Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Google Chrome öffnet ständig Spam Seiten! (https://www.trojaner-board.de/181614-google-chrome-oeffnet-staendig-spam-seiten.html)

Rafau2012 07.09.2016 12:00
Google Chrome öffnet ständig Spam Seiten!
 
Hallo, ich habe seit gestern Probleme mit meinem Google Chrome, jedesmal wenn ich eine neue Seite oder irgendwas anklicke,kommt eine Spam Seite. Wenn ich unter Chrome - Einstellung gehen möchte, stürzt jedesmal der Rechner ab und ich bekommme ein Bluescreen!

Malware habe ich durchlaufen lassen, aber hat nichts gefunden!

Was tun??

cosinus 07.09.2016 13:03
Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)




Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Rafau2012 07.09.2016 17:22

FRST Logfile:
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
durchgeführt von DJRISOW (Administrator) auf DJRISOW-PC (07-09-2016 18:16:34)
Gestartet von C:\Users\DJRISOW\Desktop
Geladene Profile: DJRISOW (Verfügbare Profile: DJRISOW)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(RME) C:\Windows\System32\firefaceusb.exe
(RME) C:\Windows\System32\TotalMixFX.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac207\Monitor.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIGGE.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Users\DJRISOW\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Spotify Ltd) C:\Users\DJRISOW\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Canon INC.) C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Universal Audio, Inc.) C:\Program Files (x86)\Universal Audio\Powered Plugins\UATrayIcon.exe
() C:\Program Files (x86)\Universal Audio\Powered Plugins\UADPerfMon.exe
(CANON INC.) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11660904 2010-11-30] (Realtek Semiconductor)
HKLM\...\Run: [VIRTU] => C:\Program Files\Lucidlogix Technologies\VIRTU\VirtuControlPanel.Exe [2619488 2011-04-21] ()
HKLM\...\Run: [FirefaceUsbTray1] => C:\Windows\system32\firefaceusb.exe [96768 2016-02-11] (RME)
HKLM\...\Run: [FirefaceMixTray2] => C:\Windows\system32\TotalMixFX.exe [23103704 2016-02-11] (RME)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [2824504 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-03-18] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [UATrayIcon] => C:\Program Files (x86)\Universal Audio\Powered Plugins\UATrayIcon.exe [1484800 2015-07-10] (Universal Audio, Inc.)
HKLM-x32\...\Run: [UAPerfMon] => C:\Program Files (x86)\Universal Audio\Powered Plugins\UADPerfMon.exe [3822592 2015-07-10] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [EPSON SX125 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [Amazon Music] => C:\Users\DJRISOW\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [Dropbox Update] => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-05-26] (Dropbox, Inc.)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [Spotify Web Helper] => C:\Users\DJRISOW\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1523312 2016-08-23] (Spotify Ltd)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\MountPoints2: {13aac168-c042-11e5-a42c-002522cc2a9b} - G:\autorun.exe
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\MountPoints2: {1f825de1-7f01-11e5-8b73-002522cc2a9b} - F:\Setup\Setup.exe
AppInit_DLLs-x32: C:\PROGRA~1\LUCIDL~1\VIRTU\x86\APPINI~1.DLL => C:\Program Files\Lucidlogix Technologies\VIRTU\x86\appinit_dll.dll [154208 2011-04-21] (Lucidlogix Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
Startup: C:\Users\DJRISOW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk [2015-11-05]
ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)
Startup: C:\Users\DJRISOW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rayven Justice Choose Up Prod by The Legion DJ Pack 99BPM.zip.lnk [2015-11-05]
ShortcutTarget: Rayven Justice Choose Up Prod by The Legion DJ Pack 99BPM.zip.lnk -> C:\ProgramData\{3e336eaa-a046-b486-3e33-36eaaa04baaa}\Rayven Justice Choose Up Prod by The Legion DJ Pack 99BPM.zip.exe (Keine Datei)
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{5E3EC87F-173D-4917-85B1-CC5CF5429EBC}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{D820ED38-357A-49FC-9CD4-CA3D247D6F48}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE07&ocid=UE07DHP
SearchScopes: HKLM -> {CF6F90BD-EB6B-4057-8F3C-D777FF3A8D5F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-3719051794-263782235-1391171954-1000 -> DefaultScope {CF6F90BD-EB6B-4057-8F3C-D777FF3A8D5F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-3719051794-263782235-1391171954-1000 -> {CF6F90BD-EB6B-4057-8F3C-D777FF3A8D5F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1

FireFox:
========
FF ProfilePath: C:\Users\DJRISOW\AppData\Roaming\Mozilla\Firefox\Profiles\yr8wwsrl.default
FF Homepage: hxxps://www.malwarebytes.org/restorebrowser//?type=hp&ts=1446217681&z=e752470b0f30aa15396e161g4zez6q9o8g1m3qdb2g&from=dae&uid=hitachixhdp725050gla360_gec564rj1wu0gj1wu0gjx
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-01-10] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-01-10] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems)
FF Extension: (ArchiveFacebook) - C:\Users\DJRISOW\AppData\Roaming\Mozilla\Firefox\Profiles\yr8wwsrl.default\extensions\{53A03D43-5363-4669-8190-99061B2DEBA6} [2016-04-15]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.producerloops.com/de/Neue-Produkte.html
CHR StartupUrls: Default -> "hxxp://www.rnbass.com/","hxxps://refx.com/advent/"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5480255188&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms}
CHR Profile: C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-08-10]
CHR Extension: (YouTube) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google-Suche) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Chrome Web Notes) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnconblconehkpkgfinabjeceepmpiio [2016-09-06]
CHR Extension: (Google Docs Offline) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-17]
CHR Extension: (Google Mail) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR Extension: (Chrome Media Router) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-07]
CHR Extension: (Kein Name) - C:\Users\DJRISOW\Desktop\YouTube Video Downloader [2015-05-29]
CHR HKU\S-1-5-21-3719051794-263782235-1391171954-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools\digisptiservice64.exe [190464 2014-11-17] (Avid Technology, Inc.) [Datei ist nicht signiert]
R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2139328 2014-05-27] (Comodo Security Solutions, Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [7953776 2016-09-01] (Reimage®)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S2 Angry Family; C:\Users\DJRISOW\AppData\Roaming\Angry Family\Angry Family.exe [X]
S2 gramblrclient; C:\Program Files\Gramblr\gramblr.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AsrVDrive; C:\Windows\System32\DRIVERS\AsrVDrive.sys [23048 2011-01-26] (ASRock Inc.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-10-30] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 firefaceu64; C:\Windows\System32\drivers\fireface_usb_64.sys [104832 2016-02-11] (RME)
R3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-04-11] ()
R3 iLokDrvr; C:\Windows\SysWOW64\DRIVERS\iLokDrvr.sys [54256 2008-09-08] (PACE Anti-Piracy, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-09-07] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [112408 2015-03-13] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [572416 2006-12-05] (PixArt Imaging Inc.)
S3 RDID1027; C:\Windows\System32\Drivers\rdwm1027.sys [81920 2009-09-18] (Roland Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-10-30] (Duplex Secure Ltd.)
R3 synusb64; C:\Windows\System32\DRIVERS\synusb64.sys [30352 2011-12-14] (Steinberg Media Technologies GmbH)
R3 UAD2Pcie; C:\Windows\System32\DRIVERS\UAD2Pcie.sys [48640 2015-07-10] (Universal Audio Inc.)
R3 UAD2System; C:\Windows\System32\DRIVERS\UAD2System.sys [94208 2015-07-10] (Universal Audio Inc.)
S3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [43744 2015-07-28] (Yamaha Corporation)
S3 YFWBUS; System32\Drivers\yfwbus.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-07 18:16 - 2016-09-07 18:16 - 02397696 _____ (Farbar) C:\Users\DJRISOW\Desktop\FRST64.exe
2016-09-07 18:16 - 2016-09-07 18:16 - 00024734 _____ C:\Users\DJRISOW\Desktop\FRST.txt
2016-09-07 18:16 - 2016-09-07 18:16 - 00000000 ____D C:\FRST
2016-09-07 11:53 - 2016-09-07 12:54 - 00000000 ____D C:\Program Files\Reimage
2016-09-07 11:53 - 2016-09-07 11:53 - 00004282 _____ C:\Windows\System32\Tasks\ReimageUpdater
2016-09-07 11:53 - 2016-09-07 11:53 - 00000000 ____D C:\ProgramData\Reimage Protector
2016-09-07 11:52 - 2016-09-07 11:54 - 00000140 _____ C:\Windows\Reimage.ini
2016-09-07 11:47 - 2016-09-07 11:47 - 00307072 _____ C:\Windows\Minidump\090716-44943-01.dmp
2016-09-07 11:41 - 2016-09-07 11:41 - 00307072 _____ C:\Windows\Minidump\090716-21216-01.dmp
2016-09-07 11:36 - 2016-09-07 11:38 - 00000000 ____D C:\AdwCleaner
2016-09-07 11:36 - 2016-09-07 11:36 - 03826240 _____ C:\Users\DJRISOW\Desktop\adwcleaner_6.010.exe
2016-09-07 11:33 - 2016-09-07 11:33 - 00002219 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-07 11:26 - 2016-09-07 11:26 - 01065376 _____ (Google Inc.) C:\Users\DJRISOW\Downloads\ChromeSetup.exe
2016-09-06 22:04 - 2016-09-06 22:04 - 08215120 _____ C:\Users\DJRISOW\Desktop\Amazon.mp4
2016-09-06 21:06 - 2016-09-06 21:06 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-09-06 20:51 - 2016-09-06 20:51 - 00000000 ____D C:\Users\DJRISOW\Desktop\55780
2016-09-06 19:58 - 2016-09-06 19:58 - 00000000 ____D C:\Users\DJRISOW\Desktop\Epic World Library
2016-09-06 19:57 - 2016-09-06 19:57 - 00001018 _____ C:\Users\Public\Desktop\Engine 2.lnk
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 __HDC C:\ProgramData\{52074E70-E39F-4B90-82D6-38ACBB36A8B6}
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 __HDC C:\ProgramData\{019B143A-9DF7-4A4E-9071-1FB3892DDD09}
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\Users\DJRISOW\Documents\Best Service
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\Best Service
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Engine 2
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\ProgramData\Best Service
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\Program Files\Best Service
2016-09-06 12:37 - 2016-09-06 12:38 - 111777421 _____ C:\Users\DJRISOW\Desktop\Fat Joe' Remy Ma n French Montana ft RySoValid - Cookin [Xtendz] - HD - Clean.mp4
2016-09-05 18:24 - 2016-09-05 18:24 - 00001054 _____ C:\Users\Public\Desktop\Native Access.lnk
2016-09-05 18:24 - 2016-09-05 18:24 - 00000000 __HDC C:\ProgramData\{CE9BCF90-E7F3-4C22-8E3F-13DFA1FC853D}
2016-09-05 14:26 - 2016-09-05 14:27 - 41641346 _____ C:\Users\DJRISOW\Desktop\Kygo feat. Conrad Sewell - Firestone Live at Skavlan.mp4
2016-09-04 15:41 - 2016-09-04 15:41 - 00307072 _____ C:\Windows\Minidump\090416-27378-01.dmp
2016-09-03 22:48 - 2016-09-03 22:48 - 00307072 _____ C:\Windows\Minidump\090316-32495-01.dmp
2016-09-02 17:19 - 2016-09-02 17:19 - 00307072 _____ C:\Windows\Minidump\090216-28126-01.dmp
2016-09-01 23:47 - 2016-09-01 23:47 - 00307072 _____ C:\Windows\Minidump\090116-25131-01.dmp
2016-09-01 14:38 - 2016-09-01 14:38 - 00307072 _____ C:\Windows\Minidump\090116-32339-01.dmp
2016-09-01 14:34 - 2016-09-01 14:34 - 00001009 _____ C:\Users\Public\Desktop\Reaktor 5.lnk
2016-09-01 14:34 - 2016-09-01 14:34 - 00000000 __HDC C:\ProgramData\{D9728A28-7722-4D89-9A50-355260FF8E2B}
2016-09-01 13:49 - 2016-09-01 13:49 - 00000000 __HDC C:\ProgramData\{37384B65-5F11-426F-82AE-CDD606490599}
2016-09-01 13:48 - 2016-09-01 13:48 - 00000000 __HDC C:\ProgramData\{79327801-8B0E-430E-8FB6-20702A311ED7}
2016-09-01 13:48 - 2016-09-01 13:48 - 00000000 ____D C:\Users\Public\Documents\Reaktor Factory Library
2016-09-01 13:47 - 2016-09-01 13:47 - 00000000 ____D C:\Users\Public\Documents\Reaktor Blocks
2016-09-01 13:46 - 2016-09-01 13:46 - 00001094 _____ C:\Users\Public\Desktop\Controller Editor.lnk
2016-09-01 13:46 - 2016-09-01 13:46 - 00000000 __HDC C:\ProgramData\{AA454A3E-618B-4FA7-8742-D31B75115C43}
2016-09-01 13:25 - 2016-09-01 13:25 - 00000000 __HDC C:\ProgramData\{DFA16065-8ECA-4933-99B8-9CAEA99506CB}
2016-09-01 13:24 - 2016-09-01 13:24 - 00000000 __HDC C:\ProgramData\{FA2F8522-7DAF-43CB-9B78-23003AF864BB}
2016-09-01 13:22 - 2016-09-01 13:22 - 00000000 __HDC C:\ProgramData\{91A4A873-1950-4B23-A695-B24328D2D1E3}
2016-09-01 13:21 - 2016-09-01 13:21 - 00000000 __HDC C:\ProgramData\{7D1688B0-FF00-4064-99A5-E3753366C056}
2016-09-01 13:19 - 2016-09-01 13:19 - 00000000 __HDC C:\ProgramData\{6C16E1CD-7099-4249-829E-17828665267B}
2016-09-01 13:18 - 2016-09-01 13:18 - 00000000 __HDC C:\ProgramData\{FBEE89CD-D429-4948-96D2-5DD8C89C99B4}
2016-09-01 13:16 - 2016-09-01 13:16 - 00000000 __HDC C:\ProgramData\{6EA8A4B3-65E2-44FA-804F-635285EE836F}
2016-09-01 13:15 - 2016-09-01 13:15 - 00000000 __HDC C:\ProgramData\{11E6C06E-F8A8-4E8D-A1E6-34A8A0668348}
2016-09-01 13:14 - 2016-09-01 13:14 - 00000000 __HDC C:\ProgramData\{17096F5E-F808-4F7F-9134-A3DE8F7CD093}
2016-09-01 13:12 - 2016-09-01 13:12 - 00000000 __HDC C:\ProgramData\{C7147405-74FE-411E-B440-A7E2C5FCBE64}
2016-09-01 13:12 - 2016-09-01 13:12 - 00000000 __HDC C:\ProgramData\{AF974A13-112C-4A21-AAC2-088DE8A1DC31}
2016-09-01 13:11 - 2016-09-01 13:11 - 00000000 __HDC C:\ProgramData\{4B46290B-9384-4D38-8F9D-42C7DDBBBFFE}
2016-09-01 13:11 - 2016-09-01 13:11 - 00000000 __HDC C:\ProgramData\{22629EA1-FE2A-4A84-AFC7-E1DFF9DAFC5E}
2016-09-01 13:10 - 2016-09-01 13:10 - 00000000 __HDC C:\ProgramData\{5BB7DCD2-79BA-4FE2-8DCC-C4710E9271A3}
2016-09-01 13:09 - 2016-09-01 13:09 - 00000000 __HDC C:\ProgramData\{B42AD08D-C95C-4CC9-8F45-E587E7A4944B}
2016-09-01 13:07 - 2016-09-01 13:07 - 00000000 __HDC C:\ProgramData\{D32EE6FB-8B59-452B-8203-AD46E434361D}
2016-09-01 13:05 - 2016-09-01 13:05 - 00001014 _____ C:\Users\Public\Desktop\Kontakt 5.lnk
2016-09-01 13:05 - 2016-09-01 13:05 - 00000000 __HDC C:\ProgramData\{1C1EDD4B-9BC5-4A46-93AF-0D31E608815E}
2016-09-01 13:03 - 2016-09-01 13:03 - 00000000 __HDC C:\ProgramData\{1436CC31-8739-4FD7-81A7-393F03F0495B}
2016-09-01 13:02 - 2016-09-01 13:02 - 00000000 __HDC C:\ProgramData\{D059CA43-CBB2-41FE-B4E4-8FEF0614F812}
2016-09-01 13:02 - 2016-09-01 13:02 - 00000000 __HDC C:\ProgramData\{7BEDC436-56E7-4B12-BC0A-5CB05F2113A2}
2016-09-01 13:01 - 2016-09-01 13:01 - 00000000 __HDC C:\ProgramData\{776F744B-F906-497C-808A-02EC3467EB29}
2016-09-01 12:59 - 2016-09-01 12:59 - 00000000 __HDC C:\ProgramData\{61DD2F1D-990F-4CD3-95FA-8BD4D3617208}
2016-09-01 12:57 - 2016-09-01 12:57 - 00000000 __HDC C:\ProgramData\{51B54F90-B4A7-4546-9F3A-B9B8C563B16A}
2016-09-01 12:55 - 2016-09-01 12:55 - 00000000 __HDC C:\ProgramData\{6E5B3AE4-8785-4886-97B0-DEAF3D4FB2FE}
2016-09-01 12:55 - 2016-09-01 12:55 - 00000000 __HDC C:\ProgramData\{565947C1-8683-47EE-86DC-F64C0C157B53}
2016-09-01 12:49 - 2016-09-01 12:49 - 00000000 __HDC C:\ProgramData\{7AD85942-A0AF-4BC4-B654-C9ECF9B82100}
2016-09-01 12:48 - 2016-09-01 12:48 - 00000000 ____D C:\Users\Public\Documents\Form
2016-09-01 12:46 - 2016-09-01 12:46 - 00001014 _____ C:\Users\Public\Desktop\Reaktor 6.lnk
2016-09-01 12:46 - 2016-09-01 12:46 - 00000000 __HDC C:\ProgramData\{39445429-DDAA-4C68-85D4-A3E556DC22E2}
2016-09-01 12:40 - 2016-09-01 12:40 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\cache
2016-09-01 12:38 - 2016-09-01 12:39 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Native Instruments
2016-08-30 22:23 - 2016-08-30 22:23 - 00262144 _____ C:\Windows\Minidump\083016-24367-01.dmp
2016-08-30 20:19 - 2016-08-30 20:19 - 00000000 ____D C:\Users\DJRISOW\Desktop\Track Pictures
2016-08-30 19:16 - 2016-08-30 20:29 - 00985593 _____ C:\Users\DJRISOW\Desktop\mixii.cpr
2016-08-29 15:37 - 2016-08-29 15:37 - 00000000 ____D C:\Users\DJRISOW\Documents\Xfer
2016-08-28 23:51 - 2016-08-28 23:51 - 00262144 _____ C:\Windows\Minidump\082816-25069-01.dmp
2016-08-28 23:48 - 2016-08-28 23:48 - 00262144 _____ C:\Windows\Minidump\082816-25350-01.dmp
2016-08-28 20:56 - 2016-08-28 20:56 - 00307072 _____ C:\Windows\Minidump\082816-27081-01.dmp
2016-08-27 22:38 - 2016-08-27 22:38 - 00307072 _____ C:\Windows\Minidump\082716-22245-01.dmp
2016-08-27 12:50 - 2016-08-27 12:50 - 00307072 _____ C:\Windows\Minidump\082716-28142-01.dmp
2016-08-26 13:10 - 2016-08-26 13:10 - 00307072 _____ C:\Windows\Minidump\082616-25552-01.dmp
2016-08-25 12:32 - 2016-08-25 12:32 - 00307072 _____ C:\Windows\Minidump\082516-21855-01.dmp
2016-08-24 23:30 - 2016-08-24 23:30 - 00000000 ____D C:\Users\DJRISOW\Desktop\Ultimate R&B Nexus Expansion
2016-08-24 12:59 - 2016-08-24 12:59 - 00262144 _____ C:\Windows\Minidump\082416-23524-01.dmp
2016-08-22 13:16 - 2016-08-22 13:16 - 00307072 _____ C:\Windows\Minidump\082216-27861-01.dmp
2016-08-21 21:50 - 2016-08-21 21:50 - 00307072 _____ C:\Windows\Minidump\082116-29858-01.dmp
2016-08-20 20:01 - 2016-08-20 20:01 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\D16 Group
2016-08-20 14:23 - 2016-08-20 14:23 - 02857460 _____ C:\Users\DJRISOW\Desktop\Bassline.wav
2016-08-20 12:59 - 2016-08-20 12:59 - 00002116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-08-19 13:15 - 2016-08-19 13:23 - 00000000 ____D C:\Users\DJRISOW\Desktop\hhu
2016-08-19 12:51 - 2016-08-19 12:51 - 00307072 _____ C:\Windows\Minidump\081916-28064-01.dmp
2016-08-18 23:54 - 2016-08-18 23:54 - 01534302 _____ C:\Users\DJRISOW\Desktop\Honorebel drop.mp4
2016-08-17 11:00 - 2016-07-08 17:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-08-17 11:00 - 2016-07-08 17:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-08-15 12:41 - 2016-08-15 12:41 - 00307072 _____ C:\Windows\Minidump\081516-21871-01.dmp
2016-08-11 15:44 - 2016-08-12 15:55 - 207801220 _____ C:\Users\DJRISOW\Desktop\Video machen.mp4
2016-08-10 12:36 - 2016-08-02 16:54 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-10 12:36 - 2016-08-02 16:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-10 12:36 - 2016-08-02 08:54 - 25808384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-10 12:36 - 2016-08-02 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-10 12:36 - 2016-08-02 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-10 12:36 - 2016-08-02 08:32 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-10 12:36 - 2016-08-02 08:32 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-10 12:36 - 2016-08-02 08:31 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-10 12:36 - 2016-08-02 08:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-10 12:36 - 2016-08-02 08:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-10 12:36 - 2016-08-02 08:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-10 12:36 - 2016-08-02 08:24 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-10 12:36 - 2016-08-02 08:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-10 12:36 - 2016-08-02 08:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-10 12:36 - 2016-08-02 08:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-10 12:36 - 2016-08-02 08:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-10 12:36 - 2016-08-02 08:18 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-10 12:36 - 2016-08-02 08:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-10 12:36 - 2016-08-02 08:18 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-10 12:36 - 2016-08-02 08:11 - 00969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-10 12:36 - 2016-08-02 08:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-10 12:36 - 2016-08-02 08:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-08-10 12:36 - 2016-08-02 08:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-10 12:36 - 2016-08-02 07:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-10 12:36 - 2016-08-02 07:56 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-10 12:36 - 2016-08-02 07:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-10 12:36 - 2016-08-02 07:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-08-10 12:36 - 2016-08-02 07:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-10 12:36 - 2016-08-02 07:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-08-10 12:36 - 2016-08-02 07:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-08-10 12:36 - 2016-08-02 07:51 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-10 12:36 - 2016-08-02 07:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-10 12:36 - 2016-08-02 07:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-08-10 12:36 - 2016-08-02 07:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-08-10 12:36 - 2016-08-02 07:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-10 12:36 - 2016-08-02 07:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-08-10 12:36 - 2016-08-02 07:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-10 12:36 - 2016-08-02 07:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-08-10 12:36 - 2016-08-02 07:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-08-10 12:36 - 2016-08-02 07:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-08-10 12:36 - 2016-08-02 07:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-08-10 12:36 - 2016-08-02 07:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-10 12:36 - 2016-08-02 07:38 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-10 12:36 - 2016-08-02 07:38 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-10 12:36 - 2016-08-02 07:37 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-10 12:36 - 2016-08-02 07:36 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-10 12:36 - 2016-08-02 07:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-08-10 12:36 - 2016-08-02 07:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-08-10 12:36 - 2016-08-02 07:28 - 15412224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-10 12:36 - 2016-08-02 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-08-10 12:36 - 2016-08-02 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-08-10 12:36 - 2016-08-02 07:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-08-10 12:36 - 2016-08-02 07:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-08-10 12:36 - 2016-08-02 07:23 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-10 12:36 - 2016-08-02 07:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-08-10 12:36 - 2016-08-02 07:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-08-10 12:36 - 2016-08-02 07:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-08-10 12:36 - 2016-08-02 07:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-10 12:36 - 2016-08-02 07:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-10 12:36 - 2016-08-02 07:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-08-10 12:36 - 2016-08-02 07:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-10 12:36 - 2016-08-02 07:10 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-10 12:36 - 2016-08-02 06:59 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-10 12:36 - 2016-08-02 06:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-08-10 12:36 - 2016-08-02 06:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-10 12:36 - 2016-08-02 06:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-08-10 12:36 - 2016-07-08 17:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-10 12:36 - 2016-07-08 17:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-10 12:36 - 2016-07-08 17:32 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-10 12:36 - 2016-07-08 17:17 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-10 12:36 - 2016-07-08 17:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-08-10 12:36 - 2016-07-08 17:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-10 12:36 - 2016-07-08 17:01 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-10 12:36 - 2016-07-08 16:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-10 12:36 - 2016-07-08 16:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-10 12:36 - 2016-07-08 16:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-10 12:36 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-08-10 12:36 - 2016-07-08 16:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-10 12:36 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-08-10 00:29 - 2016-08-10 00:29 - 00262144 _____ C:\Windows\Minidump\081016-31262-01.dmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-07 18:10 - 2015-07-14 15:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-07 18:10 - 2014-11-10 00:50 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-07 18:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-07 18:08 - 2014-11-10 00:30 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-07 12:57 - 2015-07-14 15:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-07 12:55 - 2014-11-10 01:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-07 12:44 - 2015-07-23 18:44 - 00000358 _____ C:\Windows\Tasks\VacayExpert.job
2016-09-07 12:44 - 2015-07-10 12:44 - 00000358 _____ C:\Windows\Tasks\DogWiz.job
2016-09-07 12:44 - 2015-06-26 00:44 - 00000354 _____ C:\Windows\Tasks\MoneyAid.job
2016-09-07 12:44 - 2015-06-04 12:44 - 00000356 _____ C:\Windows\Tasks\RenderOrder.job
2016-09-07 12:04 - 2015-05-26 12:53 - 00001232 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000UA.job
2016-09-07 11:56 - 2009-07-14 06:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-07 11:56 - 2009-07-14 06:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-07 11:47 - 2014-11-11 14:11 - 648730373 _____ C:\Windows\MEMORY.DMP
2016-09-07 11:47 - 2014-11-11 14:11 - 00000000 ____D C:\Windows\Minidump
2016-09-07 11:27 - 2014-11-10 00:36 - 00000000 ____D C:\Program Files (x86)\Google
2016-09-07 01:16 - 2014-11-10 20:00 - 00000000 ____D C:\Users\DJRISOW\Documents\Cubase Projects
2016-09-07 01:14 - 2016-03-28 16:25 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Spotify
2016-09-07 00:04 - 2015-05-26 12:53 - 00001180 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000Core.job
2016-09-06 22:05 - 2015-11-23 16:22 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\vlc
2016-09-06 21:07 - 2014-11-12 19:01 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Dropbox
2016-09-06 20:32 - 2014-12-02 19:37 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\Spectrasonics
2016-09-06 19:57 - 2014-11-26 22:17 - 00000000 ____D C:\Program Files (x86)\VST
2016-09-06 19:57 - 2014-11-10 01:14 - 00000000 ____D C:\ProgramData\MAGIX
2016-09-06 19:02 - 2016-03-28 16:26 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\Spotify
2016-09-05 18:23 - 2015-12-04 15:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
2016-09-05 18:23 - 2015-12-04 15:10 - 00000000 ____D C:\Program Files\Native Instruments
2016-09-05 13:06 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2016-09-05 13:06 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2016-09-05 13:06 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-05 13:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-04 12:36 - 2014-12-25 01:19 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Mp3tag
2016-09-03 11:46 - 2016-07-26 13:59 - 00000000 ____D C:\Users\DJRISOW\Desktop\mac
2016-09-01 13:56 - 2014-11-17 14:48 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\Native Instruments
2016-09-01 13:49 - 2014-11-17 14:46 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2016-09-01 13:46 - 2014-11-17 14:46 - 00000000 ____D C:\ProgramData\Native Instruments
2016-09-01 13:36 - 2015-12-06 23:44 - 00000000 ____D C:\Users\Public\Documents\NI Resources
2016-09-01 13:36 - 2015-12-04 15:11 - 00000000 ____D C:\Users\DJRISOW\Documents\Native Instruments
2016-09-01 13:26 - 2015-11-19 11:29 - 00000000 ____D C:\temp
2016-09-01 13:12 - 2015-12-05 18:05 - 00000000 ____D C:\Users\Public\Documents\Session Strings Pro Library
2016-09-01 13:12 - 2015-12-05 18:03 - 00000000 ____D C:\Users\Public\Documents\Scarbee Vintage Keys Library
2016-09-01 13:11 - 2015-12-05 17:35 - 00000000 ____D C:\Users\Public\Documents\Scarbee Funk Guitarist Library
2016-09-01 13:07 - 2015-12-05 16:34 - 00000000 ____D C:\Users\Public\Documents\Kontakt Factory Library
2016-09-01 13:03 - 2015-12-05 17:14 - 00000000 ____D C:\Users\Public\Documents\Evolve R2 Library
2016-09-01 13:02 - 2015-12-05 17:13 - 00000000 ____D C:\Users\Public\Documents\Evolve Mutations 2 Library
2016-09-01 13:02 - 2015-12-05 17:12 - 00000000 ____D C:\Users\Public\Documents\Evolve Mutations Library
2016-09-01 12:57 - 2015-12-05 17:07 - 00000000 ____D C:\Users\Public\Documents\Damage Library
2016-09-01 12:55 - 2015-12-05 16:59 - 00000000 ____D C:\Users\Public\Documents\Action Strings Library
2016-09-01 12:55 - 2015-12-05 16:58 - 00000000 ____D C:\Users\Public\Documents\Action Strikes Library
2016-09-01 12:37 - 2014-11-13 00:23 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-31 18:12 - 2014-11-10 00:18 - 09619946 ____H C:\Users\DJRISOW\AppData\Local\IconCache.db.backup
2016-08-26 00:43 - 2015-02-26 20:25 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Skype
2016-08-17 17:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-08-14 20:25 - 2015-12-22 14:35 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\BREVERB 2
2016-08-14 18:53 - 2014-11-10 18:59 - 00000000 ____D C:\Users\DJRISOW\Documents\VST3 Presets
2016-08-12 16:08 - 2014-12-22 17:42 - 00000132 _____ C:\Users\DJRISOW\AppData\Roaming\Adobe PNG Format CS6 Prefs
2016-08-10 19:17 - 2009-07-14 06:45 - 07233296 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-10 12:59 - 2014-11-10 17:02 - 00000000 ____D C:\Windows\system32\MRT
2016-08-10 12:49 - 2014-11-10 17:02 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-11-13 22:20 - 2009-11-05 10:50 - 9535488 _____ (Softube) C:\Program Files (x86)\Tube Delay.dll
2014-12-11 17:08 - 2014-12-11 17:08 - 0000000 ____H () C:\Users\DJRISOW\AppData\Roaming\.C2E86F5206385595.sys
2014-12-22 17:42 - 2016-08-12 16:08 - 0000132 _____ () C:\Users\DJRISOW\AppData\Roaming\Adobe PNG Format CS6 Prefs
2015-07-12 13:59 - 2015-10-13 16:37 - 0000024 _____ () C:\Users\DJRISOW\AppData\Roaming\appdataFr25.bin
2014-11-10 02:07 - 2016-02-12 00:02 - 0000722 _____ () C:\Users\DJRISOW\AppData\Roaming\buttrc
2014-12-20 04:21 - 2014-12-20 04:21 - 0335504 _____ () C:\Users\DJRISOW\AppData\Roaming\CodecsLE_Install.log
2014-11-10 01:50 - 2016-05-31 19:19 - 0000026 _____ () C:\Users\DJRISOW\AppData\Local\isoworkshop.ini
2014-12-04 23:40 - 2014-12-04 23:40 - 0000017 _____ () C:\Users\DJRISOW\AppData\Local\resmon.resmoncfg

Einige Dateien in TEMP:
====================
C:\Users\DJRISOW\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpnazfx2.dll
C:\Users\DJRISOW\AppData\Local\Temp\DTLite1010-0074.exe
C:\Users\DJRISOW\AppData\Local\Temp\FastDownload.exe
C:\Users\DJRISOW\AppData\Local\Temp\FreeYouTubeDownload.exe
C:\Users\DJRISOW\AppData\Local\Temp\Hibiki.dll
C:\Users\DJRISOW\AppData\Local\Temp\libeay32.dll
C:\Users\DJRISOW\AppData\Local\Temp\msvcr120.dll
C:\Users\DJRISOW\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\DJRISOW\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\DJRISOW\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\DJRISOW\AppData\Local\Temp\nvStInst.exe
C:\Users\DJRISOW\AppData\Local\Temp\ochelper.dll
C:\Users\DJRISOW\AppData\Local\Temp\ochelper.exe
C:\Users\DJRISOW\AppData\Local\Temp\PlaySound.dll
C:\Users\DJRISOW\AppData\Local\Temp\ReimagePackage.exe
C:\Users\DJRISOW\AppData\Local\Temp\SkypeSetup.exe
C:\Users\DJRISOW\AppData\Local\Temp\sqlite3.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite27340.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite34478.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite46264.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite82440.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite83906.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite90696.dll
C:\Users\DJRISOW\AppData\Local\Temp\tmpF18B.tmp.exe
C:\Users\DJRISOW\AppData\Local\Temp\uninstall.exe
C:\Users\DJRISOW\AppData\Local\Temp\vlc-2.2.1-win32.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-05 14:15

==================== Ende von FRST.txt ============================
--- --- ---

Rafau2012 07.09.2016 17:23
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von DJRISOW (07-09-2016 18:17:11)
Gestartet von C:\Users\DJRISOW\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-11-09 22:09:40)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3719051794-263782235-1391171954-500 - Administrator - Disabled)
C185D41A82D249B08899 (S-1-5-21-3719051794-263782235-1391171954-1004 - Limited - Enabled)
D1C562BF37D343A79588 (S-1-5-21-3719051794-263782235-1391171954-1003 - Limited - Enabled)
DJRISOW (S-1-5-21-3719051794-263782235-1391171954-1000 - Administrator - Enabled) => C:\Users\DJRISOW
Gast (S-1-5-21-3719051794-263782235-1391171954-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.0.0 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
AIR Creative Collection (HKLM\...\{D3AE0FF1-6A78-4099-8779-B05E313B7828}) (Version: 11.0.0 - AIR Music Technology)
Amazon Music (HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC)
Antares Autotune Evo VST RTAS v6.0.9 (HKLM-x32\...\Antares Autotune Evo VST RTAS_is1) (Version:  - )
Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Arabic World Strings (HKLM-x32\...\Arabic World Strings1.0) (Version: 1.0 - Arabic World PLugins)
Arturia minimoog V v1.6 (HKLM-x32\...\Arturia minimoog V_is1) (Version:  - )
ASRock 3TB+ Unlocker v1.0 (HKLM\...\ASRock 3TB+ Unlocker_is1) (Version:  - ASRock Inc.)
ASRock eXtreme Tuner v0.1.71 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version:  - )
ASRock InstantBoot v1.26 (HKLM-x32\...\ASRock InstantBoot_is1) (Version:  - )
Auto-Tune EFX VST (HKLM-x32\...\{95292902-411B-4390-BCBD-8EA445F9456C}) (Version: 1.0.0 - Antares Audio Technologies)
Avid Codecs LE (HKLM-x32\...\{96263993-5E28-424D-A542-FDDEE1217CFF}) (Version: 2.4.0 - Avid Technology, Inc.)
Avid Effects (HKLM\...\{0faad20d-ad8d-4249-ad93-7f006f2aa54b}) (Version: 11.2.2 - Avid Technology, Inc.)
Avid HD Driver (x64) (HKLM\...\{658E112A-8776-4430-A275-D9248732DFB9}) (Version: 11.2.2 - Avid Technology, Inc.)
Avid Pro Tools (HKLM\...\{4D24A12F-11DE-4CA0-9CB7-0418C86A8244}) (Version: 11.2.2 - Avid Technology, Inc.)
Avid Sound Replacer (HKLM\...\{6493231d-d7c3-436e-880b-b1f12882b60c}) (Version: 11.0.0 - Avid Technology, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BREVERB 2 (HKLM-x32\...\{B2D9F699-B4A4-4D37-941E-1B55DF33A96D}_is1) (Version: 2.1.8 - Overloud)
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.3 - Broadcom Corporation)
bx_shredspread 1.9 (HKLM\...\bx_shredspread_is1) (Version: 1.9 - Plugin Alliance)
bx_solo 1.7 (HKLM\...\bx_solo_is1) (Version: 1.7 - Plugin Alliance)
Camel Audio Camel Phat VST v3.15 (HKLM-x32\...\Camel Audio Camel Phat VST v3.15) (Version:  - )
Camel Audio Camel Space VST v1.15 (HKLM-x32\...\Camel Audio Camel Space VST v1.15) (Version:  - )
Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.10.2 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Celemony Melodyne Studio 4 (HKLM-x32\...\Celemony Melodyne Studio 4) (Version: 4.0.4.001 - Celemony)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 33.1.0.1 - Comodo)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
do-search (HKLM-x32\...\do-search) (Version: 1.0.0.1 - ) <==== ACHTUNG
Dropbox (HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Dropbox) (Version: 10.3.21 - Dropbox, Inc.)
Druckerdeinstallation für EPSON SX125 Series (HKLM\...\EPSON SX125 Series) (Version:  - SEIKO EPSON Corporation)
E²Deesser (HKLM-x32\...\E²Deesser_is1) (Version: 1.2.0 - Eiosis, Inc.)
ElastikVst (x32 Version: 1.00.0000 - ueberschall sample service GmbH) Hidden
E-License Manager (HKLM-x32\...\E-License Manager) (Version: 1.3.0.0 - Best Service)
E-License Manager (Version: 1.3.0.0 - Magix) Hidden
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.9.2.1179 - Steinberg Media Technologies GmbH)
Engine 2 (HKLM-x32\...\Engine 2) (Version: 2.3.0.25 - Best Service)
Engine 2 (Version: 2.3.0.25 - Best Service) Hidden
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.96 - Etron Technology) Hidden
FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory)
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
GetFLV 9.8.128.18 (HKLM-x32\...\GetFLV_is1) (Version:  - GetFLV, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 53.0.2785.89 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gramblr (HKLM\...\Gramblr) (Version: 2.0.0 - Gramblr Team)
Hap QuickTime Component (HKLM-x32\...\{BCA56BF3-6A57-4C4D-A151-701267CFF530}) (Version: 7.0.0 - Vidvox)
HOFA-Plugins Uninstall (HKLM-x32\...\HOFA-Plugins) (Version:  - HOFA-Plugins)
Intel(R) C++ Redistributables on IA-32 (HKLM-x32\...\{317059CB-7642-4F2E-89C0-62E69D4074B7}) (Version: 15.0.148 - Intel Corporation)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{2DD3C090-2986-4970-B3CB-87BB4C8AC4A5}) (Version: 15.0.148 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2361 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.5 - PACE Anti-Piracy, Inc.)
ISO Workshop 5.5 (HKLM-x32\...\ISO Workshop_is1) (Version:  - Glorylogic)
iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)
Juicer 3.90 (HKLM-x32\...\{640EAE56-81A2-49D4-9B8C-00DA3C0031AF}_is1) (Version:  - Digital Juice, Inc.)
LinPlug Spectral (HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\LinPlug Spectral) (Version:  - )
L-Normalizer version 2.0.2 (HKLM-x32\...\{92F87FD0-B41C-11E3-B0B1-005056A77E8F}_is1) (Version: 2.0.2 - beDSP)
Magic Bullet QuickLooks for Magix 1.4.4 (HKLM\...\{9D084A74-7208-4433-81A0-8D8AF0B1FFE3}_is1) (Version: 1.4.4 - Red Giant, LLC)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{328343FF-0466-4E8D-88EB-53CE3150AE11}) (Version: 7.0.2.6 - MAGIX Software GmbH)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden
MAGIX Video Pro X6 (Designelemente) (HKLM\...\MX.{B819C28D-D7A1-4A73-B97D-BCEC5616BB4A}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Designelemente) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Filmvorlagen) (HKLM\...\MX.{3FB5F487-B8A5-46E4-872D-2CDA114466F4}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Filmvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Fotoshow Maker-Stile) (HKLM\...\MX.{8F592157-9C7D-4D9E-B712-5A0D1D982819}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Fotoshow Maker-Stile) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (HKLM\...\MX.{CBC84EDA-E830-4240-9392-325C3E6D5DCA}) (Version: 13.0.4.2 - MAGIX Software GmbH)
MAGIX Video Pro X6 (Individuelle Menüvorlagen) (HKLM\...\MX.{46014C2A-4768-4171-9FDE-9DF30836D387}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Individuelle Menüvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Menüvorlagen) (HKLM\...\MX.{C631DC28-575A-422B-AA9C-829834486F38}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Menüvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (proDAD Mercalli V2) (HKLM\...\MX.{A90FD7D9-5A48-4350-BA1C-E39390D158B7}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (proDAD Mercalli V2) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Red Giant Magic Bullet Quick Looks) (HKLM\...\MX.{B007B681-3208-4FEE-BD51-E97D3D913545}) (Version: 1.0.1.0 - MAGIX Software GmbH)
MAGIX Video Pro X6 (Red Giant Magic Bullet Quick Looks) (Version: 1.0.1.0 - MAGIX Software GmbH) Hidden
MAGIX Video Pro X6 (Soundtrack Maker-Stile) (HKLM\...\MX.{55A35129-47E9-4E81-9B98-775D631794AC}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Soundtrack Maker-Stile) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Titeleffekte) (HKLM\...\MX.{4D0530E3-9918-4264-8108-B3B7E8F7B910}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Titeleffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Tutorials) (HKLM\...\MX.{9BE10A05-17B2-4CC5-8701-7ACD0FB4C2CC}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Tutorials) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Überblendeffekte) (HKLM\...\MX.{56DE2115-3FF0-42CD-91A1-9BA4C9C7B8CA}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Überblendeffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Version: 13.0.4.2 - MAGIX Software GmbH) Hidden
MAGIX Video Pro X6 64 bit Update (Version: 13.0.5.9 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.2.0.1003 - Marvell)
MediaInfo 0.7.82 (HKLM\...\MediaInfo) (Version: 0.7.82 - MediaArea.net)
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - KB2467175 (HKLM-x32\...\{a0fe116e-9a8a-466f-aee0-625cb7c207e3}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Miroslav Philharmonik (HKLM-x32\...\{BA0D0121-A3BA-487D-9C78-7AB0E676C722}) (Version: 1.0.0 - IK Multimedia)
Miroslav Philharmonik Instruments (HKLM-x32\...\{9FCCC8D1-3152-4699-8793-6CB0B9E26EBB}) (Version: 1.0 - IK Multimedia)
MixMeister BPM Analyzer 1.0 (HKLM-x32\...\MixMeister BPM Analyzer_is1) (Version:  - MixMeister Technology LLC)
mocha Pro V3.2.1-7276 (HKLM-x32\...\{110ABF3B-74FA-45A4-B893-8482DA52AA9D}) (Version: 3.21.7276 - Imagineer Systems)
Mozilla Firefox 41.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0 (x86 de)) (Version: 41.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0 - Mozilla)
Mp3tag v2.71 (HKLM-x32\...\Mp3tag) (Version: v2.71 - Florian Heidenreich)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Native Instruments Abbey Road 50s Drummer (HKLM-x32\...\Native Instruments Abbey Road 50s Drummer) (Version: 1.2.0.10 - Native Instruments)
Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: 1.3.0.11 - Native Instruments)
Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: 1.3.0.7 - Native Instruments)
Native Instruments Abbey Road 80s Drummer (HKLM-x32\...\Native Instruments Abbey Road 80s Drummer) (Version: 1.3.0.4 - Native Instruments)
Native Instruments Abbey Road Modern Drummer (HKLM-x32\...\Native Instruments Abbey Road Modern Drummer) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Abbey Road Vintage Drummer (HKLM-x32\...\Native Instruments Abbey Road Vintage Drummer) (Version: 1.3.0.9 - Native Instruments)
Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version: 5.3.1.1628 - Native Instruments)
Native Instruments Action Strikes (HKLM-x32\...\Native Instruments Action Strikes) (Version: 1.2.0.2 - Native Instruments)
Native Instruments Action Strings (HKLM-x32\...\Native Instruments Action Strings) (Version: 1.5.0.1 - Native Instruments)
Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments)
Native Instruments Balinese Gamelan (HKLM-x32\...\Native Instruments Balinese Gamelan) (Version: 1.2.0.5 - Native Instruments)
Native Instruments Battery 4 (HKLM-x32\...\Native Instruments Battery 4) (Version: 4.1.5.254 - Native Instruments)
Native Instruments Battery 4 Factory Library (HKLM-x32\...\Native Instruments Battery 4 Factory Library) (Version: 1.1.0.1 - Native Instruments)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.11.0.465 - Native Instruments)
Native Instruments Cuba (HKLM-x32\...\Native Instruments Cuba) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Damage (HKLM-x32\...\Native Instruments Damage) (Version: 1.5.0.2 - Native Instruments)
Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Drum Lab (HKLM-x32\...\Native Instruments Drum Lab) (Version: 1.2.0.5 - Native Instruments)
Native Instruments Enhanced EQ (HKLM-x32\...\Native Instruments Enhanced EQ) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Evolve Mutations (HKLM-x32\...\Native Instruments Evolve Mutations) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Evolve Mutations 2 (HKLM-x32\...\Native Instruments Evolve Mutations 2) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Evolve R2 (HKLM-x32\...\Native Instruments Evolve R2) (Version: 1.7.0.2 - Native Instruments)
Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: 1.4.1.1599 - Native Instruments)
Native Instruments Form (HKLM-x32\...\Native Instruments Form) (Version: 1.0.0.7 - Native Instruments)
Native Instruments George Duke Soul Treasures (HKLM-x32\...\Native Instruments George Duke Soul Treasures) (Version: 1.3.0.15 - Native Instruments)
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: 5.2.0.2770 - Native Instruments)
Native Instruments Guitar Rig Pro Library for Maschine (HKLM-x32\...\Native Instruments Guitar Rig Pro Library for Maschine) (Version:  - Native Instruments)
Native Instruments Kinetic Metal (HKLM-x32\...\Native Instruments Kinetic Metal) (Version: 1.1.0.13 - Native Instruments)
Native Instruments Komplete 10 Ultimate (HKLM-x32\...\Native Instruments Komplete 10 Ultimate) (Version:  - Native Instruments)
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.5.2.880 - Native Instruments)
Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Kontour (HKLM-x32\...\Native Instruments Kontour) (Version: 1.0.0.4 - Native Instruments)
Native Instruments Maschine Drum Selection (HKLM-x32\...\Native Instruments Maschine Drum Selection) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.5.1.637 - Native Instruments)
Native Instruments Molekular (HKLM-x32\...\Native Instruments Molekular) (Version: 1.0.0.2 - Native Instruments)
Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Native Access (HKLM-x32\...\Native Instruments Native Access) (Version: 1.0.20.101 - Native Instruments)
Native Instruments Passive EQ (HKLM-x32\...\Native Instruments Passive EQ) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Polyplex (HKLM-x32\...\Native Instruments Polyplex) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Rammfire (HKLM-x32\...\Native Instruments Rammfire) (Version: 2.0.0.4 - Native Instruments)
Native Instruments Razor (HKLM-x32\...\Native Instruments Razor) (Version: 1.7.0.1 - Native Instruments)
Native Instruments RC 24 (HKLM-x32\...\Native Instruments RC 24) (Version: 1.3.1.45 - Native Instruments)
Native Instruments RC 48 (HKLM-x32\...\Native Instruments RC 48) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.4.1512 - Native Instruments)
Native Instruments Reaktor 6 (HKLM-x32\...\Native Instruments Reaktor 6) (Version: 6.0.3.16 - Native Instruments)
Native Instruments Reaktor Blocks (HKLM-x32\...\Native Instruments Reaktor Blocks) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Reaktor Factory Library (HKLM-x32\...\Native Instruments Reaktor Factory Library) (Version: 1.1.0.3 - Native Instruments)
Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: 1.6.0.1 - Native Instruments)
Native Instruments Reaktor Spark R2 (HKLM-x32\...\Native Instruments Reaktor Spark R2) (Version: 1.4.0.3 - Native Instruments)
Native Instruments Reflektor (HKLM-x32\...\Native Instruments Reflektor) (Version: 2.0.0.6 - Native Instruments)
Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.3 - Native Instruments)
Native Instruments Rise and Hit (HKLM-x32\...\Native Instruments Rise and Hit) (Version: 1.2.0.10 - Native Instruments)
Native Instruments Rounds (HKLM-x32\...\Native Instruments Rounds) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Scarbee Jay-Bass (HKLM-x32\...\Native Instruments Scarbee Jay-Bass) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Scarbee MM-Bass (HKLM-x32\...\Native Instruments Scarbee MM-Bass) (Version: 1.2.0.4 - Native Instruments)
Native Instruments Scarbee MM-Bass Amped (HKLM-x32\...\Native Instruments Scarbee MM-Bass Amped) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Scarbee Pre-Bass (HKLM-x32\...\Native Instruments Scarbee Pre-Bass) (Version: 1.2.0.2 - Native Instruments)
Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Scarbee Rickenbacker Bass (HKLM-x32\...\Native Instruments Scarbee Rickenbacker Bass) (Version: 1.2.0.2 - Native Instruments)
Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: 1.3.0.4 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Native Instruments Session Horns Pro (HKLM-x32\...\Native Instruments Session Horns Pro) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Session Strings Pro (HKLM-x32\...\Native Instruments Session Strings Pro) (Version: 1.4.0.2 - Native Instruments)
Native Instruments Skanner XT (HKLM-x32\...\Native Instruments Skanner XT) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Solid Dynamics FX (HKLM-x32\...\Native Instruments Solid Dynamics FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Solid EQ FX (HKLM-x32\...\Native Instruments Solid EQ FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: 1.4.0.12 - Native Instruments)
Native Instruments Supercharger GT (HKLM-x32\...\Native Instruments Supercharger GT) (Version: 1.3.1.45 - Native Instruments)
Native Instruments The Finger R2 (HKLM-x32\...\Native Instruments The Finger R2) (Version: 1.3.0.12 - Native Instruments)
Native Instruments The Gentleman (HKLM-x32\...\Native Instruments The Gentleman) (Version: 1.2.0.2 - Native Instruments)
Native Instruments The Giant (HKLM-x32\...\Native Instruments The Giant) (Version: 1.2.0.7 - Native Instruments)
Native Instruments The Grandeur (HKLM-x32\...\Native Instruments The Grandeur) (Version: 1.2.0.2 - Native Instruments)
Native Instruments The Maverick (HKLM-x32\...\Native Instruments The Maverick) (Version: 1.2.0.2 - Native Instruments)
Native Instruments The Mouth (HKLM-x32\...\Native Instruments The Mouth) (Version: 1.3.0.4 - Native Instruments)
Native Instruments Traktors 12 (HKLM-x32\...\Native Instruments Traktors 12) (Version: 2.0.0.6 - Native Instruments)
Native Instruments Transient Master FX (HKLM-x32\...\Native Instruments Transient Master FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Vari Comp (HKLM-x32\...\Native Instruments Vari Comp) (Version: 1.3.1.45 - Native Instruments)
Native Instruments VC 160 FX (HKLM-x32\...\Native Instruments VC 160 FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments VC 2A FX (HKLM-x32\...\Native Instruments VC 2A FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments VC 76 FX (HKLM-x32\...\Native Instruments VC 76 FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.5 - Native Instruments)
Native Instruments West Africa (HKLM-x32\...\Native Instruments West Africa) (Version: 1.3.0.2 - Native Instruments)
Nero BurningROM 2015 (HKLM-x32\...\{32CEC4AD-4BEF-4EB8-833E-47DAE9382653}) (Version: 16.0.01500 - Nero AG)
Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1003 - Nero AG)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
OrangeVocoder v2.0-OxYGeN (HKLM-x32\...\OrangeVocoder v2.0-OxYGeN) (Version:  - )
PACE License Support Win64 (HKLM-x32\...\InstallShield_{DF91FC8F-0D43-415b-BB5D-22533FC1CC1A}) (Version: 2.6.0.1134 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.6.0.1134 - PACE Anti-Piracy, Inc.) Hidden
PCM Native Reverb Bundle (HKLM-x32\...\PCM Native Reverb Bundle) (Version:  - Lexicon)
PCM Native Reverb Bundle (x32 Version: 1.1.3 - Lexicon) Hidden
PCR-Treiber (HKLM\...\RolandRDID0027) (Version:  - Roland Corporation)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.311.0 - Tracker Software Products Ltd)
Ponyhoof (HKLM-x32\...\{88E96402-3BBD-02D9-0A36-6FB806AEE04E}) (Version:  - )
Prerequisite installer (x32 Version: 16.0.0000 - Nero AG) Hidden
proDAD Mercalli 2.0 (64bit) (HKLM\...\proDAD-Mercalli-2.0) (Version: 2.0.116 - proDAD GmbH)
proDAD Mercalli 3.0 (64bit) (HKLM\...\proDAD-Mercalli-3.0) (Version: 3.0.215.1 - proDAD GmbH)
proDAD Vitascene 2.0 (64bit) (HKLM\...\proDAD-Vitascene-2.0) (Version: 2.0.227 - proDAD GmbH)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6257 - Realtek Semiconductor Corp.)
Reimage Protector (HKLM\...\Reimage Protector) (Version:  - Reimage) <==== ACHTUNG
Revoice Pro (32 bit) (HKLM-x32\...\{7481C12D-51CF-4747-B1D5-3D7FE7612F0F}) (Version: 2.6.1.1 - Synchro Arts Ltd)
RME DIGICheck (HKLM-x32\...\{872BD2A4-7CB6-4692-A74E-99ABA11DED75}) (Version: 580rel - RME)
RME Fireface USB (HKLM\...\FIREFACE_USB) (Version: 1.0.89.0 - RME Intelligent Audio Solutions)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
Skype™ 7.7 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)
Softube Acoustic Feedback VST RTAS v1.0.7 (HKLM-x32\...\Softube Acoustic Feedback VST RTAS_is1) (Version:  - )
Softube Bass Amp Room VST RTAS v1.0.2 (HKLM-x32\...\Softube Bass Amp Room VST RTAS_is1) (Version:  - )
Softube FET Compressor VST RTAS v1.0.3 (HKLM-x32\...\Softube FET Compressor VST RTAS_is1) (Version:  - )
Softube Metal Amp Room VST RTAS v1.1.5 (HKLM-x32\...\Softube Metal Amp Room VST RTAS_is1) (Version:  - )
Softube Passive-Active Pack VST RTAS v1.0.2 (HKLM-x32\...\Softube Passive-Active Pack VST RTAS_is1) (Version:  - )
Softube Plug-Ins (VST AAX 32-bit) (HKLM-x32\...\Softube Plug-Ins (VST AAX 32-bit)) (Version: 2.2.84 - Softube AB)
Softube Plug-Ins (VST AAX 64-bit) (HKLM\...\Softube Plug-Ins (VST AAX 64-bit)) (Version: 2.2.84 - Softube AB)
Softube Spring Reverb VST RTAS v1.0.4 (HKLM-x32\...\Softube Spring Reverb VST RTAS_is1) (Version:  - )
Softube Tonelux Tilt VST RTAS v1.0 (HKLM-x32\...\Softube Tonelux Tilt_is1) (Version:  - )
Softube Trident A-Range VST RTAS v1.0.2 (HKLM-x32\...\Softube Trident A-Range VST RTAS_is1) (Version:  - )
Softube Tube Delay VST RTAS v1.0.5 (HKLM-x32\...\Softube Tube Delay VST RTAS_is1) (Version:  - )
Softube Tube-Tech CL 1B VST RTAS v1.0.3 (HKLM-x32\...\Softube Tube-Tech CL 1B VST RTAS_is1) (Version:  - )
Softube Tube-Tech PE 1C VST RTAS v1.0.1 (HKLM-x32\...\Softube Tube-Tech PE 1C_is1) (Version:  - )
Softube Valley People Dyna-mite VST RTAS v1.0.1 (HKLM-x32\...\Softube Valley People Dyna-mite VST RTAS_is1) (Version:  - )
Softube Vintage Amp Room VST RTAS v1.05 (HKLM-x32\...\Softube Vintage Amp Room VST RTAS_is1) (Version:  - )
Sonnox Fraunhofer Codec Toolbox v1.0.6 (HKLM\...\Sonnox Fraunhofer Codec Toolbox v1.0.6_is1) (Version: 1.0.6 - Sonnox Ltd, Oxford, UK)
Sonnox Oxford Inflator Native VST v1.5.1 (HKLM-x32\...\Sonnox Oxford Inflator Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford Limiter Native VST v1.1.1 (HKLM-x32\...\Sonnox Oxford Limiter Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford R3 Dynamics Native VST v1.3.1 (HKLM-x32\...\Sonnox Oxford R3 Dynamics Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford R3 EQ Native VST v1.6.1 (HKLM-x32\...\Sonnox Oxford R3 EQ Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford Reverb Native VST v1.0 (HKLM-x32\...\Sonnox Oxford Reverb Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford TransMod Native VST v1.3.1 (HKLM-x32\...\Sonnox Oxford TransMod Native VST_is1) (Version:  - Team AiR 2007)
SoundToys Devil-Loc Deluxe - Academic 32 bit (HKLM-x32\...\Devil-Loc Deluxe - Academic 32 bit_is1) (Version:  - SoundToys Inc)
SoundToys Little AlterBoy 32 bit (HKLM-x32\...\Little AlterBoy 32 bit_is1) (Version:  - SoundToys Inc)
SoundToys NTV FX V4 - Academic V4 32 bit (HKLM-x32\...\SoundToys NTV FX V4 - Academic V4 32 bit_is1) (Version:  - SoundToys Inc)
SpectraLayers Pro 3.0 (HKLM\...\{A2C0EF4C-F8DA-44E1-9D2F-9BFE1B8D3860}) (Version: 3.0.27 - Sony)
SPL Analog Code EQ Rangers Volume One VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code EQ Rangers Volume One VST RTAS_is1) (Version:  - )
SPL Analog Code MicroPlugs VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code MicroPlugs VST RTAS_is1) (Version:  - )
SPL Analog Code Transient Designer VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code Transient Designer VST RTAS_is1) (Version:  - )
SPL Analog Code TwinTube Processor VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code TwinTube Processor VST RTAS_is1) (Version:  - )
SPL Analog Code Vitalizer MK2-T VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code Vitalizer MK2-T VST RTAS_is1) (Version:  - )
Spotify (HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Spotify) (Version: 1.0.36.124.g1cba1920 - Spotify AB)
StatMaker (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{78b2995}) (Version:  - Software Publisher) <==== ACHTUNG
Steinberg Cubase 7 (HKLM-x32\...\{36035C23-2361-495A-9AE9-D1FF9A9F70B7}) (Version: 7.0.7 - Steinberg Media Technologies GmbH)
Steinberg Cubase 7.5 (HKLM-x32\...\{C75F4809-1E91-49F4-8093-45D9B053E89D}) (Version: 7.5.30 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Allen Morgan Signature Drums (HKLM-x32\...\{611A7035-0172-4B9B-8BB6-5046F6867D8A}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE (HKLM-x32\...\{A6790D47-D653-4B88-BED4-96878DBE5191}) (Version: 4.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 1.6.1 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 1.6.1 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Retrologue (HKLM-x32\...\{0EB4D2B3-9410-4FB7-AD46-C48CE45B9498}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH)
Steinberg SLM128 Plug-in (HKLM-x32\...\{AE480357-42F7-4A6E-8F6E-8BC888335662}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Sylenth1 v2.21 (HKLM-x32\...\Sylenth1_is1) (Version:  - )
TC Native Bundle v3.1 (HKLM-x32\...\TC Native Bundle v3.1) (Version:  - )
TruePianos (HKLM-x32\...\TruePianos1.9.1) (Version: 1.9.1 - Team Audio Pirate)
UAD drivers. This may take a while... (x32 Version: 8.3.0.12204 - Universal Audio, Inc.) Hidden
UAD Powered Plug-Ins (HKLM-x32\...\{2bb81ba6-3983-42d3-b120-f5c4ea6e7a69}) (Version: 8.3.0.12204 - Universal Audio, Inc.)
UAD Powered Plug-Ins (Version: 8.3.0.12204 - Universal Audio, Inc.) Hidden
UAD Powered Plug-Ins (x32 Version: 8.3.0.12204 - Universal Audio, Inc.) Hidden
Urban Redline version 1.0.0 (HKLM-x32\...\{D3EFBCE5-6D4A-4C35-9BA2-7B348C4F75C6}_is1) (Version: 1.0.0 - StudioLinkedVST)
Vengeance Producer Suite - Glitch Bitch 1.0.3 (HKLM-x32\...\{67715E04-59FB-442A-9A23-76F9C0F0D78D}_is1) (Version:  - keilwerth Audio / Vengeance Sound)
Vengeance Producer Suite - Scope 1.0.4 (HKLM-x32\...\{8BB53BA8-F9CC-4A53-A498-1AF91D040F63}_is1) (Version:  - keilwerth Audio / Vengeance Sound)
Vengeance Producer Suite - TapeStop 1.0.1 (HKLM-x32\...\{24293F25-0C00-4DD9-8DCD-257E415FF5E4}_is1) (Version:  - keilwerth Audio / Vengeance Sound)
VIRTU 1.0.0 (HKLM\...\VIRTU_is1) (Version: 1.0.0 - Lucidlogix Technologies LTD)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vocaloid4 4.2.0 Free Edition (HKLM-x32\...\Vocaloid4 4.2.0 Free Edition_is1) (Version: Vocaloid4 4.2.0 Free Edition - )
WaveLab 8.5 (HKLM-x32\...\WaveLabPro8_5) (Version: 8.5.0.849 - Steinberg)
Waves Central 1.2.0.5 (HKLM-x32\...\{94000200-C561-4E32-99EB-3C5AD3683A70}_is1) (Version: 1.2.0 - Waves, Inc.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows-Treiberpaket - RME Fireface USB (09/25/2014 1.0.59.0) (HKLM\...\00D7567917C0AF25A47D48DB1D9D837D1FA3A6EF) (Version: 09/25/2014 1.0.59.0 - RME)
Windows-Treiberpaket - RME Fireface USB (09/28/2015 1.0.89.0) (HKLM\...\006E5C2559FCDEE2337C96635F803548D87253B8) (Version: 09/28/2015 1.0.89.0 - RME)
WinRAR 5.11 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
Yamaha MOTIF XF Editor Standalone/VST (HKLM-x32\...\Yamaha MOTIF XF Editor Standalone_VST) (Version: 1.6.4 - Yamaha Corporation)
Yamaha USB-MIDI Driver (HKLM-x32\...\InstallShield_{2D488455-3E89-49EF-BA6E-92C2503DC89D}) (Version: 3.1.4.1 - Yamaha Corporation)
Yamaha USB-MIDI Driver (Version: 3.1.4.1 - Yamaha Corporation) Hidden
Yamaha YC-3B (HKLM-x32\...\Yamaha YC-3B) (Version: 1.1.2.7 - Yamaha Corporation)
YTD Video Downloader 4.8.7 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.8.7 - GreenTree Applications SRL) <==== ACHTUNG

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0B2B063B-2A11-4822-B698-F4DA47ABAB3E} - System32\Tasks\{1108DAF6-0B6D-415E-8098-991D5C5E4332} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\LicenseSupportInstallerWin32\LicenseSupportInstallerWin32_v2.6.0_r31206\Extras\Drivers Only Win32.exe" -d C:\Users\DJRISOW\Desktop\LicenseSupportInstallerWin32\LicenseSupportInstallerWin32_v2.6.0_r31206\Extras
Task: {10EC825C-424F-42F0-AA8E-BCCFB2EEE222} - System32\Tasks\{FBEFE4EF-A1EB-4046-9851-05B3F6CA41B6} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\Trilogy 1\setup.exe" -d "C:\Users\DJRISOW\Desktop\Trilogy 1"
Task: {12393805-183A-47C2-8E2F-4582475E82E6} - System32\Tasks\{6CD77EC8-DF1C-4689-B06F-5255DA18BE89} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\SPL Plug IN\SPL.Analog.Code.Vitalizer.MK2-T.VST.RTAS.v1.1-AiR\setup.exe" -d "C:\Users\DJRISOW\Desktop\SPL Plug IN\SPL.Analog.Code.Vitalizer.MK2-T.VST.RTAS.v1.1-AiR"
Task: {1FC46C5C-7009-476F-BCE4-001B40059A84} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo)
Task: {2CAA340D-8BC3-48EF-834C-FE9301F7CE17} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-12] (Adobe Systems Incorporated)
Task: {2D00D03A-D857-48E5-9410-89A5AD96CCF9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-14] (Google Inc.)
Task: {3BF30B5D-2D9D-496A-A616-F07DD2C2BAB0} - System32\Tasks\MoneyAid => c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}\46636783372506569b.exe <==== ACHTUNG
Task: {3E3F374D-BA6D-4428-BE2E-46B14E74294C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000Core => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-05-26] (Dropbox, Inc.)
Task: {43B3DFAF-18C5-43EF-8447-9FBDFFCA836D} - System32\Tasks\{41CB1303-D609-416E-AF25-B7C15E8803FA} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\MashTactic_1_01b_VST_WIN_32\MashTactic 32 bit.exe" -d C:\Users\DJRISOW\Desktop\MashTactic_1_01b_VST_WIN_32
Task: {440D1C3C-2CE5-45CD-8C74-84838C1428FE} - System32\Tasks\{5B2D4183-0908-45A0-A571-6AF5A2ED277F} => Chrome.exe hxxp://ui.skype.com/ui/0/7.8.0.102/de/abandoninstall?page=tsProgressBar
Task: {4B0AE892-8B0A-4DF7-813D-9AB5C5B31333} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000UA => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-05-26] (Dropbox, Inc.)
Task: {6FE440FC-02C5-4CBB-8DD5-2E042579D4A3} - System32\Tasks\Amazon Music Helper => C:\Users\DJRISOW\AppData\Local\Amazon Music\Amazon Music Helper.exe [2015-05-07] ()
Task: {75DCD3A4-42FD-4FB8-A2D2-D47109319994} - System32\Tasks\{8BC659D3-3A92-46A0-B95F-FEFF74F2860D} => Chrome.exe hxxp://ui.skype.com/ui/0/7.1.0.105/de/abandoninstall?source=lightinstaller&amp;page=tsPlugin
Task: {A222371D-68B2-47D6-90ED-3F2CABCB49FC} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2014-07-21] (Nero AG)
Task: {A428F1BE-BA9B-4C64-8019-5031C0D807A0} - System32\Tasks\{27A4F59A-2409-47BA-9136-C78F3B45E88B} => pcalua.exe -a C:\Users\DJRISOW\Desktop\Sylenth.Komplete.pack.win.32.64.and.mac\Lennar.Digital.Sylenth1.VSTi.v2.2.1.1.x86.PROPER-VTX\VTXSetup.exe -d C:\Users\DJRISOW\Desktop\Sylenth.Komplete.pack.win.32.64.and.mac\Lennar.Digital.Sylenth1.VSTi.v2.2.1.1.x86.PROPER-VTX
Task: {AEC6E0CA-8A81-46A7-9FAF-61F0D1412344} - System32\Tasks\RenderOrder => c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}\229690953678597325b.exe <==== ACHTUNG
Task: {C251711A-EA91-4AAF-B021-07ABF3493E8C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-14] (Google Inc.)
Task: {CA0EE166-88A1-4E3C-9236-4F6B91AB37BF} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2016-09-01] (Reimage®) <==== ACHTUNG
Task: {D2BC4002-EAA3-401C-BE45-21E643CF76F8} - System32\Tasks\{56DEFA2F-544F-40E2-95A8-7272E3A15E1A} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\reFX Nexus 2.6.5 Installer\reFX Nexus 2.6.5 Installer.exe" -d "C:\Users\DJRISOW\Desktop\reFX Nexus 2.6.5 Installer"
Task: {D5492631-2F65-46C0-8FA4-265F9AB1C620} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {D78EDF4E-0479-4FFC-8A34-94092F0B6A75} - System32\Tasks\{321D1C11-F63E-4FD4-8373-A7FAA7B24AE1} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\Camel Audio\CamelCrusher\CamelCrusherWin\CamelCrusherWin_v1_41.exe" -d "C:\Users\DJRISOW\Desktop\Camel Audio\CamelCrusher\CamelCrusherWin"
Task: {E867034F-0A55-41DA-BE74-395CBCEC9060} - System32\Tasks\VacayExpert => c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}\8360891445966462720c.exe <==== ACHTUNG
Task: {F9F1B268-7AA2-4E89-83C0-2E1CF09B3604} - System32\Tasks\{9BF739CE-7F67-47B9-9E2F-85B340231283} => pcalua.exe -a C:\Users\DJRISOW\Desktop\ProDAD.Vitascene.1.0.34.full.+.license-izmael.z6\vitascene-10-service.34.exe -d C:\Users\DJRISOW\Desktop\ProDAD.Vitascene.1.0.34.full.+.license-izmael.z6
Task: {FA7807BC-12A5-48C5-BB60-F5AB6E795643} - System32\Tasks\DogWiz => c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}\8313796287343420975b.exe <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DogWiz.job => c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}\8313796287343420975b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000Core.job => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000UA.job => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MoneyAid.job => c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}\46636783372506569b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\RenderOrder.job => c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}\229690953678597325b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\VacayExpert.job => c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}\8360891445966462720c.exe <==== ACHTUNG

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2011-03-20 18:33 - 2015-01-10 01:29 - 00117392 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-11-10 00:13 - 2011-04-10 04:40 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-11-15 22:41 - 2015-05-07 21:12 - 05886784 _____ () C:\Users\DJRISOW\AppData\Local\Amazon Music\Amazon Music Helper.exe
2015-07-10 05:18 - 2015-07-10 05:18 - 03822592 _____ () C:\Program Files (x86)\Universal Audio\Powered Plugins\UADPerfMon.exe
2016-09-07 11:33 - 2016-08-31 04:16 - 02280264 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.89\libglesv2.dll
2016-09-07 11:33 - 2016-08-31 04:16 - 00107848 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.89\libegl.dll
2016-09-07 11:33 - 2016-08-31 04:02 - 31541952 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.89\PepperFlash\pepflashplayer.dll
2014-08-19 10:41 - 2014-08-19 10:41 - 00507904 _____ () C:\Program Files (x86)\Canon\EOS Utility\EDSDK.dll
2015-07-10 05:18 - 2015-07-10 05:18 - 00210432 _____ () C:\Windows\system32\UAD2DriverClient.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData:6B2C3EB805B95CCC [217]
AlternateDataStreams: C:\Users\All Users:6B2C3EB805B95CCC [217]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:6B2C3EB805B95CCC [217]
AlternateDataStreams: C:\ProgramData\Application Data:6B2C3EB805B95CCC [217]
AlternateDataStreams: C:\ProgramData\Microsoft:bWhQTYmHnUwCcDFr5ov15FqfcV9 [2726]
AlternateDataStreams: C:\ProgramData\Microsoft:eVdL2mVh673hCgxr1LXcqVv55 [2840]
AlternateDataStreams: C:\ProgramData\Microsoft:gCZ2LhBJ8frRzo1YofAhcf [2734]
AlternateDataStreams: C:\ProgramData\Microsoft:KHykLmkveNUq7cpFmmPtm9 [2620]
AlternateDataStreams: C:\Users\DJRISOW\Cookies:SdVE5Q7NfcdezCrytWaKUBUVaKY [2782]
AlternateDataStreams: C:\Users\DJRISOW\AppData\Local\Temp:qdisXcMkdZPdftz2H4CgjzCU [2768]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3719051794-263782235-1391171954-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{B55AB98D-ACFD-4A22-A53D-0DF0B96FE528}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{7FF1BA73-5B27-48F6-BE58-4F0EEB253DD7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{7345A4DF-0F31-4A1F-A1D4-60F147DD33E8}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{B5366FA0-6E7B-415F-BDE2-FC28CDA26D50}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{E20726DF-246C-4377-B925-318DAB47BD6A}] => (Allow) C:\Program Files (x86)\Steinberg\Cubase 7\Cubase7.exe
FirewallRules: [{D29F8D7D-4E03-4B9D-BD67-3186DDAECB87}] => (Allow) LPort=51113
FirewallRules: [{1840CACE-5DD4-4413-8A1D-43C0A0377C6F}] => (Allow) LPort=51112
FirewallRules: [{9A4C5AB9-75EB-4969-8D8C-234885DE7ED3}] => (Allow) LPort=51111
FirewallRules: [{643CC436-3F6D-4182-801D-238C1678350C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E2A57DE4-85E0-4B2F-9D57-E29081A3A7E9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9519D502-62E3-4B5E-AF7B-553E5FEE0DDC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{CAEA284F-404A-42EB-B7F6-814D427F6FD0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{C98F8DB6-0FA1-4038-83C7-EFEFBECCC26C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FDFF62E5-A487-4077-9346-87184F9A7347}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A067515B-3996-4CEA-BB79-B1953BA57A07}] => (Allow) C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{FE70B238-0E43-42A4-BA78-74E81E28866A}] => (Allow) C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{CE802A6E-80DD-487C-946D-B7200E4F4940}] => (Allow) C:\Program Files\Avid\Pro Tools\AvidVideoEngine.exe
FirewallRules: [{797844F8-B4D1-45C7-BF1B-CA8D328F1FFB}] => (Allow) C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\StartNBR.exe
FirewallRules: [{54C40395-E62F-4FE9-A714-6D2800CFBAFF}] => (Allow) C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\nero.exe
FirewallRules: [{FDEC6D20-06F0-431B-AEF6-F576C398B31B}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\Video Download Capture.exe
FirewallRules: [{A216A15B-AEE7-4E86-BDBE-1D2C267D4980}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\Video Download Capture.exe
FirewallRules: [{603EFEB1-90ED-4137-9591-3FA02C9556B5}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftSrv.dll
FirewallRules: [{63EFEE55-3A72-49AE-AE61-017BC09A2B79}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftSrv.dll
FirewallRules: [{0702FDCD-7784-4BB9-ABAA-004678E5E1A2}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDump.dll
FirewallRules: [{868E996D-2023-4E9D-AE43-6B733985BECB}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDump.dll
FirewallRules: [{2C3679F5-2BED-4CB0-B5EA-B8651A2D07CC}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftAC.dll
FirewallRules: [{96DC6CBC-AC15-4D6E-B35D-B697C2560172}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftAC.dll
FirewallRules: [{33BDA654-DF43-4A84-B67E-59A1CF99D84D}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftPlayer.dll
FirewallRules: [{61406790-20DB-4188-93D4-AEAAD73AB630}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftPlayer.dll
FirewallRules: [{336A9018-5966-4438-A422-4F87738BFE0B}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
FirewallRules: [{8178ED61-5F5F-42BD-B440-F095CAC49EBF}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
FirewallRules: [{13CD9E28-F7A8-48C1-9E0F-B37D634145DC}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
FirewallRules: [{834AEA8C-0363-42DD-B9A6-966B505E41E0}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
FirewallRules: [{C5F86465-F79A-449E-AC32-67F964C5C618}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2763103C-2689-45B3-B125-C5936EA18D35}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F5586403-2940-45CA-ADDD-083BA2AB4DBB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{00860453-F86F-4656-866B-94EE10E7DC72}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4E407978-B2FC-4D6D-9160-0E5DB8176989}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9DE48FED-1D74-4EC2-9320-ECDC7DD2BA68}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5CF993E1-AE10-4976-9B45-959193A5F776}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{ACC51843-3EFA-4282-BAA9-E689137ACBAF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{C90745A8-F4A3-4041-B763-B29B8B19CDCB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

05-09-2016 18:22:19 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
05-09-2016 18:22:58 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/07/2016 06:10:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 11:48:50 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 11:43:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 11:30:35 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 11:11:50 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 10:57:03 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 10:56:19 AM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: Event-ID 2001

Error: (09/07/2016 10:56:19 AM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: Event-ID 2001

Error: (09/07/2016 10:56:19 AM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: Event-ID 2001

Error: (09/07/2016 10:35:13 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.


Systemfehler:
=============
Error: (09/07/2016 06:09:18 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (09/07/2016 06:09:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-Connectivity für Gramblr." wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (09/07/2016 06:09:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Angry Family" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (09/07/2016 11:48:10 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (09/07/2016 11:48:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-Connectivity für Gramblr." wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (09/07/2016 11:47:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Angry Family" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (09/07/2016 11:47:52 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x0000007e (0xffffffffc0000005, 0xfffff8800662d3a1, 0xfffff8800305a838, 0xfffff8800305a090). Ein volles Abbild wurde gespeichert in: C:\Windows\MEMORY.DMP. Berichts-ID: 090716-44943-01.

Error: (09/07/2016 11:47:12 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎07.‎09.‎2016 um 11:45:12 unerwartet heruntergefahren.

Error: (09/07/2016 11:42:02 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (09/07/2016 11:41:38 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-Connectivity für Gramblr." wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 19%
Installierter physikalischer RAM: 16296.59 MB
Verfügbarer physikalischer RAM: 13089.05 MB
Summe virtueller Speicher: 32591.37 MB
Verfügbarer virtueller Speicher: 29341.28 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:931.29 GB) (Free:82.66 GB) NTFS
Drive d: (AUDIO ) (Fixed) (Total:1863.01 GB) (Free:532.05 GB) NTFS
Drive e: (Video Ordner) (Fixed) (Total:465.76 GB) (Free:192.7 GB) NTFS
Drive h: (Ohne Titel) (Removable) (Total:7.21 GB) (Free:6.18 GB) exFAT

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 221A9391)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D753B374)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 221A939D)

Partition: GPT.

========================================================
Disk: 3 (Size: 7.2 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

cosinus 08.09.2016 09:01
Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    do-search

    Reimage Protector

    StatMaker

    YTD Video Downloader 4.8.7

  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 

Rafau2012 08.09.2016 09:39
So danke erstmal, habe das alles deinstalliert und auch so gemacht wie du es aufgeschrieben hast!

Neugestartet die Kiste, trotzdem blockiert Malware ständig seiten und es gehen zich Seiten immer wieder auf!

cosinus 08.09.2016 10:09
Es wurde auch nicht geschrieben, dass danach alles wieder ok sei.

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Rafau2012 08.09.2016 11:36
Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2016.09.08.04
  rootkit: v2016.08.15.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.18426
DJRISOW :: DJRISOW-PC [administrator]

08.09.2016 11:58:35
mbar-log-2016-09-08 (11-58-35).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Kernel memory modifications detected. Deep Anti-Rootkit Scan engaged.
Objects scanned: 471174
Time elapsed: 33 minute(s), 5 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

cosinus 08.09.2016 11:36
Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


Rafau2012 08.09.2016 13:48
AdwCleaner Logfile:
Code:
# AdwCleaner v6.010 - Bericht erstellt am 08/09/2016 um 14:39:10
# Aktualisiert am 12/08/2016 von ToolsLib
# Datenbank : 2016-09-08.2 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : DJRISOW - DJRISOW-PC
# Gestartet von : C:\Users\DJRISOW\Desktop\AdwCleaner_6.010 (1).exe
# Modus: Löschen
# Unterstützung : https://toolslib.net/forum



***** [ Dienste ] *****

[-] Dienst gelöscht: ReimageRealTimeProtector


***** [ Ordner ] *****



***** [ Dateien ] *****

[-] Datei gelöscht: C:\Windows\Reimage.ini


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\REI_AxControl.ReiEngine.1
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\Interface\{BD51A48E-EB5F-4454-8774-EF962DF64546}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{10ECCE17-29B5-4880-A8F5-EAD298611484}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Reimage
[-] Schlüssel gelöscht: HKU\S-1-5-21-3719051794-263782235-1391171954-1000\Software\Reimage
[-] Schlüssel gelöscht: HKU\S-1-5-21-3719051794-263782235-1391171954-1000\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Reimage
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\REI_AxControl.DLL


***** [ Browser ] *****

[-] [wordpress.org] [Search Provider] Gelöscht: wordpress.org
[-] [mac-os-x-10-6-8-update.softonic.de] [Search Provider] Gelöscht: mac-os-x-10-6-8-update.softonic.de
[-] [claro-search.com] [Search Provider] Gelöscht: claro-search.com
[-] [softonic] [Search Provider] Gelöscht: softonic
[-] [‪search.linkury.com‬] [Search Provider] Gelöscht: ‪search.linkury.com‬
[-] [yahoo.com] [Search Provider] Gelöscht: yahoo.com
[-] [mac-os-x-10-5-6.en.softonic.com] [Search Provider] Gelöscht: mac-os-x-10-5-6.en.softonic.com
[-] [1und1.de] [Search Provider] Gelöscht: 1und1.de
[-] [do-search] [Search Provider] Gelöscht: do-search
[-] [nero.de.softonic.com] [Search Provider] Gelöscht: nero.de.softonic.com


*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [6599 Bytes] - [07/09/2016 11:38:55]
C:\AdwCleaner\AdwCleaner[C2].txt - [3451 Bytes] - [08/09/2016 14:39:10]
C:\AdwCleaner\AdwCleaner[S0].txt - [6356 Bytes] - [07/09/2016 11:38:27]
C:\AdwCleaner\AdwCleaner[S1].txt - [4099 Bytes] - [08/09/2016 14:38:40]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [3670 Bytes] ##########
--- --- ---


JRT Logfile:
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.7 (07.03.2016)
Operating System: Windows 7 Home Premium x64
Ran by DJRISOW (Administrator) on 08.09.2016 at 14:44:37,30
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 55

Successfully deleted: C:\Users\DJRISOW\AppData\Roaming\Mozilla\Firefox\Profiles\yr8wwsrl.default\extensions\staged (Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Roaming\pdfforge (Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\07M0TH7P (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3DSTRYW3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\48BWPEF4 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4FMQTYQN (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\91G8LL1K (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AMN2PKEF (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CCC1TSLI (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DU2KW1GD (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G78H86YP (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KP189F3Q (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MWSWAM5R (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S9N74OJ3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S9N74OJ3 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SMTWDJN5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SMTWDJN5 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TDTH2YVT (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U7WTMVRN (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VJUIAC0T (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W6QXG2T7 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y0Y9B15K (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y5G8TLE2 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBA7ZSQ0 (Temporary Internet Files Folder)
Successfully deleted: C:\Users\DJRISOW\AppData\Roaming\appdataFr25.bin (File)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\07M0TH7P (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3DSTRYW3 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\48BWPEF4 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4FMQTYQN (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\91G8LL1K (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AMN2PKEF (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CCC1TSLI (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DU2KW1GD (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\G78H86YP (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KP189F3Q (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MWSWAM5R (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S9N74OJ3 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\S9N74OJ3 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SMTWDJN5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SMTWDJN5 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TDTH2YVT (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U7WTMVRN (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VJUIAC0T (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W6QXG2T7 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y0Y9B15K (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y5G8TLE2 (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YBA7ZSQ0 (Temporary Internet Files Folder)

Deleted the following from C:\Users\DJRISOW\AppData\Roaming\Mozilla\Firefox\Profiles\yr8wwsrl.default\prefs.js
user_pref(extensions.quick_start.enable_search1, false);
user_pref(extensions.quick_start.sd.closeWindowWithLastTab_prev_state, false);



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.09.2016 at 14:47:20,51
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
--- --- ---

cosinus 08.09.2016 13:48
Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

Rafau2012 08.09.2016 15:42

FRST Logfile:
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016
durchgeführt von DJRISOW (Administrator) auf DJRISOW-PC (08-09-2016 16:40:07)
Gestartet von C:\Users\DJRISOW\Desktop
Geladene Profile: DJRISOW (Verfügbare Profile: DJRISOW)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(RME) C:\Windows\System32\TotalMixFX.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Steinberg Media Technologies) C:\Program Files (x86)\Steinberg\Cubase 7.5\Cubase7.5.exe
(Steinberg Media Technologies GmbH) C:\Program Files (x86)\eLicenser\POS\SYNSOPOS.exe
(Steinberg Media Technologies) C:\Program Files (x86)\Steinberg\Cubase 7.5\Components\videodecode.exe
(Steinberg Media Technologies) C:\Program Files (x86)\Steinberg\Cubase 7.5\Components\videopreload.exe
(Steinberg Media Technologies) C:\Program Files (x86)\Steinberg\Cubase 7.5\Components\videooutput.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11660904 2010-11-30] (Realtek Semiconductor)
HKLM\...\Run: [VIRTU] => C:\Program Files\Lucidlogix Technologies\VIRTU\VirtuControlPanel.Exe [2619488 2011-04-21] ()
HKLM\...\Run: [FirefaceUsbTray1] => C:\Windows\system32\firefaceusb.exe [96768 2016-02-11] (RME)
HKLM\...\Run: [FirefaceMixTray2] => C:\Windows\system32\TotalMixFX.exe [23103704 2016-02-11] (RME)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [2824504 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM\...\Run: [Monitor] => C:\Windows\PixArt\PAC207\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176952 2016-03-19] (Apple Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67384 2016-03-18] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [UATrayIcon] => C:\Program Files (x86)\Universal Audio\Powered Plugins\UATrayIcon.exe [1484800 2015-07-10] (Universal Audio, Inc.)
HKLM-x32\...\Run: [UAPerfMon] => C:\Program Files (x86)\Universal Audio\Powered Plugins\UADPerfMon.exe [3822592 2015-07-10] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [zASRockInstantBoot] => [X]
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [ASRockXTU] => [X]
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [EPSON SX125 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [Amazon Music] => C:\Users\DJRISOW\AppData\Local\Amazon Music\Amazon Music Helper.exe [5886784 2015-05-07] ()
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [Dropbox Update] => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-05-26] (Dropbox, Inc.)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Run: [Spotify Web Helper] => C:\Users\DJRISOW\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1523312 2016-08-23] (Spotify Ltd)
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\MountPoints2: {13aac168-c042-11e5-a42c-002522cc2a9b} - G:\autorun.exe
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\MountPoints2: {1f825de1-7f01-11e5-8b73-002522cc2a9b} - F:\Setup\Setup.exe
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt.43.dll [2016-09-06] (Dropbox, Inc.)
Startup: C:\Users\DJRISOW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk [2015-11-05]
ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)
Startup: C:\Users\DJRISOW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rayven Justice Choose Up Prod by The Legion DJ Pack 99BPM.zip.lnk [2015-11-05]
ShortcutTarget: Rayven Justice Choose Up Prod by The Legion DJ Pack 99BPM.zip.lnk -> C:\ProgramData\{3e336eaa-a046-b486-3e33-36eaaa04baaa}\Rayven Justice Choose Up Prod by The Legion DJ Pack 99BPM.zip.exe (Keine Datei)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{5E3EC87F-173D-4917-85B1-CC5CF5429EBC}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{D820ED38-357A-49FC-9CD4-CA3D247D6F48}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3719051794-263782235-1391171954-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE07&ocid=UE07DHP
SearchScopes: HKLM -> {CF6F90BD-EB6B-4057-8F3C-D777FF3A8D5F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-3719051794-263782235-1391171954-1000 -> DefaultScope {CF6F90BD-EB6B-4057-8F3C-D777FF3A8D5F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-3719051794-263782235-1391171954-1000 -> {CF6F90BD-EB6B-4057-8F3C-D777FF3A8D5F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1

FireFox:
========
FF ProfilePath: C:\Users\DJRISOW\AppData\Roaming\Mozilla\Firefox\Profiles\yr8wwsrl.default
FF Homepage: hxxps://www.malwarebytes.org/restorebrowser//?type=hp&ts=1446217681&z=e752470b0f30aa15396e161g4zez6q9o8g1m3qdb2g&from=dae&uid=hitachixhdp725050gla360_gec564rj1wu0gj1wu0gjx
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-29] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2016-03-08] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-01-10] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-01-10] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-29] (Adobe Systems)
FF Extension: (Firefox Hotfix) - C:\Users\DJRISOW\AppData\Roaming\Mozilla\Firefox\Profiles\yr8wwsrl.default\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-07]
FF Extension: (ArchiveFacebook) - C:\Users\DJRISOW\AppData\Roaming\Mozilla\Firefox\Profiles\yr8wwsrl.default\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA6} [2016-04-15]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.producerloops.com/de/Neue-Produkte.html
CHR StartupUrls: Default -> "hxxp://www.rnbass.com/","hxxps://refx.com/advent/"
CHR DefaultSearchURL: Default -> hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5480255188&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms}
CHR Profile: C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-08-10]
CHR Extension: (YouTube) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Google-Suche) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Chrome Web Notes) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnconblconehkpkgfinabjeceepmpiio [2016-09-06]
CHR Extension: (Google Docs Offline) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-17]
CHR Extension: (Google Mail) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31]
CHR Extension: (Chrome Media Router) - C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-07]
CHR Extension: (Kein Name) - C:\Users\DJRISOW\Desktop\YouTube Video Downloader [2015-05-29]
CHR HKU\S-1-5-21-3719051794-263782235-1391171954-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-03-02] (Apple Inc.)
S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools\digisptiservice64.exe [190464 2014-11-17] (Avid Technology, Inc.) [Datei ist nicht signiert]
R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2139328 2014-05-27] (Comodo Security Solutions, Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2014-12-13] (NVIDIA Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19823248 2014-12-13] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S2 Angry Family; C:\Users\DJRISOW\AppData\Roaming\Angry Family\Angry Family.exe [X]
S2 gramblrclient; C:\Program Files\Gramblr\gramblr.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AsrVDrive; C:\Windows\System32\DRIVERS\AsrVDrive.sys [23048 2011-01-26] (ASRock Inc.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-10-30] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 firefaceu64; C:\Windows\System32\drivers\fireface_usb_64.sys [104832 2016-02-11] (RME)
R3 iLokDrvr; C:\Windows\System32\DRIVERS\iLokDrvr.sys [25808 2013-04-11] ()
R3 iLokDrvr; C:\Windows\SysWOW64\DRIVERS\iLokDrvr.sys [54256 2008-09-08] (PACE Anti-Piracy, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-09-08] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 NIWinCDEmu; C:\Windows\System32\DRIVERS\NIWinCDEmu.sys [112408 2015-03-13] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2014-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [572416 2006-12-05] (PixArt Imaging Inc.)
S3 RDID1027; C:\Windows\System32\Drivers\rdwm1027.sys [81920 2009-09-18] (Roland Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381608 2015-10-30] (Duplex Secure Ltd.)
R3 synusb64; C:\Windows\System32\DRIVERS\synusb64.sys [30352 2011-12-14] (Steinberg Media Technologies GmbH)
R3 UAD2Pcie; C:\Windows\System32\DRIVERS\UAD2Pcie.sys [48640 2015-07-10] (Universal Audio Inc.)
R3 UAD2System; C:\Windows\System32\DRIVERS\UAD2System.sys [94208 2015-07-10] (Universal Audio Inc.)
R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [43744 2015-07-28] (Yamaha Corporation)
S3 YFWBUS; System32\Drivers\yfwbus.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-08 16:40 - 2016-09-08 16:40 - 00023484 _____ C:\Users\DJRISOW\Desktop\FRST.txt
2016-09-08 16:39 - 2016-09-08 16:39 - 02397696 _____ (Farbar) C:\Users\DJRISOW\Desktop\FRST64.exe
2016-09-08 14:26 - 2016-09-08 14:26 - 00307072 _____ C:\Windows\Minidump\090816-23150-01.dmp
2016-09-08 11:58 - 2016-09-08 12:36 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-09-08 11:57 - 2016-09-08 12:35 - 00000000 ____D C:\Users\DJRISOW\Desktop\mbar
2016-09-07 23:38 - 2016-09-07 23:38 - 00262144 _____ C:\Windows\Minidump\090716-23618-01.dmp
2016-09-07 20:48 - 2016-09-08 14:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-09-07 18:16 - 2016-09-08 16:40 - 00000000 ____D C:\FRST
2016-09-07 11:47 - 2016-09-07 11:47 - 00307072 _____ C:\Windows\Minidump\090716-44943-01.dmp
2016-09-07 11:41 - 2016-09-07 11:41 - 00307072 _____ C:\Windows\Minidump\090716-21216-01.dmp
2016-09-07 11:36 - 2016-09-08 14:39 - 00000000 ____D C:\AdwCleaner
2016-09-07 11:33 - 2016-09-07 11:33 - 00002219 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-07 11:26 - 2016-09-07 11:26 - 01065376 _____ (Google Inc.) C:\Users\DJRISOW\Downloads\ChromeSetup.exe
2016-09-06 22:04 - 2016-09-06 22:04 - 08215120 _____ C:\Users\DJRISOW\Desktop\Amazon.mp4
2016-09-06 21:06 - 2016-09-06 21:06 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-09-06 20:51 - 2016-09-06 20:51 - 00000000 ____D C:\Users\DJRISOW\Desktop\55780
2016-09-06 19:58 - 2016-09-06 19:58 - 00000000 ____D C:\Users\DJRISOW\Desktop\Epic World Library
2016-09-06 19:57 - 2016-09-06 19:57 - 00001018 _____ C:\Users\Public\Desktop\Engine 2.lnk
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 __HDC C:\ProgramData\{52074E70-E39F-4B90-82D6-38ACBB36A8B6}
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 __HDC C:\ProgramData\{019B143A-9DF7-4A4E-9071-1FB3892DDD09}
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\Users\DJRISOW\Documents\Best Service
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\Best Service
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Engine 2
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\ProgramData\Best Service
2016-09-06 19:57 - 2016-09-06 19:57 - 00000000 ____D C:\Program Files\Best Service
2016-09-06 12:37 - 2016-09-06 12:38 - 111777421 _____ C:\Users\DJRISOW\Desktop\Fat Joe' Remy Ma n French Montana ft RySoValid - Cookin [Xtendz] - HD - Clean.mp4
2016-09-05 18:24 - 2016-09-05 18:24 - 00001054 _____ C:\Users\Public\Desktop\Native Access.lnk
2016-09-05 18:24 - 2016-09-05 18:24 - 00000000 __HDC C:\ProgramData\{CE9BCF90-E7F3-4C22-8E3F-13DFA1FC853D}
2016-09-05 14:26 - 2016-09-05 14:27 - 41641346 _____ C:\Users\DJRISOW\Desktop\Kygo feat. Conrad Sewell - Firestone Live at Skavlan.mp4
2016-09-04 15:41 - 2016-09-04 15:41 - 00307072 _____ C:\Windows\Minidump\090416-27378-01.dmp
2016-09-03 22:48 - 2016-09-03 22:48 - 00307072 _____ C:\Windows\Minidump\090316-32495-01.dmp
2016-09-02 17:19 - 2016-09-02 17:19 - 00307072 _____ C:\Windows\Minidump\090216-28126-01.dmp
2016-09-01 23:47 - 2016-09-01 23:47 - 00307072 _____ C:\Windows\Minidump\090116-25131-01.dmp
2016-09-01 14:38 - 2016-09-01 14:38 - 00307072 _____ C:\Windows\Minidump\090116-32339-01.dmp
2016-09-01 14:34 - 2016-09-01 14:34 - 00001009 _____ C:\Users\Public\Desktop\Reaktor 5.lnk
2016-09-01 14:34 - 2016-09-01 14:34 - 00000000 __HDC C:\ProgramData\{D9728A28-7722-4D89-9A50-355260FF8E2B}
2016-09-01 13:49 - 2016-09-01 13:49 - 00000000 __HDC C:\ProgramData\{37384B65-5F11-426F-82AE-CDD606490599}
2016-09-01 13:48 - 2016-09-01 13:48 - 00000000 __HDC C:\ProgramData\{79327801-8B0E-430E-8FB6-20702A311ED7}
2016-09-01 13:48 - 2016-09-01 13:48 - 00000000 ____D C:\Users\Public\Documents\Reaktor Factory Library
2016-09-01 13:47 - 2016-09-01 13:47 - 00000000 ____D C:\Users\Public\Documents\Reaktor Blocks
2016-09-01 13:46 - 2016-09-01 13:46 - 00001094 _____ C:\Users\Public\Desktop\Controller Editor.lnk
2016-09-01 13:46 - 2016-09-01 13:46 - 00000000 __HDC C:\ProgramData\{AA454A3E-618B-4FA7-8742-D31B75115C43}
2016-09-01 13:25 - 2016-09-01 13:25 - 00000000 __HDC C:\ProgramData\{DFA16065-8ECA-4933-99B8-9CAEA99506CB}
2016-09-01 13:24 - 2016-09-01 13:24 - 00000000 __HDC C:\ProgramData\{FA2F8522-7DAF-43CB-9B78-23003AF864BB}
2016-09-01 13:22 - 2016-09-01 13:22 - 00000000 __HDC C:\ProgramData\{91A4A873-1950-4B23-A695-B24328D2D1E3}
2016-09-01 13:21 - 2016-09-01 13:21 - 00000000 __HDC C:\ProgramData\{7D1688B0-FF00-4064-99A5-E3753366C056}
2016-09-01 13:19 - 2016-09-01 13:19 - 00000000 __HDC C:\ProgramData\{6C16E1CD-7099-4249-829E-17828665267B}
2016-09-01 13:18 - 2016-09-01 13:18 - 00000000 __HDC C:\ProgramData\{FBEE89CD-D429-4948-96D2-5DD8C89C99B4}
2016-09-01 13:16 - 2016-09-01 13:16 - 00000000 __HDC C:\ProgramData\{6EA8A4B3-65E2-44FA-804F-635285EE836F}
2016-09-01 13:15 - 2016-09-01 13:15 - 00000000 __HDC C:\ProgramData\{11E6C06E-F8A8-4E8D-A1E6-34A8A0668348}
2016-09-01 13:14 - 2016-09-01 13:14 - 00000000 __HDC C:\ProgramData\{17096F5E-F808-4F7F-9134-A3DE8F7CD093}
2016-09-01 13:12 - 2016-09-01 13:12 - 00000000 __HDC C:\ProgramData\{C7147405-74FE-411E-B440-A7E2C5FCBE64}
2016-09-01 13:12 - 2016-09-01 13:12 - 00000000 __HDC C:\ProgramData\{AF974A13-112C-4A21-AAC2-088DE8A1DC31}
2016-09-01 13:11 - 2016-09-01 13:11 - 00000000 __HDC C:\ProgramData\{4B46290B-9384-4D38-8F9D-42C7DDBBBFFE}
2016-09-01 13:11 - 2016-09-01 13:11 - 00000000 __HDC C:\ProgramData\{22629EA1-FE2A-4A84-AFC7-E1DFF9DAFC5E}
2016-09-01 13:10 - 2016-09-01 13:10 - 00000000 __HDC C:\ProgramData\{5BB7DCD2-79BA-4FE2-8DCC-C4710E9271A3}
2016-09-01 13:09 - 2016-09-01 13:09 - 00000000 __HDC C:\ProgramData\{B42AD08D-C95C-4CC9-8F45-E587E7A4944B}
2016-09-01 13:07 - 2016-09-01 13:07 - 00000000 __HDC C:\ProgramData\{D32EE6FB-8B59-452B-8203-AD46E434361D}
2016-09-01 13:05 - 2016-09-01 13:05 - 00001014 _____ C:\Users\Public\Desktop\Kontakt 5.lnk
2016-09-01 13:05 - 2016-09-01 13:05 - 00000000 __HDC C:\ProgramData\{1C1EDD4B-9BC5-4A46-93AF-0D31E608815E}
2016-09-01 13:03 - 2016-09-01 13:03 - 00000000 __HDC C:\ProgramData\{1436CC31-8739-4FD7-81A7-393F03F0495B}
2016-09-01 13:02 - 2016-09-01 13:02 - 00000000 __HDC C:\ProgramData\{D059CA43-CBB2-41FE-B4E4-8FEF0614F812}
2016-09-01 13:02 - 2016-09-01 13:02 - 00000000 __HDC C:\ProgramData\{7BEDC436-56E7-4B12-BC0A-5CB05F2113A2}
2016-09-01 13:01 - 2016-09-01 13:01 - 00000000 __HDC C:\ProgramData\{776F744B-F906-497C-808A-02EC3467EB29}
2016-09-01 12:59 - 2016-09-01 12:59 - 00000000 __HDC C:\ProgramData\{61DD2F1D-990F-4CD3-95FA-8BD4D3617208}
2016-09-01 12:57 - 2016-09-01 12:57 - 00000000 __HDC C:\ProgramData\{51B54F90-B4A7-4546-9F3A-B9B8C563B16A}
2016-09-01 12:55 - 2016-09-01 12:55 - 00000000 __HDC C:\ProgramData\{6E5B3AE4-8785-4886-97B0-DEAF3D4FB2FE}
2016-09-01 12:55 - 2016-09-01 12:55 - 00000000 __HDC C:\ProgramData\{565947C1-8683-47EE-86DC-F64C0C157B53}
2016-09-01 12:49 - 2016-09-01 12:49 - 00000000 __HDC C:\ProgramData\{7AD85942-A0AF-4BC4-B654-C9ECF9B82100}
2016-09-01 12:48 - 2016-09-01 12:48 - 00000000 ____D C:\Users\Public\Documents\Form
2016-09-01 12:46 - 2016-09-01 12:46 - 00001014 _____ C:\Users\Public\Desktop\Reaktor 6.lnk
2016-09-01 12:46 - 2016-09-01 12:46 - 00000000 __HDC C:\ProgramData\{39445429-DDAA-4C68-85D4-A3E556DC22E2}
2016-09-01 12:40 - 2016-09-01 12:40 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\cache
2016-09-01 12:38 - 2016-09-01 12:39 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Native Instruments
2016-08-30 22:23 - 2016-08-30 22:23 - 00262144 _____ C:\Windows\Minidump\083016-24367-01.dmp
2016-08-30 20:19 - 2016-08-30 20:19 - 00000000 ____D C:\Users\DJRISOW\Desktop\Track Pictures
2016-08-30 19:16 - 2016-08-30 20:29 - 00985593 _____ C:\Users\DJRISOW\Desktop\mixii.cpr
2016-08-29 15:37 - 2016-08-29 15:37 - 00000000 ____D C:\Users\DJRISOW\Documents\Xfer
2016-08-28 23:51 - 2016-08-28 23:51 - 00262144 _____ C:\Windows\Minidump\082816-25069-01.dmp
2016-08-28 23:48 - 2016-08-28 23:48 - 00262144 _____ C:\Windows\Minidump\082816-25350-01.dmp
2016-08-28 20:56 - 2016-08-28 20:56 - 00307072 _____ C:\Windows\Minidump\082816-27081-01.dmp
2016-08-27 22:38 - 2016-08-27 22:38 - 00307072 _____ C:\Windows\Minidump\082716-22245-01.dmp
2016-08-27 12:50 - 2016-08-27 12:50 - 00307072 _____ C:\Windows\Minidump\082716-28142-01.dmp
2016-08-26 13:10 - 2016-08-26 13:10 - 00307072 _____ C:\Windows\Minidump\082616-25552-01.dmp
2016-08-25 12:32 - 2016-08-25 12:32 - 00307072 _____ C:\Windows\Minidump\082516-21855-01.dmp
2016-08-24 23:30 - 2016-08-24 23:30 - 00000000 ____D C:\Users\DJRISOW\Desktop\Ultimate R&B Nexus Expansion
2016-08-24 12:59 - 2016-08-24 12:59 - 00262144 _____ C:\Windows\Minidump\082416-23524-01.dmp
2016-08-22 13:16 - 2016-08-22 13:16 - 00307072 _____ C:\Windows\Minidump\082216-27861-01.dmp
2016-08-21 21:50 - 2016-08-21 21:50 - 00307072 _____ C:\Windows\Minidump\082116-29858-01.dmp
2016-08-20 20:01 - 2016-08-20 20:01 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\D16 Group
2016-08-20 14:23 - 2016-08-20 14:23 - 02857460 _____ C:\Users\DJRISOW\Desktop\Bassline.wav
2016-08-20 12:59 - 2016-08-20 12:59 - 00002116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-08-19 13:15 - 2016-08-19 13:23 - 00000000 ____D C:\Users\DJRISOW\Desktop\hhu
2016-08-19 12:51 - 2016-08-19 12:51 - 00307072 _____ C:\Windows\Minidump\081916-28064-01.dmp
2016-08-18 23:54 - 2016-08-18 23:54 - 01534302 _____ C:\Users\DJRISOW\Desktop\Honorebel drop.mp4
2016-08-17 11:00 - 2016-07-08 17:32 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-08-17 11:00 - 2016-07-08 17:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-08-15 12:41 - 2016-08-15 12:41 - 00307072 _____ C:\Windows\Minidump\081516-21871-01.dmp
2016-08-11 15:44 - 2016-08-12 15:55 - 207801220 _____ C:\Users\DJRISOW\Desktop\Video machen.mp4
2016-08-10 12:36 - 2016-08-02 16:54 - 00394440 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-10 12:36 - 2016-08-02 16:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-10 12:36 - 2016-08-02 08:54 - 25808384 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-10 12:36 - 2016-08-02 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-10 12:36 - 2016-08-02 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-10 12:36 - 2016-08-02 08:32 - 02894336 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-10 12:36 - 2016-08-02 08:32 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-10 12:36 - 2016-08-02 08:31 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-10 12:36 - 2016-08-02 08:31 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-10 12:36 - 2016-08-02 08:31 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-10 12:36 - 2016-08-02 08:31 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-10 12:36 - 2016-08-02 08:24 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-10 12:36 - 2016-08-02 08:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-10 12:36 - 2016-08-02 08:20 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-10 12:36 - 2016-08-02 08:19 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-10 12:36 - 2016-08-02 08:19 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-10 12:36 - 2016-08-02 08:18 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-10 12:36 - 2016-08-02 08:18 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-10 12:36 - 2016-08-02 08:18 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-10 12:36 - 2016-08-02 08:11 - 00969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-10 12:36 - 2016-08-02 08:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-10 12:36 - 2016-08-02 08:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-08-10 12:36 - 2016-08-02 08:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-10 12:36 - 2016-08-02 07:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-10 12:36 - 2016-08-02 07:56 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-10 12:36 - 2016-08-02 07:55 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-10 12:36 - 2016-08-02 07:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-08-10 12:36 - 2016-08-02 07:53 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-10 12:36 - 2016-08-02 07:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-08-10 12:36 - 2016-08-02 07:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-08-10 12:36 - 2016-08-02 07:51 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-10 12:36 - 2016-08-02 07:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-08-10 12:36 - 2016-08-02 07:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-08-10 12:36 - 2016-08-02 07:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-08-10 12:36 - 2016-08-02 07:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-10 12:36 - 2016-08-02 07:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-08-10 12:36 - 2016-08-02 07:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-08-10 12:36 - 2016-08-02 07:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-08-10 12:36 - 2016-08-02 07:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-08-10 12:36 - 2016-08-02 07:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-08-10 12:36 - 2016-08-02 07:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-08-10 12:36 - 2016-08-02 07:40 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-10 12:36 - 2016-08-02 07:38 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-10 12:36 - 2016-08-02 07:38 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-10 12:36 - 2016-08-02 07:37 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-10 12:36 - 2016-08-02 07:36 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-10 12:36 - 2016-08-02 07:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-08-10 12:36 - 2016-08-02 07:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-08-10 12:36 - 2016-08-02 07:28 - 15412224 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-10 12:36 - 2016-08-02 07:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-08-10 12:36 - 2016-08-02 07:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-08-10 12:36 - 2016-08-02 07:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-08-10 12:36 - 2016-08-02 07:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-08-10 12:36 - 2016-08-02 07:23 - 02868224 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-10 12:36 - 2016-08-02 07:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-08-10 12:36 - 2016-08-02 07:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-08-10 12:36 - 2016-08-02 07:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-08-10 12:36 - 2016-08-02 07:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-10 12:36 - 2016-08-02 07:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-10 12:36 - 2016-08-02 07:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-08-10 12:36 - 2016-08-02 07:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-10 12:36 - 2016-08-02 07:10 - 01550848 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-10 12:36 - 2016-08-02 06:59 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-10 12:36 - 2016-08-02 06:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-08-10 12:36 - 2016-08-02 06:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-10 12:36 - 2016-08-02 06:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-08-10 12:36 - 2016-07-08 17:37 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-10 12:36 - 2016-07-08 17:37 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-10 12:36 - 2016-07-08 17:32 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00343552 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-10 12:36 - 2016-07-08 17:32 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-10 12:36 - 2016-07-08 17:17 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-08-10 12:36 - 2016-07-08 17:17 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-08-10 12:36 - 2016-07-08 17:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-08-10 12:36 - 2016-07-08 17:03 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-10 12:36 - 2016-07-08 17:01 - 03218944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-10 12:36 - 2016-07-08 16:57 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-10 12:36 - 2016-07-08 16:56 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-10 12:36 - 2016-07-08 16:56 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-10 12:36 - 2016-07-08 16:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-08-10 12:36 - 2016-07-08 16:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-10 12:36 - 2016-07-08 16:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-08-10 00:29 - 2016-08-10 00:29 - 00262144 _____ C:\Windows\Minidump\081016-31262-01.dmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-08 16:12 - 2014-11-10 00:50 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-09-08 16:04 - 2015-05-26 12:53 - 00001232 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000UA.job
2016-09-08 15:57 - 2015-07-14 15:18 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-08 15:55 - 2014-11-10 01:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-09-08 15:33 - 2014-11-10 20:00 - 00000000 ____D C:\Users\DJRISOW\Documents\Cubase Projects
2016-09-08 14:58 - 2015-09-24 02:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-08 14:58 - 2014-12-25 01:19 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Mp3tag
2016-09-08 14:48 - 2009-07-14 06:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-08 14:48 - 2009-07-14 06:45 - 00021888 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-08 14:40 - 2015-07-14 15:18 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-08 14:40 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-08 14:39 - 2014-11-10 00:30 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-08 14:26 - 2014-11-11 14:11 - 649733893 _____ C:\Windows\MEMORY.DMP
2016-09-08 14:26 - 2014-11-11 14:11 - 00000000 ____D C:\Windows\Minidump
2016-09-08 12:44 - 2015-07-23 18:44 - 00000358 _____ C:\Windows\Tasks\VacayExpert.job
2016-09-08 12:44 - 2015-07-10 12:44 - 00000358 _____ C:\Windows\Tasks\DogWiz.job
2016-09-08 12:44 - 2015-06-26 00:44 - 00000354 _____ C:\Windows\Tasks\MoneyAid.job
2016-09-08 12:44 - 2015-06-04 12:44 - 00000356 _____ C:\Windows\Tasks\RenderOrder.job
2016-09-08 11:57 - 2014-11-10 00:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-09-08 10:51 - 2014-12-02 19:37 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\Spectrasonics
2016-09-07 11:27 - 2014-11-10 00:36 - 00000000 ____D C:\Program Files (x86)\Google
2016-09-07 01:14 - 2016-03-28 16:25 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Spotify
2016-09-07 00:04 - 2015-05-26 12:53 - 00001180 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000Core.job
2016-09-06 22:05 - 2015-11-23 16:22 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\vlc
2016-09-06 21:07 - 2014-11-12 19:01 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Dropbox
2016-09-06 19:57 - 2014-11-26 22:17 - 00000000 ____D C:\Program Files (x86)\VST
2016-09-06 19:57 - 2014-11-10 01:14 - 00000000 ____D C:\ProgramData\MAGIX
2016-09-06 19:02 - 2016-03-28 16:26 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\Spotify
2016-09-05 18:23 - 2015-12-04 15:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
2016-09-05 18:23 - 2015-12-04 15:10 - 00000000 ____D C:\Program Files\Native Instruments
2016-09-05 13:06 - 2011-04-12 09:43 - 00699416 _____ C:\Windows\system32\perfh007.dat
2016-09-05 13:06 - 2011-04-12 09:43 - 00149556 _____ C:\Windows\system32\perfc007.dat
2016-09-05 13:06 - 2009-07-14 07:13 - 01620612 _____ C:\Windows\system32\PerfStringBackup.INI
2016-09-05 13:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-09-03 11:46 - 2016-07-26 13:59 - 00000000 ____D C:\Users\DJRISOW\Desktop\mac
2016-09-01 13:56 - 2014-11-17 14:48 - 00000000 ____D C:\Users\DJRISOW\AppData\Local\Native Instruments
2016-09-01 13:49 - 2014-11-17 14:46 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2016-09-01 13:46 - 2014-11-17 14:46 - 00000000 ____D C:\ProgramData\Native Instruments
2016-09-01 13:36 - 2015-12-06 23:44 - 00000000 ____D C:\Users\Public\Documents\NI Resources
2016-09-01 13:36 - 2015-12-04 15:11 - 00000000 ____D C:\Users\DJRISOW\Documents\Native Instruments
2016-09-01 13:26 - 2015-11-19 11:29 - 00000000 ____D C:\temp
2016-09-01 13:12 - 2015-12-05 18:05 - 00000000 ____D C:\Users\Public\Documents\Session Strings Pro Library
2016-09-01 13:12 - 2015-12-05 18:03 - 00000000 ____D C:\Users\Public\Documents\Scarbee Vintage Keys Library
2016-09-01 13:11 - 2015-12-05 17:35 - 00000000 ____D C:\Users\Public\Documents\Scarbee Funk Guitarist Library
2016-09-01 13:07 - 2015-12-05 16:34 - 00000000 ____D C:\Users\Public\Documents\Kontakt Factory Library
2016-09-01 13:03 - 2015-12-05 17:14 - 00000000 ____D C:\Users\Public\Documents\Evolve R2 Library
2016-09-01 13:02 - 2015-12-05 17:13 - 00000000 ____D C:\Users\Public\Documents\Evolve Mutations 2 Library
2016-09-01 13:02 - 2015-12-05 17:12 - 00000000 ____D C:\Users\Public\Documents\Evolve Mutations Library
2016-09-01 12:57 - 2015-12-05 17:07 - 00000000 ____D C:\Users\Public\Documents\Damage Library
2016-09-01 12:55 - 2015-12-05 16:59 - 00000000 ____D C:\Users\Public\Documents\Action Strings Library
2016-09-01 12:55 - 2015-12-05 16:58 - 00000000 ____D C:\Users\Public\Documents\Action Strikes Library
2016-09-01 12:37 - 2014-11-13 00:23 - 00000000 ____D C:\ProgramData\Package Cache
2016-08-31 18:12 - 2014-11-10 00:18 - 09619946 ____H C:\Users\DJRISOW\AppData\Local\IconCache.db.backup
2016-08-26 00:43 - 2015-02-26 20:25 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\Skype
2016-08-17 17:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2016-08-14 20:25 - 2015-12-22 14:35 - 00000000 ____D C:\Users\DJRISOW\AppData\Roaming\BREVERB 2
2016-08-14 18:53 - 2014-11-10 18:59 - 00000000 ____D C:\Users\DJRISOW\Documents\VST3 Presets
2016-08-12 16:08 - 2014-12-22 17:42 - 00000132 _____ C:\Users\DJRISOW\AppData\Roaming\Adobe PNG Format CS6 Prefs
2016-08-10 19:17 - 2009-07-14 06:45 - 07233296 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-10 12:59 - 2014-11-10 17:02 - 00000000 ____D C:\Windows\system32\MRT
2016-08-10 12:49 - 2014-11-10 17:02 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-11-13 22:20 - 2009-11-05 10:50 - 9535488 _____ (Softube) C:\Program Files (x86)\Tube Delay.dll
2014-12-11 17:08 - 2014-12-11 17:08 - 0000000 ____H () C:\Users\DJRISOW\AppData\Roaming\.C2E86F5206385595.sys
2014-12-22 17:42 - 2016-08-12 16:08 - 0000132 _____ () C:\Users\DJRISOW\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-11-10 02:07 - 2016-02-12 00:02 - 0000722 _____ () C:\Users\DJRISOW\AppData\Roaming\buttrc
2014-12-20 04:21 - 2014-12-20 04:21 - 0335504 _____ () C:\Users\DJRISOW\AppData\Roaming\CodecsLE_Install.log
2014-11-10 01:50 - 2016-05-31 19:19 - 0000026 _____ () C:\Users\DJRISOW\AppData\Local\isoworkshop.ini
2014-12-04 23:40 - 2014-12-04 23:40 - 0000017 _____ () C:\Users\DJRISOW\AppData\Local\resmon.resmoncfg

Einige Dateien in TEMP:
====================
C:\Users\DJRISOW\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpnazfx2.dll
C:\Users\DJRISOW\AppData\Local\Temp\DTLite1010-0074.exe
C:\Users\DJRISOW\AppData\Local\Temp\FastDownload.exe
C:\Users\DJRISOW\AppData\Local\Temp\FreeYouTubeDownload.exe
C:\Users\DJRISOW\AppData\Local\Temp\Hibiki.dll
C:\Users\DJRISOW\AppData\Local\Temp\libeay32.dll
C:\Users\DJRISOW\AppData\Local\Temp\msvcr120.dll
C:\Users\DJRISOW\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\DJRISOW\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\DJRISOW\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\DJRISOW\AppData\Local\Temp\nvStInst.exe
C:\Users\DJRISOW\AppData\Local\Temp\ochelper.dll
C:\Users\DJRISOW\AppData\Local\Temp\ochelper.exe
C:\Users\DJRISOW\AppData\Local\Temp\PlaySound.dll
C:\Users\DJRISOW\AppData\Local\Temp\ReimagePackage.exe
C:\Users\DJRISOW\AppData\Local\Temp\SkypeSetup.exe
C:\Users\DJRISOW\AppData\Local\Temp\sqlite3.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite27340.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite34478.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite46264.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite82440.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite83906.dll
C:\Users\DJRISOW\AppData\Local\Temp\System.Data.SQLite90696.dll
C:\Users\DJRISOW\AppData\Local\Temp\tmpF18B.tmp.exe
C:\Users\DJRISOW\AppData\Local\Temp\uninstall.exe
C:\Users\DJRISOW\AppData\Local\Temp\vlc-2.2.1-win32.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-05 14:15

==================== Ende von FRST.txt ============================
--- --- ---

Rafau2012 08.09.2016 15:43
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von DJRISOW (08-09-2016 16:40:38)
Gestartet von C:\Users\DJRISOW\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-11-09 22:09:40)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3719051794-263782235-1391171954-500 - Administrator - Disabled)
C185D41A82D249B08899 (S-1-5-21-3719051794-263782235-1391171954-1004 - Limited - Enabled)
D1C562BF37D343A79588 (S-1-5-21-3719051794-263782235-1391171954-1003 - Limited - Enabled)
DJRISOW (S-1-5-21-3719051794-263782235-1391171954-1000 - Administrator - Enabled) => C:\Users\DJRISOW
Gast (S-1-5-21-3719051794-263782235-1391171954-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Adobe After Effects CC 2014 (HKLM-x32\...\{2B22C750-5C3B-4738-B621-BA786AC7A494}) (Version: 13.0.0 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
AIR Creative Collection (HKLM\...\{D3AE0FF1-6A78-4099-8779-B05E313B7828}) (Version: 11.0.0 - AIR Music Technology)
Amazon Music (HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Amazon Amazon Music) (Version: 3.9.5.820 - Amazon Services LLC)
Antares Autotune Evo VST RTAS v6.0.9 (HKLM-x32\...\Antares Autotune Evo VST RTAS_is1) (Version:  - )
Apple Application Support (32-Bit) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Arabic World Strings (HKLM-x32\...\Arabic World Strings1.0) (Version: 1.0 - Arabic World PLugins)
Arturia minimoog V v1.6 (HKLM-x32\...\Arturia minimoog V_is1) (Version:  - )
ASRock 3TB+ Unlocker v1.0 (HKLM\...\ASRock 3TB+ Unlocker_is1) (Version:  - ASRock Inc.)
ASRock eXtreme Tuner v0.1.71 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version:  - )
ASRock InstantBoot v1.26 (HKLM-x32\...\ASRock InstantBoot_is1) (Version:  - )
Auto-Tune EFX VST (HKLM-x32\...\{95292902-411B-4390-BCBD-8EA445F9456C}) (Version: 1.0.0 - Antares Audio Technologies)
Avid Codecs LE (HKLM-x32\...\{96263993-5E28-424D-A542-FDDEE1217CFF}) (Version: 2.4.0 - Avid Technology, Inc.)
Avid Effects (HKLM\...\{0faad20d-ad8d-4249-ad93-7f006f2aa54b}) (Version: 11.2.2 - Avid Technology, Inc.)
Avid HD Driver (x64) (HKLM\...\{658E112A-8776-4430-A275-D9248732DFB9}) (Version: 11.2.2 - Avid Technology, Inc.)
Avid Pro Tools (HKLM\...\{4D24A12F-11DE-4CA0-9CB7-0418C86A8244}) (Version: 11.2.2 - Avid Technology, Inc.)
Avid Sound Replacer (HKLM\...\{6493231d-d7c3-436e-880b-b1f12882b60c}) (Version: 11.0.0 - Avid Technology, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BREVERB 2 (HKLM-x32\...\{B2D9F699-B4A4-4D37-941E-1B55DF33A96D}_is1) (Version: 2.1.8 - Overloud)
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.3 - Broadcom Corporation)
bx_shredspread 1.9 (HKLM\...\bx_shredspread_is1) (Version: 1.9 - Plugin Alliance)
bx_solo 1.7 (HKLM\...\bx_solo_is1) (Version: 1.7 - Plugin Alliance)
Camel Audio Camel Phat VST v3.15 (HKLM-x32\...\Camel Audio Camel Phat VST v3.15) (Version:  - )
Camel Audio Camel Space VST v1.15 (HKLM-x32\...\Camel Audio Camel Space VST v1.15) (Version:  - )
Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.10.2 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Celemony Melodyne Studio 4 (HKLM-x32\...\Celemony Melodyne Studio 4) (Version: 4.0.4.001 - Celemony)
Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 33.1.0.1 - Comodo)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Dropbox (HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Dropbox) (Version: 10.3.21 - Dropbox, Inc.)
Druckerdeinstallation für EPSON SX125 Series (HKLM\...\EPSON SX125 Series) (Version:  - SEIKO EPSON Corporation)
E²Deesser (HKLM-x32\...\E²Deesser_is1) (Version: 1.2.0 - Eiosis, Inc.)
ElastikVst (x32 Version: 1.00.0000 - ueberschall sample service GmbH) Hidden
E-License Manager (HKLM-x32\...\E-License Manager) (Version: 1.3.0.0 - Best Service)
E-License Manager (Version: 1.3.0.0 - Magix) Hidden
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.9.2.1179 - Steinberg Media Technologies GmbH)
Engine 2 (HKLM-x32\...\Engine 2) (Version: 2.3.0.25 - Best Service)
Engine 2 (Version: 2.3.0.25 - Best Service) Hidden
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.96 - Etron Technology) Hidden
FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory)
Free PDF to Word Doc Converter v1.1 (HKLM-x32\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
GetFLV 9.8.128.18 (HKLM-x32\...\GetFLV_is1) (Version:  - GetFLV, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 53.0.2785.89 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gramblr (HKLM\...\Gramblr) (Version: 2.0.0 - Gramblr Team)
Hap QuickTime Component (HKLM-x32\...\{BCA56BF3-6A57-4C4D-A151-701267CFF530}) (Version: 7.0.0 - Vidvox)
HOFA-Plugins Uninstall (HKLM-x32\...\HOFA-Plugins) (Version:  - HOFA-Plugins)
Intel(R) C++ Redistributables on IA-32 (HKLM-x32\...\{317059CB-7642-4F2E-89C0-62E69D4074B7}) (Version: 15.0.148 - Intel Corporation)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{2DD3C090-2986-4970-B3CB-87BB4C8AC4A5}) (Version: 15.0.148 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2361 - Intel Corporation)
Interlok driver setup x64 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.9.5 - PACE Anti-Piracy, Inc.)
ISO Workshop 5.5 (HKLM-x32\...\ISO Workshop_is1) (Version:  - Glorylogic)
iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.)
Juicer 3.90 (HKLM-x32\...\{640EAE56-81A2-49D4-9B8C-00DA3C0031AF}_is1) (Version:  - Digital Juice, Inc.)
LinPlug Spectral (HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\LinPlug Spectral) (Version:  - )
L-Normalizer version 2.0.2 (HKLM-x32\...\{92F87FD0-B41C-11E3-B0B1-005056A77E8F}_is1) (Version: 2.0.2 - beDSP)
Magic Bullet QuickLooks for Magix 1.4.4 (HKLM\...\{9D084A74-7208-4433-81A0-8D8AF0B1FFE3}_is1) (Version: 1.4.4 - Red Giant, LLC)
MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{328343FF-0466-4E8D-88EB-53CE3150AE11}) (Version: 7.0.2.6 - MAGIX Software GmbH)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX Software GmbH) Hidden
MAGIX Video Pro X6 (Designelemente) (HKLM\...\MX.{B819C28D-D7A1-4A73-B97D-BCEC5616BB4A}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Designelemente) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Filmvorlagen) (HKLM\...\MX.{3FB5F487-B8A5-46E4-872D-2CDA114466F4}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Filmvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Fotoshow Maker-Stile) (HKLM\...\MX.{8F592157-9C7D-4D9E-B712-5A0D1D982819}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Fotoshow Maker-Stile) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (HKLM\...\MX.{CBC84EDA-E830-4240-9392-325C3E6D5DCA}) (Version: 13.0.4.2 - MAGIX Software GmbH)
MAGIX Video Pro X6 (Individuelle Menüvorlagen) (HKLM\...\MX.{46014C2A-4768-4171-9FDE-9DF30836D387}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Individuelle Menüvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Menüvorlagen) (HKLM\...\MX.{C631DC28-575A-422B-AA9C-829834486F38}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Menüvorlagen) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (proDAD Mercalli V2) (HKLM\...\MX.{A90FD7D9-5A48-4350-BA1C-E39390D158B7}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (proDAD Mercalli V2) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Red Giant Magic Bullet Quick Looks) (HKLM\...\MX.{B007B681-3208-4FEE-BD51-E97D3D913545}) (Version: 1.0.1.0 - MAGIX Software GmbH)
MAGIX Video Pro X6 (Red Giant Magic Bullet Quick Looks) (Version: 1.0.1.0 - MAGIX Software GmbH) Hidden
MAGIX Video Pro X6 (Soundtrack Maker-Stile) (HKLM\...\MX.{55A35129-47E9-4E81-9B98-775D631794AC}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Soundtrack Maker-Stile) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Titeleffekte) (HKLM\...\MX.{4D0530E3-9918-4264-8108-B3B7E8F7B910}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Titeleffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Tutorials) (HKLM\...\MX.{9BE10A05-17B2-4CC5-8701-7ACD0FB4C2CC}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Tutorials) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Überblendeffekte) (HKLM\...\MX.{56DE2115-3FF0-42CD-91A1-9BA4C9C7B8CA}) (Version: 1.0.0.0 - MAGIX AG)
MAGIX Video Pro X6 (Überblendeffekte) (Version: 1.0.0.0 - MAGIX AG) Hidden
MAGIX Video Pro X6 (Version: 13.0.4.2 - MAGIX Software GmbH) Hidden
MAGIX Video Pro X6 64 bit Update (Version: 13.0.5.9 - MAGIX AG) Hidden
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
marvell 91xx driver (HKLM-x32\...\MagniDriver) (Version: 1.2.0.1003 - Marvell)
MediaInfo 0.7.82 (HKLM\...\MediaInfo) (Version: 0.7.82 - MediaArea.net)
Metric Collection SDK 35 (x32 Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable - KB2467175 (HKLM-x32\...\{a0fe116e-9a8a-466f-aee0-625cb7c207e3}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Miroslav Philharmonik (HKLM-x32\...\{BA0D0121-A3BA-487D-9C78-7AB0E676C722}) (Version: 1.0.0 - IK Multimedia)
Miroslav Philharmonik Instruments (HKLM-x32\...\{9FCCC8D1-3152-4699-8793-6CB0B9E26EBB}) (Version: 1.0 - IK Multimedia)
MixMeister BPM Analyzer 1.0 (HKLM-x32\...\MixMeister BPM Analyzer_is1) (Version:  - MixMeister Technology LLC)
mocha Pro V3.2.1-7276 (HKLM-x32\...\{110ABF3B-74FA-45A4-B893-8482DA52AA9D}) (Version: 3.21.7276 - Imagineer Systems)
Mozilla Firefox 43.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
Mp3tag v2.71 (HKLM-x32\...\Mp3tag) (Version: v2.71 - Florian Heidenreich)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Native Instruments Abbey Road 50s Drummer (HKLM-x32\...\Native Instruments Abbey Road 50s Drummer) (Version: 1.2.0.10 - Native Instruments)
Native Instruments Abbey Road 60s Drummer (HKLM-x32\...\Native Instruments Abbey Road 60s Drummer) (Version: 1.3.0.11 - Native Instruments)
Native Instruments Abbey Road 70s Drummer (HKLM-x32\...\Native Instruments Abbey Road 70s Drummer) (Version: 1.3.0.7 - Native Instruments)
Native Instruments Abbey Road 80s Drummer (HKLM-x32\...\Native Instruments Abbey Road 80s Drummer) (Version: 1.3.0.4 - Native Instruments)
Native Instruments Abbey Road Modern Drummer (HKLM-x32\...\Native Instruments Abbey Road Modern Drummer) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Abbey Road Vintage Drummer (HKLM-x32\...\Native Instruments Abbey Road Vintage Drummer) (Version: 1.3.0.9 - Native Instruments)
Native Instruments Absynth 5 (HKLM-x32\...\Native Instruments Absynth 5) (Version: 5.3.1.1628 - Native Instruments)
Native Instruments Action Strikes (HKLM-x32\...\Native Instruments Action Strikes) (Version: 1.2.0.2 - Native Instruments)
Native Instruments Action Strings (HKLM-x32\...\Native Instruments Action Strings) (Version: 1.5.0.1 - Native Instruments)
Native Instruments Alicias Keys (HKLM-x32\...\Native Instruments Alicias Keys) (Version: 1.5.0.1 - Native Instruments)
Native Instruments Balinese Gamelan (HKLM-x32\...\Native Instruments Balinese Gamelan) (Version: 1.2.0.5 - Native Instruments)
Native Instruments Battery 4 (HKLM-x32\...\Native Instruments Battery 4) (Version: 4.1.5.254 - Native Instruments)
Native Instruments Battery 4 Factory Library (HKLM-x32\...\Native Instruments Battery 4 Factory Library) (Version: 1.1.0.1 - Native Instruments)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.11.0.465 - Native Instruments)
Native Instruments Cuba (HKLM-x32\...\Native Instruments Cuba) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Damage (HKLM-x32\...\Native Instruments Damage) (Version: 1.5.0.2 - Native Instruments)
Native Instruments Driver (HKLM-x32\...\Native Instruments Driver) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Drum Lab (HKLM-x32\...\Native Instruments Drum Lab) (Version: 1.2.0.5 - Native Instruments)
Native Instruments Enhanced EQ (HKLM-x32\...\Native Instruments Enhanced EQ) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Evolve Mutations (HKLM-x32\...\Native Instruments Evolve Mutations) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Evolve Mutations 2 (HKLM-x32\...\Native Instruments Evolve Mutations 2) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Evolve R2 (HKLM-x32\...\Native Instruments Evolve R2) (Version: 1.7.0.2 - Native Instruments)
Native Instruments FM8 (HKLM-x32\...\Native Instruments FM8) (Version: 1.4.1.1599 - Native Instruments)
Native Instruments Form (HKLM-x32\...\Native Instruments Form) (Version: 1.0.0.7 - Native Instruments)
Native Instruments George Duke Soul Treasures (HKLM-x32\...\Native Instruments George Duke Soul Treasures) (Version: 1.3.0.15 - Native Instruments)
Native Instruments Guitar Rig 5 (HKLM-x32\...\Native Instruments Guitar Rig 5) (Version: 5.2.0.2770 - Native Instruments)
Native Instruments Guitar Rig Pro Library for Maschine (HKLM-x32\...\Native Instruments Guitar Rig Pro Library for Maschine) (Version:  - Native Instruments)
Native Instruments Kinetic Metal (HKLM-x32\...\Native Instruments Kinetic Metal) (Version: 1.1.0.13 - Native Instruments)
Native Instruments Komplete 10 Ultimate (HKLM-x32\...\Native Instruments Komplete 10 Ultimate) (Version:  - Native Instruments)
Native Instruments Kontakt 5 (HKLM-x32\...\Native Instruments Kontakt 5) (Version: 5.5.2.880 - Native Instruments)
Native Instruments Kontakt Factory Library (HKLM-x32\...\Native Instruments Kontakt Factory Library) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Kontour (HKLM-x32\...\Native Instruments Kontour) (Version: 1.0.0.4 - Native Instruments)
Native Instruments Maschine Drum Selection (HKLM-x32\...\Native Instruments Maschine Drum Selection) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Massive (HKLM-x32\...\Native Instruments Massive) (Version: 1.5.1.637 - Native Instruments)
Native Instruments Molekular (HKLM-x32\...\Native Instruments Molekular) (Version: 1.0.0.2 - Native Instruments)
Native Instruments Monark (HKLM-x32\...\Native Instruments Monark) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Native Access (HKLM-x32\...\Native Instruments Native Access) (Version: 1.0.20.101 - Native Instruments)
Native Instruments Passive EQ (HKLM-x32\...\Native Instruments Passive EQ) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Polyplex (HKLM-x32\...\Native Instruments Polyplex) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Rammfire (HKLM-x32\...\Native Instruments Rammfire) (Version: 2.0.0.4 - Native Instruments)
Native Instruments Razor (HKLM-x32\...\Native Instruments Razor) (Version: 1.7.0.1 - Native Instruments)
Native Instruments RC 24 (HKLM-x32\...\Native Instruments RC 24) (Version: 1.3.1.45 - Native Instruments)
Native Instruments RC 48 (HKLM-x32\...\Native Instruments RC 48) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Reaktor 5 (HKLM-x32\...\Native Instruments Reaktor 5) (Version: 5.9.4.1512 - Native Instruments)
Native Instruments Reaktor 6 (HKLM-x32\...\Native Instruments Reaktor 6) (Version: 6.0.3.16 - Native Instruments)
Native Instruments Reaktor Blocks (HKLM-x32\...\Native Instruments Reaktor Blocks) (Version: 1.2.0.3 - Native Instruments)
Native Instruments Reaktor Factory Library (HKLM-x32\...\Native Instruments Reaktor Factory Library) (Version: 1.1.0.3 - Native Instruments)
Native Instruments Reaktor Prism (HKLM-x32\...\Native Instruments Reaktor Prism) (Version: 1.6.0.1 - Native Instruments)
Native Instruments Reaktor Spark R2 (HKLM-x32\...\Native Instruments Reaktor Spark R2) (Version: 1.4.0.3 - Native Instruments)
Native Instruments Reflektor (HKLM-x32\...\Native Instruments Reflektor) (Version: 2.0.0.6 - Native Instruments)
Native Instruments Retro Machines Mk2 (HKLM-x32\...\Native Instruments Retro Machines Mk2) (Version: 1.3.0.3 - Native Instruments)
Native Instruments Rise and Hit (HKLM-x32\...\Native Instruments Rise and Hit) (Version: 1.2.0.10 - Native Instruments)
Native Instruments Rounds (HKLM-x32\...\Native Instruments Rounds) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Scarbee Funk Guitarist (HKLM-x32\...\Native Instruments Scarbee Funk Guitarist) (Version: 1.2.0.1 - Native Instruments)
Native Instruments Scarbee Jay-Bass (HKLM-x32\...\Native Instruments Scarbee Jay-Bass) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Scarbee MM-Bass (HKLM-x32\...\Native Instruments Scarbee MM-Bass) (Version: 1.2.0.4 - Native Instruments)
Native Instruments Scarbee MM-Bass Amped (HKLM-x32\...\Native Instruments Scarbee MM-Bass Amped) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Scarbee Pre-Bass (HKLM-x32\...\Native Instruments Scarbee Pre-Bass) (Version: 1.2.0.2 - Native Instruments)
Native Instruments Scarbee Pre-Bass Amped (HKLM-x32\...\Native Instruments Scarbee Pre-Bass Amped) (Version: 1.1.0.2 - Native Instruments)
Native Instruments Scarbee Rickenbacker Bass (HKLM-x32\...\Native Instruments Scarbee Rickenbacker Bass) (Version: 1.2.0.2 - Native Instruments)
Native Instruments Scarbee Vintage Keys (HKLM-x32\...\Native Instruments Scarbee Vintage Keys) (Version: 1.3.0.4 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Native Instruments Session Horns Pro (HKLM-x32\...\Native Instruments Session Horns Pro) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Session Strings Pro (HKLM-x32\...\Native Instruments Session Strings Pro) (Version: 1.4.0.2 - Native Instruments)
Native Instruments Skanner XT (HKLM-x32\...\Native Instruments Skanner XT) (Version: 1.3.0.2 - Native Instruments)
Native Instruments Solid Bus Comp FX (HKLM-x32\...\Native Instruments Solid Bus Comp FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Solid Dynamics FX (HKLM-x32\...\Native Instruments Solid Dynamics FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Solid EQ FX (HKLM-x32\...\Native Instruments Solid EQ FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Studio Drummer (HKLM-x32\...\Native Instruments Studio Drummer) (Version: 1.4.0.12 - Native Instruments)
Native Instruments Supercharger GT (HKLM-x32\...\Native Instruments Supercharger GT) (Version: 1.3.1.45 - Native Instruments)
Native Instruments The Finger R2 (HKLM-x32\...\Native Instruments The Finger R2) (Version: 1.3.0.12 - Native Instruments)
Native Instruments The Gentleman (HKLM-x32\...\Native Instruments The Gentleman) (Version: 1.2.0.2 - Native Instruments)
Native Instruments The Giant (HKLM-x32\...\Native Instruments The Giant) (Version: 1.2.0.7 - Native Instruments)
Native Instruments The Grandeur (HKLM-x32\...\Native Instruments The Grandeur) (Version: 1.2.0.2 - Native Instruments)
Native Instruments The Maverick (HKLM-x32\...\Native Instruments The Maverick) (Version: 1.2.0.2 - Native Instruments)
Native Instruments The Mouth (HKLM-x32\...\Native Instruments The Mouth) (Version: 1.3.0.4 - Native Instruments)
Native Instruments Traktors 12 (HKLM-x32\...\Native Instruments Traktors 12) (Version: 2.0.0.6 - Native Instruments)
Native Instruments Transient Master FX (HKLM-x32\...\Native Instruments Transient Master FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Vari Comp (HKLM-x32\...\Native Instruments Vari Comp) (Version: 1.3.1.45 - Native Instruments)
Native Instruments VC 160 FX (HKLM-x32\...\Native Instruments VC 160 FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments VC 2A FX (HKLM-x32\...\Native Instruments VC 2A FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments VC 76 FX (HKLM-x32\...\Native Instruments VC 76 FX) (Version: 1.3.1.45 - Native Instruments)
Native Instruments Vintage Organs (HKLM-x32\...\Native Instruments Vintage Organs) (Version: 1.4.0.5 - Native Instruments)
Native Instruments West Africa (HKLM-x32\...\Native Instruments West Africa) (Version: 1.3.0.2 - Native Instruments)
Nero BurningROM 2015 (HKLM-x32\...\{32CEC4AD-4BEF-4EB8-833E-47DAE9382653}) (Version: 16.0.01500 - Nero AG)
Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1003 - Nero AG)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.25 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.25 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.25 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
OrangeVocoder v2.0-OxYGeN (HKLM-x32\...\OrangeVocoder v2.0-OxYGeN) (Version:  - )
PACE License Support Win64 (HKLM-x32\...\InstallShield_{DF91FC8F-0D43-415b-BB5D-22533FC1CC1A}) (Version: 2.6.0.1134 - PACE Anti-Piracy, Inc.)
PACE License Support Win64 (Version: 2.6.0.1134 - PACE Anti-Piracy, Inc.) Hidden
PCM Native Reverb Bundle (HKLM-x32\...\PCM Native Reverb Bundle) (Version:  - Lexicon)
PCM Native Reverb Bundle (x32 Version: 1.1.3 - Lexicon) Hidden
PCR-Treiber (HKLM\...\RolandRDID0027) (Version:  - Roland Corporation)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.311.0 - Tracker Software Products Ltd)
Ponyhoof (HKLM-x32\...\{88E96402-3BBD-02D9-0A36-6FB806AEE04E}) (Version:  - )
Prerequisite installer (x32 Version: 16.0.0000 - Nero AG) Hidden
proDAD Mercalli 2.0 (64bit) (HKLM\...\proDAD-Mercalli-2.0) (Version: 2.0.116 - proDAD GmbH)
proDAD Mercalli 3.0 (64bit) (HKLM\...\proDAD-Mercalli-3.0) (Version: 3.0.215.1 - proDAD GmbH)
proDAD Vitascene 2.0 (64bit) (HKLM\...\proDAD-Vitascene-2.0) (Version: 2.0.227 - proDAD GmbH)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6257 - Realtek Semiconductor Corp.)
Revoice Pro (32 bit) (HKLM-x32\...\{7481C12D-51CF-4747-B1D5-3D7FE7612F0F}) (Version: 2.6.1.1 - Synchro Arts Ltd)
RME DIGICheck (HKLM-x32\...\{872BD2A4-7CB6-4692-A74E-99ABA11DED75}) (Version: 580rel - RME)
RME Fireface USB (HKLM\...\FIREFACE_USB) (Version: 1.0.89.0 - RME Intelligent Audio Solutions)
SHIELD Streaming (Version: 3.1.3000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.18.9 - NVIDIA Corporation) Hidden
Skype™ 7.7 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.7.103 - Skype Technologies S.A.)
Softube Acoustic Feedback VST RTAS v1.0.7 (HKLM-x32\...\Softube Acoustic Feedback VST RTAS_is1) (Version:  - )
Softube Bass Amp Room VST RTAS v1.0.2 (HKLM-x32\...\Softube Bass Amp Room VST RTAS_is1) (Version:  - )
Softube FET Compressor VST RTAS v1.0.3 (HKLM-x32\...\Softube FET Compressor VST RTAS_is1) (Version:  - )
Softube Metal Amp Room VST RTAS v1.1.5 (HKLM-x32\...\Softube Metal Amp Room VST RTAS_is1) (Version:  - )
Softube Passive-Active Pack VST RTAS v1.0.2 (HKLM-x32\...\Softube Passive-Active Pack VST RTAS_is1) (Version:  - )
Softube Plug-Ins (VST AAX 32-bit) (HKLM-x32\...\Softube Plug-Ins (VST AAX 32-bit)) (Version: 2.2.84 - Softube AB)
Softube Plug-Ins (VST AAX 64-bit) (HKLM\...\Softube Plug-Ins (VST AAX 64-bit)) (Version: 2.2.84 - Softube AB)
Softube Spring Reverb VST RTAS v1.0.4 (HKLM-x32\...\Softube Spring Reverb VST RTAS_is1) (Version:  - )
Softube Tonelux Tilt VST RTAS v1.0 (HKLM-x32\...\Softube Tonelux Tilt_is1) (Version:  - )
Softube Trident A-Range VST RTAS v1.0.2 (HKLM-x32\...\Softube Trident A-Range VST RTAS_is1) (Version:  - )
Softube Tube Delay VST RTAS v1.0.5 (HKLM-x32\...\Softube Tube Delay VST RTAS_is1) (Version:  - )
Softube Tube-Tech CL 1B VST RTAS v1.0.3 (HKLM-x32\...\Softube Tube-Tech CL 1B VST RTAS_is1) (Version:  - )
Softube Tube-Tech PE 1C VST RTAS v1.0.1 (HKLM-x32\...\Softube Tube-Tech PE 1C_is1) (Version:  - )
Softube Valley People Dyna-mite VST RTAS v1.0.1 (HKLM-x32\...\Softube Valley People Dyna-mite VST RTAS_is1) (Version:  - )
Softube Vintage Amp Room VST RTAS v1.05 (HKLM-x32\...\Softube Vintage Amp Room VST RTAS_is1) (Version:  - )
Sonnox Fraunhofer Codec Toolbox v1.0.6 (HKLM\...\Sonnox Fraunhofer Codec Toolbox v1.0.6_is1) (Version: 1.0.6 - Sonnox Ltd, Oxford, UK)
Sonnox Oxford Inflator Native VST v1.5.1 (HKLM-x32\...\Sonnox Oxford Inflator Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford Limiter Native VST v1.1.1 (HKLM-x32\...\Sonnox Oxford Limiter Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford R3 Dynamics Native VST v1.3.1 (HKLM-x32\...\Sonnox Oxford R3 Dynamics Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford R3 EQ Native VST v1.6.1 (HKLM-x32\...\Sonnox Oxford R3 EQ Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford Reverb Native VST v1.0 (HKLM-x32\...\Sonnox Oxford Reverb Native VST_is1) (Version:  - Team AiR 2007)
Sonnox Oxford TransMod Native VST v1.3.1 (HKLM-x32\...\Sonnox Oxford TransMod Native VST_is1) (Version:  - Team AiR 2007)
SoundToys Devil-Loc Deluxe - Academic 32 bit (HKLM-x32\...\Devil-Loc Deluxe - Academic 32 bit_is1) (Version:  - SoundToys Inc)
SoundToys Little AlterBoy 32 bit (HKLM-x32\...\Little AlterBoy 32 bit_is1) (Version:  - SoundToys Inc)
SoundToys NTV FX V4 - Academic V4 32 bit (HKLM-x32\...\SoundToys NTV FX V4 - Academic V4 32 bit_is1) (Version:  - SoundToys Inc)
SpectraLayers Pro 3.0 (HKLM\...\{A2C0EF4C-F8DA-44E1-9D2F-9BFE1B8D3860}) (Version: 3.0.27 - Sony)
SPL Analog Code EQ Rangers Volume One VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code EQ Rangers Volume One VST RTAS_is1) (Version:  - )
SPL Analog Code MicroPlugs VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code MicroPlugs VST RTAS_is1) (Version:  - )
SPL Analog Code Transient Designer VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code Transient Designer VST RTAS_is1) (Version:  - )
SPL Analog Code TwinTube Processor VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code TwinTube Processor VST RTAS_is1) (Version:  - )
SPL Analog Code Vitalizer MK2-T VST RTAS v1.1 (HKLM-x32\...\SPL Analog Code Vitalizer MK2-T VST RTAS_is1) (Version:  - )
Spotify (HKU\S-1-5-21-3719051794-263782235-1391171954-1000\...\Spotify) (Version: 1.0.36.124.g1cba1920 - Spotify AB)
Steinberg Cubase 7 (HKLM-x32\...\{36035C23-2361-495A-9AE9-D1FF9A9F70B7}) (Version: 7.0.7 - Steinberg Media Technologies GmbH)
Steinberg Cubase 7.5 (HKLM-x32\...\{C75F4809-1E91-49F4-8093-45D9B053E89D}) (Version: 7.5.30 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg EDM Toolbox MIDI Loops (HKLM-x32\...\{8C9B2EA8-9A30-4347-95E9-10E919C4F32E}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Allen Morgan Signature Drums (HKLM-x32\...\{611A7035-0172-4B9B-8BB6-5046F6867D8A}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE (HKLM-x32\...\{A6790D47-D653-4B88-BED4-96878DBE5191}) (Version: 4.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 1.6.1 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content (HKLM-x32\...\{A5051ABF-A497-4C3C-85EA-F7A4D5C19B82}) (Version: 1.6.1 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content (HKLM-x32\...\{4D454CF8-12FD-464D-B57B-B46FE27B78BB}) (Version: 2.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg LoopMash Content 2 (HKLM-x32\...\{88C337F0-4CF2-4098-BDC0-D94859ECA2B4}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Retrologue (HKLM-x32\...\{0EB4D2B3-9410-4FB7-AD46-C48CE45B9498}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg Retrologue 64bit (HKLM\...\{4D65ECE6-131D-4B5F-8470-2750D3161619}) (Version: 1.1.0 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH)
Steinberg SLM128 Plug-in (HKLM-x32\...\{AE480357-42F7-4A6E-8F6E-8BC888335662}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Sylenth1 v2.21 (HKLM-x32\...\Sylenth1_is1) (Version:  - )
TC Native Bundle v3.1 (HKLM-x32\...\TC Native Bundle v3.1) (Version:  - )
TruePianos (HKLM-x32\...\TruePianos1.9.1) (Version: 1.9.1 - Team Audio Pirate)
UAD drivers. This may take a while... (x32 Version: 8.3.0.12204 - Universal Audio, Inc.) Hidden
UAD Powered Plug-Ins (HKLM-x32\...\{2bb81ba6-3983-42d3-b120-f5c4ea6e7a69}) (Version: 8.3.0.12204 - Universal Audio, Inc.)
UAD Powered Plug-Ins (Version: 8.3.0.12204 - Universal Audio, Inc.) Hidden
UAD Powered Plug-Ins (x32 Version: 8.3.0.12204 - Universal Audio, Inc.) Hidden
Urban Redline version 1.0.0 (HKLM-x32\...\{D3EFBCE5-6D4A-4C35-9BA2-7B348C4F75C6}_is1) (Version: 1.0.0 - StudioLinkedVST)
Vengeance Producer Suite - Glitch Bitch 1.0.3 (HKLM-x32\...\{67715E04-59FB-442A-9A23-76F9C0F0D78D}_is1) (Version:  - keilwerth Audio / Vengeance Sound)
Vengeance Producer Suite - Scope 1.0.4 (HKLM-x32\...\{8BB53BA8-F9CC-4A53-A498-1AF91D040F63}_is1) (Version:  - keilwerth Audio / Vengeance Sound)
Vengeance Producer Suite - TapeStop 1.0.1 (HKLM-x32\...\{24293F25-0C00-4DD9-8DCD-257E415FF5E4}_is1) (Version:  - keilwerth Audio / Vengeance Sound)
VIRTU 1.0.0 (HKLM\...\VIRTU_is1) (Version: 1.0.0 - Lucidlogix Technologies LTD)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Vocaloid4 4.2.0 Free Edition (HKLM-x32\...\Vocaloid4 4.2.0 Free Edition_is1) (Version: Vocaloid4 4.2.0 Free Edition - )
WaveLab 8.5 (HKLM-x32\...\WaveLabPro8_5) (Version: 8.5.0.849 - Steinberg)
Waves Central 1.2.0.5 (HKLM-x32\...\{94000200-C561-4E32-99EB-3C5AD3683A70}_is1) (Version: 1.2.0 - Waves, Inc.)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows-Treiberpaket - RME Fireface USB (09/25/2014 1.0.59.0) (HKLM\...\00D7567917C0AF25A47D48DB1D9D837D1FA3A6EF) (Version: 09/25/2014 1.0.59.0 - RME)
Windows-Treiberpaket - RME Fireface USB (09/28/2015 1.0.89.0) (HKLM\...\006E5C2559FCDEE2337C96635F803548D87253B8) (Version: 09/28/2015 1.0.89.0 - RME)
WinRAR 5.11 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH)
Yamaha MOTIF XF Editor Standalone/VST (HKLM-x32\...\Yamaha MOTIF XF Editor Standalone_VST) (Version: 1.6.4 - Yamaha Corporation)
Yamaha USB-MIDI Driver (HKLM-x32\...\InstallShield_{2D488455-3E89-49EF-BA6E-92C2503DC89D}) (Version: 3.1.4.1 - Yamaha Corporation)
Yamaha USB-MIDI Driver (Version: 3.1.4.1 - Yamaha Corporation) Hidden
Yamaha YC-3B (HKLM-x32\...\Yamaha YC-3B) (Version: 1.1.2.7 - Yamaha Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3719051794-263782235-1391171954-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\DropboxExt64.43.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0B2B063B-2A11-4822-B698-F4DA47ABAB3E} - System32\Tasks\{1108DAF6-0B6D-415E-8098-991D5C5E4332} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\LicenseSupportInstallerWin32\LicenseSupportInstallerWin32_v2.6.0_r31206\Extras\Drivers Only Win32.exe" -d C:\Users\DJRISOW\Desktop\LicenseSupportInstallerWin32\LicenseSupportInstallerWin32_v2.6.0_r31206\Extras
Task: {10EC825C-424F-42F0-AA8E-BCCFB2EEE222} - System32\Tasks\{FBEFE4EF-A1EB-4046-9851-05B3F6CA41B6} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\Trilogy 1\setup.exe" -d "C:\Users\DJRISOW\Desktop\Trilogy 1"
Task: {12393805-183A-47C2-8E2F-4582475E82E6} - System32\Tasks\{6CD77EC8-DF1C-4689-B06F-5255DA18BE89} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\SPL Plug IN\SPL.Analog.Code.Vitalizer.MK2-T.VST.RTAS.v1.1-AiR\setup.exe" -d "C:\Users\DJRISOW\Desktop\SPL Plug IN\SPL.Analog.Code.Vitalizer.MK2-T.VST.RTAS.v1.1-AiR"
Task: {1FC46C5C-7009-476F-BCE4-001B40059A84} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-09-10] (Lenovo)
Task: {2CAA340D-8BC3-48EF-834C-FE9301F7CE17} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-12] (Adobe Systems Incorporated)
Task: {2D00D03A-D857-48E5-9410-89A5AD96CCF9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-14] (Google Inc.)
Task: {3BF30B5D-2D9D-496A-A616-F07DD2C2BAB0} - System32\Tasks\MoneyAid => c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}\46636783372506569b.exe <==== ACHTUNG
Task: {3E3F374D-BA6D-4428-BE2E-46B14E74294C} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000Core => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-05-26] (Dropbox, Inc.)
Task: {43B3DFAF-18C5-43EF-8447-9FBDFFCA836D} - System32\Tasks\{41CB1303-D609-416E-AF25-B7C15E8803FA} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\MashTactic_1_01b_VST_WIN_32\MashTactic 32 bit.exe" -d C:\Users\DJRISOW\Desktop\MashTactic_1_01b_VST_WIN_32
Task: {440D1C3C-2CE5-45CD-8C74-84838C1428FE} - System32\Tasks\{5B2D4183-0908-45A0-A571-6AF5A2ED277F} => Chrome.exe hxxp://ui.skype.com/ui/0/7.8.0.102/de/abandoninstall?page=tsProgressBar
Task: {4B0AE892-8B0A-4DF7-813D-9AB5C5B31333} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000UA => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-05-26] (Dropbox, Inc.)
Task: {6FE440FC-02C5-4CBB-8DD5-2E042579D4A3} - System32\Tasks\Amazon Music Helper => C:\Users\DJRISOW\AppData\Local\Amazon Music\Amazon Music Helper.exe [2015-05-07] ()
Task: {75DCD3A4-42FD-4FB8-A2D2-D47109319994} - System32\Tasks\{8BC659D3-3A92-46A0-B95F-FEFF74F2860D} => Chrome.exe hxxp://ui.skype.com/ui/0/7.1.0.105/de/abandoninstall?source=lightinstaller&amp;page=tsPlugin
Task: {A222371D-68B2-47D6-90ED-3F2CABCB49FC} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2014-07-21] (Nero AG)
Task: {A428F1BE-BA9B-4C64-8019-5031C0D807A0} - System32\Tasks\{27A4F59A-2409-47BA-9136-C78F3B45E88B} => pcalua.exe -a C:\Users\DJRISOW\Desktop\Sylenth.Komplete.pack.win.32.64.and.mac\Lennar.Digital.Sylenth1.VSTi.v2.2.1.1.x86.PROPER-VTX\VTXSetup.exe -d C:\Users\DJRISOW\Desktop\Sylenth.Komplete.pack.win.32.64.and.mac\Lennar.Digital.Sylenth1.VSTi.v2.2.1.1.x86.PROPER-VTX
Task: {AEC6E0CA-8A81-46A7-9FAF-61F0D1412344} - System32\Tasks\RenderOrder => c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}\229690953678597325b.exe <==== ACHTUNG
Task: {C251711A-EA91-4AAF-B021-07ABF3493E8C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-07-14] (Google Inc.)
Task: {D2BC4002-EAA3-401C-BE45-21E643CF76F8} - System32\Tasks\{56DEFA2F-544F-40E2-95A8-7272E3A15E1A} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\reFX Nexus 2.6.5 Installer\reFX Nexus 2.6.5 Installer.exe" -d "C:\Users\DJRISOW\Desktop\reFX Nexus 2.6.5 Installer"
Task: {D5492631-2F65-46C0-8FA4-265F9AB1C620} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {D78EDF4E-0479-4FFC-8A34-94092F0B6A75} - System32\Tasks\{321D1C11-F63E-4FD4-8373-A7FAA7B24AE1} => pcalua.exe -a "C:\Users\DJRISOW\Desktop\Camel Audio\CamelCrusher\CamelCrusherWin\CamelCrusherWin_v1_41.exe" -d "C:\Users\DJRISOW\Desktop\Camel Audio\CamelCrusher\CamelCrusherWin"
Task: {E867034F-0A55-41DA-BE74-395CBCEC9060} - System32\Tasks\VacayExpert => c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}\8360891445966462720c.exe <==== ACHTUNG
Task: {F9F1B268-7AA2-4E89-83C0-2E1CF09B3604} - System32\Tasks\{9BF739CE-7F67-47B9-9E2F-85B340231283} => pcalua.exe -a C:\Users\DJRISOW\Desktop\ProDAD.Vitascene.1.0.34.full.+.license-izmael.z6\vitascene-10-service.34.exe -d C:\Users\DJRISOW\Desktop\ProDAD.Vitascene.1.0.34.full.+.license-izmael.z6
Task: {FA7807BC-12A5-48C5-BB60-F5AB6E795643} - System32\Tasks\DogWiz => c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}\8313796287343420975b.exe <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DogWiz.job => c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}\8313796287343420975b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000Core.job => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3719051794-263782235-1391171954-1000UA.job => C:\Users\DJRISOW\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\MoneyAid.job => c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}\46636783372506569b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\RenderOrder.job => c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}\229690953678597325b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\VacayExpert.job => c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}\8360891445966462720c.exe <==== ACHTUNG

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-09-07 11:33 - 2016-08-31 04:16 - 02280264 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.89\libglesv2.dll
2016-09-07 11:33 - 2016-08-31 04:16 - 00107848 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.89\libegl.dll
2016-09-07 11:33 - 2016-08-31 04:02 - 31541952 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.89\PepperFlash\pepflashplayer.dll
2014-04-15 16:43 - 2014-04-15 16:43 - 00114176 _____ () C:\Program Files (x86)\Common Files\Steinberg\Shared Components\yamaha_vst_motif_xf_u.dll
2014-11-10 01:05 - 2014-07-10 15:46 - 00309552 _____ () C:\Program Files (x86)\eLicenser\Tools\eLicenserCore.dll
2014-11-13 22:03 - 2014-11-13 22:03 - 06492160 _____ () C:\Program Files (x86)\Steinberg\Vstplugins\Pitchwheel.dll
2016-07-06 17:26 - 2015-10-11 21:42 - 00020912 _____ () C:\Program Files (x86)\Waves\Plug-Ins V9\OKFilter.bundle\Contents\Win32\GenericMultiCoreProcessor.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 01040656 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2016-03-18 22:56 - 2016-03-18 22:56 - 00080184 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData:6B2C3EB805B95CCC [217]
AlternateDataStreams: C:\Users\All Users:6B2C3EB805B95CCC [217]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:6B2C3EB805B95CCC [217]
AlternateDataStreams: C:\ProgramData\Application Data:6B2C3EB805B95CCC [217]
AlternateDataStreams: C:\ProgramData\Microsoft:bWhQTYmHnUwCcDFr5ov15FqfcV9 [2726]
AlternateDataStreams: C:\ProgramData\Microsoft:eVdL2mVh673hCgxr1LXcqVv55 [2840]
AlternateDataStreams: C:\ProgramData\Microsoft:gCZ2LhBJ8frRzo1YofAhcf [2734]
AlternateDataStreams: C:\ProgramData\Microsoft:KHykLmkveNUq7cpFmmPtm9 [2620]
AlternateDataStreams: C:\Users\DJRISOW\Cookies:SdVE5Q7NfcdezCrytWaKUBUVaKY [2782]
AlternateDataStreams: C:\Users\DJRISOW\AppData\Local\Temp:qdisXcMkdZPdftz2H4CgjzCU [2768]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3719051794-263782235-1391171954-1000\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{B55AB98D-ACFD-4A22-A53D-0DF0B96FE528}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{7FF1BA73-5B27-48F6-BE58-4F0EEB253DD7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{7345A4DF-0F31-4A1F-A1D4-60F147DD33E8}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{B5366FA0-6E7B-415F-BDE2-FC28CDA26D50}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{E20726DF-246C-4377-B925-318DAB47BD6A}] => (Allow) C:\Program Files (x86)\Steinberg\Cubase 7\Cubase7.exe
FirewallRules: [{D29F8D7D-4E03-4B9D-BD67-3186DDAECB87}] => (Allow) LPort=51113
FirewallRules: [{1840CACE-5DD4-4413-8A1D-43C0A0377C6F}] => (Allow) LPort=51112
FirewallRules: [{9A4C5AB9-75EB-4969-8D8C-234885DE7ED3}] => (Allow) LPort=51111
FirewallRules: [{643CC436-3F6D-4182-801D-238C1678350C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E2A57DE4-85E0-4B2F-9D57-E29081A3A7E9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9519D502-62E3-4B5E-AF7B-553E5FEE0DDC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{CAEA284F-404A-42EB-B7F6-814D427F6FD0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{C98F8DB6-0FA1-4038-83C7-EFEFBECCC26C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FDFF62E5-A487-4077-9346-87184F9A7347}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A067515B-3996-4CEA-BB79-B1953BA57A07}] => (Allow) C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{FE70B238-0E43-42A4-BA78-74E81E28866A}] => (Allow) C:\Users\DJRISOW\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{CE802A6E-80DD-487C-946D-B7200E4F4940}] => (Allow) C:\Program Files\Avid\Pro Tools\AvidVideoEngine.exe
FirewallRules: [{797844F8-B4D1-45C7-BF1B-CA8D328F1FFB}] => (Allow) C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\StartNBR.exe
FirewallRules: [{54C40395-E62F-4FE9-A714-6D2800CFBAFF}] => (Allow) C:\Program Files (x86)\Nero\Nero 2015\Nero Burning ROM\nero.exe
FirewallRules: [{FDEC6D20-06F0-431B-AEF6-F576C398B31B}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\Video Download Capture.exe
FirewallRules: [{A216A15B-AEE7-4E86-BDBE-1D2C267D4980}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\Video Download Capture.exe
FirewallRules: [{603EFEB1-90ED-4137-9591-3FA02C9556B5}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftSrv.dll
FirewallRules: [{63EFEE55-3A72-49AE-AE61-017BC09A2B79}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftSrv.dll
FirewallRules: [{0702FDCD-7784-4BB9-ABAA-004678E5E1A2}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDump.dll
FirewallRules: [{868E996D-2023-4E9D-AE43-6B733985BECB}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDump.dll
FirewallRules: [{2C3679F5-2BED-4CB0-B5EA-B8651A2D07CC}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftAC.dll
FirewallRules: [{96DC6CBC-AC15-4D6E-B35D-B697C2560172}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftAC.dll
FirewallRules: [{33BDA654-DF43-4A84-B67E-59A1CF99D84D}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftPlayer.dll
FirewallRules: [{61406790-20DB-4188-93D4-AEAAD73AB630}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftPlayer.dll
FirewallRules: [{336A9018-5966-4438-A422-4F87738BFE0B}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
FirewallRules: [{8178ED61-5F5F-42BD-B440-F095CAC49EBF}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
FirewallRules: [{13CD9E28-F7A8-48C1-9E0F-B37D634145DC}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
FirewallRules: [{834AEA8C-0363-42DD-B9A6-966B505E41E0}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
FirewallRules: [{C5F86465-F79A-449E-AC32-67F964C5C618}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{2763103C-2689-45B3-B125-C5936EA18D35}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F5586403-2940-45CA-ADDD-083BA2AB4DBB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{00860453-F86F-4656-866B-94EE10E7DC72}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4E407978-B2FC-4D6D-9160-0E5DB8176989}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{9DE48FED-1D74-4EC2-9320-ECDC7DD2BA68}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{5CF993E1-AE10-4976-9B45-959193A5F776}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{ACC51843-3EFA-4282-BAA9-E689137ACBAF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{C90745A8-F4A3-4041-B763-B29B8B19CDCB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

05-09-2016 18:22:19 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
05-09-2016 18:22:58 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
08-09-2016 10:18:49 Revo Uninstaller's restore point - do-search
08-09-2016 10:21:45 Revo Uninstaller's restore point - Reimage Protector
08-09-2016 10:22:43 Revo Uninstaller's restore point - StatMaker
08-09-2016 10:23:38 Revo Uninstaller's restore point - YTD Video Downloader 4.8.7
08-09-2016 14:44:41 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/08/2016 02:41:37 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/08/2016 02:28:19 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/08/2016 10:27:48 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/08/2016 10:18:48 AM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
  Generatordaten werden gesammelt

Kontext:
  Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
  Generatorname: System Writer
  Generatorinstanz-ID: {79853168-3da7-46fd-be62-2bb24cbf2158}

Error: (09/08/2016 10:10:50 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 11:36:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Cubase7.5.exe, Version: 7.5.30.243, Zeitstempel: 0x53ce966c
Name des fehlerhaften Moduls: exceptiondumper.dll, Version: 1.1.0.2, Zeitstempel: 0x5179313e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00002df9
ID des fehlerhaften Prozesses: 0x145c
Startzeit der fehlerhaften Anwendung: 0x01d2094cad9cf251
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Steinberg\Cubase 7.5\Cubase7.5.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Steinberg\Cubase 7.5\Components\exceptiondumper.dll
Berichtskennung: 2c9e5eac-7543-11e6-94cd-002522cc2a9b

Error: (09/07/2016 11:13:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Cubase7.5.exe, Version: 7.5.30.243, Zeitstempel: 0x53ce966c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.23418, Zeitstempel: 0x5708a73e
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce843
ID des fehlerhaften Prozesses: 0x110c
Startzeit der fehlerhaften Anwendung: 0x01d20924d9381572
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Steinberg\Cubase 7.5\Cubase7.5.exe
Pfad des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll
Berichtskennung: e8b9fec1-753f-11e6-94cd-002522cc2a9b

Error: (09/07/2016 06:10:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 11:48:50 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.

Error: (09/07/2016 11:43:04 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Ereignisfilter mit Abfrage "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" konnte im Namespace "//./root/CIMV2" nicht reaktiviert werden aufgrund des Fehlers 0x80041003. Ereignisse können nicht durch diesen Filter geschickt werden, bis dieses Problem gelöst ist.


Systemfehler:
=============
Error: (09/08/2016 02:45:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/08/2016 02:45:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/08/2016 02:40:14 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
cdrom

Error: (09/08/2016 02:40:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-Connectivity für Gramblr." wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (09/08/2016 02:40:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Angry Family" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (09/08/2016 02:38:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/08/2016 02:38:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Nero Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/08/2016 02:38:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Disc Soft Lite Bus Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/08/2016 02:38:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (09/08/2016 02:38:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 16296.59 MB
Verfügbarer physikalischer RAM: 11064.48 MB
Summe virtueller Speicher: 32591.37 MB
Verfügbarer virtueller Speicher: 26910.06 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:931.29 GB) (Free:80.39 GB) NTFS
Drive d: (AUDIO ) (Fixed) (Total:1863.01 GB) (Free:531.88 GB) NTFS
Drive e: (Video Ordner) (Fixed) (Total:465.76 GB) (Free:192.7 GB) NTFS
Drive h: (Ohne Titel) (Removable) (Total:7.21 GB) (Free:6.18 GB) exFAT

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 221A9391)

Partition: GPT.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D753B374)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 931.5 GB) (Disk ID: 221A939D)

Partition: GPT.

========================================================
Disk: 3 (Size: 7.2 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================

cosinus 08.09.2016 16:39
Zitat:
C185D41A82D249B08899 (S-1-5-21-3719051794-263782235-1391171954-1004 - Limited - Enabled)
D1C562BF37D343A79588 (S-1-5-21-3719051794-263782235-1391171954-1003 - Limited - Enabled)
Was sind denn das für Benutzerkonten?? :wtf:

Rafau2012 08.09.2016 17:07
da fragst du mich was:( weiss ich nicht...was soll das sein???

cosinus 08.09.2016 19:06
FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}
c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}
c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}
c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}
Task: {3BF30B5D-2D9D-496A-A616-F07DD2C2BAB0} - System32\Tasks\MoneyAid => c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}\46636783372506569b.exe <==== ACHTUNG
Task: {AEC6E0CA-8A81-46A7-9FAF-61F0D1412344} - System32\Tasks\RenderOrder => c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}\229690953678597325b.exe <==== ACHTUNG
Task: {E867034F-0A55-41DA-BE74-395CBCEC9060} - System32\Tasks\VacayExpert => c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}\8360891445966462720c.exe <==== ACHTUNG
Task: {FA7807BC-12A5-48C5-BB60-F5AB6E795643} - System32\Tasks\DogWiz => c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}\8313796287343420975b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DogWiz.job => c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}\8313796287343420975b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\MoneyAid.job => c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}\46636783372506569b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\RenderOrder.job => c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}\229690953678597325b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\VacayExpert.job => c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}\8360891445966462720c.exe <==== ACHTUNG
emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Rafau2012 08.09.2016 21:24
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2016
durchgeführt von DJRISOW (08-09-2016 22:19:20) Run:1
Gestartet von C:\Users\DJRISOW\Desktop
Geladene Profile: DJRISOW (Verfügbare Profile: DJRISOW)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}
c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}
c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}
c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}
Task: {3BF30B5D-2D9D-496A-A616-F07DD2C2BAB0} - System32\Tasks\MoneyAid => c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}\46636783372506569b.exe <==== ACHTUNG
Task: {AEC6E0CA-8A81-46A7-9FAF-61F0D1412344} - System32\Tasks\RenderOrder => c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}\229690953678597325b.exe <==== ACHTUNG
Task: {E867034F-0A55-41DA-BE74-395CBCEC9060} - System32\Tasks\VacayExpert => c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}\8360891445966462720c.exe <==== ACHTUNG
Task: {FA7807BC-12A5-48C5-BB60-F5AB6E795643} - System32\Tasks\DogWiz => c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}\8313796287343420975b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\DogWiz.job => c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}\8313796287343420975b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\MoneyAid.job => c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}\46636783372506569b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\RenderOrder.job => c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}\229690953678597325b.exe <==== ACHTUNG
Task: C:\Windows\Tasks\VacayExpert.job => c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}\8360891445966462720c.exe <==== ACHTUNG
emptytemp:
*****************

"c:\programdata\{c7a44e16-5238-3458-c7a4-44e165233859}" => nicht gefunden.
"c:\programdata\{b7f36c97-33d6-c1e9-b7f3-36c9733db25c}" => nicht gefunden.
"c:\programdata\{be255c64-d4cc-e651-be25-55c64d4c7193}" => nicht gefunden.
"c:\programdata\{bc928ba6-4019-a2d6-bc92-28ba64012e99}" => nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3BF30B5D-2D9D-496A-A616-F07DD2C2BAB0}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3BF30B5D-2D9D-496A-A616-F07DD2C2BAB0}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\MoneyAid => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MoneyAid" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AEC6E0CA-8A81-46A7-9FAF-61F0D1412344}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AEC6E0CA-8A81-46A7-9FAF-61F0D1412344}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\RenderOrder => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RenderOrder" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E867034F-0A55-41DA-BE74-395CBCEC9060}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E867034F-0A55-41DA-BE74-395CBCEC9060}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\VacayExpert => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\VacayExpert" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FA7807BC-12A5-48C5-BB60-F5AB6E795643}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FA7807BC-12A5-48C5-BB60-F5AB6E795643}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\DogWiz => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DogWiz" => Schlüssel erfolgreich entfernt
C:\Windows\Tasks\DogWiz.job => erfolgreich verschoben
C:\Windows\Tasks\MoneyAid.job => erfolgreich verschoben
C:\Windows\Tasks\RenderOrder.job => erfolgreich verschoben
C:\Windows\Tasks\VacayExpert.job => erfolgreich verschoben

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 25642205 B
Java, Flash, Steam htmlcache => 1149 B
Windows/system/drivers => 536424376 B
Edge => 0 B
Chrome => 616668083 B
Firefox => 217820030 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 56599206 B
systemprofile32 => 65960 B
LocalService => 66228 B
NetworkService => 311812 B
DJRISOW => 82467465254 B
UpdatusUser => 0 B

RecycleBin => 0 B
EmptyTemp: => 78.2 GB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 22:21:24 ====

cosinus 08.09.2016 21:29
Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte:


1. Schritt: MBAM

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.




2. Schritt: ESET

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset




3. Schritt: SecurityCheck

Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

Rafau2012 11.09.2016 15:20
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Protection, 11.09.2016 12:58, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Starting,
Protection, 11.09.2016 12:58, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Started,
Protection, 11.09.2016 12:58, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Starting,
Protection, 11.09.2016 12:58, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Started,
Detection, 11.09.2016 13:00, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49258, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:00, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49258, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:00, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49259, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:00, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49260, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:00, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49359, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:00, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49359, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 45.56.119.130, www.affyield.com, 49406, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 45.56.119.130, www.affyield.com, 49406, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 45.56.119.130, www.affyield.com, 49407, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49408, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49409, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49410, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49422, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49423, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49424, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49447, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49449, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49511, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49532, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49558, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49567, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49590, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49596, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49601, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:01, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49608, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:02, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49707, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:02, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49717, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49724, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.20.173.115, land.pckeeper.software, 49838, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.20.173.115, land.pckeeper.software, 49838, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.20.173.115, land.pckeeper.software, 49839, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.20.173.115, land.pckeeper.software, 49840, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.21.10.64, land.pckeeper.software, 49846, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.21.10.64, land.pckeeper.software, 49847, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.21.10.64, land.pckeeper.software, 49846, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.21.10.64, land.pckeeper.software, 49848, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.21.10.64, land.pckeeper.software, 49863, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.21.10.64, land.pckeeper.software, 49875, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.21.10.64, land.pckeeper.software, 49989, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 52.21.10.64, land.pckeeper.software, 50001, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Protection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Stopping,
Protection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Stopped,
Protection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Stopping,
Protection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Stopped,
Protection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Starting,
Protection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Started,
Protection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Starting,
Protection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Started,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50060, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50060, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50067, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50072, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50073, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50074, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, IP, 8.34.112.226, alh.crashesdisband.com, 50079, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, IP, 8.34.112.226, alh.crashesdisband.com, 50079, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50111, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:04, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, IP, 8.34.112.226, alh.crashesdisband.com, 50117, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Update, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Manual, Remediation Database, 2016.2.12.1, 2016.8.31.1,
Update, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Manual, Rootkit Database, 2016.2.8.1, 2016.8.15.1,
Update, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Manual, IP Database, 2016.2.8.1, 2016.9.10.2,
Update, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Manual, Domain Database, 2016.2.16.8, 2016.9.11.1,
Update, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Manual, Malware Database, 2016.2.16.6, 2016.9.11.5,
Protection, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Protection, Refresh, Starting,
Protection, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Stopping,
Protection, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Stopped,
Protection, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Protection, Refresh, Success,
Protection, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Starting,
Protection, 11.09.2016 13:08, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Started,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50438, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50438, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50443, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50514, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 209.41.65.43, www.srv2trking.com, 50558, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 209.41.65.43, www.srv2trking.com, 50558, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50568, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50580, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50596, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 173.230.238.99, www.affyield.com, 50597, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 173.230.238.99, www.affyield.com, 50598, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 173.230.238.99, www.affyield.com, 50597, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50612, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:17, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50686, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Scan, 11.09.2016 13:19, SYSTEM, DJRISOW-PC, Manual, Start: 11.09.2016 13:08, Dauer: 9 Min. 22 Sek., Bedrohungssuchlauf, Abgeschlossen, 0 Malware-Erkennung, 8 Nicht-Malware-Erkennungen,
Protection, 11.09.2016 13:20, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Starting,
Protection, 11.09.2016 13:20, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Started,
Protection, 11.09.2016 13:20, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Starting,
Protection, 11.09.2016 13:20, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Started,
Detection, 11.09.2016 13:21, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49251, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:21, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49251, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:21, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49252, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49368, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49449, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49484, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49484, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49485, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 198.54.117.210, bdt.femurssculler.com, 49486, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49491, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49492, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49493, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49515, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49519, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49574, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49585, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 11.09.2016 13:22, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49624, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,

(end)
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f7968dc90aafaf4fab8f407770aea037
# end=init
# utc_time=2016-09-11 11:27:03
# local_time=2016-09-11 01:27:03 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 30717
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=f7968dc90aafaf4fab8f407770aea037
# end=updated
# utc_time=2016-09-11 11:28:47
# local_time=2016-09-11 01:28:47 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=f7968dc90aafaf4fab8f407770aea037
# engine=30717
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-09-11 01:59:41
# local_time=2016-09-11 03:59:41 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# scanned=1176195
# found=1
# cleaned=1
# scan_time=9054
sh=ABAA46329A45B48B4B0160629A7BC878F74FE964 ft=1 fh=c898ebf38b55d7a1 vn="Variante von Win64/Agent.BE Trojaner (Gesäubert durch Löschen)" ac=C fn="C:\Windows\System32\Hibiki.dll"
Code:
Results of screen317's Security Check version 1.009 
 Windows 7 Service Pack 1 x64 (UAC is disabled!) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
 WMI entry may not exist for antivirus; attempting automatic update.
`````````Anti-malware/Other Utilities Check:`````````
 Adobe Flash Player 22.0.0.209 
 Mozilla Firefox (48.0.2)
 Google Chrome (53.0.2785.89)
 Google Chrome (SetupMetrics...)
````````Process Check: objlist.exe by Laurent```````` 
 Malwarebytes Anti-Malware mbamservice.exe 
 Malwarebytes Anti-Malware mbam.exe 
 Malwarebytes Anti-Malware mbamscheduler.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````

cosinus 12.09.2016 08:42
Anleitung bitte richtig lesen. Richtiges Log von Malwarebytes posten.

Rafau2012 12.09.2016 12:19
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Protection, 12.09.2016 12:48, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Starting,
Protection, 12.09.2016 12:48, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Started,
Protection, 12.09.2016 12:48, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Starting,
Protection, 12.09.2016 12:48, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Started,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49278, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49278, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49279, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49384, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49463, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 173.230.238.99, www.affyield.com, 49498, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 173.230.238.99, www.affyield.com, 49498, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 173.230.238.99, www.affyield.com, 49499, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49522, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49523, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:50, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49577, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:51, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49618, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:51, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 46.166.187.125, new.myrdrcts.com, 49656, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:51, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 46.166.187.125, new.myrdrcts.com, 49656, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:51, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 46.166.187.125, new.myrdrcts.com, 49657, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:51, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 46.166.187.125, new.myrdrcts.com, 49661, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:51, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 46.166.187.125, new.myrdrcts.com, 49666, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Update, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Manual, IP Database, 2016.9.10.2, 2016.9.11.1,
Update, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Manual, Domain Database, 2016.9.11.1, 2016.9.11.2,
Update, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Manual, Malware Database, 2016.9.11.6, 2016.9.12.3,
Protection, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Protection, Refresh, Starting,
Protection, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Stopping,
Protection, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Stopped,
Protection, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Protection, Refresh, Success,
Protection, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Starting,
Protection, 12.09.2016 12:53, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Started,
Detection, 12.09.2016 12:57, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49813, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:57, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49813, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:57, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49816, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 12:57, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49868, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:02, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49973, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:02, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49977, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:02, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49993, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:02, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50063, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:02, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50068, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:02, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50104, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50178, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50189, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50190, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50191, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50197, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50213, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50236, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50243, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50253, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50262, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50275, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50276, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50277, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:03, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 50289, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Scan, 12.09.2016 13:10, SYSTEM, DJRISOW-PC, Manual, Start: 12.09.2016 12:53, Dauer: 10 Min. 25 Sek., Bedrohungssuchlauf, Abgeschlossen, 0 Malware-Erkennung, 6 Nicht-Malware-Erkennungen,
Protection, 12.09.2016 13:11, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Starting,
Protection, 12.09.2016 13:11, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Started,
Protection, 12.09.2016 13:11, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Starting,
Protection, 12.09.2016 13:11, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Started,
Protection, 12.09.2016 13:15, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Starting,
Protection, 12.09.2016 13:15, SYSTEM, DJRISOW-PC, Protection, Malware Protection, Started,
Protection, 12.09.2016 13:15, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Starting,
Protection, 12.09.2016 13:15, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Started,
Detection, 12.09.2016 13:16, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49415, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:16, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49415, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:16, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49417, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,
Detection, 12.09.2016 13:16, SYSTEM, DJRISOW-PC, Protection, Malicious Website Protection, Domain, 205.185.208.26, istatic.eshopcomp.com, 49439, Outbound, C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,

(end)

cosinus 12.09.2016 12:41
Was verstehst du an der Anleitung nicht?? :wtf:
Warum postest du schon wieder das gleiche nicht gewollte Log?

Rafau2012 12.09.2016 13:19
upss..ja sorry:/

Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 12.09.2016
Suchlaufzeit: 12:53
Protokolldatei: MBam222.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.09.12.03
Rootkit-Datenbank: v2016.08.15.01
Lizenz: Premium-Version
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: DJRISOW

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 434755
Abgelaufene Zeit: 10 Min., 25 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Warnen
PUM: Warnen

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 6
PUP.Optional.PricePeep, C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage, Löschen bei Neustart, [72d12c456535ef47e0a7d8d87291db25],
PUP.Optional.PricePeep, C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.pricepeep00.pricepeep.net_0.localstorage-journal, In Quarantäne, [f54eed84e4b61f17e1a65957e22120e0],
PUP.Optional.ReMarkIt.PrxySvrRST, C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.re-markit00.re-markit.co_0.localstorage, Löschen bei Neustart, [360d6a0778226ec867f0b539c83b36ca],
PUP.Optional.ReMarkIt.PrxySvrRST, C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_static.re-markit00.re-markit.co_0.localstorage-journal, Löschen bei Neustart, [68dbf9783862d4625ff830bed52e9f61],
PUP.Optional.Yontoo, C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.coupontime00.coupontime.co_0.localstorage, Löschen bei Neustart, [2d16690817835ed8594e5e45788c8b75],
PUP.Optional.Yontoo, C:\Users\DJRISOW\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.coupontime00.coupontime.co_0.localstorage-journal, Löschen bei Neustart, [fb48d59cfe9cf83e8720940f798b8779],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

cosinus 12.09.2016 13:35
Ok, da waren nur ien paar Überreste

Sieht soweit ok aus :daumenhoc

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Rafau2012 12.09.2016 17:43
Hey dankeschön nochmal für deine Mühe! jedoch ....macht Malware ständig das kleine Bildchen auf mit:

Bösartige Website blockiert

und das nächste wäre...wenn ich beim Google Chrome unter Eintellung gehe bz klicke, stürzt der Rechner ab und ich habe für paar sekunden Blauen screen!

hmmm, wahrscheinlich is der Vorus noch irendwo versteckt!

Und Chrome spinnt total..macht ständig spam seiten auf!

cosinus 13.09.2016 09:34
Ja das ist völlig "normal" weil die Adware Chrome befällt. Da hilft nur Chrome komplett deinstallieren, keine Daten behalten, nach der Deinstallation evtl übrig gebliebene Verzeichnisse von Chrome (Programm- und Profilverzeichnisse) von Hand löschen.


Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    Google Chrome

  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 

Rafau2012 13.09.2016 11:52
Ich danke dir dafür! Nun habe ich aber ein seltsames Problem! Jedesmal wenn ich bei Google Chrome auf EINSTELLUNG klicke, fährt mein Rechner runter und ich bekomme ein BlueScreen!

SIEHE BILD!

http://www.bilder-upload.eu/show.php...1473763915.jpg



www.bilder-upload.eu/show.php?file=7d0074-1473763915.jpg

cosinus 13.09.2016 12:19
Das kann man so zuverlässig nicht auf Anieb beheben. Nimm erstmal den Firefox statt den Chrome und teste. Für den BlueScreen einen neuen Thead aufmachen, denn das hat nix mehr mit Schädlingen zu zun. Nimm am besten diesen Bereich => Alles rund um Windows - Trojaner-Board


Dann wären wir durch! :daumenhoc

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:

Abschließend müssen wir noch ein paar Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen - sofern benötigt, wenn nicht benötigt natürlich sinnigerweise deinstallieren oder Alternativen verwenden (und diese aktuell halten).
  • Browser (Internet Explorer, Edge, Firefox, Chrome, ...)
  • Java (bitte wirklich nur installieren/installiert lassen wenn unbedingt nötig!)
  • Flash-Player (nach Möglichkeit deinstallieren und HTML5 verwenden siehe zB https://www.youtube.com/html5 )
  • PDF-Reader (nach Möglichkeit nicht den Adobe Reader verwenden)

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
 

Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und/oder mit dem ESET Online Scanner scannen.

Optional:

http://filepony.de/icon/noscript.png NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. NoScript kann gerade bei technisch nicht allzu versierten Nutzern beim Surfen zum Nervfaktor werden; ob das Tool geeignet ist, muss jeder selbst mal ausprobieren und dann für sich entscheiden. Alternativen zu NoScript (wenn um das das Verhindern von Usertracking und Werbung auf Webseiten) geht wären da Ghostery oder uBlock. Ghostery ist eine sehr bekannte Erweiterung, die aber auch in Kritik geraten ist, vgl. dazu bitte diesen Thread => Ghostery schleift Werbung durch

http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Rafau2012 13.09.2016 13:17
Alles erledigt und danke dir für die Mühe!

Frage hätte ich trotzdem nochmal, ich habe ja das Lizensierte Antimalware Programm am laufen, is das gut? sollte ich das jedesmal neu kaufen?
Soll ich das Eisoft auch installieren? dann würden ja zwei anti viren Programme laufen ?? ist das gut?


Alle Zeitangaben in WEZ +1. Es ist jetzt 03:45 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19