015-02-13 14:28 192000 ----a-w- c:\windows\system32\aepic.dll
2015-02-04 03:13 . 2015-02-13 14:28 1098752 ----a-w- c:\windows\system32\aeinv.dll
2015-02-02 14:19 . 2014-11-27 15:34 129752 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-01-27 23:36 . 2015-02-13 14:28 1239720 ----a-w- c:\windows\system32\aitstatic.exe
2015-01-09 03:14 . 2015-02-13 14:28 91136 ----a-w- c:\windows\system32\wdi.dll
2015-01-09 03:14 . 2015-02-13 14:28 950272 ----a-w- c:\windows\system32\perftrack.dll
2015-01-09 03:14 . 2015-02-13 14:28 29696 ----a-w- c:\windows\system32\powertracker.dll
2015-01-09 02:48 . 2015-02-13 14:28 76800 ----a-w- c:\windows\SysWow64\wdi.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-09-25 15:45 239272 ----a-w- c:\users\samsung\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-09-25 15:45 239272 ----a-w- c:\users\samsung\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-09-25 15:45 239272 ----a-w- c:\users\samsung\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SkyDrive"="c:\users\samsung\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" [2014-09-25 277672]
"xwidget"="c:\skinpack\RocketDock\Xwidget\XWidget.exe" [2014-04-03 1856000]
"XLaunchpad"="c:\skinpack\RocketDock\XLaunchPad\XLaunchPad.exe" [2013-05-17 2372608]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2014-10-17 43816]
"iCloudDrive"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe" [2014-10-20 43816]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2015-02-13 60712]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"sync"="c:\program files (x86)\photoSync\sync.exe" [2014-07-02 276992]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2014-10-02 421888]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpUninstallDeleteDir"="rmdir" [X]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
UberIcon.lnk - c:\skinpack\UberIcon\UberIcon.exe [2007-8-17 159744]
YzShadow.lnk - c:\skinpack\YzShadow\YzShadow.exe [2009-3-21 184320]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
R2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
R2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 ActionReplayDS;ActionReplayDS;c:\windows\system32\Drivers\ActionReplayDS_x64.sys;c:\windows\SYSNATIVE\Drivers\ActionReplayDS_x64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 Origin Client Service;Origin Client Service;d:\program files (x86)\Origin\OriginClientService.exe;d:\program files (x86)\Origin\OriginClientService.exe [x]
R3 Prot6Flt;Prot6Flt;c:\windows\system32\DRIVERS\Prot6Flt.sys;c:\windows\SYSNATIVE\DRIVERS\Prot6Flt.sys [x]
R3 pwdrvio;pwdrvio;c:\windows\system32\pwdrvio.sys;c:\windows\SYSNATIVE\pwdrvio.sys [x]
R3 pwdspio;pwdspio;c:\windows\system32\pwdspio.sys;c:\windows\SYSNATIVE\pwdspio.sys [x]
R3 Samsung UPD Service;Samsung UPD Service;c:\windows\System32\SUPDSvc.exe;c:\windows\SYSNATIVE\SUPDSvc.exe [x]
R3 scvad_simple;SplitCam Virtual Microphone (WDM);c:\windows\system32\drivers\SplitCamAudio.sys;c:\windows\SYSNATIVE\drivers\SplitCamAudio.sys [x]
R3 splitcam_hd_driver;SplitCam Virtual Video Driver;c:\windows\system32\DRIVERS\splitcam_hd_driver.sys;c:\windows\SYSNATIVE\DRIVERS\splitcam_hd_driver.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys;c:\windows\SYSNATIVE\Drivers\SABI.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3;c:\program files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe;c:\program files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [x]
S2 peservice;photoSync service;c:\program files (x86)\photoSync\peservice.exe;c:\program files (x86)\photoSync\peservice.exe [x]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{2D46B6DC-2207-486B-B523-A557E6D54B47}]
start [BU]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-03-21 15:57 1061704 ----a-w- c:\program files (x86)\Google\Chrome\Application\41.0.2272.101\Installer\chrmstp.exe
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{90EF4A5E-85DB-4825-96F5-1AB93C2A8EEB}]
2011-09-14 11:00 1409 ----a-r- d:\program files (x86)\Mindjet\MindManager 10\sys\MmInternetExplorerActiveSetup.vbs
.
Inhalt des "geplante Tasks" Ordners
.
2015-03-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-09-05 17:47]
.
2015-03-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-02-26 23:51]
.
2015-03-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-02-26 23:51]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-09-25 15:45 266416 ----a-w- c:\users\samsung\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-09-25 15:45 266416 ----a-w- c:\users\samsung\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-09-25 15:45 266416 ----a-w- c:\users\samsung\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-04-23 16:50 76040 ----a-w- c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-06-25 11895400]
"ETDCtrl"="c:\program files (x86)\Elantech\ETDCtrl.exe" [BU]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-02-13 169768]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{F791A188-699D-4FD4-955A-EB59E89B1907}"= "c:\skinpack\ThemeResourceChanger.dll" [2010-10-07 103936]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
uDefault_Search_URL = hxxp://www.google.com
mDefault_Search_URL = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
uSearchAssistant = www.google.com
IE:
IE: An OneNote s&enden - d:\progra~2\MICROS~1\Office15\ONBttnIE.dll/105
IE: Bild an MindManager senden - d:\program files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll/201
IE: Free YouTube to MP3 Converter - c:\users\samsung\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Link an MindManager senden - d:\program files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll/203
IE: Nach Microsoft E&xcel exportieren - d:\progra~2\MICROS~1\Office15\EXCEL.EXE/3000
IE: Seite an MindManager senden - d:\program files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll/204
IE: Text an MindManager senden - d:\program files (x86)\Mindjet\MindManager 10\Mm8InternetExplorer.dll/202
IE: {{781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - d:\icq7m\ICQ.exe
TCP: DhcpNameServer = 192.168.178.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\A480.lnk - c:\programdata\{840c7c44-8928-4d0b-840c-c7c44892f112}\A480.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ABE8.lnk - c:\programdata\{fca97404-fe1b-252d-fca9-97404fe1d013}\ABE8.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\B4B0.lnk - c:\programdata\{de4b45d0-690b-f56e-de4b-b45d06901741}\B4B0.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\B5E4.lnk - c:\programdata\{3d21c522-369a-2756-3d21-1c5223691488}\B5E4.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\C4E8.lnk - c:\programdata\{25b6f467-8cba-6c49-25b6-6f4678cbd19e}\C4E8.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\C800.lnk - c:\programdata\{37e867ac-df1d-3393-37e8-867acdf19eb3}\C800.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CF00.lnk - c:\programdata\{d25940eb-d77f-fd72-d259-940ebd7703af}\CF00.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\D310.lnk - c:\programdata\{b5850b80-22a4-b3be-b585-50b8022a2e00}\D310.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\D400.lnk - c:\programdata\{78bbc887-39c0-ae0c-78bb-bc88739c221c}\D400.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DB40.lnk - c:\programdata\{66bd2f5b-a18e-04db-66bd-d2f5ba18bd6e}\DB40.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DD98.lnk - c:\programdata\{a359ae22-5a56-6148-a359-9ae225a5b889}\DD98.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DDC0.lnk - c:\programdata\{6375be98-7e01-8abb-6375-5be987e0fa61}\DDC0.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E10C.lnk - c:\programdata\{77fa9000-2abd-30b0-77fa-a90002ab4000}\E10C.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\E460.lnk - c:\programdata\{47214d76-caa3-d869-4721-14d76caa35db}\E460.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\F400.lnk - c:\programdata\{2ad8ce83-02bc-c541-2ad8-8ce8302b3a0c}\F400.exe --startup=1
c:\users\samsung\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\F710.lnk - c:\programdata\{d080dd14-3907-2e97-d080-0dd143907450}\F710.exe --startup=1
AddRemove-Shockwave - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE
AddRemove-WavePad - c:\program files (x86)\NCH Software\WavePad\wavepad.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1335839233-2991384071-368375801-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (S-1-5-21-1335839233-2991384071-368375801-1000)
@Denied: (2) (LocalSystem)
"Progid"="OperaStable"
.
[HKEY_USERS\S-1-5-21-1335839233-2991384071-368375801-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (S-1-5-21-1335839233-2991384071-368375801-1000)
@Denied: (2) (LocalSystem)
"Progid"="OperaStable"
.
[HKEY_USERS\S-1-5-21-1335839233-2991384071-368375801-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (S-1-5-21-1335839233-2991384071-368375801-1000)
@Denied: (2) (LocalSystem)
"Progid"="OperaStable"
.
[HKEY_USERS\S-1-5-21-1335839233-2991384071-368375801-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.svg\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-1335839233-2991384071-368375801-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (S-1-5-21-1335839233-2991384071-368375801-1000)
@Denied: (2) (LocalSystem)
"Progid"="OperaStable"
.
[HKEY_USERS\S-1-5-21-1335839233-2991384071-368375801-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (S-1-5-21-1335839233-2991384071-368375801-1000)
@Denied: (2) (LocalSystem)
"Progid"="OperaStable"
.
[HKEY_USERS\S-1-5-21-1335839233-2991384071-368375801-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="SafariHTML"
.
[HKEY_USERS\S-1-5-21-1335839233-2991384071-368375801-1000\Software\SecuROM\License information*]
"datasecu"=hex:8d,2a,d3,7e,de,08,52,20,a1,50,5e,43,ac,da,0b,e4,5a,2a,00,98,54,
9e,17,a0,b2,89,b6,d1,a2,4a,15,39,99,9a,5e,06,1e,c9,20,6c,8d,a4,17,4f,90,f9,\
"rkeysecu"=hex:9a,17,74,8d,a3,6f,53,7f,5c,d4,b1,fa,6c,62,0d,11
.
[HKEY_LOCAL_MACHINE\SOFTWARE\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_16_0_0_305_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.16"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_16_0_0_305.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe
c:\program files (x86)\Samsung\Easy Display Manager\WifiManager.exe
c:\program files (x86)\Samsung\Samsung Recovery Solution 5\WCScheduler.exe
c:\program files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
c:\program files (x86)\Samsung\Samsung Support Center\SSCKbdHk.exe
c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe
c:\program files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe
c:\program files (x86)\SAMSUNG\EasySpeedUpManager\EasySpeedUpManager.exe
c:\program files (x86)\Samsung\Samsung Update Plus\SUPBackground.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-03-24 13:45:55 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2015-03-24 12:45
ComboFix2.txt 2015-01-20 14:56
.
Vor Suchlauf: 18 Verzeichnis(se), 182.535.290.880 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 182.728.769.536 Bytes frei
.
- - End Of File - - 20E90B27E26909272CA579C7FBA34ADA
2E5DEBB2116B3417023E0D6562D7ED07
|
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
WARNUNG an die MITLESER: 
