Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Schlechtes Internet seitdem ich was heruntergeladen habe (https://www.trojaner-board.de/170959-schlechtes-internet-seitdem-heruntergeladen-habe.html)

schäfler 10.09.2015 12:19
Schlechtes Internet seitdem ich was heruntergeladen habe
 
einmal hab ich die meldung von avira TR/Dropper.MSIL.188869 und einmal HEUR/APC (cloud)

M-K-D-B 10.09.2015 12:50
:hallo:


Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!


Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!




Zur ersten Analyse bitte FRST und TDSS-Killer ausführen:


Schritt 1
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)






Schritt 2
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.







Bitte poste mit deiner nächsten Antwort
  • die Logdatei von TDSS-Killer,
  • die beiden neuen Logdateien von FRST.

schäfler 11.09.2015 18:24
FRST kann nicht untersuchen es kommt folgende meldung: AutoIT Error
Line 9051 (File "C:/Users/Anwender/Desktop/FRST64.exe"): Error: Subscript used on non-accessible variable.

M-K-D-B 12.09.2015 09:36
Servus,


die FRST.exe löschen und nochmal neu laden und nochmal versuchen.


Kommt dann immer noch die Fehlermeldung?
Wenn ja, wann genau erscheint die Fehlermeldung?
Direkt beim Starten der Anwendung? Oder beim Drücken auf den Button Suche?

schäfler 13.09.2015 14:03
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-09-2015
durchgeführt von Anwender (Administrator) auf ANWENDER-PC (13-09-2015 14:57:08)
Gestartet von C:\Users\Anwender\Downloads
Geladene Profile: Anwender (Verfügbare Profile: Anwender)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.13\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.28.13\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Spotify Ltd) C:\Users\Anwender\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Octoshape ApS) C:\Users\Anwender\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.6119\Battle.net.exe
(Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.4424\Agent.exe
(TeamSpeak Systems GmbH) C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
() C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [682840 2014-03-03] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2014-03-03] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [12697368 2014-10-14] (Logitech Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-06-29] (Apple Inc.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-26] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [bdruninstaller] => C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\setupdownloader.exe [616256 2014-06-13] (Bitdefender)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1701067893-481638138-2713998442-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632112 2015-08-22] (Electronic Arts)
HKU\S-1-5-21-1701067893-481638138-2713998442-1000\...\Run: [Spotify Web Helper] => C:\Users\Anwender\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-09-04] (Spotify Ltd)
HKU\S-1-5-21-1701067893-481638138-2713998442-1000\...\Run: [Octoshape Streaming Services] => C:\Users\Anwender\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe [500016 2014-08-01] (Octoshape ApS)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-03-06] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-08-07] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-08-07] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2013-08-07] (Acronis)
Startup: C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3070 B611 series.lnk [2014-11-25]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3070 B611 series.lnk -> C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
BootExecute: autocheck autochk * auto_reactivate \\?\Volume{f7c68f79-a48d-11e3-9e6d-806e6f6e6963}\bootwiz\asrm.bin

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1F128B91-1C1B-4267-B0CC-E4462034F7B4}: [DhcpNameServer] 192.168.2.2 192.168.2.1
Tcpip\..\Interfaces\{37E9997B-8CBF-40A0-9EB0-6A8FBC9F0346}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{9FDCF285-9539-4D61-932A-CA4A88B8905F}: [DhcpNameServer] 192.168.2.2 192.168.2.1
Tcpip\..\Interfaces\{E3559721-A6AA-4DA4-B49A-7DDFFB870E1F}: [DhcpNameServer] 192.168.2.2 192.168.2.1

Internet Explorer:
==================
HKU\S-1-5-21-1701067893-481638138-2713998442-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1701067893-481638138-2713998442-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-11-16] (Oracle Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-16] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\hdervz85.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll [2014-03-03] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll [2014-03-03] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-16] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1701067893-481638138-2713998442-1000: @octoshape.com/Octoshape Streaming Services,version=1.0 -> C:\Users\Anwender\AppData\Roaming\Octoshape\Octoshape Streaming Services\sua-1503240-0-npoctoshape.dll [2015-03-24] (Octoshape ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\Anwender\AppData\Roaming\mozilla\plugins\npoctoshape.dll [2015-06-05] (Octoshape ApS)
FF Extension: Avira Browser Safety - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\hdervz85.default\Extensions\abs@avira.com [2014-12-15]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]

Chrome:
=======
CHR Profile: C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-09-15]
CHR Extension: (Google Docs) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-06]
CHR Extension: (Google Drive) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-06]
CHR Extension: (YouTube) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-06]
CHR Extension: (Google-Suche) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-06]
CHR Extension: (Tampermonkey) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-06-24]
CHR Extension: (Google Tabellen) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-09-15]
CHR Extension: (Avira Browserschutz) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-05]
CHR Extension: (Google Text & Tabellen Offline) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-05]
CHR Extension: (AdBlock) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-04-23]
CHR Extension: (agar.io server browser) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\hongpdkjnjhijmdnogoicadboadgllhi [2015-06-25]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-13]
CHR Extension: (Skype Click to Call) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-08-14]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-06]
CHR Extension: (Google Mail) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-06]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-10-08] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-26] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-26] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1125888 2015-07-23] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-05-06] (EasyAntiCheat Ltd)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2007048 2015-08-22] (Electronic Arts)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-07-24] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-24] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-02-14] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-04] (Avira Operations GmbH & Co. KG)
S3 AX88772B; C:\Windows\System32\DRIVERS\ax88772b.sys [114176 2013-07-22] (ASIX Electronics Corp.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 PciSPorts; C:\Windows\System32\DRIVERS\PciSPorts.sys [122880 2008-12-19] ()
S3 Ph3xIB64; C:\Windows\System32\DRIVERS\Ph3xIB64.sys [1627520 2009-06-10] (NXP Semiconductors)
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                          )
S3 RTL85n64; C:\Windows\System32\DRIVERS\RTL85n64.sys [378368 2009-06-10] (Realtek)
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1476752 2013-11-11] (Realtek Semiconductor Corporation                          )
R0 Si3114r5; C:\Windows\System32\DRIVERS\Si3114r5.sys [327720 2008-04-29] (Silicon Image, Inc)
R0 SiFilter; C:\Windows\System32\DRIVERS\SiWinAcc.sys [22568 2008-04-29] (Silicon Image, Inc.)
R0 SiRemFil; C:\Windows\System32\DRIVERS\SiRemFil.sys [16936 2008-04-29] (Silicon Image, Inc.)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2014-05-13] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2014-05-13] (Acronis)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2014-05-13] (Acronis International GmbH)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-13 14:57 - 2015-09-13 14:58 - 00019675 ____C C:\Users\Anwender\Downloads\FRST.txt
2015-09-13 14:56 - 2015-09-13 14:56 - 02190336 ____C (Farbar) C:\Users\Anwender\Downloads\FRST64.exe
2015-09-11 21:58 - 2015-09-11 21:58 - 00001192 ____C C:\Users\Public\Desktop\Avira Antivirus.lnk
2015-09-11 19:41 - 2015-09-11 19:41 - 00001102 ____C C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-11 19:40 - 2015-09-11 19:41 - 24345872 ____C (Malwarebytes Corporation ) C:\Users\Anwender\Downloads\mbam-setup-2.1.8.1057.exe
2015-09-11 19:36 - 2015-09-11 19:36 - 01660416 ____C C:\Users\Anwender\Downloads\adwcleaner_5.007 (1).exe
2015-09-11 19:21 - 2015-09-13 08:13 - 00011284 ____C C:\Users\Anwender\Desktop\FRST.txt
2015-09-11 19:18 - 2015-09-11 19:19 - 04404952 ____C (Kaspersky Lab ZAO) C:\Users\Anwender\Downloads\tdsskiller.exe
2015-09-10 17:40 - 2015-09-10 21:58 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-10 17:39 - 2015-09-10 21:54 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-10 17:39 - 2015-09-10 21:54 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-09-10 17:39 - 2015-09-10 21:54 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-10 17:39 - 2015-09-10 21:54 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-09-10 17:39 - 2015-09-10 21:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-10 17:39 - 2015-09-10 21:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-09-10 17:39 - 2015-09-10 21:53 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-09-10 17:39 - 2015-09-10 21:53 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-09-10 17:39 - 2015-09-10 21:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-09-10 17:39 - 2015-09-10 21:53 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-09-10 17:39 - 2015-09-10 21:53 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-09-10 17:39 - 2015-09-10 21:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-10 17:39 - 2015-09-10 21:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-09-10 17:38 - 2015-09-10 21:59 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-10 17:38 - 2015-09-10 21:59 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-10 17:38 - 2015-09-10 21:59 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-09-10 17:27 - 2015-09-10 21:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-10 17:27 - 2015-09-10 21:54 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-10 17:27 - 2015-09-10 21:54 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-10 17:27 - 2015-09-10 21:54 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-10 17:27 - 2015-09-10 21:54 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-10 17:27 - 2015-09-10 21:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-10 17:27 - 2015-09-10 21:54 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-09-10 17:27 - 2015-09-10 21:54 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-10 17:27 - 2015-09-10 21:54 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-09-10 17:27 - 2015-09-10 21:54 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-10 17:27 - 2015-09-10 21:54 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-09-10 17:27 - 2015-09-10 21:54 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-10 17:19 - 2015-09-10 21:52 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-10 17:19 - 2015-09-10 21:52 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-10 17:19 - 2015-09-10 21:52 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-10 17:19 - 2015-09-10 21:52 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-10 17:18 - 2015-09-10 21:52 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-10 17:18 - 2015-09-10 21:52 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-10 17:18 - 2015-09-10 21:52 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-10 17:18 - 2015-09-10 21:52 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-10 17:18 - 2015-09-10 21:52 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-09-10 17:18 - 2015-09-10 21:52 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-09-10 17:18 - 2015-09-10 21:52 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-10 17:18 - 2015-09-10 21:52 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-10 15:01 - 2015-09-10 16:33 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-09-10 15:01 - 2015-09-10 16:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-09-10 15:01 - 2015-09-10 16:33 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-10 15:01 - 2015-09-10 16:33 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-10 15:01 - 2015-09-10 16:33 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-10 15:01 - 2015-09-10 16:33 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-10 15:01 - 2015-09-10 16:33 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-10 15:01 - 2015-09-10 16:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-10 15:01 - 2015-09-10 16:33 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-10 14:55 - 2015-09-10 16:30 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-10 14:55 - 2015-09-10 16:30 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-10 14:55 - 2015-09-10 16:30 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-10 14:55 - 2015-09-10 16:29 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-10 14:55 - 2015-09-10 16:29 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-10 14:55 - 2015-09-10 16:29 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-09-10 14:55 - 2015-09-10 16:29 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-01 20:57 - 2015-09-01 20:57 - 00065682 ____C C:\Users\Anwender\Downloads\Download (3)
2015-09-01 20:57 - 2015-09-01 20:57 - 00065682 ____C C:\Users\Anwender\Downloads\Download (2)
2015-09-01 20:57 - 2015-09-01 20:57 - 00065682 ____C C:\Users\Anwender\Downloads\Download (1)
2015-08-17 23:37 - 2015-08-17 23:37 - 00000000 ___DC C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartPixel
2015-08-17 23:37 - 2015-08-17 23:37 - 00000000 ___DC C:\Users\Anwender\AppData\Roaming\aipai
2015-08-17 23:37 - 2015-08-17 23:37 - 00000000 ___DC C:\SmartPixel
2015-08-17 23:37 - 2015-08-17 23:37 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SmartPixel
2015-08-17 23:35 - 2015-08-17 23:37 - 29908056 ____C (Beyond Magic Limited) C:\Users\Anwender\Downloads\smartpixel_setup.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-13 14:57 - 2015-03-16 22:57 - 00000000 ___DC C:\FRST
2015-09-13 14:57 - 2014-07-19 23:33 - 00000000 ___DC C:\Users\Anwender\AppData\Roaming\TS3Client
2015-09-13 14:54 - 2015-02-06 23:02 - 00000000 ___DC C:\Users\Anwender\AppData\Local\Battle.net
2015-09-13 14:52 - 2014-06-12 18:26 - 00000000 ___DC C:\Program Files (x86)\Steam
2015-09-13 14:52 - 2014-03-03 14:41 - 01345684 ____C C:\Windows\WindowsUpdate.log
2015-09-13 14:31 - 2014-05-06 09:40 - 00001110 ____C C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-13 13:30 - 2014-06-06 14:44 - 00000000 ___DC C:\Users\Anwender\AppData\Local\Spotify
2015-09-13 12:42 - 2014-06-06 14:43 - 00000000 ___DC C:\Users\Anwender\AppData\Roaming\Spotify
2015-09-13 12:12 - 2015-02-06 23:02 - 00000000 ___DC C:\Program Files (x86)\Battle.net
2015-09-13 11:00 - 2009-07-14 06:45 - 00051680 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-13 11:00 - 2009-07-14 06:45 - 00051680 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-13 07:23 - 2014-05-06 09:40 - 00001106 ____C C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-13 06:54 - 2014-05-02 10:05 - 00142131 ____C C:\Windows\setupact.log
2015-09-13 06:54 - 2009-07-14 07:08 - 00000006 ___HC C:\Windows\Tasks\SA.DAT
2015-09-12 01:16 - 2015-07-10 19:29 - 00000000 ___HD C:\$Windows.~BT
2015-09-12 01:11 - 2009-07-14 05:20 - 00000000 ___DC C:\Windows\system32\NDF
2015-09-12 00:45 - 2014-03-03 14:37 - 00000000 ___DC C:\Windows\Panther
2015-09-11 21:58 - 2014-04-30 17:07 - 00000000 ___DC C:\ProgramData\Package Cache
2015-09-11 21:58 - 2014-03-03 17:54 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-09-11 21:58 - 2014-03-03 17:54 - 00000000 ___DC C:\ProgramData\Avira
2015-09-11 21:58 - 2014-03-03 17:54 - 00000000 ___DC C:\Program Files (x86)\Avira
2015-09-11 21:48 - 2015-03-17 15:17 - 00113880 ____C (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-09-11 20:07 - 2015-03-17 15:10 - 00000000 ___DC C:\AdwCleaner
2015-09-11 20:06 - 2014-03-03 18:50 - 00422166 ____C C:\Windows\PFRO.log
2015-09-11 20:02 - 2009-07-14 05:20 - 00000000 ___DC C:\Windows\PLA
2015-09-11 19:41 - 2015-03-17 15:17 - 00000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-09-11 19:41 - 2015-03-17 15:17 - 00000000 ___DC C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-09-11 18:11 - 2015-05-02 11:03 - 00000000 ___DC C:\Program Files (x86)\Diablo III
2015-09-11 13:07 - 2014-10-27 00:45 - 00000000 ___DC C:\Users\Anwender\AppData\Roaming\vlc
2015-09-11 12:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-09-11 12:12 - 2014-07-26 12:15 - 00000000 ___DC C:\ProgramData\Origin
2015-09-11 06:48 - 2009-07-14 19:58 - 00699150 ____C C:\Windows\system32\perfh007.dat
2015-09-11 06:48 - 2009-07-14 19:58 - 00149290 ____C C:\Windows\system32\perfc007.dat
2015-09-11 06:48 - 2009-07-14 07:13 - 01619528 ____C C:\Windows\system32\PerfStringBackup.INI
2015-09-11 06:40 - 2009-07-14 20:18 - 00000000 ___DC C:\Program Files\Windows Journal
2015-09-11 06:40 - 2009-07-14 05:20 - 00000000 ___DC C:\Windows\PolicyDefinitions
2015-09-10 21:57 - 2014-03-03 20:14 - 00000000 ___DC C:\Windows\system32\MRT
2015-09-10 17:11 - 2009-07-14 06:45 - 00323168 ____C C:\Windows\system32\FNTCACHE.DAT
2015-09-10 15:15 - 2015-04-03 00:33 - 00022528 __SHC C:\Users\Anwender\Thumbs.db
2015-09-10 14:41 - 2014-03-03 17:30 - 00000000 ___DC C:\Users\Anwender
2015-09-10 14:40 - 2015-04-04 22:39 - 00000000 __SDC C:\Windows\system32\GWX
2015-09-10 14:40 - 2009-07-14 05:20 - 00000000 ___DC C:\Windows\registration
2015-09-10 14:40 - 2009-07-14 05:20 - 00000000 ___DC C:\Program Files\Common Files\Microsoft Shared
2015-09-10 14:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\servicing
2015-08-28 15:26 - 2014-05-06 09:40 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-08-28 15:26 - 2014-05-06 09:40 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-08-26 18:37 - 2010-06-24 11:33 - 134753440 ____C (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-08-24 23:26 - 2014-11-16 22:41 - 00000000 ___DC C:\Users\Anwender\AppData\Roaming\.minecraft
2015-08-22 10:32 - 2014-07-26 12:15 - 00000000 ___DC C:\Program Files (x86)\Origin
2015-08-18 20:46 - 2015-02-06 23:07 - 00000000 ___DC C:\Program Files (x86)\Hearthstone

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-11-25 15:39 - 2014-11-25 15:39 - 0000057 ____C () C:\ProgramData\Ament.ini
2014-03-03 18:42 - 2014-03-03 18:42 - 0000000 ___HC () C:\ProgramData\DP45977C.lfl
2015-01-13 06:49 - 2015-03-17 15:04 - 0000112 ____C () C:\ProgramData\WTRvD6v.dat

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\WTRvD6v.dat


Einige Dateien in TEMP:
====================
C:\Users\Anwender\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe
C:\Users\Anwender\AppData\Local\Temp\avgnt.exe
C:\Users\Anwender\AppData\Local\Temp\drm_dyndata_7380015.dll
C:\Users\Anwender\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp31unsb.dll
C:\Users\Anwender\AppData\Local\Temp\jre-8u40-windows-au.exe
C:\Users\Anwender\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\Anwender\AppData\Local\Temp\project1.exe
C:\Users\Anwender\AppData\Local\Temp\swt-win32-3349.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


nointegritychecks: ==> "IntegrityChecks" ist deaktiviert. <===== ACHTUNG


LastRegBack: 2015-09-11 12:30

==================== Ende von FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-09-2015
durchgeführt von Anwender (2015-09-13 14:58:17)
Gestartet von C:\Users\Anwender\Downloads
Windows 7 Professional Service Pack 1 (X64) (2014-03-03 15:29:11)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1701067893-481638138-2713998442-500 - Administrator - Disabled)
Anwender (S-1-5-21-1701067893-481638138-2713998442-1000 - Administrator - Enabled) => C:\Users\Anwender
Gast (S-1-5-21-1701067893-481638138-2713998442-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1701067893-481638138-2713998442-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ableton Live 9 Trial (HKLM\...\{99133525-54DF-48DD-A4AB-07A756ACBDBF}) (Version: 9.0.0.0 - Ableton)
Acronis True Image 2014 (HKLM-x32\...\{E2FEBE7F-2CB0-4B45-87BA-619C1422B113}Visible) (Version: 17.0.5560 - Acronis)
Acronis True Image 2014 (x32 Version: 17.0.5560 - Acronis) Hidden
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)
Alice Madness Returns (HKLM-x32\...\{93A3AB24-36E8-41BA-80C6-CCEC237836DC}) (Version: 1.0.0.0 - Electronic Arts)
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 8.201.1711.122 - Alps Electric)
AMD Catalyst Install Manager (HKLM\...\{5AE0838D-19B1-5D12-5FE8-E6503B2C8716}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Amnesia: The Dark Descent (HKLM-x32\...\Steam App 57300) (Version:  - Frictional Games)
Anno 1404 (HKLM-x32\...\Steam App 33250) (Version:  - Blue Byte)
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version:  - Reloaded Productions)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Clicker Heroes (HKLM-x32\...\Steam App 363970) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dynamite Jack (HKLM-x32\...\Steam App 202730) (Version:  - Hassey Enterprises, Inc.)
EA SPORTS™ FIFA 15 Demo (HKLM-x32\...\{108C0C19-6316-4944-A62F-C744488F8639}) (Version: 1.0.0.0 - Electronic Arts)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.28.13 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
HP Deskjet 3070 B611 series - Grundlegende Software für das Gerät (HKLM\...\{48DF59F8-2ACD-4F1F-87F3-D820FE7A6178}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
Infinite HD™ App (HKU\S-1-5-21-1701067893-481638138-2713998442-1000\...\Octoshape Streaming Services) (Version:  - Octoshape ApS)
iTunes (HKLM\...\{4046F74A-28F8-48C6-A5D3-2AFC472574C1}) (Version: 12.2.0.145 - Apple Inc.)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Lazarus 1.2.2 (HKLM\...\lazarus_is1) (Version: 1.2.2 - Lazarus Team)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LibreOffice 4.2.1.1 (HKLM-x32\...\{C83C3B4C-1AFF-4CEA-8078-74E7A3FE8F03}) (Version: 4.2.1.1 - The Document Foundation)
Logitech Gaming Software 8.57 (HKLM\...\Logitech Gaming Software) (Version: 8.57.145 - Logitech Inc.)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.11 - www.leaguereplays.com)
Magicka: Wizard Wars (HKLM-x32\...\Steam App 202090) (Version:  - Paradox North)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Middle-earth: Shadow of Mordor (HKLM-x32\...\Steam App 241930) (Version:  - Monolith Productions, Inc.)
Mirror's Edge™ (HKLM-x32\...\{AEDBD563-24BB-4EE3-8366-A654DAC2D988}) (Version: 1.0.1.0 - Electronic Arts)
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 24.5.0 - Mozilla)
Mozilla Thunderbird 24.5.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 24.5.0 (x86 de)) (Version: 24.5.0 - Mozilla)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7076 - Realtek Semiconductor Corp.)
ROCCAT Lua Mouse Driver (HKLM-x32\...\InstallShield_{0F5183CD-4A86-43A4-8CAA-1045871F54DE}) (Version: 1.14 - ROCCAT)
ROCCAT Lua Mouse Driver (x32 Version: 1.14 - ROCCAT) Hidden
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
SmartPixel (HKLM-x32\...\SmartPixel) (Version: 3.2.0.0 - Beyond Magic Limited)
Spotify (HKU\S-1-5-21-1701067893-481638138-2713998442-1000\...\Spotify) (Version: 1.0.13.108.gcd94e7db - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Terraria (HKLM-x32\...\Steam App 105600) (Version:  - Re-Logic)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version:  - Ubisoft Singapore)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Worms Clan Wars (HKLM-x32\...\Steam App 233840) (Version:  - Team17 Digital Ltd)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1701067893-481638138-2713998442-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Anwender\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay Keine Datei

==================== Wiederherstellungspunkte =========================

11-09-2015 21:05:34 Geplanter Prüfpunkt

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2A0F54CC-FE95-4B36-B8D9-6D9118E0E4B9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {768082B4-CACA-4A63-AF41-562AA59A7C91} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {9FFF3686-508A-4187-A5C8-F4281EB75D37} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {CA4A3834-793E-4656-8B5B-ED7C2C15306E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {EF3FCD00-0B23-4B2A-A9BE-3DBCB5D782DB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-05-15 16:26 - 2015-05-15 16:26 - 00085832 ____C () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 ____C () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00866584 ____C () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2014-10-14 20:51 - 2014-10-14 20:51 - 01050904 ____C () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2014-09-18 09:23 - 2014-09-18 09:23 - 00059160 ____C () C:\Program Files\Logitech Gaming Software\libEGL.dll
2014-10-14 20:51 - 2014-10-14 20:51 - 00242456 ____C () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2014-10-25 12:22 - 2015-08-15 05:12 - 00103424 ____C () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
2015-08-29 11:45 - 2015-08-29 11:45 - 26065408 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\libcef.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00739840 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\libGLESv2.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00909312 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\platforms\qwindows.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00130048 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\libEGL.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00020992 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\imageformats\qgif.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00021504 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\imageformats\qico.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00205312 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\imageformats\qjpeg.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00225792 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\imageformats\qmng.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00015872 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\imageformats\qsvg.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00312832 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\imageformats\qtiff.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00010240 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\qml\QtQuick.2\qtquick2plugin.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00054272 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-08-29 11:45 - 2015-08-29 11:45 - 00010240 ____C () C:\Program Files (x86)\Battle.net\Battle.net.6119\qml\QtQml\Models.2\modelsplugin.dll
2014-02-28 15:33 - 2014-02-28 15:33 - 00148480 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\quazip.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00864768 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\platforms\qwindows.dll
2014-02-27 15:45 - 2014-02-27 15:45 - 00677376 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2014-07-11 16:02 - 2014-07-11 16:02 - 00092104 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2014-07-11 16:02 - 2014-07-11 16:02 - 00105416 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00025600 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\imageformats\qgif.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00242688 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-07-11 16:04 - 2014-07-11 16:04 - 00477128 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2015-06-22 22:59 - 2015-06-22 22:58 - 00433664 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\soundboard.dll
2014-07-14 10:21 - 2014-07-14 10:21 - 00484808 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00123904 ____C () C:\Program Files (x86)\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-06-12 18:28 - 2015-07-03 18:12 - 00778240 ____C () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-20 17:51 - 2015-07-03 18:12 - 04962816 ____C () C:\Program Files (x86)\Steam\v8.dll
2015-01-20 17:51 - 2015-07-03 18:12 - 01556992 ____C () C:\Program Files (x86)\Steam\icui18n.dll
2015-01-20 17:51 - 2015-07-03 18:12 - 01187840 ____C () C:\Program Files (x86)\Steam\icuuc.dll
2014-06-12 18:28 - 2015-08-19 22:39 - 02413248 ____C () C:\Program Files (x86)\Steam\video.dll
2014-08-29 00:37 - 2014-12-01 23:31 - 02396672 ____C () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 00:37 - 2014-12-01 23:31 - 00442880 ____C () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 00:37 - 2014-12-01 23:31 - 00479744 ____C () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 00:37 - 2014-12-01 23:31 - 00332800 ____C () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-08-29 00:37 - 2014-12-01 23:31 - 00485888 ____C () C:\Program Files (x86)\Steam\libswscale-3.dll
2014-06-12 18:28 - 2015-08-19 22:39 - 00704192 ____C () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-07-23 20:10 - 2015-07-27 03:13 - 00171008 ____C () C:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-09-13 12:58 - 2015-09-13 12:58 - 00155232 __HCT () C:\Users\Anwender\AppData\Local\Temp\~D233.tmp
2014-06-12 18:28 - 2015-07-03 18:12 - 39553928 ____C () C:\Program Files (x86)\Steam\bin\libcef.dll
2014-10-25 12:21 - 2015-07-24 20:15 - 00198144 ____C () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\launcher.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 00317440 ____C () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll
2014-10-25 12:21 - 2015-07-24 20:14 - 00203776 ____C () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\vstdlib.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 00389120 ____C () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\filesystem_stdio.dll
2014-10-25 12:20 - 2015-09-04 18:29 - 06683136 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\engine.dll
2014-10-25 12:21 - 2015-07-24 20:14 - 00156160 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\inputsystem.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 01174016 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vphysics.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 01240064 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\materialsystem.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 00351744 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\datacache.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 00607744 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\studiorender.dll
2014-10-25 12:21 - 2015-07-24 20:14 - 00164864 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\soundemittersystem.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 00708096 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vscript.dll
2014-10-25 12:21 - 2015-07-24 20:14 - 00134656 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\valve_avi.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 01336320 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vguimatsurface.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 00394752 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vgui2.dll
2014-10-25 12:20 - 2015-07-24 20:15 - 03192320 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\scaleformui.dll
2014-10-25 12:20 - 2015-07-24 20:14 - 01762816 ____C () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\shaderapidx9.dll
2014-10-25 12:21 - 2015-07-24 20:14 - 00143360 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\localize.dll
2014-10-25 12:21 - 2015-07-24 20:14 - 00230912 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dbg.dll
2014-10-25 12:20 - 2015-08-15 05:12 - 00995840 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dx9.dll
2014-10-25 12:20 - 2015-07-30 20:43 - 00582144 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\matchmaking.dll
2014-10-25 12:20 - 2015-09-04 18:30 - 12377600 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\client.dll
2014-10-25 12:20 - 2015-09-04 18:29 - 09932800 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\server.dll
2014-10-25 12:21 - 2015-07-24 20:14 - 00094208 ____C () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\scenefilecache.dll
2014-10-25 12:22 - 2015-07-24 20:14 - 00084992 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vaudio_miles.dll
2014-10-25 12:21 - 2014-10-25 12:21 - 00071680 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\mssmp3.asi
2014-10-25 12:21 - 2014-10-25 12:21 - 00012800 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\mssds3d.flt
2014-10-25 12:21 - 2014-10-25 12:21 - 00055808 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\msseax.flt
2014-10-25 12:20 - 2015-07-30 20:42 - 00972800 ____C () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\serverbrowser.dll
2015-09-05 09:37 - 2015-08-28 02:17 - 01501512 ____C () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libglesv2.dll
2015-09-05 09:37 - 2015-08-28 02:17 - 00081224 ____C () C:\Program Files (x86)\Google\Chrome\Application\45.0.2454.85\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1701067893-481638138-2713998442-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: AcrSch2Svc => 2
MSCONFIG\Services: afcdpsrv => 2
MSCONFIG\Services: syncagentsrv => 2
MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
MSCONFIG\startupreg: AcronisTibMounterMonitor => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{519CF097-018D-4018-A948-5CD4A9FB7F5A}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{D8948EFC-C192-480B-8974-D0A19579015F}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{E86FF062-32C7-4D12-B631-4BE5EDB26FB6}] => (Block) C:\Program Files (x86)\Acronis\TrueImageHome\license_activator.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{16B7F9AB-0325-4C7F-9809-25DEC9CCE50A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{071EA915-D5E2-46DF-B6E4-A497355E19FE}C:\users\anwender\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\anwender\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{0BE86528-26D9-4E44-AE31-0A5795579815}C:\users\anwender\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\anwender\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{1EA2FD81-B562-4A4A-BE1C-70BEA0685310}C:\users\anwender\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\anwender\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{97254DBF-D9B2-408C-A35C-22F0D22AB42B}C:\users\anwender\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\anwender\appdata\roaming\spotify\spotify.exe
FirewallRules: [{B8BB618A-97E8-4195-85BB-C34D73DC7110}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A030A73D-7CA1-48E5-B583-525859E05F92}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D7C79EFD-09B6-4BD5-BB40-1D124DF460C6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dynamite Jack\Dynamite Jack.exe
FirewallRules: [{A11F43B0-A360-424F-B1F1-4B7B05A419A6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dynamite Jack\Dynamite Jack.exe
FirewallRules: [{F1F0580E-85C4-4C96-BF70-CD068A0B9A3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno 1404\Anno4.exe
FirewallRules: [{AA3A3BD1-827B-464F-A7A3-53B3B868C5DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno 1404\Anno4.exe
FirewallRules: [TCP Query User{3415C6B5-6568-4648-8CFE-554BBD85BB8A}C:\program files (x86)\steam\steamapps\common\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\anno 1404\tools\anno4web.exe
FirewallRules: [UDP Query User{B5E61D59-806D-41FC-968F-580D76EA0549}C:\program files (x86)\steam\steamapps\common\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\anno 1404\tools\anno4web.exe
FirewallRules: [{4C994037-359B-4EF5-8521-E72D42BE1C7E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{C2464324-AE28-408A-8B91-8AB6781EAA38}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Launcher.exe
FirewallRules: [{63D9DAE3-6D1A-4E3C-A1A1-8F5B63819822}] => (Allow) C:\Program Files (x86)\Origin Games\Mirrors Edge\Binaries\MirrorsEdge.exe
FirewallRules: [{EAB163CE-4F9C-4F7E-BAA9-4071282C4D9E}] => (Allow) C:\Program Files (x86)\Origin Games\Mirrors Edge\Binaries\MirrorsEdge.exe
FirewallRules: [{F20A51C2-8757-4F4B-B30C-E2EA4611C52B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{BAD59C6C-9D88-4395-B0C1-8C666CF86077}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{C21C42AE-3A65-4452-95F2-9A6BDFE993C7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{FF624ED6-A0DF-45C0-B17B-68312F16C6D3}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{4B10A140-8EF2-46DA-9A58-6A41E1D7F8B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{AEBBBD86-DCAF-4BD0-8662-31EFAD440429}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dota 2 beta\dota.exe
FirewallRules: [{47B90AB3-EC45-49EE-AD57-2C537975281F}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15 DEMO\fifasetup\fifaconfig.exe
FirewallRules: [{DF6FB47D-D0DB-42B0-BEE0-CD31305A64D9}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15 DEMO\fifasetup\fifaconfig.exe
FirewallRules: [TCP Query User{D40406E9-DFF0-4E3B-AAB8-184A6EA2E14E}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [UDP Query User{9BCA9CCC-F99D-48BB-A895-3F2A4EE73896}C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 15 demo\fifa15_demo.exe
FirewallRules: [{A4DC3F6A-D027-4B3E-97EA-665BA19FCD47}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{3982990D-2C19-4A40-B5CF-8FE2663495E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1729DEDE-6D34-40C2-8886-9CC7CBCD084B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Evolve\Bin64_SteamRetail\StaticLauncher64.exe
FirewallRules: [{71B4C9E2-EFD8-4CE8-A5CB-906530BCB898}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Evolve\Bin64_SteamRetail\StaticLauncher64.exe
FirewallRules: [TCP Query User{DADEDBBB-ABC2-4C2B-BE0A-5CEEE6A4E108}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [UDP Query User{B673688A-161B-4142-9DC1-7D0E5E75B778}C:\program files (x86)\lolreplay\lolreplay.exe] => (Allow) C:\program files (x86)\lolreplay\lolreplay.exe
FirewallRules: [TCP Query User{A7CD3C30-B91D-47CC-A348-C548DFD09C4A}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{C7EB2BC9-3C28-4E46-82E2-42EC308A8AF9}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [{5A59F502-F0D2-4AE2-B9E1-2B6F0A74D2AC}] => (Allow) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\DeviceSetup.exe
FirewallRules: [{641F79A0-E0CB-4DAE-A207-14386EC4F6C4}] => (Allow) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{4342712D-6663-4F0D-9F63-EE1C913D91D4}] => (Allow) C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{50E55709-BA9E-4C35-9E0A-35CAA9BA60BD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [{CDA3BF6E-D155-4912-814C-E4830E13DAF6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Amnesia The Dark Descent\Amnesia.exe
FirewallRules: [TCP Query User{68CE3129-926C-4C7D-8CA4-CD79B6BEA549}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{E2281467-4009-499B-A53A-95858E18477A}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{EB6576DD-98E1-4294-90B9-B51C8247A22B}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{D4906E44-13BD-49D6-AC3F-1A3AAC0C475E}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{753536D3-6637-4710-A427-DB0B78C0B375}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{F8CA4B26-849F-481D-AB6C-25BBCB813E88}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{893EFAC5-72DA-4ECE-A13D-7543B6586131}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{B164FB0D-D8D9-46C2-BA0C-B823F1E8BFD5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [TCP Query User{89BCC019-A291-45BC-84B9-D8870DBC3197}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [UDP Query User{495A720D-3B92-46F5-9DC7-BC4840D37A12}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin
FirewallRules: [{8AC63FFA-82F0-4C92-B8D0-53205A9A4A8F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{936FC394-F8C9-4D07-8D82-F06F00931300}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [TCP Query User{94584352-1A41-4769-A12A-1B5DEAD62DA7}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{67611F42-A90D-4CB9-A58B-B9A1C9A05D4F}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{8BED0E3A-1B4C-4C6F-A56C-978DB86FE974}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{273690D0-0A16-4E68-9475-B86C042EA8C7}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{3D29AB51-6644-44FC-9B61-EF0A9A614E8D}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{5B68FE91-E4AB-4BA6-A298-EAAF8C8FA0AC}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{C044E6F3-A391-4DFB-82F0-7E285735C651}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{6F024190-3EE8-41F3-A124-55A0CB2EACB9}] => (Allow) C:\Program Files\Logitech Gaming Software\LCore.exe
FirewallRules: [{5E5D60E3-EB36-4F67-9518-9CD247559ACB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{1948BB96-4E70-421E-A002-C70102DFACA2}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{18B92CE3-6E5C-40C9-A0AF-0BC1199723F9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{9B1B3EEE-FBC4-41F9-A2E0-6DE1D692859F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C8FE5B54-8304-4313-95D2-CE5335313EC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Worms Clan Wars\WormsClanWars.exe
FirewallRules: [{CAAB62D0-6255-4AA3-915A-7E8598FBC187}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Worms Clan Wars\WormsClanWars.exe
FirewallRules: [TCP Query User{2A3C26AF-A4F3-475C-B207-D46AE37BAEDD}C:\program files (x86)\origin games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Block) C:\program files (x86)\origin games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe
FirewallRules: [UDP Query User{D185A207-0256-46E2-A617-E44819C86D4C}C:\program files (x86)\origin games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Block) C:\program files (x86)\origin games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe
FirewallRules: [{C681F004-BC62-4527-A866-FEB5A843AC1F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Launcher\APBLauncher.exe
FirewallRules: [{7FB35880-D4BB-4FA1-9BED-B2475086AC33}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Launcher\APBLauncher.exe
FirewallRules: [{72E1FE3B-56B8-4324-B769-21603B9D04C5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{A2A500B1-D377-4CC6-96E2-809727595D1A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{C3D9B11D-7C2E-43A4-9611-20D98CE9E833}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{72A5A9F8-811A-4147-92F0-711C3D29DCDE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{F15CD7BD-F222-497E-A0E7-B93FC7C2E029}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{8133B147-E4C8-4400-8CCA-9A17DCB2CD39}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [TCP Query User{9F87B27A-4FFF-4B2D-8410-0560EC981E64}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{612FC85B-27A1-4AED-94D6-9BBC4A0D09A9}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{7A44A4E9-E5B5-4CEE-9378-C6614423B6B3}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{7502227B-B0A7-4F86-9907-B783D1D4F8C0}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{9782E288-DBDA-4B87-8AD3-85E0B1D65672}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MagickaWizardWars\WizardWarsLauncher.exe
FirewallRules: [{16320DC7-F1AB-4F26-AFE2-4E5BBF492BF0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MagickaWizardWars\WizardWarsLauncher.exe
FirewallRules: [TCP Query User{51819E69-3666-41FF-82A7-E31049E2DD6B}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Block) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe
FirewallRules: [UDP Query User{BBBD1DDD-67BF-4000-8030-E82D44C9B32C}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Block) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe
FirewallRules: [{47BA1C1A-0603-4C01-B349-A5BCBD362A5E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{EDF39052-F3E2-4EEB-BEAA-2FF704E5454C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{49DF8CC1-1EEC-46D7-9293-5058EC32180F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{B2622CF9-6E95-4C71-B68C-AF764452B6D7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{18419407-F754-4BBB-A48B-A85D1D64B47A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{1B8862F5-B742-4AC0-9489-484CF3B9CB29}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [TCP Query User{A3219409-B699-49D2-B823-5AD938BDC63A}C:\users\anwender\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe] => (Block) C:\users\anwender\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe
FirewallRules: [UDP Query User{0FE1D916-1DC0-461A-A879-C809B29ADFA1}C:\users\anwender\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe] => (Block) C:\users\anwender\appdata\roaming\octoshape\octoshape streaming services\octoshapeclient.exe
FirewallRules: [{0EF44621-099D-4836-910A-4E30722809F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe
FirewallRules: [{22EEBC22-AC74-4DF5-A746-9E3173C8ABD6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Terraria\Terraria.exe
FirewallRules: [{F73D6256-59D2-41A6-BB68-714ACC7D1673}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{2FA1F126-F1EB-4700-8AA2-C3D8B167FFAA}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{540B2921-05E9-4BFA-92A7-4E3703F5CE0F}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [TCP Query User{C29B5F77-B80D-4106-B4C0-D2269D3F3D55}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Block) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{BCB47021-B560-4A9D-BAFA-24F28FBF915F}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Block) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{2313D855-6AAB-4327-AEAA-6B1CD2FE27BF}C:\users\anwender\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\anwender\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{CFAFF986-DD12-4491-96FC-059F9334A606}C:\users\anwender\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\anwender\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{DF668D1E-35B2-40D0-BFDD-ADBEDA9460C1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{C49E464B-69C0-4166-A895-FF01EA4895C5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [TCP Query User{333BFF03-AF22-4ABB-8451-17B4D914FF18}C:\smartpixel\bin\smartpixel.exe] => (Allow) C:\smartpixel\bin\smartpixel.exe
FirewallRules: [UDP Query User{87F87DAB-6965-461F-A5DF-74F9EA78F7EB}C:\smartpixel\bin\smartpixel.exe] => (Allow) C:\smartpixel\bin\smartpixel.exe
FirewallRules: [{7615BE00-204A-4936-AB7E-0E48E4C990E2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/13/2015 10:01:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname Anwender-PC.local already in use; will try Anwender-PC-2.local instead

Error: (09/13/2015 10:01:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 Anwender-PC.local. Addr 192.168.178.52

Error: (09/13/2015 10:01:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.112:5353    4 Anwender-PC.local. Addr 192.168.178.112

Error: (09/13/2015 10:01:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:  16 Anwender-PC.local. AAAA FE80:0000:0000:0000:2196:8FA4:5C1A:E52F

Error: (09/13/2015 10:01:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.112:5353    4 Anwender-PC.local. Addr 192.168.178.112

Error: (09/13/2015 10:01:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:    4 Anwender-PC.local. Addr 192.168.178.52

Error: (09/13/2015 10:01:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.112:5353    4 Anwender-PC.local. Addr 192.168.178.112

Error: (09/13/2015 10:01:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:  16 Anwender-PC.local. AAAA FE80:0000:0000:0000:2196:8FA4:5C1A:E52F

Error: (09/13/2015 10:01:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.112:5353    4 Anwender-PC.local. Addr 192.168.178.112

Error: (09/13/2015 10:01:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:    4 Anwender-PC.local. Addr 192.168.178.52


Systemfehler:
=============
Error: (09/13/2015 06:54:10 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (09/13/2015 06:54:10 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst AMD FUEL Service erreicht.

Error: (09/13/2015 06:53:58 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (09/12/2015 10:40:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (09/12/2015 10:40:24 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst AMD FUEL Service erreicht.

Error: (09/12/2015 10:40:12 AM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (09/11/2015 08:06:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AMD FUEL Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (09/11/2015 08:06:08 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst AMD FUEL Service erreicht.

Error: (09/11/2015 08:05:56 PM) (Source: volmgr) (EventID: 46) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (09/11/2015 08:05:29 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Windows Update" wurde mit folgendem Fehler beendet:
%%-2147467243


Microsoft Office:
=========================
Error: (09/13/2015 10:01:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname Anwender-PC.local already in use; will try Anwender-PC-2.local instead

Error: (09/13/2015 10:01:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 Anwender-PC.local. Addr 192.168.178.52

Error: (09/13/2015 10:01:03 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.112:5353    4 Anwender-PC.local. Addr 192.168.178.112

Error: (09/13/2015 10:01:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:  16 Anwender-PC.local. AAAA FE80:0000:0000:0000:2196:8FA4:5C1A:E52F

Error: (09/13/2015 10:01:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.112:5353    4 Anwender-PC.local. Addr 192.168.178.112

Error: (09/13/2015 10:01:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:    4 Anwender-PC.local. Addr 192.168.178.52

Error: (09/13/2015 10:01:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.112:5353    4 Anwender-PC.local. Addr 192.168.178.112

Error: (09/13/2015 10:01:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:  16 Anwender-PC.local. AAAA FE80:0000:0000:0000:2196:8FA4:5C1A:E52F

Error: (09/13/2015 10:01:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.178.112:5353    4 Anwender-PC.local. Addr 192.168.178.112

Error: (09/13/2015 10:01:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing:    4 Anwender-PC.local. Addr 192.168.178.52


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 51%
Installierter physikalischer RAM: 8172.29 MB
Verfügbarer physikalischer RAM: 3930.35 MB
Summe virtueller Speicher: 8170.5 MB
Verfügbarer virtueller Speicher: 3636.03 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:931.41 GB) (Free:673.79 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: F51A3DE5)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
TDSS killer hat nichts gefunden

M-K-D-B 14.09.2015 13:33
Zukünftig bitte beachten:
Zitat:
Gestartet von C:\Users\Anwender\Downloads
Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.




Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

schäfler 14.09.2015 16:26
Code:
ComboFix 15-09-07.01 - Anwender 14.09.2015  17:10:53.1.4 - x64
Microsoft Windows 7 Professional  6.1.7601.1.1252.49.1031.18.8172.6227 [GMT 2:00]
ausgeführt von:: c:\users\Anwender\Desktop\ComboFix.exe
AV: Avira Antivirus *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Antivirus *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
(((((((((((((((((((((((  Dateien erstellt von 2015-08-14 bis 2015-09-14  ))))))))))))))))))))))))))))))
.
.
2015-09-14 15:19 . 2015-09-14 15:19        --------        dc----w-        c:\users\Default\AppData\Local\temp
2015-09-10 15:40 . 2015-09-10 19:58        1110016        ----a-w-        c:\windows\system32\schedsvc.dll
2015-09-10 15:38 . 2015-09-10 19:59        1737216        ----a-w-        c:\program files\Windows Journal\NBDoc.DLL
2015-09-10 15:27 . 2015-09-10 19:54        49664        ----a-w-        c:\program files\Internet Explorer\DiagnosticsHub_is.dll
2015-09-10 15:19 . 2015-09-10 19:52        1941504        ----a-w-        c:\windows\system32\authui.dll
2015-09-10 15:19 . 2015-09-10 19:52        1805824        ----a-w-        c:\windows\SysWow64\authui.dll
2015-09-10 15:19 . 2015-09-10 19:52        115136        ----a-w-        c:\windows\system32\consent.exe
2015-09-10 15:19 . 2015-09-10 19:52        70656        ----a-w-        c:\windows\system32\appinfo.dll
2015-09-10 15:18 . 2015-09-10 19:52        2004480        ----a-w-        c:\windows\system32\msxml6.dll
2015-09-10 15:18 . 2015-09-10 19:52        1887232        ----a-w-        c:\windows\system32\msxml3.dll
2015-09-10 15:18 . 2015-09-10 19:52        2048        ----a-w-        c:\windows\SysWow64\msxml6r.dll
2015-09-10 15:18 . 2015-09-10 19:52        2048        ----a-w-        c:\windows\SysWow64\msxml3r.dll
2015-09-10 15:18 . 2015-09-10 19:52        2048        ----a-w-        c:\windows\system32\msxml6r.dll
2015-09-10 15:18 . 2015-09-10 19:52        2048        ----a-w-        c:\windows\system32\msxml3r.dll
2015-09-10 15:18 . 2015-09-10 19:52        1391104        ----a-w-        c:\windows\SysWow64\msxml6.dll
2015-09-10 15:18 . 2015-09-10 19:52        1241088        ----a-w-        c:\windows\SysWow64\msxml3.dll
2015-09-10 13:01 . 2015-09-10 14:33        692672        ----a-w-        c:\windows\system32\winload.efi
2015-09-10 13:01 . 2015-09-10 14:33        63488        ----a-w-        c:\windows\system32\setbcdlocale.dll
2015-09-10 13:01 . 2015-09-10 14:33        616360        ----a-w-        c:\windows\system32\winresume.efi
2015-09-10 13:01 . 2015-09-10 14:33        61440        ----a-w-        c:\windows\system32\drivers\appid.sys
2015-09-10 13:01 . 2015-09-10 14:33        59392        ----a-w-        c:\windows\system32\appidapi.dll
2015-09-10 13:01 . 2015-09-10 14:33        50688        ----a-w-        c:\windows\SysWow64\appidapi.dll
2015-09-10 13:01 . 2015-09-10 14:33        32768        ----a-w-        c:\windows\system32\appidsvc.dll
2015-09-10 13:01 . 2015-09-10 14:33        17920        ----a-w-        c:\windows\system32\appidcertstorecheck.exe
2015-09-10 13:01 . 2015-09-10 14:33        147456        ----a-w-        c:\windows\system32\appidpolicyconverter.exe
2015-08-17 21:37 . 2015-08-17 21:37        --------        dc----w-        c:\users\Anwender\AppData\Roaming\aipai
2015-08-17 21:37 . 2015-08-17 21:37        --------        dc----w-        C:\SmartPixel
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-09-11 19:48 . 2015-03-17 13:17        113880        -c--a-w-        c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-09-10 19:53 . 2015-09-10 15:39        44032        ----a-w-        c:\windows\apppatch\acwow64.dll
2015-08-26 16:37 . 2010-06-24 09:33        134753440        -c--a-w-        c:\windows\system32\mrt.exe
2015-08-12 01:10 . 2015-08-11 19:24        774656        ----a-w-        c:\windows\system32\invagent.dll
2015-08-12 01:10 . 2015-08-11 19:24        743424        ----a-w-        c:\windows\system32\generaltel.dll
2015-08-12 01:10 . 2015-08-11 19:24        69120        ----a-w-        c:\windows\system32\acmigration.dll
2015-08-12 01:10 . 2015-08-11 19:24        437760        ----a-w-        c:\windows\system32\devinv.dll
2015-08-12 01:10 . 2015-08-11 19:24        1116672        ----a-w-        c:\windows\system32\appraiser.dll
2015-08-12 01:10 . 2015-08-11 19:24        227328        ----a-w-        c:\windows\system32\aepdu.dll
2015-08-12 01:10 . 2015-08-11 19:24        17344        ----a-w-        c:\windows\system32\CompatTelRunner.exe
2015-08-12 01:10 . 2015-08-11 19:24        1148416        ----a-w-        c:\windows\system32\aeinv.dll
2015-08-12 01:09 . 2015-08-11 19:24        856064        ----a-w-        c:\windows\SysWow64\rdvidcrl.dll
2015-08-12 01:09 . 2015-08-11 19:24        7077376        ----a-w-        c:\windows\system32\mstscax.dll
2015-08-12 01:09 . 2015-08-11 19:24        6131200        ----a-w-        c:\windows\SysWow64\mstscax.dll
2015-08-12 01:09 . 2015-08-11 19:24        1057792        ----a-w-        c:\windows\system32\rdvidcrl.dll
2015-08-12 01:09 . 2015-08-11 19:24        62976        ----a-w-        c:\windows\system32\tsgqec.dll
2015-08-12 01:09 . 2015-08-11 19:24        53248        ----a-w-        c:\windows\SysWow64\tsgqec.dll
2015-08-12 01:09 . 2015-08-11 19:24        429568        ----a-w-        c:\windows\system32\wksprt.exe
2015-08-12 01:09 . 2015-08-12 01:09        124624        ----a-w-        c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 01:09 . 2015-08-12 01:09        103120        ----a-w-        c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-08-12 01:08 . 2015-08-11 19:23        1743360        ----a-w-        c:\windows\system32\sysmain.dll
2015-08-12 01:08 . 2015-08-11 19:23        94656        ----a-w-        c:\windows\system32\drivers\mountmgr.sys
2015-08-12 01:08 . 2015-08-11 19:23        11264        ----a-w-        c:\windows\system32\msmmsp.dll
2015-08-12 01:07 . 2015-08-11 19:23        52736        ----a-w-        c:\windows\system32\basesrv.dll
2015-08-12 01:06 . 2015-08-11 19:20        82432        ----a-w-        c:\windows\SysWow64\davclnt.dll
2015-08-12 01:06 . 2015-08-11 19:20        260096        ----a-w-        c:\windows\system32\WebClnt.dll
2015-08-12 01:06 . 2015-08-11 19:20        206848        ----a-w-        c:\windows\SysWow64\WebClnt.dll
2015-08-12 01:06 . 2015-08-11 19:20        102912        ----a-w-        c:\windows\system32\davclnt.dll
2015-08-12 01:06 . 2015-08-11 19:20        1648128        ----a-w-        c:\windows\system32\DWrite.dll
2015-08-12 01:06 . 2015-08-11 19:20        1251328        ----a-w-        c:\windows\SysWow64\DWrite.dll
2015-08-12 01:06 . 2015-08-11 19:20        1180160        ----a-w-        c:\windows\system32\FntCache.dll
2015-08-12 01:06 . 2015-08-11 19:20        2565120        ----a-w-        c:\windows\system32\d3d10warp.dll
2015-08-12 01:06 . 2015-08-11 19:20        1987584        ----a-w-        c:\windows\SysWow64\d3d10warp.dll
2015-08-12 01:05 . 2015-08-11 19:20        193536        ----a-w-        c:\windows\system32\notepad.exe
2015-08-12 01:05 . 2015-08-11 19:20        193536        ----a-w-        c:\windows\notepad.exe
2015-08-12 01:05 . 2015-08-11 19:20        179712        ----a-w-        c:\windows\SysWow64\notepad.exe
2015-08-12 01:05 . 2015-08-11 19:20        14177280        ----a-w-        c:\windows\system32\shell32.dll
2015-08-12 01:00 . 2015-08-11 19:20        493504        ----a-w-        c:\windows\system32\mcupdate_GenuineIntel.dll
2015-07-24 17:53 . 2014-03-03 15:54        162528        -c--a-w-        c:\windows\system32\drivers\avgntflt.sys
2015-07-24 17:53 . 2014-03-03 15:54        141416        -c--a-w-        c:\windows\system32\drivers\avipbb.sys
2015-07-15 21:18 . 2015-07-15 08:50        254976        ----a-w-        c:\windows\system32\cewmdm.dll
2015-07-15 21:18 . 2015-07-15 08:50        210432        ----a-w-        c:\windows\SysWow64\cewmdm.dll
2015-07-15 21:18 . 2015-07-15 08:49        3180544        ----a-w-        c:\windows\system32\rdpcorets.dll
2015-07-15 21:18 . 2015-07-15 08:49        16384        ----a-w-        c:\windows\system32\RdpGroupPolicyExtension.dll
2015-07-15 21:17 . 2015-07-15 08:49        404992        ----a-w-        c:\windows\system32\gdi32.dll
2015-07-15 21:17 . 2015-07-15 08:49        312320        ----a-w-        c:\windows\SysWow64\gdi32.dll
2015-07-15 21:16 . 2015-07-15 08:46        2087424        ----a-w-        c:\windows\system32\ole32.dll
2015-07-15 21:16 . 2015-07-15 08:46        1414656        ----a-w-        c:\windows\SysWow64\ole32.dll
2015-07-15 21:16 . 2015-07-15 08:45        229376        ----a-w-        c:\windows\system32\wintrust.dll
2015-07-15 21:16 . 2015-07-15 08:45        188416        ----a-w-        c:\windows\system32\cryptsvc.dll
2015-07-15 21:16 . 2015-07-15 08:45        179200        ----a-w-        c:\windows\SysWow64\wintrust.dll
2015-07-15 21:16 . 2015-07-15 08:45        1480192        ----a-w-        c:\windows\system32\crypt32.dll
2015-07-15 21:16 . 2015-07-15 08:45        143872        ----a-w-        c:\windows\SysWow64\cryptsvc.dll
2015-07-15 21:16 . 2015-07-15 08:45        140288        ----a-w-        c:\windows\system32\cryptnet.dll
2015-07-15 21:16 . 2015-07-15 08:45        1174528        ----a-w-        c:\windows\SysWow64\crypt32.dll
2015-07-15 21:16 . 2015-07-15 08:45        103936        ----a-w-        c:\windows\SysWow64\cryptnet.dll
2015-07-15 21:15 . 2015-07-15 08:45        73216        ----a-w-        c:\windows\SysWow64\msiexec.exe
2015-07-15 21:15 . 2015-07-15 08:45        504320        ----a-w-        c:\windows\system32\msihnd.dll
2015-07-15 21:15 . 2015-07-15 08:45        337408        ----a-w-        c:\windows\SysWow64\msihnd.dll
2015-07-15 21:15 . 2015-07-15 08:45        3242496        ----a-w-        c:\windows\system32\msi.dll
2015-07-15 21:15 . 2015-07-15 08:45        2364416        ----a-w-        c:\windows\SysWow64\msi.dll
2015-07-15 21:15 . 2015-07-15 08:45        128000        ----a-w-        c:\windows\system32\msiexec.exe
2015-07-15 21:15 . 2015-07-15 08:45        25088        ----a-w-        c:\windows\SysWow64\msimsg.dll
2015-07-15 21:15 . 2015-07-15 08:45        25088        ----a-w-        c:\windows\system32\msimsg.dll
2015-06-18 06:41 . 2015-03-17 13:17        63704        -c--a-w-        c:\windows\system32\drivers\mwac.sys
2015-06-18 06:41 . 2015-03-17 13:17        109272        -c--a-w-        c:\windows\system32\drivers\mbamchameleon.sys
2015-06-18 06:41 . 2015-03-17 13:17        25816        -c--a-w-        c:\windows\system32\drivers\mbam.sys
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EADM"="c:\program files (x86)\Origin\Origin.exe" [2015-08-22 3632112]
"Spotify Web Helper"="c:\users\Anwender\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-09-04 2018360]
"Octoshape Streaming Services"="c:\users\Anwender\AppData\Roaming\Octoshape\Octoshape Streaming Services\OctoshapeClient.exe" [2014-08-01 500016]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2015-08-26 782008]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-10-07 507776]
"bdruninstaller"="c:\program files\Common Files\Bitdefender\SetupInformation\downloader\setuplauncher.exe" [2014-06-06 676568]
.
c:\users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Tintenwarnungen überwachen - HP Deskjet 3070 B611 series.lnk - c:\windows\system32\RunDll32.exe "c:\program files\HP\HP Deskjet 3070 B611 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN181336LP05MQ;CONNECTION=USB;MONITOR=1; [2009-7-14 45568]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux9"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *\0auto_reactivate \\?\Volume{f7c68f79-a48d-11e3-9e6d-806e6f6e6963}\bootwiz\asrm.bin
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
R2 AMD FUEL Service;AMD FUEL Service;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe;c:\program files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [x]
R2 AntiVirMailService;Avira Email-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avmailc7.exe [x]
R2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe;c:\program files (x86)\Avira\AntiVir Desktop\avwebg7.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
R3 amdhub30;AMD USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\amdhub30.sys;c:\windows\SYSNATIVE\DRIVERS\amdhub30.sys [x]
R3 amdxhc;AMD USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\amdxhc.sys;c:\windows\SYSNATIVE\DRIVERS\amdxhc.sys [x]
R3 athur;Atheros AR9271 Wireless Network Adapter Service;c:\windows\system32\DRIVERS\athurx.sys;c:\windows\SYSNATIVE\DRIVERS\athurx.sys [x]
R3 AX88772B;ASIX AX88772B USB2.0 to Fast Ethernet Adapter;c:\windows\system32\DRIVERS\ax88772b.sys;c:\windows\SYSNATIVE\DRIVERS\ax88772b.sys [x]
R3 BEService;BattlEye Service;c:\program files (x86)\Common Files\BattlEye\BEService.exe;c:\program files (x86)\Common Files\BattlEye\BEService.exe [x]
R3 e1kexpress;Intel(R) Network Connections Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
R3 EasyAntiCheat;EasyAntiCheat;c:\windows\system32\EasyAntiCheat.exe;c:\windows\SYSNATIVE\EasyAntiCheat.exe [x]
R3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys;c:\windows\SYSNATIVE\drivers\IntcHdmi.sys [x]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x]
R3 MRV6X64P;Vista 64-bits Native WiFi Driver;c:\windows\system32\DRIVERS\MRVW13C.sys;c:\windows\SYSNATIVE\DRIVERS\MRVW13C.sys [x]
R3 netr28x;Ralink 802.11n-Drahtlostreiber für Windows Vista;c:\windows\system32\DRIVERS\netr28x.sys;c:\windows\SYSNATIVE\DRIVERS\netr28x.sys [x]
R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x]
R3 PciSPorts;High-Speed PCI Serial Port;c:\windows\system32\DRIVERS\PciSPorts.sys;c:\windows\SYSNATIVE\DRIVERS\PciSPorts.sys [x]
R3 Ph3xIB64;Philips 713x VU PCI TV Card;c:\windows\system32\DRIVERS\Ph3xIB64.sys;c:\windows\SYSNATIVE\DRIVERS\Ph3xIB64.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 rt61x64;RT61 Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr6164.sys;c:\windows\SYSNATIVE\DRIVERS\netr6164.sys [x]
R3 RTL8023x64;Realtek 10/100-Netzwerkkartenfamilie-NDIS-x64-Treiber;c:\windows\system32\DRIVERS\Rtnic64.sys;c:\windows\SYSNATIVE\DRIVERS\Rtnic64.sys [x]
R3 RTL8192su;Realtek RTL8192SU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192su.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192su.sys [x]
R3 RTL85n64;Realtek 8180/8185 Extensible 802.11-Drahtlosgerätetreiber;c:\windows\system32\DRIVERS\RTL85n64.sys;c:\windows\SYSNATIVE\DRIVERS\RTL85n64.sys [x]
R3 RtlWlanu;Realtek Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\rtwlanu.sys;c:\windows\SYSNATIVE\DRIVERS\rtwlanu.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 afcdpsrv;Acronis Nonstop Backup Service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
R4 syncagentsrv;Acronis Sync Agent Service;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe;c:\program files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [x]
S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_sata.sys [x]
S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys;c:\windows\SYSNATIVE\DRIVERS\amd_xata.sys [x]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys;c:\windows\SYSNATIVE\DRIVERS\fltsrv.sys [x]
S0 tib;Acronis TIB Manager;c:\windows\system32\DRIVERS\tib.sys;c:\windows\SYSNATIVE\DRIVERS\tib.sys [x]
S0 tib_mounter;Acronis TIB Mounter;c:\windows\system32\DRIVERS\tib_mounter.sys;c:\windows\SYSNATIVE\DRIVERS\tib_mounter.sys [x]
S0 vididr;Acronis Virtual Disk;c:\windows\system32\DRIVERS\vididr.sys;c:\windows\SYSNATIVE\DRIVERS\vididr.sys [x]
S0 vidsflt;Acronis Disk Storage Filter;c:\windows\system32\DRIVERS\vidsflt.sys;c:\windows\SYSNATIVE\DRIVERS\vidsflt.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 AODDriver4.2;AODDriver4.2;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys;c:\program files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 avnetflt;avnetflt;c:\windows\system32\DRIVERS\avnetflt.sys;c:\windows\SYSNATIVE\DRIVERS\avnetflt.sys [x]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 EtronHub3;Etron USB 3.0 Extensible Hub Driver;c:\windows\system32\Drivers\EtronHub3.sys;c:\windows\SYSNATIVE\Drivers\EtronHub3.sys [x]
S3 EtronXHCI;Etron USB 3.0 Extensible Host Controller Driver;c:\windows\system32\Drivers\EtronXHCI.sys;c:\windows\SYSNATIVE\Drivers\EtronXHCI.sys [x]
S3 LADF_CaptureOnly;LADF Capture Filter Driver;c:\windows\system32\DRIVERS\ladfGSCamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSCamd64.sys [x]
S3 LADF_RenderOnly;LADF Render Filter Driver;c:\windows\system32\DRIVERS\ladfGSRamd64.sys;c:\windows\SYSNATIVE\DRIVERS\ladfGSRamd64.sys [x]
S3 LGBusEnum;Logitech GamePanel Virtual Bus Enumerator Driver;c:\windows\system32\drivers\LGBusEnum.sys;c:\windows\SYSNATIVE\drivers\LGBusEnum.sys [x]
S3 LGVirHid;Logitech Gamepanel Virtual HID Device Driver;c:\windows\system32\drivers\LGVirHid.sys;c:\windows\SYSNATIVE\drivers\LGVirHid.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys;c:\windows\SYSNATIVE\DRIVERS\usbfilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-09-05 07:36        997704        -c--a-w-        c:\program files (x86)\Google\Chrome\Application\45.0.2454.85\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2015-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-06 13:26]
.
2015-09-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-05-06 13:26]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncError]
@="{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}"
[HKEY_CLASSES_ROOT\CLSID\{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}]
2013-08-07 15:04        2827776        ---ha-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncInProgress]
@="{00F848DC-B1D4-4892-9C25-CAADC86A215D}"
[HKEY_CLASSES_ROOT\CLSID\{00F848DC-B1D4-4892-9C25-CAADC86A215D}]
2013-08-07 15:04        2827776        ---ha-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncOk]
@="{71573297-552E-46fc-BE3D-3DFAF88D47B7}"
[HKEY_CLASSES_ROOT\CLSID\{71573297-552E-46fc-BE3D-3DFAF88D47B7}]
2013-08-07 15:04        2827776        ---ha-w-        c:\program files (x86)\Acronis\TrueImageHome\tishell64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2014-03-03 682840]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2014-03-03 13662936]
"Launch LCore"="c:\program files\Logitech Gaming Software\LCore.exe" [2014-10-14 12697368]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-06-29 170280]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://www.google.com
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\hdervz85.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1701067893-481638138-2713998442-1000\Software\SecuROM\License information*]
"datasecu"=hex:a4,42,27,b6,74,21,2f,02,8f,35,2d,ad,ad,61,79,8a,4a,e6,f8,84,d1,
  dd,bc,d7,b7,b8,f6,86,36,56,a8,c6,5b,02,bc,8c,b6,07,38,fb,7e,4e,01,a7,c2,df,\
"rkeysecu"=hex:92,0d,55,86,4b,a3,95,fd,7d,7f,e7,9c,24,44,ab,52
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2015-09-14  17:23:35
ComboFix-quarantined-files.txt  2015-09-14 15:23
.
Vor Suchlauf: 13 Verzeichnis(se), 722.929.737.728 Bytes frei
Nach Suchlauf: 19 Verzeichnis(se), 724.025.008.128 Bytes frei
.
- - End Of File - - D4205271417494F53C47D2EBE42F516F
soll ich die anderen beiden programme TDSS killer und FRST nochmal starten da ich diese nicht auf dem desktop ausgeführt habe?

M-K-D-B 14.09.2015 18:16
Nein, die brauchst du nicht mehr ausführen. :)







Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).





Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.







Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.







Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von AdwCleaner,
  • die Logdatei von MBAM,
  • die Logdatei von JRT,
  • die beiden neuen Logdateien von FRST.

M-K-D-B 19.09.2015 11:49
Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!


Alle Zeitangaben in WEZ +1. Es ist jetzt 20:43 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131