Trojaner-Board - TR Fire Hooker.1825 bekomme den nicht weg !

AdwCleaner Logfile:

Code:

# AdwCleaner v5.024 - Bericht erstellt am 11/12/2015 um 12:36:44

# Aktualisiert am 07/12/2015 von Xplode

# Datenbank : 2015-12-07.3 [Server]

# Betriebssystem : Windows (TM) Vista Home Premium Service Pack 2 (x64)

# Benutzername : Guido - GUIDO-PC

# Gestartet von : C:\Users\Guido\Desktop\AdwCleaner_5.024.exe

# Option : Löschen

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 
 

***** [ Ordner ] *****
 

[#] Ordner Gelöscht : C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnaimegnbbjndcdeabindllnoebolppb

[#] Ordner Gelöscht : C:\Windows\Installer\{6D201E8C-ADDA-4102-8186-F8DF45C0B005}

[#] Ordner Gelöscht : C:\Windows\Installer\{6D201E8C-ADDA-4102-8186-F8DF45C0B005}

[#] Ordner Gelöscht : C:\Windows\Installer\{C6C6288E-B0F9-4BA2-BEB2-41CB445982EE}
 

***** [ Dateien ] *****
 

[-] Datei Gelöscht : C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hnaimegnbbjndcdeabindllnoebolppb_0.localstorage

[-] Datei Gelöscht : C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_hnaimegnbbjndcdeabindllnoebolppb_0.localstorage-journal

[-] Datei Gelöscht : C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\user.js
 

***** [ DLLs ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Aufgabenplanung ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{AD0D6783-0BC7-4CEE-B250-4C286A4D597F}]
 

***** [ Internetbrowser ] *****
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Proxy Einstellungen zurückgesetzt

:: Winsock Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

########## EOF - C:\AdwCleaner\AdwCleaner[C9].txt - [1795 Bytes] ##########

--- --- ---

[/CODE]

JRT Logfile:

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.1 (11.24.2015)

Operating System: Windows (TM) Vista Home Premium x64 

Ran by Guido (Administrator) on 11.12.2015 at 12:49:00,25

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 11 
 

Successfully deleted: C:\ProgramData\pc drivers headquarters (Folder) 

Successfully deleted: C:\Users\Guido\AppData\Local\downloaded installers (Folder) 

Successfully deleted: C:\Users\Guido\Appdata\LocalLow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com (File) 

Successfully deleted: C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\extensions\safesearch@avira.com (Folder) 

Successfully deleted: C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\extensions\safesearch@avira.com\search.xml (File) 

Successfully deleted: C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\user.js (File) 

Successfully deleted: C:\Users\Guido\Documents\add-in express (Folder) 

Successfully deleted: C:\users\Public\Documents\downloaded installers (Folder) 

Successfully deleted: C:\Windows\system32\Tasks\SlimCleaner Plus (Scheduled Scan - Guido) (Task)

Successfully deleted: C:\Windows\Tasks\SlimCleaner Plus (Scheduled Scan - Guido).job (Task) 

Successfully deleted: C:\Windows\wininit.ini (File) 
 

Deleted the following from C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\prefs.js

user_pref(avira.safe_search.search_was_active, false);

user_pref(browser.uiCustomization.state, {\placements\:{\PanelUI-contents\:[\edit-controls\,\zoom-controls\,\new-window-button\,\privatebrowsing-button\,\save-

user_pref(extensions.xpiState, {\app-profile\:{\abs@avira.com\:{\d\:\C:\\\\Users\\\\Guido\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\6til7x6m.default
 
 
 

Registry: 1 
 

Successfully deleted: HKLM\Software\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeoo (Registry Key) 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 11.12.2015 at 12:53:57,99

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-12-2015

durchgeführt von Guido (2015-12-11 12:58:21)

Gestartet von C:\Users\Guido\Desktop

Windows Vista (TM) Home Premium Service Pack 2 (X64) (2008-11-26 11:36:44)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1757636982-3309790088-3969889856-500 - Administrator - Disabled)

Gast (S-1-5-21-1757636982-3309790088-3969889856-501 - Limited - Disabled)

Guido (S-1-5-21-1757636982-3309790088-3969889856-1000 - Administrator - Enabled) => C:\Users\Guido

UpdatusUser (S-1-5-21-1757636982-3309790088-3969889856-1004 - Limited - Enabled) => C:\Users\UpdatusUser
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

2007 Microsoft Office system (HKLM-x32\...\PROHYBRIDR) (Version: 12.0.6612.1000 - Microsoft Corporation)

Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)

Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.1.0.5790 - Adobe Systems Inc.)

Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.228 - Adobe Systems Incorporated)

Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.235 - Adobe Systems Incorporated)

Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)

Adobe Reader X (10.1.16) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)

Ashampoo Burning Studio 6 FREE (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.7.7 - ashampoo GmbH & Co. KG)

Ashampoo Office 2008 (C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008) (HKLM-x32\...\sm-un1.u32) (Version:  - SoftMaker Software GmbH)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{5b07d59f-99e0-4c52-ad25-965f7e38d6ac}) (Version: 1.1.51.19070 - Avira Operations GmbH & Co. KG)

Avira Launcher (x32 Version: 1.1.51.19070 - Avira Operations GmbH & Co. KG) Hidden

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{79809712-A577-4B8C-A9FC-51945690C7DC}) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)

Call of Duty(R) - World at War(TM) (HKLM-x32\...\InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}) (Version: 1.7 - Activision)

Call of Duty(R) - World at War(TM) (x32 Version: 1.0 - Activision) Hidden

Call of Duty(R) - World at War(TM) 1.1 Patch (x32 Version:  - ) Hidden

Call of Duty(R) - World at War(TM) 1.1 Patch (x32 Version: 1.1 - Activision) Hidden

Call of Duty(R) - World at War(TM) 1.2 Patch (x32 Version:  - ) Hidden

Call of Duty(R) - World at War(TM) 1.2 Patch (x32 Version: 1.2 - Activision) Hidden

Call of Duty(R) - World at War(TM) 1.3 Patch (x32 Version:  - ) Hidden

Call of Duty(R) - World at War(TM) 1.3 Patch (x32 Version: 1.3 - Activision) Hidden

Call of Duty(R) - World at War(TM) 1.4 Patch (x32 Version:  - ) Hidden

Call of Duty(R) - World at War(TM) 1.4 Patch (x32 Version: 1.4 - Activision) Hidden

Call of Duty(R) - World at War(TM) 1.5 Patch (x32 Version:  - ) Hidden

Call of Duty(R) - World at War(TM) 1.5 Patch (x32 Version: 1.5 - Activision) Hidden

Call of Duty(R) - World at War(TM) 1.6 Patch (x32 Version:  - ) Hidden

Call of Duty(R) - World at War(TM) 1.6 Patch (x32 Version: 1.6 - Activision) Hidden

Call of Duty(R) - World at War(TM) 1.7 Patch (x32 Version:  - ) Hidden

Call of Duty(R) - World at War(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden

Call of Duty: Black Ops - Multiplayer (HKLM-x32\...\Steam App 42710) (Version:  - Treyarch)

Call of Duty: Black Ops (HKLM-x32\...\Steam App 42700) (Version:  - Treyarch)

Camera RAW Plug-In for EPSON Creativity Suite (HKLM-x32\...\{55D39D7E-0475-450B-A7A9-919EBCBC9F53}) (Version: 3.1.0.0 - SEIKO EPSON CORPORATION)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)

Canon MG3100 series Benutzerregistrierung (HKLM-x32\...\Canon MG3100 series Benutzerregistrierung) (Version:  - )

Canon MG3100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3100_series) (Version:  - Canon Inc.)

Canon MG3100 series On-screen Manual (HKLM-x32\...\Canon MG3100 series On-screen Manual) (Version:  - )

Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version:  - )

Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version:  - )

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )

Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )

CanoScan LiDE 200 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_CNQ4807) (Version:  - )

CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)

Content Manager 2 (HKLM-x32\...\Content Manager 2) (Version: 3.10.0.52790 - NNG Llc.)

DC-Bass Source 1.3.0 (HKLM-x32\...\DC-Bass Source) (Version:  - )

Debut Video Capture Software (HKLM-x32\...\Debut) (Version:  - NCH Software)

DivX Converter (HKLM-x32\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)

DivX Plus DirectShow Filters (HKLM-x32\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)

DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.7.0.31 - DivX, LLC)

EPSON-Drucker-Software (HKLM\...\EPSON Printer and Utilities) (Version:  - )

eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden

Express Zip (HKLM-x32\...\ExpressZip) (Version:  - NCH Software)

GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.80 - Google Inc.)

Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden

HLSW v1.1.0 (HKLM-x32\...\HLSW_is1) (Version:  - Timo Stripf)

Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)

Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden

Labtec WebCam (HKLM\...\{FA4DA5D7-5140-4024-BADD-FCB540833E5D}) (Version: 10.51.1130 - Labtec, Inc.)

Labtec® Camera-Treiber (HKLM-x32\...\QcDrv) (Version:  - )

Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )

Lexware faktura+auftrag 2009 (HKLM-x32\...\{1339105E-F091-458E-90C1-B8F24153C825}) (Version: 13.50.00.0001 - Lexware GmbH & Co. KG)

Lexware Info Service (HKLM-x32\...\{59624372-3B85-47f4-9B04-4911E551DF1E}) (Version: 2.61.00.0033 - Lexware GmbH & Co. KG)

Logitech SetPoint 6.51 (HKLM\...\SP6) (Version: 6.51.8 - Logitech)

MAGIX PC Check & Tuning Free 2011 (HKLM-x32\...\MAGIX_MSI_PC_Check_Tuning_Free_2011) (Version: 6.0.403.1050 - MAGIX AG)

MAGIX PC Check & Tuning Free 2011 (x32 Version: 6.0.403.1050 - MAGIX AG) Hidden

MAGIX Screenshare (HKLM-x32\...\{B63DFA23-5C10-44B4-881D-45EFBF4A4761}) (Version: 4.3.6.1987 - MAGIX AG)

Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Excel Viewer 97 (HKLM-x32\...\XLViewer97) (Version:  - )

Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)

Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM-x32\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Sync Framework Services Native v1.0 (x86) (HKLM-x32\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)

Microsoft Virtual PC 2007 (HKLM-x32\...\{8A7CAA24-7B23-410B-A7C3-F994B0944160}) (Version: 6.0.156.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Word in Works Suite-Add-In (HKLM-x32\...\{C5DB5FBF-F037-4BEE-A110-257E89EDD8BB}) (Version: 1.0.0.0000 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)

MSXML 4.0 SP2 (KB927978) (HKLM-x32\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - NNG Llc.)

NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles)

Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )

NVIDIA 3D Vision Controller-Treiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 314.22 - NVIDIA Corporation)

NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)

NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.7 - NVIDIA Corporation)

NVIDIA GeForce Experience 1.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.1 - NVIDIA Corporation)

NVIDIA Grafiktreiber 314.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 314.22 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.12.1031 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.1031 - NVIDIA Corporation)

OpenSource Flash Video Splitter 1.0.0.5 (HKLM-x32\...\OpenSource Flash Video Splitter) (Version: 1.0.0.5 - )

PDF24 Creator 7.3.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)

PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden

Ralink RT2870 Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0D}) (Version: 1.5.5.0 - Ralink)

RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden

RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6410 - Realtek Semiconductor Corp.)

RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden

RENESIS® Player Browser Plugins (HKLM-x32\...\{62B7C52C-CAB6-48B1-8245-52356C141C92}) (Version: 1.1.1 - examotion® GmbH)

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.43.0 - SAMSUNG Electronics Co., Ltd.)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

Sony USB Driver (HKLM-x32\...\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}) (Version:  - )

Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)

Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)

Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)

System Requirements Lab (HKLM-x32\...\SystemRequirementsLab) (Version:  - )

T-DSL Treiber (HKLM-x32\...\{511A5609-446A-11D5-9FA6-0060087051D5}) (Version:  - )

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.12 - TeamSpeak Systems GmbH)

TweakMe! (HKLM-x32\...\{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1) (Version: 1.3.0.0 - pXc-coding.com)

Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0031-0000-0000-0000000FF1CE}_PROHYBRIDR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)

Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROHYBRIDR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROHYBRIDR_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROHYBRIDR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROHYBRIDR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)

VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden

VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version:  - NCH Software)

Vista Codec Package (HKLM-x32\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.4.6 - Shark007)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)

Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)

Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)

Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)

WinRAR Archivierer (HKLM-x32\...\WinRAR archiver) (Version:  - )

WinZip (HKLM-x32\...\WinZip) (Version:  - )

Wireless Network Utility (HKLM-x32\...\{EF72E0A5-57E8-471F-837E-82BB19771363}) (Version: Package:1.00.0006 Driver:0.0.0.0 UI:500.1491.627.2007 - Semiconductor Corporation)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B4CA0}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\PlanMaker.exe (SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B7456}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\Presentations.exe (SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B771B}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\TextMaker.exe (SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{05C3F9E2-1E76-439F-9E37-9020946A191A}\InprocServer32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{09303D01-B159-4F1B-A2B8-CA3117B8FA1B}\InprocServer32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{30291A01-707C-11d0-B457-4446490043BF}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\TextMaker.exe (SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{399254F2-670F-11D1-8092-0080ADB44B5C}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\PlanMaker.exe (SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{399254F3-670F-11D1-8092-0080ADB44B5C}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\PlanMaker.exe (SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{54B2BE72-FEC7-443D-BAE9-3E70E618A7D8}\InprocServer32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{73CA2532-42DE-449F-8C8A-229B8AAF3B68}\InprocServer32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{8a087491-5264-11d4-95F6-00A0CC3CCA14}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\PlanMaker.exe (SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{949DB7D2-36F2-4CCA-8CA8-A3A6D4E5911C}\InprocServer32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{A50A1B09-943D-4A78-B08D-56072A602ABD}\InprocServer32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{bf608490-5373-11d0-8efb-4446490043bf}\localserver32 -> C:\Program Files (x86)\Ashampoo\Ashampoo Office 2008\TextMaker.exe (SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{C9448C44-BEFB-4941-8457-E5C4314D3D96}\localserver32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{CAF933C7-C65A-46D2-AA63-1FC84EB43954}\InprocServer32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{CC9E9F9A-11A4-49DD-B468-782AFDE5607E}\InprocServer32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{CD89D352-5A13-49F8-9EB5-7E6D1FB0CD57}\localserver32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{DB20D0C0-4CEF-11D0-8B17-00AA00211961}\localserver32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{DB20D0C3-4CEF-11D0-8B17-00AA00211961}\localserver32 -> kein Dateipfad

CustomCLSID: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000_Classes\CLSID\{E8ACF719-FFDE-4EE1-8923-48BDA8569FCC}\localserver32 -> kein Dateipfad
 

==================== Wiederherstellungspunkte =========================
 

06-11-2015 06:55:23 Windows Update

10-11-2015 07:02:23 Windows Update

11-11-2015 07:12:48 Windows Update

13-11-2015 14:10:18 Geplanter Prüfpunkt

17-11-2015 07:07:28 Windows Update

23-11-2015 06:48:32 Windows Update

27-11-2015 09:34:31 Windows Update

30-11-2015 12:07:20 Geplanter Prüfpunkt

01-12-2015 07:24:15 Windows Update

02-12-2015 15:43:00 Geplanter Prüfpunkt

07-12-2015 06:30:19 Windows Update

07-12-2015 11:43:03 MAGIX PC Check & Tuning Free (PC Check)

08-12-2015 08:36:37 MAGIX PC Check & Tuning Free (PC Check)

08-12-2015 08:40:11 MAGIX Treiberinstallation

nForce 15.49 WHQL

08-12-2015 08:42:48 Konfiguriert NVIDIA ForceWare Network Access Manager

08-12-2015 08:57:12 MAGIX Treiberinstallation

nForce 15.49 WHQL

08-12-2015 08:58:20 Gerätetreiber-Paketinstallation: Realtek Semiconductor Corp. Audio-, Video- und Gamecontroller

10-12-2015 07:58:58 Installed PartitionMagic

10-12-2015 08:03:54 Configured PartitionMagic

10-12-2015 13:22:07 Windows Update

11-12-2015 12:49:00 JRT Pre-Junkware Removal
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2006-11-02 13:34 - 2014-12-19 08:02 - 00450690 ____N C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1        localhost

127.0.0.1        007guard.com

127.0.0.1        008i.com

127.0.0.1        www.008k.com

127.0.0.1        008k.com

127.0.0.1        www.00hq.com

127.0.0.1        00hq.com

127.0.0.1        010402.com

127.0.0.1        www.032439.com

127.0.0.1        032439.com

127.0.0.1        www.0scan.com

127.0.0.1        0scan.com

127.0.0.1        1000gratisproben.com

127.0.0.1        www.1000gratisproben.com

127.0.0.1        1001namen.com

127.0.0.1        www.1001namen.com

127.0.0.1        100888290cs.com

127.0.0.1        www.100888290cs.com

127.0.0.1        www.100sexlinks.com

127.0.0.1        100sexlinks.com

127.0.0.1        10sek.com

127.0.0.1        www.10sek.com

127.0.0.1        www.1-2005-search.com

127.0.0.1        1-2005-search.com

127.0.0.1        123fporn.info

127.0.0.1        www.123fporn.info

127.0.0.1        123haustiereundmehr.com

127.0.0.1        www.123haustiereundmehr.com

127.0.0.1        123moviedownload.com

127.0.0.1        www.123moviedownload.com
 

Da befinden sich 15464 zusätzliche Einträge.
 
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0581CC01-A24A-4B7A-8149-AEF1A709DDD4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1757636982-3309790088-3969889856-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {088E5097-4CD0-41CE-9C8D-6337FB1F9FBC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)

Task: {0F9323F2-FEB5-4E4E-B4AE-E2C31176C04D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-09] (Adobe Systems Incorporated)

Task: {15FD4707-156B-47AE-B6C0-0C3E4AFEC013} - System32\Tasks\{B77E2419-3A37-4209-91C1-9F7CDE342729} => pcalua.exe -a "D:\Partition Magic 7.0\Setup\Setup.exe" -d "D:\Partition Magic 7.0\Setup"

Task: {194D2E0F-F50D-41B0-BE40-7A7135E6BD18} - System32\Tasks\{A3C53057-F16C-44FF-9192-84BB2B5462B1} => pcalua.exe -a D:\USB_Driver\Driver_Setup_QCT.exe -d D:\USB_Driver

Task: {244350F5-23D0-4CD5-B56E-AB05573CF83A} - System32\Tasks\NCH Software\DebutReminder => C:\Program Files (x86)\NCH Software\Debut\Debut.exe [2012-12-18] (NCH Software)

Task: {387850AD-779F-405A-88F6-BB30EBB1DFD1} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1757636982-3309790088-3969889856-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {397FD979-684F-457B-9257-DC199DA19541} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\Ad-Aware Antivirus\AdAwareLauncher.exe

Task: {3A15955B-A636-4F8A-B2D1-53DD46099007} - System32\Tasks\{F12AA57A-1B74-4D8F-9D0B-31A1C578E9A0} => Firefox.exe hxxp://ui.skype.com/ui/0/6.10.0.104/de/go/help.faq.installer?LastError=1603

Task: {3A47987D-741F-4DDF-A272-4AFBA25DA9AB} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

Task: {3F7A53AD-7233-48D9-ABA8-ABB047CB300D} - System32\Tasks\NCH Software\VideoPadReminder => C:\Program Files (x86)\NCH Software\VideoPad\VideoPad.exe [2013-02-17] (NCH Software)

Task: {48667CBE-2C33-405A-A8E1-47551ABFA9C6} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => c:\program files (x86)\real\realplayer\Update\realsched.exe [2013-09-21] (RealNetworks, Inc.)

Task: {4B14D201-95AB-470C-8D29-6CD3B44D22A7} - System32\Tasks\DivX-Online-Aktualisierungsprogramm => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2014-01-10] ()

Task: {70FB99A8-0781-49F7-8DCB-20810F8205D6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)

Task: {7426EC5E-1EEF-4A92-8E6A-FAD1EE146489} - System32\Tasks\{C74FB618-8FBD-41C1-8D6D-ACA4960A118D} => pcalua.exe -a D:\setup.exe -d D:\

Task: {769111C6-6D46-4329-983B-8023D5DA15C3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

Task: {7BF90FDE-24C7-45F2-9AAD-39F072451A25} - System32\Tasks\{EEB58050-16DA-46D6-88B6-FEAA8BF2A056} => pcalua.exe -a E:\netsetup.exe -d E:\

Task: {7E72D805-8084-4441-9F0D-4AD7B90C8F94} - System32\Tasks\{ABE740EE-25BB-4367-9AA0-ACC0E2A248B6} => pcalua.exe -a D:\Driver\WinNT40\SETUP.EXE -d D:\Driver\WinNT40

Task: {7F04EB1D-3F3F-41FD-8BA9-D0E8FD5A4E15} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Signature Update => c:\program files\windows defender\MpCmdRun.exe [2008-01-21] (Microsoft Corporation)

Task: {86048BE4-9ABC-4EA6-B30C-F19D75138684} - System32\Tasks\Check for updates (Spybot - Search & Destroy) => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)

Task: {86888272-2A5F-4EDC-8977-6ADB8326D9E3} - System32\Tasks\RtlVistaStart => C:\Program Files (x86)\Wireless Network Utility\RtWLan.exe [2007-06-28] (Realtek Semiconductor Corp.)

Task: {89CC459E-4120-4096-ABC6-3AD4C48E96D7} - System32\Tasks\PCCT - MAGIX AG => C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MxTray.exe [2010-11-08] ()

Task: {8BACD978-477A-4620-AED0-900C0DA14EA5} - System32\Tasks\{905EDC18-BCC1-470B-8D1E-F91424032801} => pcalua.exe -a F:\Launch.exe -d F:\

Task: {903BAC58-77BD-4BEB-93CA-8F45547E4C82} - System32\Tasks\Refresh immunization (Spybot - Search & Destroy) => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {974119BC-9C05-445F-BF1E-041D820D23EE} - System32\Tasks\{02754A52-267D-422F-AEC4-FF42D32A0FC7} => pcalua.exe -a E:\netsetup.exe -d E:\

Task: {A78D82E9-B63B-4B0C-B13C-928724C7CCAE} - System32\Tasks\ASUS\ASUS RegRun Loader => C:\Program Files (x86)\ASUS\AASP\1.00.46\AsLoader.exe [2007-03-22] ()

Task: {B3B4068C-860D-4CE2-8D08-2227CCF02072} - System32\Tasks\{81E20A72-FEB7-4E2E-9378-E8E31E1C4D86} => pcalua.exe -a C:\Users\Guido\Desktop\Setup.exe -d C:\Users\Guido\Desktop

Task: {CF3607E2-8D0C-4713-B796-AC09005B9F92} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2015-11-09] (Oracle Corporation)

Task: {D06B796B-5CC4-4679-A584-FB2CDF2A5135} - System32\Tasks\{2A6AD1DA-B5DF-4483-82B3-689EE52C4B47} => pcalua.exe -a D:\Setup.EXE -d D:\

Task: {D469E258-C507-40B7-8B0A-58A2ED64FA96} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1757636982-3309790088-3969889856-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {DE47000E-F0EC-4F8C-B1C3-FBED6934F1F3} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1757636982-3309790088-3969889856-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {E13063F2-4917-4D76-A270-76A90A0AAD93} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-03] (Google Inc.)

Task: {F2D3D22E-AEA1-41CB-A874-96765E6801BC} - System32\Tasks\{D6FE09B2-86B9-4BC3-8256-4537593BAC67} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-12-11] (Skype Technologies S.A.)

Task: {F685D634-CC34-4942-90C9-FC17E00AA2F9} - System32\Tasks\Scan the system (Spybot - Search & Destroy) => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)

Task: {FBCE6CEC-EEB9-45AF-B004-39A9402753AD} - System32\Tasks\NCH Software\ExpressZipDowngrade => C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe [2013-05-25] (NCH Software)

Task: {FBEA9531-0C8E-4785-955D-C0F114440884} - System32\Tasks\ASUS\ASUS ACPI Service Provider => C:\Program Files (x86)\ASUS\AASP\1.00.46\aaCenter.exe [2007-11-09] ()
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\PCCT - MAGIX AG.job => C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MxTray.exe

Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe

Task: C:\Windows\Tasks\RtlVistaStart.job => C:\Program Files (x86)\Wireless Network Utility\RtWLan.exe

Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2011-06-22 12:42 - 2006-02-23 10:35 - 00020480 _____ () C:\Windows\System32\FritzColorPort64.dll

2011-06-22 12:42 - 2006-02-22 09:39 - 00020480 _____ () C:\Windows\System32\FritzPort64.dll

2009-03-09 12:59 - 2005-06-07 12:26 - 00043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll

2013-06-27 14:12 - 2013-06-27 14:12 - 00089088 _____ () C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll

2013-06-29 11:41 - 2015-10-24 07:30 - 00117760 _____ () C:\Windows\system32\KBDMAC32.exe

2013-08-03 15:05 - 2009-04-30 11:23 - 00090112 _____ () C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe

2008-12-14 09:32 - 2014-12-02 08:33 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe

2013-08-14 14:19 - 2013-08-14 14:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

2014-11-26 10:15 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl

2014-11-26 10:15 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl

2014-11-26 10:15 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl

2014-11-26 10:15 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll

2014-11-26 10:15 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll

2015-12-11 12:07 - 2015-12-11 12:44 - 00005120 _____ () C:\Windows\syswow64\dsprop32.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Windows\system32\KBDMAC32.exe:IID

AlternateDataStreams: C:\ProgramData\TEMP:A8ADE5D8

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1

AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com

IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com

IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com

IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com

IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com

IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com

IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com

IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7867 mehr Seiten.
 

IE trusted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\localhost -> localhost

IE trusted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\webcompanion.com -> hxxp://webcompanion.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\007guard.com -> install.007guard.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\008i.com -> 008i.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\008k.com -> www.008k.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\00hq.com -> www.00hq.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\010402.com -> 010402.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\0scan.com -> www.0scan.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\10sek.com -> www.10sek.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\123simsen.com -> www.123simsen.com
 

Da befinden sich 7867 mehr Seiten.
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\img22.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupreg: CanonSolutionMenuEx => "C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR

MSCONFIG\startupreg: DivXMediaServer => "C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe"

MSCONFIG\startupreg: EPSON Stylus D78 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBGE.EXE /FU "C:\Windows\TEMP\E_S3E47.tmp" /EF "HKLM"

MSCONFIG\startupreg: LogitechQuickCamRibbon => "C:\Program Files (x86)\Labtec\WebCam10\WebCam10.exe" /hide

MSCONFIG\startupreg: PDFPrint => "C:\Program Files (x86)\PDF24\pdf24.exe"

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Skytel => Skytel.exe

MSCONFIG\startupreg: SlimCleaner Plus => "C:\Program Files\SlimCleaner Plus\SlimCleanerPlus.exe" /minimize

MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe

MSCONFIG\startupreg: VMonitorVMUVC => "C:\Program Files (x86)\Vimicro Corporation\VMUVC\VMonitor.exe" VMUVC
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe

FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe

FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe

FirewallRules: [{B26FB486-4513-4B10-A123-90AD7DF6D86E}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe

FirewallRules: [{FD5D1B44-712F-4FDC-8798-DCFC750EB698}] => (Allow) C:\Program Files (x86)\GameSpy Arcade\Aphex.exe

FirewallRules: [TCP Query User{76DD3638-6AD1-43AA-B93C-5828D25993C5}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe

FirewallRules: [UDP Query User{8DBEDC0A-A745-453C-901C-BDAB6FA5B3C4}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe

FirewallRules: [TCP Query User{2116F6B2-4CA5-46BE-8E42-D2622282E4FE}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe

FirewallRules: [UDP Query User{CD594906-1D08-476F-9057-4D5E5BF0AD3F}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe

FirewallRules: [{3234ED36-F7BC-4B65-96E2-1870B7539E2C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{E52D4CD5-A05E-4768-B886-C8BA40592767}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{6D3074B0-ADB5-43D6-B6F4-B5DCCEDC8DC4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{D61243F1-7978-4452-A43D-A9D6541F792E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{BED92076-5A50-4868-9F0C-3A546F97791E}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe

FirewallRules: [{1E8B68F4-D261-46E6-A496-4F7941512902}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe

FirewallRules: [{4F6F59DB-7BEF-4555-9679-31D656E936B2}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaWmp.exe

FirewallRules: [{4F5D9883-8725-4603-B333-E713937BB940}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaWmp.exe

FirewallRules: [{12327FEA-097B-4BEC-B4AD-4D13513E8431}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaW.exe

FirewallRules: [{348A07DA-E692-4C23-8E96-14548B353394}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaW.exe

FirewallRules: [{6733397C-6CC3-405C-B577-A4597FD1A0EA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{971DB8DE-4928-4CAB-84FB-688E5FB87052}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{DB93ADEE-C0F5-49BB-AD9D-84C6056AA351}] => (Allow) LPort=80

FirewallRules: [{EEA36A4B-D126-4861-AF0A-901D10735F6F}] => (Allow) LPort=80

FirewallRules: [{A68DF7A5-57DE-43D4-9494-F1C3D464EB9A}] => (Allow) LPort=80

FirewallRules: [TCP Query User{C2F271E0-08DB-41A5-82AC-0EA0B22D7432}E:\condition zero\czero.exe] => (Allow) E:\condition zero\czero.exe

FirewallRules: [UDP Query User{149CF196-41BE-4366-96AB-B31F615DDC0A}E:\condition zero\czero.exe] => (Allow) E:\condition zero\czero.exe

FirewallRules: [{A744FE4D-49DB-4F38-9D36-FA8135222694}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaW.exe

FirewallRules: [{965EB01A-6E2D-465A-9A57-56A24A03DAC1}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaW.exe

FirewallRules: [{A397F3FA-950B-4C7A-8F7B-82AC692357AF}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaWmp.exe

FirewallRules: [{0857ECD0-19D0-4FF1-9E5D-61E58FD4669C}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty - World at War\CoDWaWmp.exe

FirewallRules: [{8B20D852-5EFF-4492-907A-DA3F7BEC548E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOps.exe

FirewallRules: [{05D954E3-FE47-43AA-ACDF-ABAA5715ADBB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOps.exe

FirewallRules: [{9012CA45-7A11-462F-AB54-531F0024E0E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe

FirewallRules: [{03EB1293-6BD1-4EA4-B9DF-BEA43F1AFDDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe

FirewallRules: [{6F7E89C5-F943-4F69-8B54-3A37AB8B2130}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{6CFE2748-838C-4E9A-AF26-C35A8A3DE9C3}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe

FirewallRules: [{69B87AE5-C40E-473F-9947-0547145818A4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [{5CCC030B-2CF8-49EE-B113-475B8E9C195F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe

FirewallRules: [TCP Query User{568DB3AD-2498-48FF-B46A-5DB1F260E2D2}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe

FirewallRules: [UDP Query User{3F21EEFE-B5A2-4D24-B737-0D2AF1864706}C:\program files (x86)\google\google earth\plugin\geplugin.exe] => (Allow) C:\program files (x86)\google\google earth\plugin\geplugin.exe

FirewallRules: [{B3596CBB-54CC-4405-9CB8-EE4A3BFB77FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOps.exe

FirewallRules: [{491432CF-A54C-4D50-B0BA-61A19F4801E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOps.exe

FirewallRules: [{D3FF2492-4764-4044-863E-E1049534098F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe

FirewallRules: [{C38EF5E7-1997-4F3D-A804-C54083B85535}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\call of duty black ops\BlackOpsMP.exe

FirewallRules: [{F70616C6-DA52-48CD-BF88-22929C6E19C2}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{D9B814B1-F894-456A-A9E2-12A7BB1ACAC9}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{64C2A188-BFD5-4C16-A6FF-EA94952DA91A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{5FBA473E-A871-4A65-8E27-18DACCE6F47E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{B487AAB5-834E-45F4-9521-2C2E9F9B142C}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{E8BF369D-A38A-4FFD-96DC-DF2A7546BDA5}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [{E8FAF092-FCCB-4A47-B63F-968C07ABF4A3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

FirewallRules: [TCP Query User{E92036BA-A6A3-4670-9189-55A610DC50EA}C:\program files (x86)\watchmycam\watchmycam.exe] => (Block) C:\program files (x86)\watchmycam\watchmycam.exe

FirewallRules: [UDP Query User{D09339EE-EF42-4160-83D1-9ACBC99ACF60}C:\program files (x86)\watchmycam\watchmycam.exe] => (Block) C:\program files (x86)\watchmycam\watchmycam.exe

FirewallRules: [{FD383467-3433-492D-8047-535DDF369BE7}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{C7118E51-E03B-4395-A096-7268653E5EBB}] => (Allow) C:\Windows\SysWOW64\muzapp.exe

FirewallRules: [{BDD7424D-8ACF-47D9-AFD7-6A6B94C1B566}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{E1DA39B9-701C-4833-8A80-5A01DA314DF5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: Microsoft-6zu4-Adapter #4

Description: Microsoft-6zu4-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: Microsoft-6zu4-Adapter #6

Description: Microsoft-6zu4-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: Microsoft-6zu4-Adapter #7

Description: Microsoft-6zu4-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: 6TO4 Adapter

Description: Microsoft-6zu4-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: Microsoft-ISATAP-Adapter #6

Description: Microsoft-ISATAP-Adapter

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: tunnel

Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)

Resolution: Update the driver
 

Name: USB-EasyTransfer-Kabel

Description: USB-EasyTransfer-Kabel

Class Guid: {bc103702-dd72-406f-9b28-95c868337b59}

Manufacturer: Microsoft

Service: winusb

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 

Name: USB-EasyTransfer-Kabel

Description: USB-EasyTransfer-Kabel

Class Guid: {bc103702-dd72-406f-9b28-95c868337b59}

Manufacturer: Microsoft

Service: winusb

Problem: : This device cannot start. (Code10)

Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.

On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (12/11/2015 12:44:09 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.

Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.

Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".

Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 

Error: (12/11/2015 12:44:09 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.

Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.

Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".

Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 

Error: (12/11/2015 12:44:05 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (12/11/2015 12:44:05 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (12/11/2015 12:43:21 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/11/2015 12:07:58 PM) (Source: SideBySide) (EventID: 35) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile  WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.

Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.

Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".

Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".

Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
 

Error: (12/11/2015 12:07:43 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (12/11/2015 12:06:24 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/11/2015 07:47:10 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (12/10/2015 04:39:34 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

Systemfehler:

=============

Error: (12/11/2015 12:50:33 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: NVIDIA Display Driver Service1
 

Error: (12/11/2015 12:43:38 PM) (Source: ipnathlp) (EventID: 1233) (User: )

Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.
 

Error: (12/11/2015 12:43:36 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: UPnP-GerätehostSSDP-Suche%%1058
 

Error: (12/11/2015 12:43:35 PM) (Source: ipnathlp) (EventID: 30013) (User: )

Description: Die DHCP-Zuweisung wurde für IP-Adresse 192.168.2.106 deaktiviert, da die IP-Adresse außerhalb des Bereichs 192.168.0.0/255.255.255.0 liegt, von der die Adressen DHCP-Clients zu gewiesen werden. Ändern Sie den Bereich, sodass die IP-Adresse mit einbezogen wird, oder ändern Sie die IP-Adresse, sodass sie innerhalb dieses Bereichs liegt, um die DHCP-Zuweisung zu aktivieren.
 

Error: (12/11/2015 12:43:35 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: UPnP-GerätehostSSDP-Suche%%1058
 

Error: (12/11/2015 12:43:35 PM) (Source: DCOM) (EventID: 10005) (User: )

Description: 1068upnphost{204810B9-73B2-11D4-BF42-00B0D0118B56}
 

Error: (12/11/2015 12:43:22 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: SBRE
 

Error: (12/11/2015 12:43:22 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: Gemeinsame Nutzung der Internetverbindung
 

Error: (12/11/2015 12:43:22 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: UPnP-GerätehostSSDP-Suche%%1058
 

Error: (12/11/2015 12:43:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Spybot-S&D 2 Scanner Service%%1053
 
 

CodeIntegrity:

===================================

  Date: 2015-12-11 12:58:13.553

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:13.319

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:13.085

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:12.851

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:12.445

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:12.211

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:11.962

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:11.728

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:11.197

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\514B601D.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 

  Date: 2015-12-11 12:58:10.963

  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\514B601D.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM)2 Quad CPU Q6700 @ 2.66GHz

Prozentuale Nutzung des RAM: 69%

Installierter physikalischer RAM: 4093.63 MB

Verfügbarer physikalischer RAM: 1257.98 MB

Summe virtueller Speicher: 8414.54 MB

Verfügbarer virtueller Speicher: 4869.52 MB
 

==================== Laufwerke ================================
 

Drive c: (System) (Fixed) (Total:698.64 GB) (Free:458.35 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 698.6 GB) (Disk ID: E84C93B8)

Partition 1: (Active) - (Size=698.6 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

--- --- ---

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-12-2015

durchgeführt von Guido (Administrator) auf GUIDO-PC (11-12-2015 12:57:25)

Gestartet von C:\Users\Guido\Desktop

Geladene Profile: Guido (Verfügbare Profile: Guido & UpdatusUser)

Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 9 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

() C:\Windows\System32\KBDMAC32.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe

(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE

() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe

(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe

(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe

(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(Microsoft Corporation) C:\Windows\System32\mcbuilder.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)

HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [976672 2013-03-24] (NVIDIA Corporation)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2779024 2011-03-14] (CANON INC.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12558440 2011-07-07] (Realtek Semiconductor)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [LogitechCommunicationsManager] => C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [488984 2007-03-06] (Labtec Inc,)

HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)

HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [448856 2014-11-17] (DivX, LLC)

HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [896632 2015-07-22] (BlueStack Systems, Inc.)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-11-18] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [220704 2015-09-14] (Geek Software GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)

HKLM-x32\...\RunOnce: [B Register C:\Program Files (x86)\DivX\DivX Transcode Engine\plugins\mc_demux_mp2_ds.ax] => "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Transcode Engine\plugins\mc_demux_mp2_ds.ax",DllRegisterServer

Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]

HKLM\...\Policies\Explorer: [NoViewContextMenu] 0

HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\Policies\Explorer: [HideClock] 0

HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\Policies\Explorer: [NoInstrumentation] 1

HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\MountPoints2: {27910127-4e75-11de-bcc7-806e6f6e6963} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL E:\copy.exe

HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\...\MountPoints2: {69567ca0-5606-11df-a237-00235479b1c3} - F:\Setup\rsrc\autorun.exe

HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [334336 2008-01-21] (Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2009-01-25]

ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)

GroupPolicy: Beschränkung - Chrome <======= ACHTUNG

CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{49513723-493F-43E2-BF9C-BF50C232339F}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{F254F6F6-CA95-4280-BE33-6509F08105F8}: [DhcpNameServer] 192.168.2.1
 

Internet Explorer:

==================

HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 

HKU\S-1-5-21-1757636982-3309790088-3969889856-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> DefaultScope {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}

SearchScopes: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> {DD1567C2-7BEC-443E-9C48-5C897B07DAE1} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&intl=de&fr=yset_ie_syc_oracle&type=orcl_default

BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)

BHO: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files\Windows Live\Family Safety\fssbho.dll [2009-08-05] (Microsoft Corporation)

BHO: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)

BHO-x32: Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2015-09-24] (Adobe Systems Incorporated)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14] (RealDownloader)

BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)

BHO-x32: Windows Live Family Safety Browser Helper Class -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> C:\Program Files (x86)\Windows Live\Family Safety\fssbho.dll [2009-08-05] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-12-07] (Oracle Corporation)

BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-12-07] (Oracle Corporation)

Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)

Toolbar: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> Kein Name - {472734EA-242A-422B-ADF8-83D1E48CC825} -  Keine Datei

Toolbar: HKU\S-1-5-21-1757636982-3309790088-3969889856-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
 

FireFox:

========

FF ProfilePath: C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default

FF NewTab: hxxp://www.google.de?hl=de&gl=de

FF DefaultSearchUrl: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=

FF SelectedSearchEngine: Google

FF SelectedSearchEngine: google

FF Homepage: hxxp://www.google.de?hl=de&gl=de

FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=

FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=utf-8&oe=utf-8&meta=lr=lang_de&q=

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-09] ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-09] ()

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2011-04-20] (CANON INC.)

FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll [Keine Datei]

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)

FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2014-11-21] (DivX, LLC)

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)

FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-12-07] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-12-07] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)

FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2013-09-21] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-05] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-05] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\VistaCodecPack\rm\browser\plugins\nprpjplug.dll [2009-09-04] (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2013-09-21] (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealDownloader)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-07] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-07] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npDivxPlayerPlugin.dll [2009-05-27] (DivX, Inc)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFFICE.DLL [2007-03-22] (Microsoft Corporation)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll [2013-09-21] (RealNetworks, Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2013-09-21] (RealPlayer)

FF SearchPlugin: C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\searchplugins\google-lavasoft.xml [2015-12-07]

FF Extension: Download Protect - C:\Windows\Installer\{B6F750BE-7F03-42BB-9914-E302E62CFAD4}\{641CF898-2073-4FCF-B184-F549CE762515}.xpi [2015-12-11]

FF Extension: Avira Browser Safety - C:\Users\Guido\AppData\Roaming\Mozilla\Firefox\Profiles\6til7x6m.default\Extensions\abs@avira.com [2015-08-14] [ist nicht signiert]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2015-11-11] [ist nicht signiert]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2015-11-11] [ist nicht signiert]

FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2015-11-11] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-04-03] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-21] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

FF HKLM-x32\...\Firefox\Extensions: [{641CF898-2073-4FCF-B184-F549CE762515}] - C:\Windows\Installer\{B6F750BE-7F03-42BB-9914-E302E62CFAD4}\{641CF898-2073-4FCF-B184-F549CE762515}.xpi
 

Chrome: 

=======

CHR Profile: C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (RealDownloader) - C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-11-10]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Guido\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-24]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [930944 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1222952 2015-12-01] (Avira Operations GmbH & Co. KG)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [250648 2015-11-18] (Avira Operations GmbH & Co. KG)

R3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [433784 2015-06-16] (BlueStack Systems, Inc.)

R3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-06-16] (BlueStack Systems, Inc.)

R3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [831096 2015-07-21] (BlueStack Systems, Inc.)

S2 LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [173344 2007-03-06] (Labtec Inc.)

S2 MAGIX StartUp Analyze Service; C:\Program Files (x86)\MAGIX\PC_Check_Tuning_Free_2011\MXSAS.exe [186368 2010-11-04] (MAGIX AG) [Datei ist nicht signiert]

R2 Magnifyd; C:\Windows\system32\KBDMAC32.exe [117760 2015-10-24] () [Datei ist nicht signiert]

R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)

R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)

R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] () [Datei ist nicht signiert]

R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-12-02] ()

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)

R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)

R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13632 2006-10-18] ()

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162072 2015-12-01] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140448 2015-12-01] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-01] (Avira Operations GmbH & Co. KG)

R3 AVMCOWAN; C:\Windows\System32\DRIVERS\AVMCOWAN.sys [79872 2006-09-18] (AVM GmbH)

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [145528 2015-06-16] (BlueStack Systems)

S3 FPCIBASE; C:\Windows\System32\DRIVERS\fpcibase.sys [899328 2006-09-18] (AVM Berlin)

S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () [Datei ist nicht signiert]

S3 LVcKap64; C:\Windows\System32\DRIVERS\LVcKap64.sys [1029024 2007-03-06] (Labtec Inc.)

S3 LVMVDrv; C:\Windows\System32\DRIVERS\LVMVDrv.sys [2496928 2007-03-06] (Labtec Inc.)

R3 LVUSBS64; C:\Windows\System32\drivers\LVUSBS64.sys [58400 2007-03-06] (Labtec Inc.)

R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)

R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2015-12-11] (Malwarebytes)

R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)

R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15680 2006-10-31] ()

R3 NVENETFD; C:\Windows\System32\DRIVERS\nvm60x64.sys [742696 2006-10-10] (NVIDIA Corporation)

S4 nvrd64; C:\Windows\system32\drivers\nvrd64.sys [152608 2007-09-11] (NVIDIA Corporation)

R3 PID_0928; C:\Windows\System32\DRIVERS\LV561V64.SYS [468000 2007-03-06] (Labtec Inc.)

R3 RTL85n64; C:\Windows\System32\DRIVERS\RTL85n64.sys [1462304 2010-03-23] (Realtek Semiconductor Corporation                           )

S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation)

S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [19496 2008-05-16] (MCCI Corporation)

S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [158760 2008-05-16] (MCCI Corporation)

S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [137256 2008-05-16] (MCCI Corporation)

S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [34344 2008-05-16] (MCCI Corporation)

S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [136744 2008-05-16] (MCCI Corporation)

S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [151592 2008-05-16] (MCCI Corporation)

S3 s0017bus; C:\Windows\System32\DRIVERS\s0017bus.sys [113704 2008-10-21] (MCCI Corporation)

S3 s0017mdfl; C:\Windows\System32\DRIVERS\s0017mdfl.sys [19496 2008-10-21] (MCCI Corporation)

S3 s0017mdm; C:\Windows\System32\DRIVERS\s0017mdm.sys [152616 2008-10-21] (MCCI Corporation)

S3 s0017mgmt; C:\Windows\System32\DRIVERS\s0017mgmt.sys [133160 2008-10-21] (MCCI Corporation)

S3 s0017nd5; C:\Windows\System32\DRIVERS\s0017nd5.sys [34856 2008-10-21] (MCCI Corporation)

S3 s0017obex; C:\Windows\System32\DRIVERS\s0017obex.sys [128552 2008-10-21] (MCCI Corporation)

S3 s0017unic; C:\Windows\System32\DRIVERS\s0017unic.sys [145960 2008-10-21] (MCCI Corporation)

R3 seehcri; C:\Windows\System32\DRIVERS\seehcri.sys [34032 2008-01-09] (Sony Ericsson Mobile Communications)

S4 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-05-02] (Duplex Secure Ltd.)

S3 StarOpen; kein ImagePath

S3 VMUVC; C:\Windows\System32\Drivers\VMUVC.sys [198784 2009-05-25] (Vimicro Corporation) [Datei ist nicht signiert]

S3 VST64HWBS2; C:\Windows\System32\DRIVERS\VSTBS26.SYS [392704 2008-01-21] (Conexant Systems, Inc.)

S3 VST64_DPV; C:\Windows\System32\DRIVERS\VSTDPV6.SYS [1523712 2008-01-21] (Conexant Systems, Inc.)

S3 vvftUVC; C:\Windows\System32\drivers\vvftUVC.sys [303616 2008-07-01] (Vimicro Corporation) [Datei ist nicht signiert]

R3 cpuz132; \??\C:\Users\Guido\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]

S3 cpuz134; \??\C:\Users\Guido\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

U4 Messenger; kein ImagePath

S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2099-02-24 14:15 - 2001-04-02 16:30 - 00000821 _____ C:\Windows\Lexmark_ICM.ini

2099-02-16 16:09 - 2001-02-16 15:37 - 00000062 _____ C:\Windows\SysWOW64\LXASUSCI.INI

2015-12-11 12:57 - 2015-12-11 12:57 - 02369024 _____ (Farbar) C:\Users\Guido\Desktop\FRST64.exe

2015-12-11 12:57 - 2015-12-11 12:57 - 00026273 _____ C:\Users\Guido\Desktop\FRST.txt

2015-12-11 12:53 - 2015-12-11 12:53 - 00002245 _____ C:\Users\Guido\Desktop\JRT.txt

2015-12-11 12:48 - 2015-12-11 12:48 - 01599336 _____ (Malwarebytes) C:\Users\Guido\Desktop\JRT.exe

2015-12-11 12:33 - 2015-12-11 12:33 - 01738240 _____ C:\Users\Guido\Desktop\AdwCleaner_5.024.exe

2015-12-11 12:09 - 2015-12-11 12:09 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\514B601D.sys

2015-12-11 12:07 - 2015-12-11 12:44 - 00005120 _____ C:\Windows\SysWOW64\dsprop32.dll

2015-12-11 10:41 - 2015-12-11 10:41 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\2B4C1CDD.sys

2015-12-11 10:32 - 2015-12-11 12:31 - 00000000 ____D C:\Users\Guido\Desktop\mbar

2015-12-11 10:31 - 2015-12-11 10:31 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Guido\Desktop\mbar-1.09.3.1001.exe

2015-12-10 13:49 - 2015-11-05 10:07 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll

2015-12-10 13:49 - 2015-11-05 09:55 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll

2015-12-10 13:49 - 2015-11-05 08:54 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys

2015-12-10 13:45 - 2015-11-02 18:04 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll

2015-12-10 13:45 - 2015-11-02 17:44 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\els.dll

2015-12-10 13:44 - 2015-11-06 18:05 - 00648704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll

2015-12-10 13:44 - 2015-11-06 17:43 - 00820224 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll

2015-12-10 13:44 - 2015-11-06 17:36 - 01268224 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll

2015-12-10 13:44 - 2015-11-06 17:36 - 00327680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll

2015-12-10 13:44 - 2015-11-06 17:36 - 00287232 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll

2015-12-10 13:44 - 2015-11-06 17:36 - 00196096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll

2015-12-10 13:44 - 2015-11-06 17:32 - 01029120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll

2015-12-10 13:44 - 2015-11-06 17:32 - 00219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll

2015-12-10 13:44 - 2015-11-06 17:32 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll

2015-12-10 13:44 - 2015-11-06 17:32 - 00160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll

2015-12-10 13:44 - 2015-11-06 17:00 - 02002944 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll

2015-12-10 13:44 - 2015-11-06 16:59 - 00566272 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2015-12-10 13:44 - 2015-11-06 16:50 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

2015-12-10 13:44 - 2015-11-06 16:47 - 01561600 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll

2015-12-10 13:44 - 2015-11-06 16:47 - 01154560 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll

2015-12-10 13:44 - 2015-11-06 16:37 - 02799104 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-12-10 13:44 - 2015-11-06 16:27 - 01172480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll

2015-12-10 13:44 - 2015-11-06 16:26 - 00486400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2015-12-10 13:44 - 2015-11-06 16:20 - 01073152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll

2015-12-10 13:44 - 2015-11-06 16:20 - 00682496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll

2015-12-10 13:29 - 2015-11-05 08:42 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-12-10 13:29 - 2015-11-05 08:26 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-12-10 13:28 - 2015-11-10 18:03 - 01208832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll

2015-12-10 13:28 - 2015-11-10 18:03 - 00488448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll

2015-12-10 13:28 - 2015-11-10 17:40 - 01683968 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll

2015-12-10 13:28 - 2015-11-10 17:40 - 00533504 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll

2015-12-10 13:21 - 2015-11-12 22:16 - 17892864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-12-10 13:21 - 2015-11-12 22:13 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-12-10 13:21 - 2015-11-12 22:08 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-12-10 13:21 - 2015-11-12 22:07 - 02158080 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-12-10 13:21 - 2015-11-12 22:07 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-12-10 13:21 - 2015-11-12 22:06 - 01494016 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-12-10 13:21 - 2015-11-12 22:06 - 00816128 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00579072 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00282112 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-12-10 13:21 - 2015-11-12 22:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll

2015-12-10 13:21 - 2015-11-12 22:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe

2015-12-10 13:21 - 2015-11-12 21:39 - 01814528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-12-10 13:21 - 2015-11-12 21:37 - 12389376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-12-10 13:21 - 2015-11-12 21:34 - 01140224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-12-10 13:21 - 2015-11-12 21:33 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-12-10 13:21 - 2015-11-12 21:32 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-12-10 13:21 - 2015-11-12 21:32 - 00718848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-12-10 13:21 - 2015-11-12 21:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-12-10 13:21 - 2015-11-12 21:32 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll

2015-12-10 13:21 - 2015-11-12 21:32 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-12-10 13:21 - 2015-11-12 21:32 - 00041472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll

2015-12-10 13:21 - 2015-11-12 21:32 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe

2015-12-10 13:21 - 2015-11-12 21:31 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-12-10 13:21 - 2015-11-12 21:31 - 00353792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-12-10 13:21 - 2015-11-12 21:31 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-12-10 13:21 - 2015-11-12 21:31 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-12-10 13:21 - 2015-11-12 21:31 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-12-10 13:20 - 2015-11-12 22:09 - 10937856 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-12-10 13:20 - 2015-11-12 22:08 - 00448512 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-12-10 13:20 - 2015-11-12 22:06 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll

2015-12-10 13:20 - 2015-11-12 22:06 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe

2015-12-10 13:20 - 2015-11-12 21:36 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-12-10 13:20 - 2015-11-12 21:34 - 09753088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-12-10 13:20 - 2015-11-12 21:32 - 01804288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-12-10 13:20 - 2015-11-12 21:32 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-12-10 13:20 - 2015-11-12 21:32 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-12-10 13:20 - 2015-11-12 21:31 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe

2015-12-09 09:06 - 2015-12-09 09:06 - 00000912 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

2015-12-09 09:06 - 2015-12-09 09:06 - 00000900 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk

2015-12-09 09:06 - 2015-12-09 09:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-12-09 09:03 - 2015-12-09 09:05 - 00243976 _____ C:\Users\Guido\Downloads\Firefox Setup Stub 42.0 (1).exe

2015-12-09 08:15 - 2015-12-09 08:19 - 00064673 _____ C:\Users\Guido\Downloads\Addition.txt

2015-12-09 08:13 - 2015-12-11 12:57 - 00000000 ___DC C:\FRST

2015-12-09 08:13 - 2015-12-09 08:25 - 00060285 _____ C:\Users\Guido\Downloads\FRST.txt

2015-12-09 08:12 - 2015-12-09 08:13 - 02369024 _____ (Farbar) C:\Users\Guido\Downloads\FRST64 (1).exe

2015-12-09 08:12 - 2015-12-09 08:12 - 02369024 _____ (Farbar) C:\Users\Guido\Downloads\FRST64.exe

2015-12-09 07:45 - 2015-12-09 07:45 - 499767721 _____ C:\Windows\MEMORY.DMP

2015-12-09 07:45 - 2015-12-09 07:45 - 00282224 _____ C:\Windows\Minidump\Mini120915-01.dmp

2015-12-08 14:18 - 2015-12-08 14:18 - 00286567 _____ C:\Users\Guido\Desktop\AN MAiwald Wanne.pdf

2015-12-08 14:17 - 2015-12-09 08:22 - 00292224 _____ C:\Users\Guido\Desktop\AN MAiwald Wanne Kunde.pdf

2015-12-08 14:17 - 2015-12-09 08:21 - 00041472 _____ C:\Users\Guido\Desktop\AN MAiwald Wanne Kunde.xls

2015-12-08 09:44 - 2015-12-11 12:53 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-12-08 09:44 - 2015-12-11 12:08 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-12-08 09:44 - 2015-12-08 09:44 - 00000963 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-12-08 09:44 - 2015-12-08 09:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-12-08 09:44 - 2015-12-08 09:44 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-12-08 09:44 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-12-08 09:44 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2015-12-08 09:02 - 2015-12-08 09:02 - 00000000 ____D C:\Program Files\Realtek

2015-12-08 08:58 - 2011-06-27 14:44 - 02604376 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll

2015-12-08 08:58 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll

2015-12-08 08:58 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll

2015-12-08 08:58 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll

2015-12-08 08:58 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll

2015-12-08 08:57 - 2011-07-11 14:17 - 01698408 _____ (Realtek Semiconductor Corp.) C:\Windows\RtlExUpd.dll

2015-12-08 08:57 - 2011-07-07 19:46 - 02432104 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll

2015-12-08 08:57 - 2011-07-07 17:39 - 02914408 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys

2015-12-08 08:57 - 2011-07-07 15:50 - 01483264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat

2015-12-08 08:57 - 2011-07-06 21:42 - 03148904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll

2015-12-08 08:57 - 2011-07-06 13:27 - 00092264 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInst64.dll

2015-12-08 08:57 - 2011-07-01 14:05 - 01822824 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll

2015-12-08 08:57 - 2011-06-30 16:14 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl

2015-12-08 08:57 - 2011-06-27 14:45 - 03768152 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek.dll

2015-12-08 08:57 - 2011-06-10 17:35 - 00603472 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll

2015-12-08 08:57 - 2011-05-31 09:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll

2015-12-08 08:57 - 2011-05-23 17:12 - 01245288 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll

2015-12-08 08:57 - 2011-05-05 15:24 - 02085440 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll

2015-12-08 08:57 - 2011-05-05 14:15 - 00220512 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll

2015-12-08 08:57 - 2011-05-05 14:14 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll

2015-12-08 08:57 - 2011-05-05 14:14 - 00078176 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll

2015-12-08 08:57 - 2011-05-02 14:27 - 03308376 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll

2015-12-08 08:57 - 2011-05-02 14:27 - 00426328 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll

2015-12-08 08:57 - 2011-05-02 14:27 - 00136024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll

2015-12-08 08:57 - 2011-05-02 14:27 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll

2015-12-08 08:57 - 2011-05-02 14:27 - 00074072 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll

2015-12-08 08:57 - 2010-11-18 11:49 - 00121744 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll

2015-12-08 08:57 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll

2015-12-08 08:57 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll

2015-12-08 08:57 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll

2015-12-08 08:57 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll

2015-12-08 08:57 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll

2015-12-08 08:57 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll

2015-12-08 08:57 - 2010-11-03 18:31 - 00332392 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll

2015-12-08 08:57 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2015-12-08 08:57 - 2010-10-03 13:46 - 00341336 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll

2015-12-08 08:57 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll

2015-12-08 08:57 - 2010-07-22 16:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll

2015-12-08 08:57 - 2010-07-22 16:37 - 00200800 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll

2015-12-08 08:57 - 2010-05-06 17:34 - 00334680 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll

2015-12-08 08:57 - 2009-11-18 18:42 - 02197264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll

2015-12-08 08:57 - 2009-11-17 18:12 - 00108960 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll

2015-12-08 08:54 - 2015-12-08 08:54 - 00000000 ____D C:\Program Files (x86)\Realtek

2015-12-08 08:53 - 2015-12-08 09:03 - 00000000 ___HD C:\Program Files (x86)\Temp

2015-12-08 08:53 - 2015-12-08 08:58 - 00525792 _____ (Microsoft Corporation) C:\Windows\DIFxAPI.dll

2015-12-08 08:42 - 2015-12-08 14:16 - 00049664 _____ C:\Users\Guido\Desktop\AN MAiwald Wanne.xls

2015-12-08 08:41 - 2015-12-08 08:41 - 00000000 ___DC C:\NVIDIA

2015-12-07 11:47 - 2015-12-07 11:47 - 00000000 ____D C:\Users\Guido\Documents\MAGIX_MxTray

2015-12-07 11:44 - 2015-12-07 11:44 - 00000000 ____D C:\Users\Guido\AppData\LocalLow\Yahoo

2015-12-07 11:43 - 2015-12-07 11:43 - 00000000 ____D C:\Program Files (x86)\Yahoo!

2015-12-07 11:41 - 2015-12-07 11:41 - 00000000 ____D C:\Users\Guido\AppData\Roaming\Sun

2015-12-07 11:41 - 2015-12-07 11:41 - 00000000 ____D C:\Users\Guido\.oracle_jre_usage

2015-12-07 11:39 - 2015-12-07 11:39 - 00000000 ____D C:\Users\Guido\AppData\LocalLow\Oracle

2015-12-07 11:18 - 2015-12-07 11:18 - 00000000 ____D C:\Users\Guido\AppData\Roaming\MAGIX

2015-12-07 11:13 - 2015-12-11 12:50 - 00000438 _____ C:\Windows\Tasks\PCCT - MAGIX AG.job

2015-12-07 11:13 - 2015-12-07 11:47 - 00002822 _____ C:\Windows\System32\Tasks\PCCT - MAGIX AG

2015-12-07 11:13 - 2015-12-07 11:13 - 00000996 _____ C:\Users\Public\Desktop\MAGIX PC Check & Tuning Free 2011.lnk

2015-12-07 11:13 - 2015-12-07 11:13 - 00000000 ____D C:\Users\Guido\Documents\OnDemandDump

2015-12-07 11:13 - 2015-12-07 11:13 - 00000000 ____D C:\Users\Guido\Documents\CrashLog

2015-12-07 11:12 - 2015-12-07 11:35 - 00000259 ____C C:\Prefs.js

2015-12-07 11:12 - 2015-12-07 11:35 - 00000000 ___DC C:\searchplugins

2015-12-07 11:12 - 2015-12-07 11:18 - 00000000 ____D C:\ProgramData\MAGIX

2015-12-07 11:12 - 2015-12-07 11:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX

2015-12-07 11:12 - 2015-12-07 11:13 - 00000000 ____D C:\Program Files (x86)\MAGIX

2015-12-07 11:11 - 2015-12-07 11:11 - 00002784 _____ C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini

2015-12-07 11:11 - 2015-12-07 11:11 - 00002784 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini

2015-12-07 11:11 - 2015-12-07 11:10 - 00425744 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll

2015-12-07 11:10 - 2015-12-07 11:10 - 00345360 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll

2015-12-07 10:32 - 2015-12-07 10:32 - 00648843 _____ C:\Users\Guido\Downloads\reimage repair keygen__15344_il93455.tar

2015-12-07 10:31 - 2015-12-07 10:31 - 00649669 _____ C:\Users\Guido\Downloads\reimagerepairkeygen__11652_i1773535811_il26.tar

2015-12-07 08:11 - 2015-12-07 08:11 - 00000020 _____ C:\Users\Guido\defogger_reenable

2015-12-02 09:07 - 2015-12-07 07:06 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-12-02 09:06 - 2015-12-11 12:32 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2015-11-30 12:45 - 2015-11-30 12:45 - 00117553 _____ C:\Users\Guido\Desktop\Bewerbung  Guido.pdf

2015-11-30 08:23 - 2015-11-30 08:24 - 01976892 _____ C:\Users\Guido\Desktop\Rekl. WS 30.11.2015.pdf

2015-11-25 07:36 - 2015-11-25 07:36 - 00243976 _____ C:\Users\Guido\Downloads\Firefox Setup Stub 42.0.exe

2015-11-24 07:51 - 2015-11-24 09:03 - 00751285 _____ C:\Users\Guido\Desktop\defro-ds2-prospekt.pdf

2015-11-11 07:28 - 2015-09-26 17:05 - 00281600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2015-11-11 07:28 - 2015-09-26 17:05 - 00077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2015-11-11 07:28 - 2015-09-26 17:04 - 00206336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2015-11-11 07:28 - 2015-09-26 16:58 - 00350720 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2015-11-11 07:28 - 2015-09-26 16:58 - 00257536 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2015-11-11 07:28 - 2015-09-26 14:21 - 00275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll

2015-11-11 07:28 - 2015-09-22 14:10 - 00517976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2015-11-11 07:28 - 2015-09-22 14:10 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll

2015-11-11 07:23 - 2015-10-17 17:01 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2015-11-11 07:23 - 2015-10-17 16:41 - 00659456 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2015-11-11 07:22 - 2015-10-10 16:48 - 00736192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys

2015-11-11 07:15 - 2015-10-13 15:45 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys

2015-11-11 07:15 - 2015-10-13 15:44 - 00094720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys

2015-11-11 07:13 - 2015-10-14 21:25 - 01586304 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2015-11-11 07:13 - 2015-10-14 21:25 - 01168600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2015-11-11 07:13 - 2015-10-14 16:47 - 04691392 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2015-11-11 06:26 - 2015-12-09 09:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-12-11 12:57 - 2010-05-10 18:46 - 00000000 ____D C:\Users\Guido\AppData\Roaming\NetSpeedMonitor

2015-12-11 12:50 - 2010-04-24 10:55 - 00000278 _____ C:\Windows\Tasks\RtlVistaStart.job

2015-12-11 12:50 - 2006-11-02 14:33 - 00000000 ____D C:\Windows

2015-12-11 12:49 - 2010-06-11 08:16 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-12-11 12:44 - 2014-03-27 06:10 - 00000306 __RSH C:\ProgramData\ntuser.pol

2015-12-11 12:43 - 2014-11-26 10:15 - 00000656 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job

2015-12-11 12:43 - 2010-04-19 12:37 - 00000436 _____ C:\Windows\system32\Drivers\etc\hosts.ics

2015-12-11 12:39 - 2010-06-11 08:16 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-12-11 12:39 - 2006-11-02 16:42 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-12-11 12:39 - 2006-11-02 16:22 - 00004096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2015-12-11 12:39 - 2006-11-02 16:22 - 00004096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2015-12-11 12:37 - 2006-11-02 16:42 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2015-12-11 12:36 - 2014-05-22 08:26 - 00000000 ___DC C:\AdwCleaner

2015-12-11 12:20 - 2012-05-25 12:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-12-11 12:08 - 2015-09-03 04:40 - 00001055 _____ C:\Users\Public\Desktop\Avira Launcher.lnk

2015-12-11 12:08 - 2014-07-30 11:52 - 00000000 ____D C:\ProgramData\Package Cache

2015-12-11 12:07 - 2012-12-04 08:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-12-11 09:04 - 2006-11-02 14:33 - 00000000 ____D C:\Windows\rescache

2015-12-11 08:05 - 2008-11-24 21:09 - 00000000 ____D C:\ProgramData\Microsoft Help

2015-12-11 07:41 - 2008-11-24 21:08 - 00000000 ____D C:\ProgramData\NVIDIA

2015-12-10 14:55 - 2015-08-07 09:29 - 00411840 _____ C:\Windows\system32\FNTCACHE.DAT

2015-12-10 14:52 - 2009-01-18 15:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2015-12-10 14:52 - 2006-11-02 14:33 - 00000000 ____D C:\Windows\inf

2015-12-10 13:49 - 2010-06-04 05:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-12-10 13:44 - 2013-07-11 05:49 - 00000000 ____D C:\Windows\system32\MRT

2015-12-10 13:32 - 2006-11-02 13:35 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2015-12-10 08:06 - 2008-11-26 15:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2015-12-10 07:53 - 2013-03-28 14:42 - 00000000 ____D C:\Users\Guido\Desktop\Angebote

2015-12-09 08:20 - 2012-05-25 12:40 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2015-12-09 08:20 - 2012-05-25 12:40 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2015-12-09 08:20 - 2012-05-25 12:40 - 00003736 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2015-12-09 07:45 - 2009-09-25 15:51 - 00000000 ____D C:\Windows\Minidump

2015-12-08 13:45 - 2006-11-02 14:34 - 00000000 ____D C:\Windows\Web

2015-12-08 09:02 - 2008-11-24 21:02 - 00000000 ____D C:\Windows\SysWOW64\RTCOM

2015-12-08 08:43 - 2008-12-14 15:35 - 00000000 ____D C:\Program Files\NVIDIA Corporation

2015-12-08 08:43 - 2008-11-24 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2015-12-08 08:31 - 2008-11-26 12:50 - 00000000 ____D C:\Users\Guido

2015-12-08 07:32 - 2012-02-22 07:52 - 00000000 ____D C:\Users\UpdatusUser

2015-12-07 12:04 - 2009-01-12 09:01 - 00000000 ____D C:\Users\Guido\Desktop\2009_01_12

2015-12-07 11:58 - 2006-11-02 13:33 - 76283904 _____ C:\Windows\system32\config\COMPONENTS.bak

2015-12-07 11:58 - 2006-11-02 13:33 - 05242880 _____ C:\Windows\system32\config\DEFAULT.bak

2015-12-07 11:58 - 2006-11-02 13:33 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak

2015-12-07 11:58 - 2006-11-02 13:33 - 00262144 _____ C:\Windows\system32\config\SAM.bak

2015-12-07 11:42 - 2013-10-23 06:13 - 00000000 ____D C:\ProgramData\Oracle

2015-12-07 11:41 - 2014-11-03 10:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2015-12-07 11:41 - 2013-08-07 09:18 - 00000000 ____D C:\Program Files (x86)\Java

2015-12-07 11:40 - 2014-11-03 10:19 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2015-12-07 11:20 - 2010-07-14 12:08 - 00000000 ____D C:\Users\Guido\Desktop\Bilder

2015-12-07 09:44 - 2010-04-21 09:30 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk

2015-12-07 09:44 - 2010-04-21 06:46 - 00000837 _____ C:\Users\Guido\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk

2015-12-07 09:44 - 2006-11-02 16:36 - 00001768 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Collaboration.lnk

2015-12-07 09:44 - 2006-11-02 16:36 - 00001719 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

2015-12-07 09:44 - 2006-11-02 16:35 - 00001673 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Defender.lnk

2015-12-07 09:44 - 2006-11-02 16:34 - 00001684 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker.lnk

2015-12-07 09:44 - 2006-11-02 16:33 - 00001659 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mail.lnk

2015-12-07 06:43 - 2010-06-11 08:16 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-12-07 06:43 - 2010-06-11 08:16 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-12-02 13:18 - 2009-10-05 05:54 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2015-12-02 13:11 - 2013-01-20 10:24 - 00000000 ____D C:\Users\Guido\AppData\Roaming\TS3Client

2015-12-02 07:54 - 2015-08-07 08:00 - 00107984 _____ C:\Users\Guido\AppData\Local\GDIPFONTCACHEV1.DAT

2015-12-01 10:42 - 2013-03-28 08:26 - 00162072 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys

2015-12-01 10:42 - 2013-03-28 08:26 - 00140448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys

2015-11-30 12:32 - 2008-01-21 12:10 - 01567616 _____ C:\Windows\system32\PerfStringBackup.INI

2015-11-30 12:32 - 2008-01-21 12:09 - 00674054 _____ C:\Windows\system32\perfh007.dat

2015-11-30 12:32 - 2008-01-21 12:09 - 00146066 _____ C:\Windows\system32\perfc007.dat

2015-11-16 09:43 - 2008-11-26 14:22 - 00159232 _____ C:\Users\Guido\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2015-11-11 07:46 - 2006-11-02 16:07 - 00000000 ____D C:\Program Files\Windows Journal

2015-11-11 07:46 - 2006-11-02 14:33 - 00000000 ____D C:\Windows\PolicyDefinitions

2015-11-11 07:18 - 2013-03-28 13:38 - 01543072 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2001-06-19 16:34 - 2001-06-20 16:19 - 0040960 _____ (Jetsoft Development Company) C:\Program Files (x86)\ACMonitor_X83.exe

2013-09-17 07:06 - 2013-09-17 07:10 - 0000004 _____ () C:\Users\Guido\AppData\Roaming\cache.ini

2008-12-01 10:53 - 2015-12-09 08:34 - 0024147 _____ () C:\Users\Guido\AppData\Roaming\UserTile.png

2013-08-04 07:56 - 2014-10-22 10:55 - 0000095 _____ () C:\Users\Guido\AppData\Roaming\WB.CFG

2014-01-02 08:52 - 2014-01-03 08:40 - 0000005 _____ () C:\Users\Guido\AppData\Roaming\WBPU-Q5-TTL.DAT

2013-08-04 07:56 - 2014-01-29 07:21 - 0000005 _____ () C:\Users\Guido\AppData\Roaming\WBPU-TTL.DAT

2008-11-26 14:58 - 2008-11-26 14:58 - 0000552 _____ () C:\Users\Guido\AppData\Local\d3d8caps.dat

2008-11-26 14:58 - 2014-10-28 09:39 - 0001356 _____ () C:\Users\Guido\AppData\Local\d3d9caps.dat

2008-11-26 12:50 - 2012-10-11 05:27 - 0002188 _____ () C:\Users\Guido\AppData\Local\d3d9caps64.dat

2008-11-26 14:22 - 2015-11-16 09:43 - 0159232 _____ () C:\Users\Guido\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2008-12-23 12:59 - 2008-12-23 12:59 - 0069376 _____ () C:\Users\Guido\AppData\Local\dd_depcheckdotnetfx30.txt

2008-12-23 12:59 - 2008-12-23 12:59 - 0000710 _____ () C:\Users\Guido\AppData\Local\dd_dotnetfx3error.txt

2008-12-23 12:59 - 2008-12-23 12:59 - 0056262 _____ () C:\Users\Guido\AppData\Local\dd_dotnetfx3install.txt

2010-01-18 16:29 - 2010-01-18 16:29 - 0335386 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI0ADD.txt

2013-08-03 15:47 - 2013-08-03 15:47 - 0350372 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI0C99.txt

2010-06-06 15:06 - 2010-06-06 15:06 - 0435784 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI378B.txt

2010-11-02 18:11 - 2010-11-02 18:11 - 0438730 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI3F28.txt

2010-05-06 06:47 - 2010-05-06 06:48 - 0364054 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI4400.txt

2013-06-13 09:35 - 2013-06-13 09:35 - 0361366 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI5F50.txt

2010-11-25 13:15 - 2010-11-25 13:15 - 0360460 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI614F.txt

2010-11-25 13:20 - 2010-11-25 13:20 - 0361228 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI6595.txt

2009-11-18 10:49 - 2009-11-18 10:49 - 0425072 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI683F.txt

2010-11-25 13:25 - 2010-11-25 13:25 - 0359606 _____ () C:\Users\Guido\AppData\Local\dd_vcredistMSI6989.txt

2010-01-18 16:29 - 2010-01-18 16:29 - 0011222 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI0ADD.txt

2013-08-03 15:47 - 2013-08-03 15:47 - 0011238 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI0C99.txt

2010-06-06 15:06 - 2010-06-06 15:06 - 0011478 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI378B.txt

2010-11-02 18:11 - 2010-11-02 18:11 - 0011598 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI3F28.txt

2010-05-06 06:47 - 2010-05-06 06:48 - 0011158 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI4400.txt

2010-05-06 06:47 - 2010-05-06 06:47 - 0010634 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI4406.txt

2013-06-13 09:35 - 2013-06-13 09:35 - 0014254 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI5F50.txt

2010-11-25 13:15 - 2010-11-25 13:15 - 0011190 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI614F.txt

2010-11-25 13:20 - 2010-11-25 13:20 - 0011222 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI6595.txt

2009-11-18 10:49 - 2009-11-18 10:49 - 0011430 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI683F.txt

2010-11-25 13:25 - 2010-11-25 13:25 - 0011898 _____ () C:\Users\Guido\AppData\Local\dd_vcredistUI6989.txt

2008-12-23 12:59 - 2008-12-23 12:59 - 0001768 _____ () C:\Users\Guido\AppData\Local\uxeventlog.txt

2010-12-03 10:36 - 2010-12-03 10:36 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
 

Dateien, die verschoben oder gelöscht werden sollten:

====================

C:\Users\Guido\AppData\Roaming\cache.ini
 
 

Einige Dateien in TEMP:

====================

C:\Users\Guido\AppData\Local\Temp\avgnt.exe

C:\Users\Guido\AppData\Local\Temp\sqlite3.dll
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2015-12-11 12:50
 

==================== Ende von FRST.txt ============================

--- --- ---