Trojaner-Board - Russische Internetseiten ploppen ganze Zeit auf und lassen sich oft nicht wegklicken!

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Russische Internetseiten ploppen ganze Zeit auf und lassen sich oft nicht wegklicken! (https://www.trojaner-board.de/183978-russische-internetseiten-ploppen-ganze-zeit-lassen-oft-wegklicken.html)

stevoboot

16.01.2017 18:35

Russische Internetseiten ploppen ganze Zeit auf und lassen sich oft nicht wegklicken!

Hallo,
ich teile mir mit meinem kleinen Bruder einen PC und er kann es halt nicht lassen und lädt ständig Sachen runter und diesmal ist es Passiert. Es ist irgendein Virus oder whatever drauf bei dem die ganze Zeit (auch ohne schon geöffneten Browser) Internetseiten mit allerlei Werbung etc auftreten. Habe schon im Internet danach gesucht aber finde keine Lösung.
Bitte um Hilfe

burningice

16.01.2017 20:43

:hallo:
Mein Name ist Rafael und ich werde dir bei der Bereinigung helfen.

Damit ich dir optimal helfen kann, halte dich bitte an folgende Regeln:

Bitte lies meine Posts komplett durch bevor du sie abarbeitest
Wenn ein Problem auftauchen sollte oder dir etwas unklar ist, unterbreche deine Arbeit und beschreibe es so genau wie möglich.
Bitte kein Crossposting
Installiere oder Deinstalliere keine Software ohne Aufforderung
Bitte verwende nur die Tools, welche hier im Thread erwähnt werden und führe sie nur gemäß Anweisung aus
Bitte antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen
Wichtig: Nur weil dein Problem mit einem Schritt plötzlich behoben ist, bedeutet das nicht, dass dein PC auch sauber ist. Mache solange weiter, bis ich dir sage, dass dein PC "clean" ist
Wenn ich dir nicht binnen 36h antworte, sende mir bitte eine persönliche Nachricht!

Los geht's :abklatsch:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

stevoboot

16.01.2017 21:05

Hallo und danke für die fixe Antwort.

FRST.txt:
FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-01-2017

durchgeführt von Stevo Marko (Administrator) auf STEVOMARKO-PC (16-01-2017 21:01:12)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Geladene Profile: Stevo Marko (Verfügbare Profile: Stevo Marko & DefaultAppPool)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Scarlet.Crush Productions) C:\PS3 Con\ScpServer\bin\ScpService.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Apple Inc.) E:\iTunes\iTunesHelper.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe

(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1654672 2016-11-24] (Bitdefender)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.)

HKLM\...\Run: [iTunesHelper] => E:\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)

HKLM\...\Run: [SoftEther VPN Client UI Helper] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()

HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe [1451544 2016-11-24] (Bitdefender)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Spotify Web Helper] => C:\Users\Stevo Marko\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-25] (Spotify Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [GalaxyClient] => E:\GalaxyClient\GalaxyClient.exe [3946048 2016-11-03] (GOG.com)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-03-01]

ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2017-01-15]

ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)

GroupPolicy: Beschränkung - Chrome <======= ACHTUNG

GroupPolicy\User: Beschränkung <======= ACHTUNG
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\..\Interfaces\{133eadeb-27bc-4780-8ca1-bf5574c8ab7f}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{732f7719-fb15-4fe4-8a4f-461a226b8911}: [DhcpNameServer] 192.168.2.1

ManualProxies: 
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://digimonmasters.com/

SearchScopes: HKU\S-1-5-21-4176748537-3526997621-266561101-1000 -> {0BAAF030-AF47-4396-B1B1-06A8364F8F8B} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

SearchScopes: HKU\S-1-5-21-4176748537-3526997621-266561101-1000 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7BE3443FB2-FE1D-4A23-925D-8D9A731DA324%7D&gp=811041

BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

DPF: HKLM-x32 {3FED5059-7AA5-46D9-902B-124C8CD9A106} hxxp://www.digimonmasters.com/inc/ActiveX/launcher/20140731_2/Digitalic%20Launcher.cab
 

FireFox:

========

FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2015-12-16]

FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-12-16] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2016-05-05] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin HKU\S-1-5-21-4176748537-3526997621-266561101-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Stevo Marko\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
 

Chrome: 

=======

CHR HomePage: Default -> mail.ru/cnt/11956636?rciguc__PARAM__

CHR StartupUrls: Default -> "hxxps://www.google.de/"

CHR Profile: C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default [2017-01-16]

CHR Extension: (Google Drive) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-29]

CHR Extension: (YouTube) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-29]

CHR Extension: (Adblock Plus) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]

CHR Extension: (Google-Suche) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-29]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]

CHR Extension: (Google Mail) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-29]

CHR Extension: (Chrome Media Router) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-02]

CHR HKLM-x32\...\Chrome\Extension: [ccfifbojenkenpkmnbnndeadpfdiffof] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [ojlcebdkbpjdpiligkdbbkdkfjmchbfd] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1362464 2016-05-10] ()

R2 Ds3Service; C:\PS3 Con\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert]

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395024 2016-12-24] (EasyAntiCheat Ltd)

S3 GalaxyClientService; E:\GalaxyClient\GalaxyClientService.exe [284224 2016-11-03] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6581824 2016-10-28] (GOG.com)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [Datei ist nicht signiert]

R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [448000 2015-12-14] (Rivet Networks) [Datei ist nicht signiert]

R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5660512 2016-08-16] (INCA Internet Co., Ltd.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1100392 2016-10-28] (Bitdefender)

R2 SEVPNCLIENT; E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-11-24] (Bitdefender)

R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1695720 2016-11-24] (Bitdefender)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-10-25] (Microsoft Corporation)

S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\MobileTrans\DriverInstall.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus.sys [20992 2017-01-03] (LG Electronics Inc.)

S3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [878072 2016-11-01] (BitDefender)

S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23568 2016-06-29] (Bitdefender)

R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-29] (BitDefender LLC)

S4 BDVEDISK; C:\WINDOWS\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)

R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bflwfx64.sys [147528 2015-12-11] (Rivet Networks, LLC.)

R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [182944 2016-11-24] (BitDefender LLC)

R0 ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [299816 2016-06-28] (Bitdefender)

R3 Ke2200; C:\WINDOWS\System32\drivers\e22w7x64.sys [125488 2015-03-18] (Qualcomm Atheros, Inc.)

R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)

R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)

R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2017-01-11] (SoftEther Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)

R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2017-01-15] (SoftEther Corporation)

S3 taphss6; C:\WINDOWS\System32\DRIVERS\taphss6.sys [42064 2016-04-19] (Anchorfree Inc.)

R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [520032 2016-06-28] (BitDefender S.R.L.)

R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2016-12-25] (BigNox Corporation)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [36808 2016-10-26] (Wellbia.com Co., Ltd.)

U3 idsvc; kein ImagePath

U3 wpcsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-16 21:00 - 2017-01-16 21:01 - 00000000 ____D C:\FRST

2017-01-16 20:59 - 2017-01-16 21:01 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Virenkillen

2017-01-15 18:46 - 2017-01-15 18:46 - 00000965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\SoftEther VPN Client Manager.lnk

2017-01-15 18:46 - 2017-01-15 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftEther VPN Client

2017-01-13 18:34 - 2017-01-13 18:35 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Mail.Ru

2017-01-13 18:34 - 2017-01-13 18:35 - 00000000 ____D C:\Program Files (x86)\Mail.Ru

2017-01-13 18:34 - 2017-01-13 18:34 - 00000000 ____D C:\ProgramData\Mail.Ru

2017-01-13 18:33 - 2017-01-13 18:33 - 00003726 _____ C:\WINDOWS\System32\Tasks\WinCSS

2017-01-11 22:44 - 2016-08-16 11:40 - 05660512 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\GameMon.des

2017-01-11 22:43 - 2017-01-11 22:43 - 00000000 ____D C:\Program Files\Common Files\INCA Shared

2017-01-11 22:43 - 2004-12-31 07:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\npptNT2.sys

2017-01-11 22:43 - 2003-07-16 16:17 - 00005174 _____ C:\WINDOWS\SysWOW64\nppt9x.vxd

2017-01-11 22:09 - 2017-01-11 22:09 - 00001283 _____ C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk

2017-01-11 22:09 - 2017-01-11 22:09 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames

2017-01-11 20:00 - 2017-01-11 22:02 - 00000000 ____D C:\WINDOWS\SysWOW64\mgrlist

2017-01-11 19:44 - 2017-01-11 19:44 - 00038216 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\Neo6_x64_VPN.sys

2017-01-11 19:34 - 2017-01-15 18:46 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys

2017-01-11 19:34 - 2017-01-11 19:34 - 00143816 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\WINDOWS\system32\vpncmd.exe

2017-01-11 19:34 - 2017-01-11 19:34 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys.old1

2017-01-11 19:31 - 2017-01-15 18:48 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Vpn

2017-01-11 13:37 - 2016-12-21 10:01 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2017-01-11 13:37 - 2016-12-21 10:01 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2017-01-11 13:37 - 2016-12-21 09:25 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2017-01-11 13:37 - 2016-12-21 08:18 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2017-01-11 13:37 - 2016-12-21 07:56 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2017-01-11 13:37 - 2016-12-21 06:41 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:39 - 22373376 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 06:15 - 07839232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-01-11 13:37 - 2016-12-21 06:06 - 03663872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:03 - 18671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 05:48 - 05658624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-01-11 13:37 - 2016-10-25 07:55 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2017-01-07 15:27 - 2017-01-16 20:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Skype

2017-01-07 15:27 - 2017-01-07 15:27 - 00000000 ____D C:\Program Files (x86)\Skype

2017-01-03 01:33 - 2017-01-03 01:33 - 00020992 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetbus.sys

2017-01-03 01:32 - 2017-01-03 01:32 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\HMYGSetting

2017-01-03 01:29 - 2017-01-11 23:27 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Wondershare

2017-01-03 01:24 - 2017-01-03 01:29 - 00000000 ____D C:\Users\Public\Documents\Wondershare

2016-12-25 22:23 - 2016-12-25 22:23 - 00000041 _____ C:\Users\Stevo Marko\inst.ini

2016-12-25 22:23 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\Nox_share

2016-12-25 22:21 - 2017-01-11 23:30 - 00021182 _____ C:\WINDOWS\DPINST.LOG

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ___DC C:\WINDOWS\system32\DRVSTORE

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ____D C:\Program Files (x86)\Nox

2016-12-25 22:21 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\vmlogs

2016-12-25 22:21 - 2016-12-25 22:21 - 00253384 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\XQHDrv.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00127432 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00000000 ____D C:\Program Files\DIFX

2016-12-25 22:19 - 2017-01-11 23:30 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Nox

2016-12-25 01:23 - 2017-01-15 18:12 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\u-launcher

2016-12-25 01:23 - 2017-01-15 18:10 - 00000000 ____D C:\ProgramData\GFACE

2016-12-24 23:33 - 2016-12-24 23:33 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Warface.url

2016-12-23 21:58 - 2016-12-23 21:59 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\XV2INS

2016-12-23 11:57 - 2017-01-15 23:33 - 00000000 ___SH C:\pagefile.sys

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Bee

2016-12-21 19:45 - 2016-12-21 19:45 - 00000673 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2016-12-21 19:45 - 2016-12-21 19:45 - 00000623 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk

2016-12-21 14:14 - 2016-12-25 00:23 - 00000595 _____ C:\Users\Stevo Marko\Desktop\Battle.net.lnk

2016-12-21 14:14 - 2016-12-20 16:31 - 00000222 _____ C:\Users\Stevo Marko\Desktop\DRAGON BALL XENOVERSE 2.url

2016-12-21 14:14 - 2016-11-30 16:35 - 00000815 _____ C:\Users\Stevo Marko\Desktop\Counter-Strike Global Offensive WaRzOnE.lnk

2016-12-21 14:14 - 2016-11-24 13:57 - 00001248 _____ C:\Users\Stevo Marko\Desktop\LeagueClient  Alpha.lnk

2016-12-21 14:14 - 2016-09-26 18:42 - 00000790 _____ C:\Users\Stevo Marko\Desktop\Pokémon Trading Card Game Online.lnk

2016-12-21 14:14 - 2016-06-16 21:15 - 00000222 _____ C:\Users\Stevo Marko\Desktop\ONE PIECE PIRATE WARRIORS 3.url

2016-12-21 14:14 - 2016-05-11 22:02 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Rocket League.url

2016-12-21 14:14 - 2016-05-10 21:24 - 00000222 _____ C:\Users\Stevo Marko\Desktop\South Park The Stick of Truth.url

2016-12-21 14:14 - 2016-05-10 21:22 - 00000220 _____ C:\Users\Stevo Marko\Desktop\BioShock.url

2016-12-21 14:14 - 2016-05-10 21:21 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Subnautica.url

2016-12-21 14:14 - 2016-05-10 21:18 - 00000222 _____ C:\Users\Stevo Marko\Desktop\SMITE.url

2016-12-21 14:14 - 2016-01-20 22:57 - 00001840 _____ C:\Users\Stevo Marko\Desktop\Spotify.lnk

2016-12-21 14:14 - 2016-01-19 11:58 - 00000949 _____ C:\Users\Stevo Marko\Desktop\osu!.lnk

2016-12-18 15:51 - 2016-12-18 15:51 - 00002674 _____ C:\Users\Stevo Marko\Documents\Mein Film.wlmp
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-16 20:45 - 2016-03-15 14:41 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2017-01-16 20:23 - 2015-12-30 13:30 - 00000000 ____D C:\Program Files\Bitdefender Agent

2017-01-16 19:52 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-sys.job

2017-01-16 18:53 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job

2017-01-16 18:49 - 2015-12-30 22:52 - 00000000 ____D C:\Program Files (x86)\Steam

2017-01-16 13:03 - 2016-01-20 22:57 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Spotify

2017-01-16 12:52 - 2016-01-20 22:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Spotify

2017-01-16 12:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2017-01-16 07:21 - 2016-06-29 11:20 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-01-16 07:21 - 2016-04-27 06:13 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat

2017-01-16 07:21 - 2016-04-27 06:13 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat

2017-01-16 07:21 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF

2017-01-15 23:33 - 2016-06-29 11:20 - 00000000 ____D C:\ProgramData\NVIDIA

2017-01-15 23:33 - 2016-05-05 11:26 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios

2017-01-15 23:33 - 2016-04-27 06:48 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-01-15 23:32 - 2015-12-30 13:40 - 00263630 _____ C:\bdlog.txt

2017-01-15 23:32 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI

2017-01-15 21:43 - 2016-11-06 17:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2017-01-15 16:50 - 2016-12-09 17:49 - 00549112 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys

2017-01-15 12:15 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps

2017-01-14 13:34 - 2016-08-18 07:01 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\mymacro

2017-01-14 13:34 - 2016-01-08 22:46 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Unity

2017-01-14 13:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2017-01-14 11:12 - 2016-04-29 07:25 - 00000000 ____D C:\Users\Stevo Marko\Documents\My Games

2017-01-13 18:36 - 2016-10-06 15:23 - 00000306 __RSH C:\Users\Stevo Marko\ntuser.pol

2017-01-13 18:36 - 2016-10-06 14:58 - 00000306 __RSH C:\ProgramData\ntuser.pol

2017-01-13 18:36 - 2016-06-29 11:20 - 00000000 ____D C:\Users\Stevo Marko

2017-01-13 15:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache

2017-01-13 14:15 - 2015-10-30 07:28 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM

2017-01-12 21:09 - 2016-04-11 15:09 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Unknown

2017-01-11 23:30 - 2015-12-29 18:58 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\CrashDumps

2017-01-11 23:27 - 2016-10-12 22:15 - 00000000 ____D C:\Users\Stevo Marko\.android

2017-01-11 23:27 - 2016-03-11 13:42 - 00000000 ____D C:\Program Files (x86)\Wondershare

2017-01-11 22:27 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe

2017-01-11 20:18 - 2015-12-29 19:16 - 00000000 ____D C:\WINDOWS\system32\MRT

2017-01-11 20:17 - 2015-12-29 19:16 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-01-11 20:17 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2017-01-11 19:51 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files

2017-01-08 12:29 - 2015-12-30 19:43 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wichtige Programme

2017-01-07 15:27 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Skype

2017-01-07 15:25 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-01-07 12:54 - 2016-01-03 21:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\OBS

2017-01-03 23:25 - 2016-05-31 07:28 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Battle.net

2016-12-26 07:04 - 2016-06-29 11:20 - 00524288 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TMContainer00000000000000000001.regtrans-ms

2016-12-26 07:04 - 2016-06-29 11:20 - 00065536 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TM.blf

2016-12-26 02:29 - 2016-06-29 11:30 - 00000174 ___SH C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini

2016-12-25 22:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration

2016-12-25 22:21 - 2015-10-30 07:28 - 00000000 ___RD C:\Program Files

2016-12-25 01:28 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Saved Games

2016-12-24 23:33 - 2016-12-09 17:49 - 00395024 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe

2016-12-24 23:33 - 2016-05-15 22:06 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-22 23:54 - 2015-12-29 16:03 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-22 23:48 - 2015-10-30 08:26 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-12-22 23:48 - 2015-10-30 08:26 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-12-22 14:09 - 2016-06-29 11:20 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{7f07ac96-0c35-11e6-80cd-782bcb392fa8}.TMContainer00000000000000000001.regtrans-ms

2016-12-21 13:44 - 2016-04-25 17:19 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wooxy

2016-12-20 13:39 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Pictures

2016-12-19 19:15 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Documents

2016-12-19 19:13 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Downloads

2016-12-19 18:55 - 2015-12-30 17:55 - 00000000 ____D C:\Users\Stevo Marko\Desktop\PS2

2016-12-19 18:54 - 2016-07-25 11:01 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Musik

2016-12-19 17:22 - 2015-12-29 17:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-12-18 15:28 - 2016-12-10 00:51 - 00000000 ____D C:\Users\Stevo Marko\Documents\CELSYS_EN

2016-12-18 11:20 - 2015-12-29 18:39 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2016-12-18 11:20 - 2015-12-29 18:39 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2016-12-18 11:20 - 2009-07-14 04:20 - 00000000 ____D C:\WINDOWS\Tasks

2016-12-17 13:37 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WDI

2016-12-17 13:35 - 2015-10-30 07:28 - 00262144 ___SH C:\Users\Default\NTUSER.DAT

2016-12-17 13:34 - 2016-11-24 17:11 - 00212472 _____ C:\WINDOWS\system32\FNTCACHE.DAT
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-07-13 17:57 - 2016-07-13 17:57 - 0215846 _____ () C:\Users\Stevo Marko\AppData\Roaming\data02.db

2016-04-01 01:20 - 2016-04-01 01:20 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Roaming\dc.ogt

2016-03-01 23:15 - 2016-03-01 23:15 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Local\Driver_LOM_8161Present.flag

2016-07-15 12:26 - 2016-07-15 12:26 - 0007605 _____ () C:\Users\Stevo Marko\AppData\Local\Resmon.ResmonCfg

2016-03-21 18:36 - 2016-03-21 18:36 - 0000003 _____ () C:\Users\Stevo Marko\AppData\Local\updater.log

2016-03-21 18:36 - 2016-08-13 09:57 - 0000424 _____ () C:\Users\Stevo Marko\AppData\Local\UserProducts.xml

2015-12-30 13:37 - 2015-12-30 13:37 - 0420258 _____ () C:\ProgramData\1451478906.bdinstall.bin

2016-02-29 15:37 - 2016-02-29 15:37 - 0025199 _____ () C:\ProgramData\1456756661.bdinstall.bin

2016-03-22 16:20 - 2016-03-22 16:20 - 0025913 _____ () C:\ProgramData\1458660001.bdinstall.bin

2016-03-22 17:20 - 2016-03-22 17:20 - 0025985 _____ () C:\ProgramData\1458663637.bdinstall.bin

2016-03-31 18:29 - 2016-03-31 18:29 - 0025985 _____ () C:\ProgramData\1459445363.bdinstall.bin

2016-06-14 14:01 - 2016-06-14 14:01 - 0026785 _____ () C:\ProgramData\1465909304.bdinstall.bin

2016-07-11 20:02 - 2016-07-11 20:02 - 0026211 _____ () C:\ProgramData\1468263746.bdinstall.bin

2016-09-20 12:03 - 2016-09-20 12:03 - 0026848 _____ () C:\ProgramData\agent.1474369414.bdinstall.bin

2016-11-02 15:47 - 2016-11-02 15:47 - 0028768 _____ () C:\ProgramData\agent.1478098058.bdinstall.bin
 

Einige Dateien in TEMP:

====================

C:\Users\Stevo Marko\AppData\Local\Temp\SkypeSetup.exe
 
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-01-13 14:54
 

==================== Ende von FRST.txt ============================

--- --- ---

Addition.txt:FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-01-2017

durchgeführt von Stevo Marko (16-01-2017 21:01:31)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Windows 10 Home Version 1511 (X64) (2016-06-29 10:30:16)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4176748537-3526997621-266561101-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-4176748537-3526997621-266561101-503 - Limited - Disabled)

Gast (S-1-5-21-4176748537-3526997621-266561101-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-4176748537-3526997621-266561101-1002 - Limited - Enabled)

Stevo Marko (S-1-5-21-4176748537-3526997621-266561101-1000 - Administrator - Enabled) => C:\Users\Stevo Marko
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Bitdefender Virenschutz (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}

AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Bitdefender Firewall (Disabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated)

Ansel (Version: 372.70 - NVIDIA Corporation) Hidden

Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BioShock (HKLM\...\Steam App 7670) (Version:  - 2K Boston)

Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.23.1252 - Bitdefender)

Bitdefender Internet Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.24.1290 - Bitdefender)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)

Counter-Strike Global Offensive WaRzOnE (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\CSGO) (Version:  - CS WaRzOnE)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DigimonMasters Online (HKLM-x32\...\DigimonMasters) (Version:  - Move Games)

DigimonMasters Online Launcher (HKLM-x32\...\DigimonMasters Launcher) (Version:  - Move games)

Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)

DRAGON BALL XENOVERSE 2 (HKLM\...\Steam App 454650) (Version:  - QLOC)

FileZilla Client 3.16.0 (HKLM-x32\...\FileZilla Client) (Version: 3.16.0 - Tim Kosse)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)

Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden

HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.5.5 - Hi-Rez Studios)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Horizon (HKLM-x32\...\{6c4303a5-5115-4cfd-bf48-8af0541cd082}) (Version: 2.8.26 - Daring Development Inc.)

Horizon (x32 Version: 2.8.26 - Daring Development Inc.) Hidden

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden

iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)

Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

Killer Bandwidth Control Filter Driver (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer E220x Drivers (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Network Manager (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.57.1123 - Rivet Networks)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)

Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

MorphVOX Pro (HKLM-x32\...\{5a385481-7640-4f10-8ca5-04a2030b4623}) (Version: 4.4.65.20341 - Screaming Bee)

MorphVOX Pro (x32 Version: 4.4.65.20341 - Screaming Bee) Hidden

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.70 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.70 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

osu! (HKLM-x32\...\{9e3ba8ec-0407-491b-98a7-97354f85bb67}) (Version: latest - ppy Pty Ltd)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)

PaintTool SAI Ver.1 (HKLM-x32\...\PaintToolSAI) (Version:  - )

PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version:  - )

Pokémon Trading Card Game Online (HKLM-x32\...\{E56D3759-1795-4813-8FC7-CA82C2FECCD8}) (Version: 2.35.0 - The Pokémon Company International)

ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)

Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)

SMITE (HKLM\...\Steam App 386360) (Version:  - Hi-Rez Studios)

SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.22.9634 - SoftEther VPN Project)

South Park™: The Stick of Truth™ (HKLM\...\Steam App 213670) (Version:  - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Subnautica (HKLM\...\Steam App 264710) (Version:  - Unknown Worlds Entertainment)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)

The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.12.1.0 - GOG.com)

TP-LINK Archer T2U_T2UH Driver (HKLM-x32\...\{F2496892-5295-4208-AB93-21F1AFD07C97}) (Version: 1.3.1 - TP-LINK)

Unity Web Player (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)

Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VSDC Free Video Editor Version 4.0.1.475 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 4.0.1.475 - Flash-Integro LLC)

Warface (HKLM\...\Steam App 291480) (Version:  - Crytek)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.30 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)

Wooxy version 1.4.1 (HKLM-x32\...\{C183CD14-47D8-4F98-AF06-4744CB834C8E}_is1) (Version: 1.4.1 - Chewy)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {06929B9A-0ADA-41EF-B415-B05C7BAD68C7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {0759F0B1-90B3-4746-B00E-09A301E2770D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {0F0872CF-A603-49C6-AB8F-9EE847D14E71} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {14B6D487-6E40-4313-A845-F0B7A09D2AFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-15] (Adobe Systems Incorporated)

Task: {1A04C0A1-83B7-4BB0-8A10-1EEEE6B54D7D} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeReminderTask => C:\WINDOWS\System32\GWX\GWX.exe

Task: {1EB21864-3AF4-4117-942A-EC34F3379BC4} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {22C5BAEB-2DED-4145-AEA7-0070605DC216} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {2509576E-4FD3-4243-961C-307E453CEABA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {2E96D9AC-4152-428A-B301-6651D27A38A1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {342A5FC5-6DE9-4A7B-8283-59F3C68EF4EE} - System32\Tasks\{DE8BA068-7282-45FA-94E4-4A63CDD3A835} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{F2496892-5295-4208-AB93-21F1AFD07C97}\setup.exe" -c -runfromtemp -l0x0009 -removeonly DriverOnly

Task: {35F42DBA-4428-420D-992A-8FD8A1D09814} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {3FFEBBE5-00CE-4042-AA00-4126A0F4E384} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {4089AD54-FB80-40C5-A7E9-FDF3EE9BA971} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {471EEE60-5C6F-4196-9065-C95D181EFE7A} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {48EAF5C3-3110-47DA-8008-AC8C1326A6EE} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {4F820D1A-F6A5-4250-9E42-87D243833151} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG

Task: {519E9215-B5AA-457B-A09B-69481A78045E} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {51DFA5A3-E1B8-42DD-9925-4C8FBB4743C8} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {57D666D1-BE65-4CD4-B6D5-F397645CEEA6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)

Task: {5BC78F10-4B58-4E93-AF92-BAE082A0B7BA} - System32\Tasks\WinCSS => Chrome.exe hxxp://cssnews.ru/salesm

Task: {68EA38E0-B451-4B69-8D5E-DB33A1C1E605} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo)

Task: {6E814AB7-AD84-45FB-A65B-98D79F03ABC7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {6E86CF00-B6BC-42FE-A820-A358825CD1EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {70197F69-8CF9-48CE-8374-22BD9F6E36DC} - System32\Tasks\{5B18B0C3-296E-4D4C-93E3-1304019C0798} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {70EE8BA2-8BA5-4868-8594-A5B6E961ACC4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {86BE5EAE-75B7-46BA-A7B3-8B69FF095814} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8F8F047D-0D76-4B51-A1CD-DCD5167E8A3A} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {91B14D1B-74C2-40C8-9F2F-1F54AEE3CAED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {96120D5E-80F3-4076-872D-9F224172BB40} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {9B467767-0347-4C0E-BFB6-64C1ACBAA4F4} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9F0DA49B-71A4-4151-9CA5-17826B03B4F5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {9F50B7B8-EA2E-4CF1-BAA6-2B4A58EF5826} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9F617379-83F3-4FCF-82C7-ACA69A7D6B0D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {A233BD2C-463C-41E5-A837-7D655C08F15F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {AD33D397-A476-455F-ABF4-C4DD2894FDE1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {AE1C94EA-1438-45A8-9855-76AE7ED00F2A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {B3A9A9F3-534E-40DE-82F1-AE671754F989} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {BDE9480B-5023-4CF0-A0FD-34071B2AB983} - System32\Tasks\{F520FBE6-BB86-4525-AAC7-C5EF190B28C3} => Chrome.exe hxxp://ui.skype.com/ui/0/7.25.0.106/de/abandoninstall?page=tsProgressBar

Task: {C5241A86-AC16-4CDA-A2B2-9C9D690E9E69} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {C6D9160F-1D62-4EDC-9538-E0BF3E0EFDFD} - System32\Tasks\{D4DEABE0-663F-4F5F-A024-2563CCA8A1FD} => Chrome.exe hxxp://ui.skype.com/ui/0/7.26.0.101/de/abandoninstall?page=tsProgressBar

Task: {CD508CB9-54F5-4BAE-9DCA-4F5E603228FD} - System32\Tasks\{1828F1DF-60FC-44CE-8771-1DE6A2F9154A} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {CD977E74-498D-4460-857F-C375C6603938} - System32\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {D0929682-C0C9-402F-AF41-986D8C7883C9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

Task: {D1E91C75-4A13-491A-BFC4-BC92EB4A44CA} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {D7819584-656C-440D-9DB7-8939C4759AF4} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG

Task: {DB95F336-3DBD-46B5-8FA4-7B8064A6AAA2} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-10-21] (Bitdefender)

Task: {E1D7655F-F57F-4147-9C68-18490AB567C3} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {E51EB491-2D29-436F-BD3B-7904F9F8B6BE} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {E8E85E99-3D2C-4A41-A328-AAF7DBE7507A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F3BAFDC9-8CD6-4E5B-AD34-8F147A700DBC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F4D88F61-06AE-4416-9583-0EA9E9D16046} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F7E41E70-7698-4E79-AB7B-68880CA56114} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехрlоrеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
 

ShortcutWithArgument: C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com

ShortcutWithArgument: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames\DigimonMastersOnline\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com

ShortcutWithArgument: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811035"
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-12-30 13:37 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll

2016-11-21 16:13 - 2016-11-21 18:15 - 01008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpbr.mdl

2016-11-21 18:15 - 2016-11-21 18:15 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpdsp.mdl

2016-11-21 18:16 - 2016-11-21 18:16 - 03202816 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpph.mdl

2016-11-21 18:16 - 2016-11-21 18:16 - 01542976 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttprbl.mdl

2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-01 09:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-06-29 11:20 - 2016-08-25 22:12 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-08-23 13:07 - 2016-08-23 13:07 - 01864384 _____ () C:\Users\Stevo Marko\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-04-27 06:17 - 2016-04-27 06:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-07-13 18:52 - 2016-07-01 04:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-11-08 22:28 - 2016-10-25 08:01 - 00674816 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\MtcUvc.dll

2016-11-08 22:28 - 2016-10-25 05:49 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-08 22:28 - 2016-10-25 05:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-08 22:28 - 2016-10-25 05:45 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-08 22:28 - 2016-10-25 05:48 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2016-02-12 22:13 - 2016-02-12 22:13 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2015-12-29 18:56 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-05-11 14:55 - 2010-11-04 10:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll

2016-03-11 13:43 - 2016-10-08 16:48 - 01506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2016-03-11 13:43 - 2016-07-21 10:54 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2017-01-16 20:59 - 00000002 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Stevo Marko\Desktop\Unknown\forest-wallpaper-8.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GalaxyClient"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GEEQzxIb"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "BlueStacks Agent"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808

FirewallRules: [{131D4802-AE73-429F-A630-9D949BE8CFA8}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [{0FF91854-7C8D-4DF1-B250-347DC65F9740}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [UDP Query User{60B15D7E-EB7C-488B-B45E-D757ACD59E11}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [TCP Query User{51C2FF2D-46E0-4523-937E-71C911349F35}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [{E523C989-860C-4A67-9A39-25A9BD0BE308}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{B7D151CB-34FE-4C7C-AE49-2793F4865FAC}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{8187B945-CCD7-4C59-A883-1237FA318370}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{D0171CA3-7609-4B38-B881-7C9FCBCFCE21}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{27340615-F02E-47C0-8CF0-8B3279322E93}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{2724FDDF-45D6-4B10-B208-94C667634168}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [UDP Query User{D1FA4666-9084-4903-97C7-804A3242E312}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [TCP Query User{C620D03D-D994-4494-9969-5931AF373D2A}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [{D11F6D2F-68D8-4BDB-9BD7-E7A8BB3E2831}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{306E6120-22CF-4D26-870F-93591059E33C}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{F5D7440B-68DC-476B-84D7-03607A13B1E0}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{82657ACE-F50F-4063-AE5C-4217538E7A19}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{163638ED-11C3-42C3-86AD-A336C39016BC}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{588A1AA3-C51E-4354-A74E-14BD0D83DEE9}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{FFF7CE3B-7F74-4F5D-9464-2E6175340B26}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{3E92E1F3-D28F-4B04-8AC3-C2BF18CBC571}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{6B3CFCBF-F9E7-42F8-8C5E-6A32713E30A4}] => LPort=1900

FirewallRules: [{CFF966DA-B632-4550-B064-7E197006EC5D}] => LPort=2869

FirewallRules: [{3A772195-07B8-4C4E-9499-E0C0C6B07B73}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [UDP Query User{FB787A40-AF71-4281-B3CB-D9A1CB989724}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{0A955DBF-AE41-4520-9D88-5FC8BFDE3FB8}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{814537C0-FA96-4D6A-B2C7-B69F861F5A29}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{A481A116-0DF2-4FB1-981C-4F01F200DC03}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [{696CAAB7-7302-442E-888D-F316F4331B97}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{79A35FCC-00C8-47EA-97E4-3FA8F62DD81F}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{34F930BA-2B08-4FA5-A630-FDB154F4A5C7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{544C4B32-999A-4E5B-A78D-F5B1514D16F2}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{2B825826-EDBF-4579-AFBD-8B000852538E}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{90DF9797-5823-46E9-A4DC-6C14CDEB6AF6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{8AAA6E03-4336-4DF5-8672-717227A1B804}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{28FBF77E-8A6F-439B-A13D-F41A7E9F0DA0}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{68B2C8C7-B375-404B-9867-A75E172EB770}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{9937ED6C-5601-4649-887B-92C93B7D3BDA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{178D6B1C-3904-4023-AA6A-A2C693D36810}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{3ABA475D-92D7-4DA5-892C-1F59260A3066}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{2C0ED73B-E102-4933-9FED-46388D33BFFA}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{39A84192-A46C-4E0F-91B0-9A11D377045C}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [TCP Query User{47A8427F-DA86-49FE-92D8-D974293BB92D}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{C8A60F67-88A9-4C2D-84AA-9389DF3A937F}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [TCP Query User{7D6C3EE6-916C-4495-9814-94CDA525B128}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [UDP Query User{0B3D52EF-3E49-4A2B-AAE0-EFA137FE431D}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [TCP Query User{7A949890-0653-485D-9917-A47C59848E22}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [UDP Query User{A8AF8AE8-D7C7-4348-85F6-BC3558E91F72}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [TCP Query User{C539BBF1-416B-4BED-9EF9-7EC95704B6A5}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{BF9B1AF9-789D-44F0-BEA6-8D43B8A506F3}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{F163DDD8-1ACE-495A-9277-42662553A358}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{87D88FE3-5708-4FE1-A410-28EE491556D8}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{291BCC8C-D723-45A6-BEDA-68B576D08EBC}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{974D685C-AC7F-42D6-8AE5-BAFCD5A5F09E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{93EA6BE3-46A0-4386-B628-77E077BC19E9}] => E:\iTunes\iTunes.exe

FirewallRules: [TCP Query User{C6931454-D8BC-408E-8580-17F1F912E6CC}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{047D3345-5768-4BB9-9585-B06F033F14B4}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [{475913B2-3BEB-45ED-A06B-D7E25F3DEDC1}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [TCP Query User{26954AD4-C1AB-41DF-9084-E2FB1FB12E66}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{65F07ACA-1030-4283-8B1D-B5C858901795}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{28E3540D-41EC-4FF8-9E76-C3753D9D8C12}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{F28E5BFC-F054-4FB1-8605-1EAA9B98E265}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{612D9B70-03FC-4F13-A76E-9A378F0AEC3C}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{A20D8834-3817-41FF-B08A-53BB7241555B}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{C43B9841-0042-47C9-A8EA-68E4773166DA}] => C:\Program Files (x86)\Nox\bin\Nox.exe

FirewallRules: [{AB60493C-C540-4EF0-AB6F-CB2723FD9C79}] => C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe

FirewallRules: [{66E19697-C4D0-4FE8-9CB1-9DE9E383991E}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{A7C49B62-CD7C-4A8E-A1F9-02F6589D2D9C}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{201837A4-3840-484C-96EF-8FB837F81056}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{B99CAC97-8CCB-4B73-AD79-A59D25662205}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{BD34A82B-C290-400D-8369-88E5214597A2}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient.exe

FirewallRules: [{FDACF623-1E3B-41CB-9255-16F985E770D4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{AAC1AF14-377F-4AD6-BA15-49BEE643EAB4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{4E6BB467-F3C3-41EB-92DA-2463ED42563E}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd.exe

FirewallRules: [TCP Query User{6C2D550E-977B-419F-9CFE-6976E834946D}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [UDP Query User{46A3FDF3-4DA1-436E-A6D8-5942A88A7C41}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [{D8774863-1344-4E05-AA28-946AD79B2873}] => C:\Users\Stevo Marko\AppData\Local\Amigo\Application\amigo.exe

FirewallRules: [{5A5C5CB6-19CA-470D-AE07-04FCCD871B38}] => E:\KDMO\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{9B08035F-2213-4600-A78A-8E65B8D6A7CA}] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{D47FEC28-B6A5-4449-B670-41873B28DF38}] => E:\KDMO\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{345B93FC-08C1-4A2A-84B3-07C9B48FE060}] => E:\KDMO\SoftEther VPN Client\vpncmd.exe

FirewallRules: [{DA5D5502-CF62-4857-8F85-AE165E11B3F7}] => E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{3AEE9EE4-B12E-48EB-B371-D4D3D97B20B1}] => E:\KDMO\SoftEther VPN Client\vpnclient.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (01/16/2017 01:19:14 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756

Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.672, Zeitstempel: 0x580ef23f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000007ccfc

ID des fehlerhaften Prozesses: 0x524

Startzeit der fehlerhaften Anwendung: 0x01d26fc6686e7ed0

Pfad der fehlerhaften Anwendung: C:\WINDOWS\System32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\combase.dll

Berichtskennung: 871889ab-fa86-41ca-ae62-80aeac5780d4

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/16/2017 08:01:52 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756

Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.672, Zeitstempel: 0x580ef23f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000007ccfc

ID des fehlerhaften Prozesses: 0x126c

Startzeit der fehlerhaften Anwendung: 0x01d26f7f5b75b332

Pfad der fehlerhaften Anwendung: C:\WINDOWS\System32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\combase.dll

Berichtskennung: c2f8ae65-daf4-4bb3-b2a7-4ceb30ef7d4f

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/15/2017 11:33:16 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756

Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.672, Zeitstempel: 0x580ef23f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000007ccfc

ID des fehlerhaften Prozesses: 0x70

Startzeit der fehlerhaften Anwendung: 0x01d26f7f5758cfb9

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\combase.dll

Berichtskennung: a9fb8c27-c5ac-4faf-b656-2271cf368bfe

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/15/2017 11:33:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   23 3.6.9.A.B.E.1.9.7.7.B.4.6.D.8.F.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR StevoMarko-PC-2.local.
 

Error: (01/15/2017 11:33:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   21 3.6.9.A.B.E.1.9.7.7.B.4.6.D.8.F.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR StevoMarko-PC.local.
 

Error: (01/15/2017 11:33:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   23 51.2.168.192.in-addr.arpa. PTR StevoMarko-PC-2.local.
 

Error: (01/15/2017 11:33:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   21 51.2.168.192.in-addr.arpa. PTR StevoMarko-PC.local.
 

Error: (01/15/2017 11:33:14 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: StevoMarko-PC)

Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
 

Error: (01/15/2017 11:33:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname StevoMarko-PC.local already in use; will try StevoMarko-PC-2.local instead
 

Error: (01/15/2017 11:33:15 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 StevoMarko-PC.local. Addr 192.168.2.51
 
 

Systemfehler:

=============

Error: (01/16/2017 01:19:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_3f4c6c" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 01:19:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _3f4c6c" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 01:19:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_3f4c6c" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 01:19:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_3f4c6c" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 08:01:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_7391a" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 08:01:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _7391a" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 08:01:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_7391a" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 08:01:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_7391a" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/15/2017 11:33:14 PM) (Source: DCOM) (EventID: 10010) (User: StevoMarko-PC)

Description: Der Server "CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (01/15/2017 11:33:14 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: Der Server "{5DC4F9AD-3A2B-4DF4-AC39-3FF5A19FCF4C}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 
 

CodeIntegrity:

===================================

  Date: 2017-01-14 11:12:37.997

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2017-01-11 22:31:20.486

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-17 13:35:54.795

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-11 11:59:18.678

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-10 15:55:36.900

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-29 08:55:41.824

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-16 17:59:09.570

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-15 16:39:45.951

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-16 12:05:23.430

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-02 07:37:05.993

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz

Prozentuale Nutzung des RAM: 29%

Installierter physikalischer RAM: 8143.64 MB

Verfügbarer physikalischer RAM: 5763.12 MB

Summe virtueller Speicher: 16335.64 MB

Verfügbarer virtueller Speicher: 13475.05 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:111.69 GB) (Free:48.12 GB) NTFS

Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:668.95 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9961C39A)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 9397806C)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

--- --- ---

burningice

16.01.2017 21:20

Schritt 1
Lade dir folgendes Programm herunter und installiere es: http://filepony.de/icon/tiny/malware...ti_malware.png Malwarebytes Anti-Malware Hier findest du dazu eine bebilderte Anleitung

Klicke auf die Einstellungen / Erkennung und Schutz und setze dabei den Haken bei "Nach Rootkits suchen"
Klicke im Anschluss auf Durchsuchen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Suchlaufprotokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 2
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

Bitte poste in deiner nächsten Antwort also:

Logfile von AdwCleaner
Logfile von Malwarebytes
Frst.txt
Addition.txt

stevoboot

16.01.2017 21:48

AdwCleaner Logfile:

Code:

# AdwCleaner v6.042 - Bericht erstellt am 16/01/2017 um 21:42:42

# Aktualisiert am 06/01/2017 von Malwarebytes

# Datenbank : 2017-01-15.1 [Server]

# Betriebssystem : Windows 10 Home  (X64)

# Benutzername : Stevo Marko - STEVOMARKO-PC

# Gestartet von : E:\Downloads\AdwCleaner_6.042.exe

# Modus: Löschen

# Unterstützung : https://www.malwarebytes.com/support
 
 
 

***** [ Dienste ] *****
 
 
 

***** [ Ordner ] *****
 

[-] Ordner gelöscht: C:\Users\Stevo Marko\AppData\Local\Mail.Ru

[-] Ordner gelöscht: C:\Users\Stevo Marko\Desktop\Unknown

[-] Ordner gelöscht: C:\ProgramData\Mail.Ru

[-] Ordner gelöscht: C:\Program Files (x86)\Mail.Ru
 
 

***** [ Dateien ] *****
 

[-] Datei gelöscht: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk

[-] Datei gelöscht: C:\Users\Stevo Marko\Favorites\Mail.Ru.url

[-] Datei gelöscht: C:\Users\Stevo Marko\Favorites\Mail.Ru Агент - используй для общения!.url

[-] Datei gelöscht: C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_chklaanhfefbnpoihckbnefhakgolnmc_0.localstorage
 
 

***** [ DLL ] *****
 
 
 

***** [ WMI ] *****
 
 
 

***** [ Verknüpfungen ] *****
 

[!] Verknüpfung nicht gelöscht: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk
 
 

***** [ Aufgabenplanung ] *****
 
 
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel gelöscht: HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\Mail.Ru

[-] Schlüssel gelöscht: HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\AppDataLow\Software\Mail.Ru

[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Mail.Ru

[#] Schlüssel mit Neustart gelöscht: HKCU\Software\AppDataLow\Software\Mail.Ru

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Mail.Ru

[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Mail.Ru

[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\AppDataLow\Software\Mail.Ru

[-] Schlüssel gelöscht: HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}

[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}

[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}

[-] Wert gelöscht: HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run [SSMaker2]

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\oelpkepjlgmehajehfeicfbjdiobdkfj

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\ojlcebdkbpjdpiligkdbbkdkfjmchbfd

[-] Schlüssel gelöscht: HKLM\SOFTWARE\Google\Chrome\Extensions\ccfifbojenkenpkmnbnndeadpfdiffof
 
 

***** [ Browser ] *****
 

[-] [C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: ccfifbojenkenpkmnbnndeadpfdiffof

[-] [C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: oelpkepjlgmehajehfeicfbjdiobdkfj

[-] [C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default] [extension] Gelöscht: ojlcebdkbpjdpiligkdbbkdkfjmchbfd
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Winsock Einstellungen zurückgesetzt

:: Proxy Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Richtlinien gelöscht
 

*************************
 

C:\AdwCleaner\AdwCleaner[C0].txt - [6464 Bytes] - [06/10/2016 15:23:04]

C:\AdwCleaner\AdwCleaner[C2].txt - [3641 Bytes] - [16/01/2017 21:42:42]

C:\AdwCleaner\AdwCleaner[S0].txt - [6070 Bytes] - [06/10/2016 15:22:18]

C:\AdwCleaner\AdwCleaner[S1].txt - [3807 Bytes] - [16/01/2017 21:41:57]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt - [3860 Bytes] ##########

--- --- ---

Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 16.01.2017
Suchlaufzeit: 21:29
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2017.01.16.06
Rootkit-Datenbank: v2016.11.20.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Stevo Marko

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 379547
Abgelaufene Zeit: 5 Min., 0 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)

(end)
FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-01-2017

durchgeführt von Stevo Marko (Administrator) auf STEVOMARKO-PC (16-01-2017 21:45:14)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Geladene Profile: Stevo Marko (Verfügbare Profile: Stevo Marko & DefaultAppPool)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Scarlet.Crush Productions) C:\PS3 Con\ScpServer\bin\ScpService.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(Skype Technologies) C:\Program Files (x86)\Skype\Updater\Updater.exe

(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Apple Inc.) E:\iTunes\iTunesHelper.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe

(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1654672 2016-11-24] (Bitdefender)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.)

HKLM\...\Run: [iTunesHelper] => E:\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)

HKLM\...\Run: [SoftEther VPN Client UI Helper] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()

HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe [1451544 2016-11-24] (Bitdefender)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Spotify Web Helper] => C:\Users\Stevo Marko\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-25] (Spotify Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [GalaxyClient] => E:\GalaxyClient\GalaxyClient.exe [3946048 2016-11-03] (GOG.com)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-03-01]

ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2017-01-15]

ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{133eadeb-27bc-4780-8ca1-bf5574c8ab7f}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{732f7719-fb15-4fe4-8a4f-461a226b8911}: [DhcpNameServer] 192.168.2.1

ManualProxies: 
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://digimonmasters.com/

SearchScopes: HKU\S-1-5-21-4176748537-3526997621-266561101-1000 -> {0BAAF030-AF47-4396-B1B1-06A8364F8F8B} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

DPF: HKLM-x32 {3FED5059-7AA5-46D9-902B-124C8CD9A106} hxxp://www.digimonmasters.com/inc/ActiveX/launcher/20140731_2/Digitalic%20Launcher.cab
 

FireFox:

========

FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2015-12-16]

FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-12-16] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2016-05-05] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin HKU\S-1-5-21-4176748537-3526997621-266561101-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Stevo Marko\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://google.de/

CHR StartupUrls: Default -> "hxxps://www.google.de/"

CHR Profile: C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default [2017-01-16]

CHR Extension: (Google Drive) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-29]

CHR Extension: (YouTube) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-29]

CHR Extension: (Adblock Plus) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]

CHR Extension: (Google-Suche) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-29]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]

CHR Extension: (Google Mail) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-29]

CHR Extension: (Chrome Media Router) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-02]

CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1362464 2016-05-10] ()

R2 Ds3Service; C:\PS3 Con\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert]

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395024 2016-12-24] (EasyAntiCheat Ltd)

S3 GalaxyClientService; E:\GalaxyClient\GalaxyClientService.exe [284224 2016-11-03] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6581824 2016-10-28] (GOG.com)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [Datei ist nicht signiert]

R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [448000 2015-12-14] (Rivet Networks) [Datei ist nicht signiert]

R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5660512 2016-08-16] (INCA Internet Co., Ltd.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1100392 2016-10-28] (Bitdefender)

R2 SEVPNCLIENT; E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-11-24] (Bitdefender)

R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1695720 2016-11-24] (Bitdefender)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-10-25] (Microsoft Corporation)

S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\MobileTrans\DriverInstall.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus.sys [20992 2017-01-03] (LG Electronics Inc.)

S3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [878072 2016-11-01] (BitDefender)

S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23568 2016-06-29] (Bitdefender)

R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-29] (BitDefender LLC)

S4 BDVEDISK; C:\WINDOWS\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)

R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bflwfx64.sys [147528 2015-12-11] (Rivet Networks, LLC.)

R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [182944 2016-11-24] (BitDefender LLC)

R0 ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [299816 2016-06-28] (Bitdefender)

R3 Ke2200; C:\WINDOWS\System32\drivers\e22w7x64.sys [125488 2015-03-18] (Qualcomm Atheros, Inc.)

R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)

R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)

R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2017-01-11] (SoftEther Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)

R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2017-01-15] (SoftEther Corporation)

S3 taphss6; C:\WINDOWS\System32\DRIVERS\taphss6.sys [42064 2016-04-19] (Anchorfree Inc.)

R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [520032 2016-06-28] (BitDefender S.R.L.)

R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2016-12-25] (BigNox Corporation)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [36808 2016-10-26] (Wellbia.com Co., Ltd.)

U3 idsvc; kein ImagePath

U3 wpcsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-16 21:36 - 2017-01-16 21:36 - 00001198 _____ C:\Users\Stevo Marko\Desktop\mbam.txt

2017-01-16 21:00 - 2017-01-16 21:45 - 00000000 ____D C:\FRST

2017-01-16 20:59 - 2017-01-16 21:37 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Virenkillen

2017-01-15 18:46 - 2017-01-15 18:46 - 00000965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\SoftEther VPN Client Manager.lnk

2017-01-15 18:46 - 2017-01-15 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftEther VPN Client

2017-01-13 18:33 - 2017-01-13 18:33 - 00003726 _____ C:\WINDOWS\System32\Tasks\WinCSS

2017-01-11 22:44 - 2016-08-16 11:40 - 05660512 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\GameMon.des

2017-01-11 22:43 - 2017-01-11 22:43 - 00000000 ____D C:\Program Files\Common Files\INCA Shared

2017-01-11 22:43 - 2004-12-31 07:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\npptNT2.sys

2017-01-11 22:43 - 2003-07-16 16:17 - 00005174 _____ C:\WINDOWS\SysWOW64\nppt9x.vxd

2017-01-11 22:09 - 2017-01-11 22:09 - 00001283 _____ C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk

2017-01-11 22:09 - 2017-01-11 22:09 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames

2017-01-11 20:00 - 2017-01-11 22:02 - 00000000 ____D C:\WINDOWS\SysWOW64\mgrlist

2017-01-11 19:44 - 2017-01-11 19:44 - 00038216 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\Neo6_x64_VPN.sys

2017-01-11 19:34 - 2017-01-15 18:46 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys

2017-01-11 19:34 - 2017-01-11 19:34 - 00143816 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\WINDOWS\system32\vpncmd.exe

2017-01-11 19:34 - 2017-01-11 19:34 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys.old1

2017-01-11 19:31 - 2017-01-15 18:48 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Vpn

2017-01-11 13:37 - 2016-12-21 10:01 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2017-01-11 13:37 - 2016-12-21 10:01 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2017-01-11 13:37 - 2016-12-21 09:25 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2017-01-11 13:37 - 2016-12-21 08:18 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2017-01-11 13:37 - 2016-12-21 07:56 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2017-01-11 13:37 - 2016-12-21 06:41 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:39 - 22373376 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 06:15 - 07839232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-01-11 13:37 - 2016-12-21 06:06 - 03663872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:03 - 18671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 05:48 - 05658624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-01-11 13:37 - 2016-10-25 07:55 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2017-01-07 15:27 - 2017-01-16 21:39 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Skype

2017-01-07 15:27 - 2017-01-07 15:27 - 00000000 ____D C:\Program Files (x86)\Skype

2017-01-03 01:33 - 2017-01-03 01:33 - 00020992 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetbus.sys

2017-01-03 01:32 - 2017-01-03 01:32 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\HMYGSetting

2017-01-03 01:29 - 2017-01-11 23:27 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Wondershare

2017-01-03 01:24 - 2017-01-03 01:29 - 00000000 ____D C:\Users\Public\Documents\Wondershare

2016-12-25 22:23 - 2016-12-25 22:23 - 00000041 _____ C:\Users\Stevo Marko\inst.ini

2016-12-25 22:23 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\Nox_share

2016-12-25 22:21 - 2017-01-11 23:30 - 00021182 _____ C:\WINDOWS\DPINST.LOG

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ___DC C:\WINDOWS\system32\DRVSTORE

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ____D C:\Program Files (x86)\Nox

2016-12-25 22:21 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\vmlogs

2016-12-25 22:21 - 2016-12-25 22:21 - 00253384 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\XQHDrv.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00127432 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00000000 ____D C:\Program Files\DIFX

2016-12-25 22:19 - 2017-01-11 23:30 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Nox

2016-12-25 01:23 - 2017-01-15 18:12 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\u-launcher

2016-12-25 01:23 - 2017-01-15 18:10 - 00000000 ____D C:\ProgramData\GFACE

2016-12-24 23:33 - 2016-12-24 23:33 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Warface.url

2016-12-23 21:58 - 2016-12-23 21:59 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\XV2INS

2016-12-23 11:57 - 2017-01-16 21:43 - 00000000 ___SH C:\pagefile.sys

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Bee

2016-12-21 19:45 - 2016-12-21 19:45 - 00000673 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2016-12-21 19:45 - 2016-12-21 19:45 - 00000623 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk

2016-12-21 14:14 - 2016-12-25 00:23 - 00000595 _____ C:\Users\Stevo Marko\Desktop\Battle.net.lnk

2016-12-21 14:14 - 2016-12-20 16:31 - 00000222 _____ C:\Users\Stevo Marko\Desktop\DRAGON BALL XENOVERSE 2.url

2016-12-21 14:14 - 2016-11-30 16:35 - 00000815 _____ C:\Users\Stevo Marko\Desktop\Counter-Strike Global Offensive WaRzOnE.lnk

2016-12-21 14:14 - 2016-11-24 13:57 - 00001248 _____ C:\Users\Stevo Marko\Desktop\LeagueClient  Alpha.lnk

2016-12-21 14:14 - 2016-09-26 18:42 - 00000790 _____ C:\Users\Stevo Marko\Desktop\Pokémon Trading Card Game Online.lnk

2016-12-21 14:14 - 2016-06-16 21:15 - 00000222 _____ C:\Users\Stevo Marko\Desktop\ONE PIECE PIRATE WARRIORS 3.url

2016-12-21 14:14 - 2016-05-11 22:02 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Rocket League.url

2016-12-21 14:14 - 2016-05-10 21:24 - 00000222 _____ C:\Users\Stevo Marko\Desktop\South Park The Stick of Truth.url

2016-12-21 14:14 - 2016-05-10 21:22 - 00000220 _____ C:\Users\Stevo Marko\Desktop\BioShock.url

2016-12-21 14:14 - 2016-05-10 21:21 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Subnautica.url

2016-12-21 14:14 - 2016-05-10 21:18 - 00000222 _____ C:\Users\Stevo Marko\Desktop\SMITE.url

2016-12-21 14:14 - 2016-01-20 22:57 - 00001840 _____ C:\Users\Stevo Marko\Desktop\Spotify.lnk

2016-12-21 14:14 - 2016-01-19 11:58 - 00000949 _____ C:\Users\Stevo Marko\Desktop\osu!.lnk

2016-12-18 15:51 - 2016-12-18 15:51 - 00002674 _____ C:\Users\Stevo Marko\Documents\Mein Film.wlmp
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-16 21:45 - 2016-03-15 14:41 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2017-01-16 21:43 - 2016-06-29 11:20 - 00000000 ____D C:\ProgramData\NVIDIA

2017-01-16 21:43 - 2016-05-05 11:26 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios

2017-01-16 21:43 - 2016-04-27 06:48 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-01-16 21:43 - 2015-12-30 13:30 - 00000000 ____D C:\Program Files\Bitdefender Agent

2017-01-16 21:42 - 2016-10-06 15:23 - 00000008 __RSH C:\Users\Stevo Marko\ntuser.pol

2017-01-16 21:42 - 2016-10-06 15:21 - 00000000 ____D C:\AdwCleaner

2017-01-16 21:42 - 2016-10-06 14:58 - 00000008 __RSH C:\ProgramData\ntuser.pol

2017-01-16 21:42 - 2016-06-29 11:20 - 00000000 ____D C:\Users\Stevo Marko

2017-01-16 21:42 - 2015-12-30 13:40 - 00264413 _____ C:\bdlog.txt

2017-01-16 21:42 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI

2017-01-16 21:29 - 2016-11-06 17:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2017-01-16 19:52 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-sys.job

2017-01-16 18:53 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job

2017-01-16 18:49 - 2015-12-30 22:52 - 00000000 ____D C:\Program Files (x86)\Steam

2017-01-16 13:03 - 2016-01-20 22:57 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Spotify

2017-01-16 12:52 - 2016-01-20 22:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Spotify

2017-01-16 12:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2017-01-16 07:21 - 2016-06-29 11:20 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-01-16 07:21 - 2016-04-27 06:13 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat

2017-01-16 07:21 - 2016-04-27 06:13 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat

2017-01-16 07:21 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF

2017-01-15 16:50 - 2016-12-09 17:49 - 00549112 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys

2017-01-15 12:15 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps

2017-01-14 13:34 - 2016-08-18 07:01 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\mymacro

2017-01-14 13:34 - 2016-01-08 22:46 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Unity

2017-01-14 13:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2017-01-14 11:12 - 2016-04-29 07:25 - 00000000 ____D C:\Users\Stevo Marko\Documents\My Games

2017-01-13 15:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache

2017-01-13 14:15 - 2015-10-30 07:28 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM

2017-01-11 23:30 - 2015-12-29 18:58 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\CrashDumps

2017-01-11 23:27 - 2016-10-12 22:15 - 00000000 ____D C:\Users\Stevo Marko\.android

2017-01-11 23:27 - 2016-03-11 13:42 - 00000000 ____D C:\Program Files (x86)\Wondershare

2017-01-11 22:27 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe

2017-01-11 20:18 - 2015-12-29 19:16 - 00000000 ____D C:\WINDOWS\system32\MRT

2017-01-11 20:17 - 2015-12-29 19:16 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-01-11 20:17 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2017-01-11 19:51 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files

2017-01-08 12:29 - 2015-12-30 19:43 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wichtige Programme

2017-01-07 15:27 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Skype

2017-01-07 15:25 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-01-07 12:54 - 2016-01-03 21:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\OBS

2017-01-03 23:25 - 2016-05-31 07:28 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Battle.net

2016-12-26 07:04 - 2016-06-29 11:20 - 00524288 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TMContainer00000000000000000001.regtrans-ms

2016-12-26 07:04 - 2016-06-29 11:20 - 00065536 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TM.blf

2016-12-26 02:29 - 2016-06-29 11:30 - 00000174 ___SH C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini

2016-12-25 22:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration

2016-12-25 22:21 - 2015-10-30 07:28 - 00000000 ___RD C:\Program Files

2016-12-25 01:28 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Saved Games

2016-12-24 23:33 - 2016-12-09 17:49 - 00395024 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe

2016-12-24 23:33 - 2016-05-15 22:06 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-22 23:54 - 2015-12-29 16:03 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-22 23:48 - 2015-10-30 08:26 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-12-22 23:48 - 2015-10-30 08:26 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-12-22 14:09 - 2016-06-29 11:20 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{7f07ac96-0c35-11e6-80cd-782bcb392fa8}.TMContainer00000000000000000001.regtrans-ms

2016-12-21 13:44 - 2016-04-25 17:19 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wooxy

2016-12-20 13:39 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Pictures

2016-12-19 19:15 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Documents

2016-12-19 19:13 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Downloads

2016-12-19 18:55 - 2015-12-30 17:55 - 00000000 ____D C:\Users\Stevo Marko\Desktop\PS2

2016-12-19 18:54 - 2016-07-25 11:01 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Musik

2016-12-19 17:22 - 2015-12-29 17:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-12-18 15:28 - 2016-12-10 00:51 - 00000000 ____D C:\Users\Stevo Marko\Documents\CELSYS_EN

2016-12-18 11:20 - 2015-12-29 18:39 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2016-12-18 11:20 - 2015-12-29 18:39 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2016-12-18 11:20 - 2009-07-14 04:20 - 00000000 ____D C:\WINDOWS\Tasks

2016-12-17 13:37 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WDI

2016-12-17 13:35 - 2015-10-30 07:28 - 00262144 ___SH C:\Users\Default\NTUSER.DAT

2016-12-17 13:34 - 2016-11-24 17:11 - 00212472 _____ C:\WINDOWS\system32\FNTCACHE.DAT
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-07-13 17:57 - 2016-07-13 17:57 - 0215846 _____ () C:\Users\Stevo Marko\AppData\Roaming\data02.db

2016-04-01 01:20 - 2016-04-01 01:20 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Roaming\dc.ogt

2016-03-01 23:15 - 2016-03-01 23:15 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Local\Driver_LOM_8161Present.flag

2016-07-15 12:26 - 2016-07-15 12:26 - 0007605 _____ () C:\Users\Stevo Marko\AppData\Local\Resmon.ResmonCfg

2016-03-21 18:36 - 2016-03-21 18:36 - 0000003 _____ () C:\Users\Stevo Marko\AppData\Local\updater.log

2016-03-21 18:36 - 2016-08-13 09:57 - 0000424 _____ () C:\Users\Stevo Marko\AppData\Local\UserProducts.xml

2015-12-30 13:37 - 2015-12-30 13:37 - 0420258 _____ () C:\ProgramData\1451478906.bdinstall.bin

2016-02-29 15:37 - 2016-02-29 15:37 - 0025199 _____ () C:\ProgramData\1456756661.bdinstall.bin

2016-03-22 16:20 - 2016-03-22 16:20 - 0025913 _____ () C:\ProgramData\1458660001.bdinstall.bin

2016-03-22 17:20 - 2016-03-22 17:20 - 0025985 _____ () C:\ProgramData\1458663637.bdinstall.bin

2016-03-31 18:29 - 2016-03-31 18:29 - 0025985 _____ () C:\ProgramData\1459445363.bdinstall.bin

2016-06-14 14:01 - 2016-06-14 14:01 - 0026785 _____ () C:\ProgramData\1465909304.bdinstall.bin

2016-07-11 20:02 - 2016-07-11 20:02 - 0026211 _____ () C:\ProgramData\1468263746.bdinstall.bin

2016-09-20 12:03 - 2016-09-20 12:03 - 0026848 _____ () C:\ProgramData\agent.1474369414.bdinstall.bin

2016-11-02 15:47 - 2016-11-02 15:47 - 0028768 _____ () C:\ProgramData\agent.1478098058.bdinstall.bin
 

Einige Dateien in TEMP:

====================

C:\Users\Stevo Marko\AppData\Local\Temp\SkypeSetup.exe
 
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-01-13 14:54
 

==================== Ende von FRST.txt ============================

--- --- ---FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-01-2017

durchgeführt von Stevo Marko (16-01-2017 21:45:33)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Windows 10 Home Version 1511 (X64) (2016-06-29 10:30:16)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4176748537-3526997621-266561101-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-4176748537-3526997621-266561101-503 - Limited - Disabled)

Gast (S-1-5-21-4176748537-3526997621-266561101-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-4176748537-3526997621-266561101-1002 - Limited - Enabled)

Stevo Marko (S-1-5-21-4176748537-3526997621-266561101-1000 - Administrator - Enabled) => C:\Users\Stevo Marko
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Bitdefender Virenschutz (Disabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}

AS: Bitdefender Spyware-Schutz (Disabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Bitdefender Firewall (Disabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated)

Ansel (Version: 372.70 - NVIDIA Corporation) Hidden

Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BioShock (HKLM\...\Steam App 7670) (Version:  - 2K Boston)

Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.23.1252 - Bitdefender)

Bitdefender Internet Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.24.1290 - Bitdefender)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)

Counter-Strike Global Offensive WaRzOnE (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\CSGO) (Version:  - CS WaRzOnE)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DigimonMasters Online (HKLM-x32\...\DigimonMasters) (Version:  - Move Games)

DigimonMasters Online Launcher (HKLM-x32\...\DigimonMasters Launcher) (Version:  - Move games)

Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)

DRAGON BALL XENOVERSE 2 (HKLM\...\Steam App 454650) (Version:  - QLOC)

FileZilla Client 3.16.0 (HKLM-x32\...\FileZilla Client) (Version: 3.16.0 - Tim Kosse)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)

Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden

HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.5.5 - Hi-Rez Studios)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Horizon (HKLM-x32\...\{6c4303a5-5115-4cfd-bf48-8af0541cd082}) (Version: 2.8.26 - Daring Development Inc.)

Horizon (x32 Version: 2.8.26 - Daring Development Inc.) Hidden

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden

iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)

Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

Killer Bandwidth Control Filter Driver (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer E220x Drivers (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Network Manager (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.57.1123 - Rivet Networks)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)

Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

MorphVOX Pro (HKLM-x32\...\{5a385481-7640-4f10-8ca5-04a2030b4623}) (Version: 4.4.65.20341 - Screaming Bee)

MorphVOX Pro (x32 Version: 4.4.65.20341 - Screaming Bee) Hidden

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.70 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.70 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

osu! (HKLM-x32\...\{9e3ba8ec-0407-491b-98a7-97354f85bb67}) (Version: latest - ppy Pty Ltd)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)

PaintTool SAI Ver.1 (HKLM-x32\...\PaintToolSAI) (Version:  - )

PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version:  - )

Pokémon Trading Card Game Online (HKLM-x32\...\{E56D3759-1795-4813-8FC7-CA82C2FECCD8}) (Version: 2.35.0 - The Pokémon Company International)

ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)

Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)

SMITE (HKLM\...\Steam App 386360) (Version:  - Hi-Rez Studios)

SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.22.9634 - SoftEther VPN Project)

South Park™: The Stick of Truth™ (HKLM\...\Steam App 213670) (Version:  - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Subnautica (HKLM\...\Steam App 264710) (Version:  - Unknown Worlds Entertainment)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)

The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.12.1.0 - GOG.com)

TP-LINK Archer T2U_T2UH Driver (HKLM-x32\...\{F2496892-5295-4208-AB93-21F1AFD07C97}) (Version: 1.3.1 - TP-LINK)

Unity Web Player (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)

Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VSDC Free Video Editor Version 4.0.1.475 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 4.0.1.475 - Flash-Integro LLC)

Warface (HKLM\...\Steam App 291480) (Version:  - Crytek)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.30 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)

Wooxy version 1.4.1 (HKLM-x32\...\{C183CD14-47D8-4F98-AF06-4744CB834C8E}_is1) (Version: 1.4.1 - Chewy)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {06929B9A-0ADA-41EF-B415-B05C7BAD68C7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {0759F0B1-90B3-4746-B00E-09A301E2770D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {0F0872CF-A603-49C6-AB8F-9EE847D14E71} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {14B6D487-6E40-4313-A845-F0B7A09D2AFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-15] (Adobe Systems Incorporated)

Task: {1A04C0A1-83B7-4BB0-8A10-1EEEE6B54D7D} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeReminderTask => C:\WINDOWS\System32\GWX\GWX.exe

Task: {1EB21864-3AF4-4117-942A-EC34F3379BC4} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {22C5BAEB-2DED-4145-AEA7-0070605DC216} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {2509576E-4FD3-4243-961C-307E453CEABA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {2E96D9AC-4152-428A-B301-6651D27A38A1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {342A5FC5-6DE9-4A7B-8283-59F3C68EF4EE} - System32\Tasks\{DE8BA068-7282-45FA-94E4-4A63CDD3A835} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{F2496892-5295-4208-AB93-21F1AFD07C97}\setup.exe" -c -runfromtemp -l0x0009 -removeonly DriverOnly

Task: {35F42DBA-4428-420D-992A-8FD8A1D09814} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {3FFEBBE5-00CE-4042-AA00-4126A0F4E384} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {4089AD54-FB80-40C5-A7E9-FDF3EE9BA971} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {471EEE60-5C6F-4196-9065-C95D181EFE7A} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {48EAF5C3-3110-47DA-8008-AC8C1326A6EE} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {4F820D1A-F6A5-4250-9E42-87D243833151} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG

Task: {519E9215-B5AA-457B-A09B-69481A78045E} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {51DFA5A3-E1B8-42DD-9925-4C8FBB4743C8} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {57D666D1-BE65-4CD4-B6D5-F397645CEEA6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)

Task: {5BC78F10-4B58-4E93-AF92-BAE082A0B7BA} - System32\Tasks\WinCSS => Chrome.exe hxxp://cssnews.ru/salesm

Task: {68EA38E0-B451-4B69-8D5E-DB33A1C1E605} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo)

Task: {6E814AB7-AD84-45FB-A65B-98D79F03ABC7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {6E86CF00-B6BC-42FE-A820-A358825CD1EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {70197F69-8CF9-48CE-8374-22BD9F6E36DC} - System32\Tasks\{5B18B0C3-296E-4D4C-93E3-1304019C0798} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {70EE8BA2-8BA5-4868-8594-A5B6E961ACC4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {86BE5EAE-75B7-46BA-A7B3-8B69FF095814} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8F8F047D-0D76-4B51-A1CD-DCD5167E8A3A} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {91B14D1B-74C2-40C8-9F2F-1F54AEE3CAED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {96120D5E-80F3-4076-872D-9F224172BB40} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {9B467767-0347-4C0E-BFB6-64C1ACBAA4F4} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9F0DA49B-71A4-4151-9CA5-17826B03B4F5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {9F50B7B8-EA2E-4CF1-BAA6-2B4A58EF5826} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9F617379-83F3-4FCF-82C7-ACA69A7D6B0D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {A233BD2C-463C-41E5-A837-7D655C08F15F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {AD33D397-A476-455F-ABF4-C4DD2894FDE1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {AE1C94EA-1438-45A8-9855-76AE7ED00F2A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {B3A9A9F3-534E-40DE-82F1-AE671754F989} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {BDE9480B-5023-4CF0-A0FD-34071B2AB983} - System32\Tasks\{F520FBE6-BB86-4525-AAC7-C5EF190B28C3} => Chrome.exe hxxp://ui.skype.com/ui/0/7.25.0.106/de/abandoninstall?page=tsProgressBar

Task: {C5241A86-AC16-4CDA-A2B2-9C9D690E9E69} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {C6D9160F-1D62-4EDC-9538-E0BF3E0EFDFD} - System32\Tasks\{D4DEABE0-663F-4F5F-A024-2563CCA8A1FD} => Chrome.exe hxxp://ui.skype.com/ui/0/7.26.0.101/de/abandoninstall?page=tsProgressBar

Task: {CD508CB9-54F5-4BAE-9DCA-4F5E603228FD} - System32\Tasks\{1828F1DF-60FC-44CE-8771-1DE6A2F9154A} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {CD977E74-498D-4460-857F-C375C6603938} - System32\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {D0929682-C0C9-402F-AF41-986D8C7883C9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

Task: {D1E91C75-4A13-491A-BFC4-BC92EB4A44CA} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {D7819584-656C-440D-9DB7-8939C4759AF4} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG

Task: {DB95F336-3DBD-46B5-8FA4-7B8064A6AAA2} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-10-21] (Bitdefender)

Task: {E1D7655F-F57F-4147-9C68-18490AB567C3} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {E51EB491-2D29-436F-BD3B-7904F9F8B6BE} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {E8E85E99-3D2C-4A41-A328-AAF7DBE7507A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F3BAFDC9-8CD6-4E5B-AD34-8F147A700DBC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F4D88F61-06AE-4416-9583-0EA9E9D16046} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F7E41E70-7698-4E79-AB7B-68880CA56114} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехрlоrеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
 

ShortcutWithArgument: C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com

ShortcutWithArgument: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames\DigimonMastersOnline\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2015-12-30 13:37 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll

2016-06-29 11:20 - 2016-08-25 22:12 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-01 09:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-08-23 13:07 - 2016-08-23 13:07 - 01864384 _____ () C:\Users\Stevo Marko\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2016-04-27 06:17 - 2016-04-27 06:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-07-13 18:52 - 2016-07-01 04:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-11-08 22:28 - 2016-10-25 05:49 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-08 22:28 - 2016-10-25 05:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-08 22:28 - 2016-10-25 05:45 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-08 22:28 - 2016-10-25 05:48 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2016-02-12 22:13 - 2016-02-12 22:13 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-05-11 14:55 - 2010-11-04 10:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll

2016-03-11 13:43 - 2016-10-08 16:48 - 01506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2016-03-11 13:43 - 2016-07-21 10:54 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2017-01-16 21:43 - 00000002 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Stevo Marko\Desktop\Unknown\forest-wallpaper-8.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GalaxyClient"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GEEQzxIb"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "BlueStacks Agent"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808

FirewallRules: [{131D4802-AE73-429F-A630-9D949BE8CFA8}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [{0FF91854-7C8D-4DF1-B250-347DC65F9740}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [UDP Query User{60B15D7E-EB7C-488B-B45E-D757ACD59E11}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [TCP Query User{51C2FF2D-46E0-4523-937E-71C911349F35}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [{E523C989-860C-4A67-9A39-25A9BD0BE308}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{B7D151CB-34FE-4C7C-AE49-2793F4865FAC}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{8187B945-CCD7-4C59-A883-1237FA318370}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{D0171CA3-7609-4B38-B881-7C9FCBCFCE21}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{27340615-F02E-47C0-8CF0-8B3279322E93}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{2724FDDF-45D6-4B10-B208-94C667634168}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [UDP Query User{D1FA4666-9084-4903-97C7-804A3242E312}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [TCP Query User{C620D03D-D994-4494-9969-5931AF373D2A}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [{D11F6D2F-68D8-4BDB-9BD7-E7A8BB3E2831}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{306E6120-22CF-4D26-870F-93591059E33C}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{F5D7440B-68DC-476B-84D7-03607A13B1E0}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{82657ACE-F50F-4063-AE5C-4217538E7A19}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{163638ED-11C3-42C3-86AD-A336C39016BC}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{588A1AA3-C51E-4354-A74E-14BD0D83DEE9}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{FFF7CE3B-7F74-4F5D-9464-2E6175340B26}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{3E92E1F3-D28F-4B04-8AC3-C2BF18CBC571}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{6B3CFCBF-F9E7-42F8-8C5E-6A32713E30A4}] => LPort=1900

FirewallRules: [{CFF966DA-B632-4550-B064-7E197006EC5D}] => LPort=2869

FirewallRules: [{3A772195-07B8-4C4E-9499-E0C0C6B07B73}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [UDP Query User{FB787A40-AF71-4281-B3CB-D9A1CB989724}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{0A955DBF-AE41-4520-9D88-5FC8BFDE3FB8}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{814537C0-FA96-4D6A-B2C7-B69F861F5A29}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{A481A116-0DF2-4FB1-981C-4F01F200DC03}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [{696CAAB7-7302-442E-888D-F316F4331B97}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{79A35FCC-00C8-47EA-97E4-3FA8F62DD81F}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{34F930BA-2B08-4FA5-A630-FDB154F4A5C7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{544C4B32-999A-4E5B-A78D-F5B1514D16F2}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{2B825826-EDBF-4579-AFBD-8B000852538E}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{90DF9797-5823-46E9-A4DC-6C14CDEB6AF6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{8AAA6E03-4336-4DF5-8672-717227A1B804}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{28FBF77E-8A6F-439B-A13D-F41A7E9F0DA0}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{68B2C8C7-B375-404B-9867-A75E172EB770}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{9937ED6C-5601-4649-887B-92C93B7D3BDA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{178D6B1C-3904-4023-AA6A-A2C693D36810}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{3ABA475D-92D7-4DA5-892C-1F59260A3066}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{2C0ED73B-E102-4933-9FED-46388D33BFFA}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{39A84192-A46C-4E0F-91B0-9A11D377045C}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [TCP Query User{47A8427F-DA86-49FE-92D8-D974293BB92D}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{C8A60F67-88A9-4C2D-84AA-9389DF3A937F}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [TCP Query User{7D6C3EE6-916C-4495-9814-94CDA525B128}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [UDP Query User{0B3D52EF-3E49-4A2B-AAE0-EFA137FE431D}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [TCP Query User{7A949890-0653-485D-9917-A47C59848E22}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [UDP Query User{A8AF8AE8-D7C7-4348-85F6-BC3558E91F72}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [TCP Query User{C539BBF1-416B-4BED-9EF9-7EC95704B6A5}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{BF9B1AF9-789D-44F0-BEA6-8D43B8A506F3}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{F163DDD8-1ACE-495A-9277-42662553A358}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{87D88FE3-5708-4FE1-A410-28EE491556D8}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{291BCC8C-D723-45A6-BEDA-68B576D08EBC}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{974D685C-AC7F-42D6-8AE5-BAFCD5A5F09E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{93EA6BE3-46A0-4386-B628-77E077BC19E9}] => E:\iTunes\iTunes.exe

FirewallRules: [TCP Query User{C6931454-D8BC-408E-8580-17F1F912E6CC}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{047D3345-5768-4BB9-9585-B06F033F14B4}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [{475913B2-3BEB-45ED-A06B-D7E25F3DEDC1}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [TCP Query User{26954AD4-C1AB-41DF-9084-E2FB1FB12E66}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{65F07ACA-1030-4283-8B1D-B5C858901795}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{28E3540D-41EC-4FF8-9E76-C3753D9D8C12}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{F28E5BFC-F054-4FB1-8605-1EAA9B98E265}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{612D9B70-03FC-4F13-A76E-9A378F0AEC3C}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{A20D8834-3817-41FF-B08A-53BB7241555B}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{C43B9841-0042-47C9-A8EA-68E4773166DA}] => C:\Program Files (x86)\Nox\bin\Nox.exe

FirewallRules: [{AB60493C-C540-4EF0-AB6F-CB2723FD9C79}] => C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe

FirewallRules: [{66E19697-C4D0-4FE8-9CB1-9DE9E383991E}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{A7C49B62-CD7C-4A8E-A1F9-02F6589D2D9C}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{201837A4-3840-484C-96EF-8FB837F81056}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{B99CAC97-8CCB-4B73-AD79-A59D25662205}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{BD34A82B-C290-400D-8369-88E5214597A2}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient.exe

FirewallRules: [{FDACF623-1E3B-41CB-9255-16F985E770D4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{AAC1AF14-377F-4AD6-BA15-49BEE643EAB4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{4E6BB467-F3C3-41EB-92DA-2463ED42563E}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd.exe

FirewallRules: [TCP Query User{6C2D550E-977B-419F-9CFE-6976E834946D}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [UDP Query User{46A3FDF3-4DA1-436E-A6D8-5942A88A7C41}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [{D8774863-1344-4E05-AA28-946AD79B2873}] => C:\Users\Stevo Marko\AppData\Local\Amigo\Application\amigo.exe

FirewallRules: [{5A5C5CB6-19CA-470D-AE07-04FCCD871B38}] => E:\KDMO\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{9B08035F-2213-4600-A78A-8E65B8D6A7CA}] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{D47FEC28-B6A5-4449-B670-41873B28DF38}] => E:\KDMO\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{345B93FC-08C1-4A2A-84B3-07C9B48FE060}] => E:\KDMO\SoftEther VPN Client\vpncmd.exe

FirewallRules: [{DA5D5502-CF62-4857-8F85-AE165E11B3F7}] => E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{3AEE9EE4-B12E-48EB-B371-D4D3D97B20B1}] => E:\KDMO\SoftEther VPN Client\vpnclient.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (01/16/2017 09:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   23 3.6.9.A.B.E.1.9.7.7.B.4.6.D.8.F.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR StevoMarko-PC-2.local.
 

Error: (01/16/2017 09:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   21 3.6.9.A.B.E.1.9.7.7.B.4.6.D.8.F.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR StevoMarko-PC.local.
 

Error: (01/16/2017 09:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   23 51.2.168.192.in-addr.arpa. PTR StevoMarko-PC-2.local.
 

Error: (01/16/2017 09:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   21 51.2.168.192.in-addr.arpa. PTR StevoMarko-PC.local.
 

Error: (01/16/2017 09:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname StevoMarko-PC.local already in use; will try StevoMarko-PC-2.local instead
 

Error: (01/16/2017 09:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 StevoMarko-PC.local. Addr 192.168.2.51
 

Error: (01/16/2017 09:43:25 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   16 StevoMarko-PC.local. AAAA 2003:006B:0536:FFF8:F8D6:4B77:91EB:A963
 

Error: (01/16/2017 09:43:24 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Resetting to Probing:   16 StevoMarko-PC.local. AAAA FE80:0000:0000:0000:F8D6:4B77:91EB:A963
 

Error: (01/16/2017 09:43:24 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   16 StevoMarko-PC.local. AAAA 2003:006B:0536:FFF8:F8D6:4B77:91EB:A963
 

Error: (01/16/2017 09:43:24 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Resetting to Probing:    4 StevoMarko-PC.local. Addr 192.168.2.51
 
 

Systemfehler:

=============

Error: (01/16/2017 09:43:16 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
 

Error: (01/16/2017 09:42:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_732de0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 09:42:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _732de0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 09:42:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_732de0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 09:42:52 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_732de0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 09:42:45 PM) (Source: Service Control Manager) (EventID: 7032) (User: )

Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 

Es wird bereits eine Instanz des Dienstes ausgeführt.
 

Error: (01/16/2017 09:42:15 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (01/16/2017 09:42:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 09:42:14 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Streamer Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (01/16/2017 09:42:14 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "SoftEther VPN Client" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

CodeIntegrity:

===================================

  Date: 2017-01-14 11:12:37.997

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2017-01-11 22:31:20.486

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-17 13:35:54.795

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-11 11:59:18.678

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-10 15:55:36.900

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-29 08:55:41.824

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-16 17:59:09.570

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-15 16:39:45.951

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-16 12:05:23.430

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-02 07:37:05.993

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz

Prozentuale Nutzung des RAM: 26%

Installierter physikalischer RAM: 8143.64 MB

Verfügbarer physikalischer RAM: 5959.27 MB

Summe virtueller Speicher: 16335.64 MB

Verfügbarer virtueller Speicher: 14132.67 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:111.69 GB) (Free:48.12 GB) NTFS

Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:668.95 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9961C39A)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 9397806C)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

--- --- ---

burningice

16.01.2017 22:05

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\MobileTrans\DriverInstall.exe" [X]

Task: {06929B9A-0ADA-41EF-B415-B05C7BAD68C7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
 

Task: {1EB21864-3AF4-4117-942A-EC34F3379BC4} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
 

Task: {22C5BAEB-2DED-4145-AEA7-0070605DC216} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
 

Task: {35F42DBA-4428-420D-992A-8FD8A1D09814} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
 

Task: {3FFEBBE5-00CE-4042-AA00-4126A0F4E384} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
 

Task: {4F820D1A-F6A5-4250-9E42-87D243833151} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
 

Task: {51DFA5A3-E1B8-42DD-9925-4C8FBB4743C8} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
 

Task: {96120D5E-80F3-4076-872D-9F224172BB40} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
 

Task: {9F617379-83F3-4FCF-82C7-ACA69A7D6B0D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
 

Task: {A233BD2C-463C-41E5-A837-7D655C08F15F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
 

Task: {B3A9A9F3-534E-40DE-82F1-AE671754F989} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
 

Task: {C5241A86-AC16-4CDA-A2B2-9C9D690E9E69} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
 

Task: {D7819584-656C-440D-9DB7-8939C4759AF4} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG
 

Task: {E51EB491-2D29-436F-BD3B-7904F9F8B6BE} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
 

Task: {F7E41E70-7698-4E79-AB7B-68880CA56114} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG

Task: {5BC78F10-4B58-4E93-AF92-BAE082A0B7BA} - System32\Tasks\WinCSS => Chrome.exe hxxp://cssnews.ru/salesm
 

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехрlоrеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt: 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hinweis: Dieser Scan kann schon einmal mehrere Stunden dauern...

Schritt: 3
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

Hast du noch irgendwelche Probleme mit deinem Rechner?

stevoboot

16.01.2017 23:09

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-01-2017
durchgeführt von Stevo Marko (16-01-2017 22:08:29) Run:1
Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen
Geladene Profile: Stevo Marko (Verfügbare Profile: Stevo Marko & DefaultAppPool)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\MobileTrans\DriverInstall.exe" [X]
Task: {06929B9A-0ADA-41EF-B415-B05C7BAD68C7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG

Task: {1EB21864-3AF4-4117-942A-EC34F3379BC4} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG

Task: {22C5BAEB-2DED-4145-AEA7-0070605DC216} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG

Task: {35F42DBA-4428-420D-992A-8FD8A1D09814} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG

Task: {3FFEBBE5-00CE-4042-AA00-4126A0F4E384} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG

Task: {4F820D1A-F6A5-4250-9E42-87D243833151} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG

Task: {51DFA5A3-E1B8-42DD-9925-4C8FBB4743C8} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG

Task: {96120D5E-80F3-4076-872D-9F224172BB40} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

Task: {9F617379-83F3-4FCF-82C7-ACA69A7D6B0D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG

Task: {A233BD2C-463C-41E5-A837-7D655C08F15F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG

Task: {B3A9A9F3-534E-40DE-82F1-AE671754F989} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG

Task: {C5241A86-AC16-4CDA-A2B2-9C9D690E9E69} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG

Task: {D7819584-656C-440D-9DB7-8939C4759AF4} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG

Task: {E51EB491-2D29-436F-BD3B-7904F9F8B6BE} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

Task: {F7E41E70-7698-4E79-AB7B-68880CA56114} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5BC78F10-4B58-4E93-AF92-BAE082A0B7BA} - System32\Tasks\WinCSS => Chrome.exe hxxp://cssnews.ru/salesm

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Int?rn?t ???l?r?r.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic
Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\G??gl? ?hr?m?.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G??gl? ?hr?m?.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
Shortcut: C:\Users\Public\Desktop\G??gl? ?hr?m?.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
emptytemp:

*****************

HKLM\System\CurrentControlSet\Services\WsDrvInst => Schlüssel erfolgreich entfernt
WsDrvInst => Dienst erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{06929B9A-0ADA-41EF-B415-B05C7BAD68C7} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{06929B9A-0ADA-41EF-B415-B05C7BAD68C7} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1EB21864-3AF4-4117-942A-EC34F3379BC4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1EB21864-3AF4-4117-942A-EC34F3379BC4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{22C5BAEB-2DED-4145-AEA7-0070605DC216} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{22C5BAEB-2DED-4145-AEA7-0070605DC216} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{35F42DBA-4428-420D-992A-8FD8A1D09814} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{35F42DBA-4428-420D-992A-8FD8A1D09814} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3FFEBBE5-00CE-4042-AA00-4126A0F4E384} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3FFEBBE5-00CE-4042-AA00-4126A0F4E384} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4F820D1A-F6A5-4250-9E42-87D243833151} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F820D1A-F6A5-4250-9E42-87D243833151} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{51DFA5A3-E1B8-42DD-9925-4C8FBB4743C8} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51DFA5A3-E1B8-42DD-9925-4C8FBB4743C8} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{96120D5E-80F3-4076-872D-9F224172BB40} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{96120D5E-80F3-4076-872D-9F224172BB40} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9F617379-83F3-4FCF-82C7-ACA69A7D6B0D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F617379-83F3-4FCF-82C7-ACA69A7D6B0D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A233BD2C-463C-41E5-A837-7D655C08F15F} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A233BD2C-463C-41E5-A837-7D655C08F15F} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B3A9A9F3-534E-40DE-82F1-AE671754F989} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B3A9A9F3-534E-40DE-82F1-AE671754F989} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C5241A86-AC16-4CDA-A2B2-9C9D690E9E69} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C5241A86-AC16-4CDA-A2B2-9C9D690E9E69} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D7819584-656C-440D-9DB7-8939C4759AF4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D7819584-656C-440D-9DB7-8939C4759AF4} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-Weekend => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E51EB491-2D29-436F-BD3B-7904F9F8B6BE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E51EB491-2D29-436F-BD3B-7904F9F8B6BE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F7E41E70-7698-4E79-AB7B-68880CA56114} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F7E41E70-7698-4E79-AB7B-68880CA56114} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5BC78F10-4B58-4E93-AF92-BAE082A0B7BA} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BC78F10-4B58-4E93-AF92-BAE082A0B7BA} => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\WinCSS => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinCSS => Schlüssel erfolgreich entfernt
"C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Int?rn?t ???l?r?r.lnk" => Konnte nicht verschoben werden.
"C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\G??gl? ?hr?m?.lnk" => Konnte nicht verschoben werden.
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G??gl? ?hr?m?.lnk" => Konnte nicht verschoben werden.
"C:\Users\Public\Desktop\G??gl? ?hr?m?.lnk" => Konnte nicht verschoben werden.

=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 22436542 B
Java, Flash, Steam htmlcache => 440505397 B
Windows/system/drivers => 67120535 B
Edge => 1297989 B
Chrome => 373662381 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 16674 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 38878 B
LocalService => 31782 B
NetworkService => 3588 B
Stevo Marko => 1628782554 B
DefaultAppPool => 16674 B

RecycleBin => 0 B
EmptyTemp: => 2.4 GB temporäre Dateien entfernt.

================================

Das System musste neu gestartet werden.

==== Ende von Fixlog 22:08:39 ====

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=20cec1e9db11834b80810e3a815136d5
# end=init
# utc_time=2017-01-16 09:11:20
# local_time=2017-01-16 10:11:20 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 32084
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=20cec1e9db11834b80810e3a815136d5
# end=updated
# utc_time=2017-01-16 09:15:52
# local_time=2017-01-16 10:15:52 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=20cec1e9db11834b80810e3a815136d5
# engine=32084
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-01-16 10:00:03
# local_time=2017-01-16 11:00:03 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='Bitdefender Antivirus'
# compatibility_mode=2072 16777213 100 100 3039 181916668 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 5814331 38418146 0 0
# scanned=592054
# found=10
# cleaned=0
# scan_time=2651
sh=98C1253F474BEF2A4C743504ADB8944087F223D4 ft=0 fh=0000000000000000 vn="Variante von Win32/InstallMonstr.QJ eventuell unerwÃ¼nschte Anwendung" ac=I fn="E:\Downloads\csgo mod menu wall hack colors aimbot 2016 download free.rar"
sh=D9366125E2464331D593E62642CAE29028657EA6 ft=0 fh=0000000000000000 vn="Variante von Win32/RA-based.NEG Trojaner" ac=I fn="E:\Downloads\CSGO-Multihack.rar"
sh=692B895BC4764ABDBB9B6DAC273D5FA552BA910E ft=0 fh=0000000000000000 vn="Variante von Win32/InstallMonstr.QJ eventuell unerwÃ¼nschte Anwendung" ac=I fn="E:\Downloads\EZfrags_csgo_hack_cheat_2016_free__5bUNDETECTED_5d.rar"
sh=7A7C288CEA3B9D939AB79A4B72251D951D33BA46 ft=0 fh=0000000000000000 vn="Variante von Win32/Adware.FileTour.ESB Anwendung" ac=I fn="E:\Downloads\GlobalHack_RU__EU__13.01.2017_.zip"
sh=F9F47737E4D6EFFAE905FA54B7688DA8F9B05AC6 ft=1 fh=ec831ace51b74e3b vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="E:\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"
sh=268317C928142D53344766772D8A2809B0DB2A48 ft=1 fh=8ebd9dd8a6957280 vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="E:\Downloads\MobileTrans - CHIP-Installer.exe"
sh=4541B199D365FE09CC293D8479A58BFB6FD018C3 ft=1 fh=e793cf404aad975c vn="Variante von Win32/DownloadSponsor.C eventuell unerwÃ¼nschte Anwendung" ac=I fn="E:\Downloads\PaintTool SAI - CHIP-Installer.exe"
sh=FF17B4E06E6D71767077FF9509F0F3DB57AB44FE ft=0 fh=0000000000000000 vn="Variante von MSIL/Kryptik.HJU Trojaner" ac=I fn="E:\Downloads\WWW.OLDSCHOOLHACK.ME_EZFRAGS_CSGO_MULTI_V8_PUBLIC_PRIVATE.ZIP"
sh=D341F72107D106780C2162ED423DA2ACBD855979 ft=0 fh=0000000000000000 vn="Variante von MSIL/Injector.CUZ Trojaner" ac=I fn="E:\Downloads\[CSGO]Aimbot and wallhack.rar"
sh=5F8588A890D495A25576E447B29DFD4F402DD8CD ft=1 fh=46458cc5b66da0d1 vn="Variante von Win32/RiskWare.GameHack.AL Anwendung" ac=I fn="E:\Games\Counter-Strike Global Offensive\steamclient.dll"

burningice

17.01.2017 14:34

und wo sind die neuen FRST Logs? :)

stevoboot

17.01.2017 21:57

Oh ups vergessen.
FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-01-2017

durchgeführt von Stevo Marko (Administrator) auf STEVOMARKO-PC (17-01-2017 21:55:39)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Geladene Profile: Stevo Marko (Verfügbare Profile: Stevo Marko & DefaultAppPool)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Scarlet.Crush Productions) C:\PS3 Con\ScpServer\bin\ScpService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe

(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Apple Inc.) E:\iTunes\iTunesHelper.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe

(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1654672 2016-11-24] (Bitdefender)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.)

HKLM\...\Run: [iTunesHelper] => E:\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)

HKLM\...\Run: [SoftEther VPN Client UI Helper] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()

HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe [1451544 2016-11-24] (Bitdefender)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Spotify Web Helper] => C:\Users\Stevo Marko\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-25] (Spotify Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [GalaxyClient] => E:\GalaxyClient\GalaxyClient.exe [3946048 2016-11-03] (GOG.com)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-03-01]

ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2017-01-15]

ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{133eadeb-27bc-4780-8ca1-bf5574c8ab7f}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{732f7719-fb15-4fe4-8a4f-461a226b8911}: [DhcpNameServer] 192.168.2.1

ManualProxies: 
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://digimonmasters.com/

SearchScopes: HKU\S-1-5-21-4176748537-3526997621-266561101-1000 -> {0BAAF030-AF47-4396-B1B1-06A8364F8F8B} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

DPF: HKLM-x32 {3FED5059-7AA5-46D9-902B-124C8CD9A106} hxxp://www.digimonmasters.com/inc/ActiveX/launcher/20140731_2/Digitalic%20Launcher.cab
 

FireFox:

========

FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2015-12-16]

FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-12-16] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2016-05-05] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin HKU\S-1-5-21-4176748537-3526997621-266561101-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Stevo Marko\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://google.de/

CHR StartupUrls: Default -> "hxxps://www.google.de/"

CHR Profile: C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default [2017-01-17]

CHR Extension: (Google Drive) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-29]

CHR Extension: (YouTube) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-29]

CHR Extension: (Adblock Plus) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]

CHR Extension: (Google-Suche) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-29]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]

CHR Extension: (Google Mail) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-29]

CHR Extension: (Chrome Media Router) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-02]

CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1362464 2016-05-10] ()

R2 Ds3Service; C:\PS3 Con\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert]

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395024 2016-12-24] (EasyAntiCheat Ltd)

S3 GalaxyClientService; E:\GalaxyClient\GalaxyClientService.exe [284224 2016-11-03] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6581824 2016-10-28] (GOG.com)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [Datei ist nicht signiert]

R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [448000 2015-12-14] (Rivet Networks) [Datei ist nicht signiert]

R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5660512 2016-08-16] (INCA Internet Co., Ltd.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1100392 2016-10-28] (Bitdefender)

R2 SEVPNCLIENT; E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-11-24] (Bitdefender)

R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1695720 2016-11-24] (Bitdefender)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-10-25] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus.sys [20992 2017-01-03] (LG Electronics Inc.)

S3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [878072 2016-11-01] (BitDefender)

S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23568 2016-06-29] (Bitdefender)

R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-29] (BitDefender LLC)

S4 BDVEDISK; C:\WINDOWS\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)

R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bflwfx64.sys [147528 2015-12-11] (Rivet Networks, LLC.)

R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [182944 2016-11-24] (BitDefender LLC)

R0 ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [299816 2016-06-28] (Bitdefender)

R3 Ke2200; C:\WINDOWS\System32\drivers\e22w7x64.sys [125488 2015-03-18] (Qualcomm Atheros, Inc.)

R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)

R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)

R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2017-01-11] (SoftEther Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)

R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2017-01-15] (SoftEther Corporation)

S3 taphss6; C:\WINDOWS\System32\DRIVERS\taphss6.sys [42064 2016-04-19] (Anchorfree Inc.)

R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [520032 2016-06-28] (BitDefender S.R.L.)

R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2016-12-25] (BigNox Corporation)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [36808 2016-10-26] (Wellbia.com Co., Ltd.)

U3 idsvc; kein ImagePath

U3 wpcsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-16 22:11 - 2017-01-16 22:11 - 00000000 ____D C:\Program Files (x86)\ESET

2017-01-16 21:00 - 2017-01-17 21:55 - 00000000 ____D C:\FRST

2017-01-16 20:59 - 2017-01-16 23:25 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Virenkillen

2017-01-15 18:46 - 2017-01-15 18:46 - 00000965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\SoftEther VPN Client Manager.lnk

2017-01-15 18:46 - 2017-01-15 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftEther VPN Client

2017-01-11 22:44 - 2016-08-16 11:40 - 05660512 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\GameMon.des

2017-01-11 22:43 - 2017-01-11 22:43 - 00000000 ____D C:\Program Files\Common Files\INCA Shared

2017-01-11 22:43 - 2004-12-31 07:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\npptNT2.sys

2017-01-11 22:43 - 2003-07-16 16:17 - 00005174 _____ C:\WINDOWS\SysWOW64\nppt9x.vxd

2017-01-11 22:09 - 2017-01-11 22:09 - 00001283 _____ C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk

2017-01-11 22:09 - 2017-01-11 22:09 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames

2017-01-11 20:00 - 2017-01-11 22:02 - 00000000 ____D C:\WINDOWS\SysWOW64\mgrlist

2017-01-11 19:44 - 2017-01-11 19:44 - 00038216 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\Neo6_x64_VPN.sys

2017-01-11 19:34 - 2017-01-15 18:46 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys

2017-01-11 19:34 - 2017-01-11 19:34 - 00143816 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\WINDOWS\system32\vpncmd.exe

2017-01-11 19:34 - 2017-01-11 19:34 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys.old1

2017-01-11 19:31 - 2017-01-15 18:48 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Vpn

2017-01-11 13:37 - 2016-12-21 10:01 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2017-01-11 13:37 - 2016-12-21 10:01 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2017-01-11 13:37 - 2016-12-21 09:25 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2017-01-11 13:37 - 2016-12-21 08:18 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2017-01-11 13:37 - 2016-12-21 07:56 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2017-01-11 13:37 - 2016-12-21 06:41 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:39 - 22373376 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 06:15 - 07839232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-01-11 13:37 - 2016-12-21 06:06 - 03663872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:03 - 18671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 05:48 - 05658624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-01-11 13:37 - 2016-10-25 07:55 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2017-01-07 15:27 - 2017-01-16 21:39 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Skype

2017-01-07 15:27 - 2017-01-07 15:27 - 00000000 ____D C:\Program Files (x86)\Skype

2017-01-03 01:33 - 2017-01-03 01:33 - 00020992 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetbus.sys

2017-01-03 01:32 - 2017-01-03 01:32 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\HMYGSetting

2017-01-03 01:29 - 2017-01-11 23:27 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Wondershare

2017-01-03 01:24 - 2017-01-03 01:29 - 00000000 ____D C:\Users\Public\Documents\Wondershare

2016-12-25 22:23 - 2016-12-25 22:23 - 00000041 _____ C:\Users\Stevo Marko\inst.ini

2016-12-25 22:23 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\Nox_share

2016-12-25 22:21 - 2017-01-11 23:30 - 00021182 _____ C:\WINDOWS\DPINST.LOG

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ___DC C:\WINDOWS\system32\DRVSTORE

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ____D C:\Program Files (x86)\Nox

2016-12-25 22:21 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\vmlogs

2016-12-25 22:21 - 2016-12-25 22:21 - 00253384 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\XQHDrv.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00127432 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00000000 ____D C:\Program Files\DIFX

2016-12-25 22:19 - 2017-01-11 23:30 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Nox

2016-12-25 01:23 - 2017-01-17 19:36 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\u-launcher

2016-12-25 01:23 - 2017-01-17 19:36 - 00000000 ____D C:\ProgramData\GFACE

2016-12-24 23:33 - 2016-12-24 23:33 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Warface.url

2016-12-23 21:58 - 2016-12-23 21:59 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\XV2INS

2016-12-23 11:57 - 2017-01-16 22:09 - 00000000 ___SH C:\pagefile.sys

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Bee

2016-12-21 19:45 - 2016-12-21 19:45 - 00000673 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2016-12-21 19:45 - 2016-12-21 19:45 - 00000623 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk

2016-12-21 14:14 - 2016-12-25 00:23 - 00000595 _____ C:\Users\Stevo Marko\Desktop\Battle.net.lnk

2016-12-21 14:14 - 2016-12-20 16:31 - 00000222 _____ C:\Users\Stevo Marko\Desktop\DRAGON BALL XENOVERSE 2.url

2016-12-21 14:14 - 2016-11-30 16:35 - 00000815 _____ C:\Users\Stevo Marko\Desktop\Counter-Strike Global Offensive WaRzOnE.lnk

2016-12-21 14:14 - 2016-11-24 13:57 - 00001248 _____ C:\Users\Stevo Marko\Desktop\LeagueClient  Alpha.lnk

2016-12-21 14:14 - 2016-09-26 18:42 - 00000790 _____ C:\Users\Stevo Marko\Desktop\Pokémon Trading Card Game Online.lnk

2016-12-21 14:14 - 2016-06-16 21:15 - 00000222 _____ C:\Users\Stevo Marko\Desktop\ONE PIECE PIRATE WARRIORS 3.url

2016-12-21 14:14 - 2016-05-11 22:02 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Rocket League.url

2016-12-21 14:14 - 2016-05-10 21:24 - 00000222 _____ C:\Users\Stevo Marko\Desktop\South Park The Stick of Truth.url

2016-12-21 14:14 - 2016-05-10 21:22 - 00000220 _____ C:\Users\Stevo Marko\Desktop\BioShock.url

2016-12-21 14:14 - 2016-05-10 21:21 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Subnautica.url

2016-12-21 14:14 - 2016-05-10 21:18 - 00000222 _____ C:\Users\Stevo Marko\Desktop\SMITE.url

2016-12-21 14:14 - 2016-01-20 22:57 - 00001840 _____ C:\Users\Stevo Marko\Desktop\Spotify.lnk

2016-12-21 14:14 - 2016-01-19 11:58 - 00000949 _____ C:\Users\Stevo Marko\Desktop\osu!.lnk

2016-12-18 15:51 - 2016-12-18 15:51 - 00002674 _____ C:\Users\Stevo Marko\Documents\Mein Film.wlmp
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-17 21:53 - 2015-12-30 13:30 - 00000000 ____D C:\Program Files\Bitdefender Agent

2017-01-17 20:45 - 2016-03-15 14:41 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2017-01-17 19:52 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-sys.job

2017-01-17 19:36 - 2015-12-30 22:52 - 00000000 ____D C:\Program Files (x86)\Steam

2017-01-17 18:53 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job

2017-01-17 17:38 - 2016-12-09 17:49 - 00549112 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys

2017-01-17 13:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2017-01-17 13:25 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps

2017-01-16 22:16 - 2016-06-29 11:20 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-01-16 22:16 - 2016-04-27 06:13 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat

2017-01-16 22:16 - 2016-04-27 06:13 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat

2017-01-16 22:16 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF

2017-01-16 22:09 - 2016-06-29 11:20 - 00000000 ____D C:\ProgramData\NVIDIA

2017-01-16 22:09 - 2016-05-05 11:26 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios

2017-01-16 22:09 - 2016-04-27 06:48 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-01-16 22:09 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI

2017-01-16 22:08 - 2016-07-27 16:53 - 00000000 ____D C:\Users\Stevo Marko\AppData\LocalLow\Temp

2017-01-16 22:08 - 2015-12-30 13:40 - 00265195 _____ C:\bdlog.txt

2017-01-16 21:42 - 2016-10-06 15:23 - 00000008 __RSH C:\Users\Stevo Marko\ntuser.pol

2017-01-16 21:42 - 2016-10-06 15:21 - 00000000 ____D C:\AdwCleaner

2017-01-16 21:42 - 2016-10-06 14:58 - 00000008 __RSH C:\ProgramData\ntuser.pol

2017-01-16 21:42 - 2016-06-29 11:20 - 00000000 ____D C:\Users\Stevo Marko

2017-01-16 21:29 - 2016-11-06 17:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2017-01-16 13:03 - 2016-01-20 22:57 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Spotify

2017-01-16 12:52 - 2016-01-20 22:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Spotify

2017-01-14 13:34 - 2016-08-18 07:01 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\mymacro

2017-01-14 13:34 - 2016-01-08 22:46 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Unity

2017-01-14 13:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2017-01-14 11:12 - 2016-04-29 07:25 - 00000000 ____D C:\Users\Stevo Marko\Documents\My Games

2017-01-13 15:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache

2017-01-13 14:15 - 2015-10-30 07:28 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM

2017-01-11 23:30 - 2015-12-29 18:58 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\CrashDumps

2017-01-11 23:27 - 2016-10-12 22:15 - 00000000 ____D C:\Users\Stevo Marko\.android

2017-01-11 23:27 - 2016-03-11 13:42 - 00000000 ____D C:\Program Files (x86)\Wondershare

2017-01-11 22:27 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe

2017-01-11 20:18 - 2015-12-29 19:16 - 00000000 ____D C:\WINDOWS\system32\MRT

2017-01-11 20:17 - 2015-12-29 19:16 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-01-11 20:17 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2017-01-11 19:51 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files

2017-01-08 12:29 - 2015-12-30 19:43 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wichtige Programme

2017-01-07 15:27 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Skype

2017-01-07 15:25 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-01-07 12:54 - 2016-01-03 21:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\OBS

2017-01-03 23:25 - 2016-05-31 07:28 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Battle.net

2016-12-26 07:04 - 2016-06-29 11:20 - 00524288 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TMContainer00000000000000000001.regtrans-ms

2016-12-26 07:04 - 2016-06-29 11:20 - 00065536 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TM.blf

2016-12-26 02:29 - 2016-06-29 11:30 - 00000174 ___SH C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini

2016-12-25 22:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration

2016-12-25 22:21 - 2015-10-30 07:28 - 00000000 ___RD C:\Program Files

2016-12-25 01:28 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Saved Games

2016-12-24 23:33 - 2016-12-09 17:49 - 00395024 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe

2016-12-24 23:33 - 2016-05-15 22:06 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-22 23:54 - 2015-12-29 16:03 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-22 23:48 - 2015-10-30 08:26 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-12-22 23:48 - 2015-10-30 08:26 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-12-22 14:09 - 2016-06-29 11:20 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{7f07ac96-0c35-11e6-80cd-782bcb392fa8}.TMContainer00000000000000000001.regtrans-ms

2016-12-21 13:44 - 2016-04-25 17:19 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wooxy

2016-12-20 13:39 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Pictures

2016-12-19 19:15 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Documents

2016-12-19 19:13 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Downloads

2016-12-19 18:55 - 2015-12-30 17:55 - 00000000 ____D C:\Users\Stevo Marko\Desktop\PS2

2016-12-19 18:54 - 2016-07-25 11:01 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Musik

2016-12-19 17:22 - 2015-12-29 17:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2016-12-18 15:28 - 2016-12-10 00:51 - 00000000 ____D C:\Users\Stevo Marko\Documents\CELSYS_EN

2016-12-18 11:20 - 2015-12-29 18:39 - 00003628 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA

2016-12-18 11:20 - 2015-12-29 18:39 - 00003504 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore

2016-12-18 11:20 - 2009-07-14 04:20 - 00000000 ____D C:\WINDOWS\Tasks
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-07-13 17:57 - 2016-07-13 17:57 - 0215846 _____ () C:\Users\Stevo Marko\AppData\Roaming\data02.db

2016-04-01 01:20 - 2016-04-01 01:20 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Roaming\dc.ogt

2016-03-01 23:15 - 2016-03-01 23:15 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Local\Driver_LOM_8161Present.flag

2016-07-15 12:26 - 2016-07-15 12:26 - 0007605 _____ () C:\Users\Stevo Marko\AppData\Local\Resmon.ResmonCfg

2016-03-21 18:36 - 2016-03-21 18:36 - 0000003 _____ () C:\Users\Stevo Marko\AppData\Local\updater.log

2016-03-21 18:36 - 2016-08-13 09:57 - 0000424 _____ () C:\Users\Stevo Marko\AppData\Local\UserProducts.xml

2015-12-30 13:37 - 2015-12-30 13:37 - 0420258 _____ () C:\ProgramData\1451478906.bdinstall.bin

2016-02-29 15:37 - 2016-02-29 15:37 - 0025199 _____ () C:\ProgramData\1456756661.bdinstall.bin

2016-03-22 16:20 - 2016-03-22 16:20 - 0025913 _____ () C:\ProgramData\1458660001.bdinstall.bin

2016-03-22 17:20 - 2016-03-22 17:20 - 0025985 _____ () C:\ProgramData\1458663637.bdinstall.bin

2016-03-31 18:29 - 2016-03-31 18:29 - 0025985 _____ () C:\ProgramData\1459445363.bdinstall.bin

2016-06-14 14:01 - 2016-06-14 14:01 - 0026785 _____ () C:\ProgramData\1465909304.bdinstall.bin

2016-07-11 20:02 - 2016-07-11 20:02 - 0026211 _____ () C:\ProgramData\1468263746.bdinstall.bin

2016-09-20 12:03 - 2016-09-20 12:03 - 0026848 _____ () C:\ProgramData\agent.1474369414.bdinstall.bin

2016-11-02 15:47 - 2016-11-02 15:47 - 0028768 _____ () C:\ProgramData\agent.1478098058.bdinstall.bin
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-01-13 14:54
 

==================== Ende von FRST.txt ============================

--- --- ---FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-01-2017

durchgeführt von Stevo Marko (17-01-2017 21:55:59)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Windows 10 Home Version 1511 (X64) (2016-06-29 10:30:16)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4176748537-3526997621-266561101-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-4176748537-3526997621-266561101-503 - Limited - Disabled)

Gast (S-1-5-21-4176748537-3526997621-266561101-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-4176748537-3526997621-266561101-1002 - Limited - Enabled)

Stevo Marko (S-1-5-21-4176748537-3526997621-266561101-1000 - Administrator - Enabled) => C:\Users\Stevo Marko
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Bitdefender Virenschutz (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}

AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Bitdefender Firewall (Disabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated)

Ansel (Version: 372.70 - NVIDIA Corporation) Hidden

Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BioShock (HKLM\...\Steam App 7670) (Version:  - 2K Boston)

Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.23.1252 - Bitdefender)

Bitdefender Internet Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.24.1290 - Bitdefender)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)

Counter-Strike Global Offensive WaRzOnE (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\CSGO) (Version:  - CS WaRzOnE)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DigimonMasters Online (HKLM-x32\...\DigimonMasters) (Version:  - Move Games)

DigimonMasters Online Launcher (HKLM-x32\...\DigimonMasters Launcher) (Version:  - Move games)

Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)

DRAGON BALL XENOVERSE 2 (HKLM\...\Steam App 454650) (Version:  - QLOC)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

FileZilla Client 3.16.0 (HKLM-x32\...\FileZilla Client) (Version: 3.16.0 - Tim Kosse)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)

Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden

HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.5.5 - Hi-Rez Studios)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Horizon (HKLM-x32\...\{6c4303a5-5115-4cfd-bf48-8af0541cd082}) (Version: 2.8.26 - Daring Development Inc.)

Horizon (x32 Version: 2.8.26 - Daring Development Inc.) Hidden

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden

iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)

Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

Killer Bandwidth Control Filter Driver (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer E220x Drivers (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Network Manager (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.57.1123 - Rivet Networks)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)

Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

MorphVOX Pro (HKLM-x32\...\{5a385481-7640-4f10-8ca5-04a2030b4623}) (Version: 4.4.65.20341 - Screaming Bee)

MorphVOX Pro (x32 Version: 4.4.65.20341 - Screaming Bee) Hidden

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.70 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.70 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

osu! (HKLM-x32\...\{9e3ba8ec-0407-491b-98a7-97354f85bb67}) (Version: latest - ppy Pty Ltd)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)

PaintTool SAI Ver.1 (HKLM-x32\...\PaintToolSAI) (Version:  - )

PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version:  - )

Pokémon Trading Card Game Online (HKLM-x32\...\{E56D3759-1795-4813-8FC7-CA82C2FECCD8}) (Version: 2.35.0 - The Pokémon Company International)

ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)

Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)

SMITE (HKLM\...\Steam App 386360) (Version:  - Hi-Rez Studios)

SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.22.9634 - SoftEther VPN Project)

South Park™: The Stick of Truth™ (HKLM\...\Steam App 213670) (Version:  - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Subnautica (HKLM\...\Steam App 264710) (Version:  - Unknown Worlds Entertainment)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)

The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.12.1.0 - GOG.com)

TP-LINK Archer T2U_T2UH Driver (HKLM-x32\...\{F2496892-5295-4208-AB93-21F1AFD07C97}) (Version: 1.3.1 - TP-LINK)

Unity Web Player (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)

Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VSDC Free Video Editor Version 4.0.1.475 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 4.0.1.475 - Flash-Integro LLC)

Warface (HKLM\...\Steam App 291480) (Version:  - Crytek)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.30 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)

Wooxy version 1.4.1 (HKLM-x32\...\{C183CD14-47D8-4F98-AF06-4744CB834C8E}_is1) (Version: 1.4.1 - Chewy)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0759F0B1-90B3-4746-B00E-09A301E2770D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {0F0872CF-A603-49C6-AB8F-9EE847D14E71} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {14B6D487-6E40-4313-A845-F0B7A09D2AFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-15] (Adobe Systems Incorporated)

Task: {1A04C0A1-83B7-4BB0-8A10-1EEEE6B54D7D} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeReminderTask => C:\WINDOWS\System32\GWX\GWX.exe

Task: {2509576E-4FD3-4243-961C-307E453CEABA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {2E96D9AC-4152-428A-B301-6651D27A38A1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {342A5FC5-6DE9-4A7B-8283-59F3C68EF4EE} - System32\Tasks\{DE8BA068-7282-45FA-94E4-4A63CDD3A835} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{F2496892-5295-4208-AB93-21F1AFD07C97}\setup.exe" -c -runfromtemp -l0x0009 -removeonly DriverOnly

Task: {4089AD54-FB80-40C5-A7E9-FDF3EE9BA971} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {471EEE60-5C6F-4196-9065-C95D181EFE7A} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {48EAF5C3-3110-47DA-8008-AC8C1326A6EE} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {519E9215-B5AA-457B-A09B-69481A78045E} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {57D666D1-BE65-4CD4-B6D5-F397645CEEA6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)

Task: {68EA38E0-B451-4B69-8D5E-DB33A1C1E605} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo)

Task: {6E814AB7-AD84-45FB-A65B-98D79F03ABC7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {6E86CF00-B6BC-42FE-A820-A358825CD1EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {70197F69-8CF9-48CE-8374-22BD9F6E36DC} - System32\Tasks\{5B18B0C3-296E-4D4C-93E3-1304019C0798} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {70EE8BA2-8BA5-4868-8594-A5B6E961ACC4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {86BE5EAE-75B7-46BA-A7B3-8B69FF095814} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8F8F047D-0D76-4B51-A1CD-DCD5167E8A3A} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {91B14D1B-74C2-40C8-9F2F-1F54AEE3CAED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {9B467767-0347-4C0E-BFB6-64C1ACBAA4F4} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9F0DA49B-71A4-4151-9CA5-17826B03B4F5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {9F50B7B8-EA2E-4CF1-BAA6-2B4A58EF5826} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {AD33D397-A476-455F-ABF4-C4DD2894FDE1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {AE1C94EA-1438-45A8-9855-76AE7ED00F2A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {BDE9480B-5023-4CF0-A0FD-34071B2AB983} - System32\Tasks\{F520FBE6-BB86-4525-AAC7-C5EF190B28C3} => Chrome.exe hxxp://ui.skype.com/ui/0/7.25.0.106/de/abandoninstall?page=tsProgressBar

Task: {C6D9160F-1D62-4EDC-9538-E0BF3E0EFDFD} - System32\Tasks\{D4DEABE0-663F-4F5F-A024-2563CCA8A1FD} => Chrome.exe hxxp://ui.skype.com/ui/0/7.26.0.101/de/abandoninstall?page=tsProgressBar

Task: {CD508CB9-54F5-4BAE-9DCA-4F5E603228FD} - System32\Tasks\{1828F1DF-60FC-44CE-8771-1DE6A2F9154A} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {CD977E74-498D-4460-857F-C375C6603938} - System32\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {D0929682-C0C9-402F-AF41-986D8C7883C9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

Task: {D1E91C75-4A13-491A-BFC4-BC92EB4A44CA} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {DB95F336-3DBD-46B5-8FA4-7B8064A6AAA2} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-10-21] (Bitdefender)

Task: {E1D7655F-F57F-4147-9C68-18490AB567C3} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {E8E85E99-3D2C-4A41-A328-AAF7DBE7507A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F3BAFDC9-8CD6-4E5B-AD34-8F147A700DBC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F4D88F61-06AE-4416-9583-0EA9E9D16046} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехрlоrеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
 

ShortcutWithArgument: C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com

ShortcutWithArgument: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames\DigimonMastersOnline\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-12-30 13:37 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll

2016-11-21 16:13 - 2016-11-21 18:15 - 01008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpbr.mdl

2016-11-21 18:15 - 2016-11-21 18:15 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpdsp.mdl

2016-11-21 18:16 - 2016-11-21 18:16 - 03202816 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpph.mdl

2016-11-21 18:16 - 2016-11-21 18:16 - 01542976 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttprbl.mdl

2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-01 09:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2016-06-29 11:20 - 2016-08-25 22:12 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-08-23 13:07 - 2016-08-23 13:07 - 01864384 _____ () C:\Users\Stevo Marko\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2016-04-27 06:17 - 2016-04-27 06:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-07-13 18:52 - 2016-07-01 04:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-11-08 22:28 - 2016-10-25 05:49 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-08 22:28 - 2016-10-25 05:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-08 22:28 - 2016-10-25 05:45 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-08 22:28 - 2016-10-25 05:48 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2016-02-12 22:13 - 2016-02-12 22:13 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll

2016-05-11 14:55 - 2010-11-04 10:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll

2016-03-11 13:43 - 2016-10-08 16:48 - 01506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2016-03-11 13:43 - 2016-07-21 10:54 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2017-01-17 20:58 - 00000002 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Stevo Marko\Desktop\Unknown\forest-wallpaper-8.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GalaxyClient"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GEEQzxIb"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "BlueStacks Agent"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808

FirewallRules: [{131D4802-AE73-429F-A630-9D949BE8CFA8}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [{0FF91854-7C8D-4DF1-B250-347DC65F9740}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [UDP Query User{60B15D7E-EB7C-488B-B45E-D757ACD59E11}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [TCP Query User{51C2FF2D-46E0-4523-937E-71C911349F35}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [{E523C989-860C-4A67-9A39-25A9BD0BE308}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{B7D151CB-34FE-4C7C-AE49-2793F4865FAC}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{8187B945-CCD7-4C59-A883-1237FA318370}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{D0171CA3-7609-4B38-B881-7C9FCBCFCE21}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{27340615-F02E-47C0-8CF0-8B3279322E93}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{2724FDDF-45D6-4B10-B208-94C667634168}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [UDP Query User{D1FA4666-9084-4903-97C7-804A3242E312}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [TCP Query User{C620D03D-D994-4494-9969-5931AF373D2A}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [{D11F6D2F-68D8-4BDB-9BD7-E7A8BB3E2831}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{306E6120-22CF-4D26-870F-93591059E33C}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{F5D7440B-68DC-476B-84D7-03607A13B1E0}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{82657ACE-F50F-4063-AE5C-4217538E7A19}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{163638ED-11C3-42C3-86AD-A336C39016BC}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{588A1AA3-C51E-4354-A74E-14BD0D83DEE9}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{FFF7CE3B-7F74-4F5D-9464-2E6175340B26}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{3E92E1F3-D28F-4B04-8AC3-C2BF18CBC571}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{6B3CFCBF-F9E7-42F8-8C5E-6A32713E30A4}] => LPort=1900

FirewallRules: [{CFF966DA-B632-4550-B064-7E197006EC5D}] => LPort=2869

FirewallRules: [{3A772195-07B8-4C4E-9499-E0C0C6B07B73}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [UDP Query User{FB787A40-AF71-4281-B3CB-D9A1CB989724}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{0A955DBF-AE41-4520-9D88-5FC8BFDE3FB8}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{814537C0-FA96-4D6A-B2C7-B69F861F5A29}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{A481A116-0DF2-4FB1-981C-4F01F200DC03}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [{696CAAB7-7302-442E-888D-F316F4331B97}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{79A35FCC-00C8-47EA-97E4-3FA8F62DD81F}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{34F930BA-2B08-4FA5-A630-FDB154F4A5C7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{544C4B32-999A-4E5B-A78D-F5B1514D16F2}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{2B825826-EDBF-4579-AFBD-8B000852538E}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{90DF9797-5823-46E9-A4DC-6C14CDEB6AF6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{8AAA6E03-4336-4DF5-8672-717227A1B804}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{28FBF77E-8A6F-439B-A13D-F41A7E9F0DA0}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{68B2C8C7-B375-404B-9867-A75E172EB770}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{9937ED6C-5601-4649-887B-92C93B7D3BDA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{178D6B1C-3904-4023-AA6A-A2C693D36810}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{3ABA475D-92D7-4DA5-892C-1F59260A3066}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{2C0ED73B-E102-4933-9FED-46388D33BFFA}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{39A84192-A46C-4E0F-91B0-9A11D377045C}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [TCP Query User{47A8427F-DA86-49FE-92D8-D974293BB92D}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{C8A60F67-88A9-4C2D-84AA-9389DF3A937F}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [TCP Query User{7D6C3EE6-916C-4495-9814-94CDA525B128}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [UDP Query User{0B3D52EF-3E49-4A2B-AAE0-EFA137FE431D}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [TCP Query User{7A949890-0653-485D-9917-A47C59848E22}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [UDP Query User{A8AF8AE8-D7C7-4348-85F6-BC3558E91F72}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [TCP Query User{C539BBF1-416B-4BED-9EF9-7EC95704B6A5}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{BF9B1AF9-789D-44F0-BEA6-8D43B8A506F3}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{F163DDD8-1ACE-495A-9277-42662553A358}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{87D88FE3-5708-4FE1-A410-28EE491556D8}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{291BCC8C-D723-45A6-BEDA-68B576D08EBC}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{974D685C-AC7F-42D6-8AE5-BAFCD5A5F09E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{93EA6BE3-46A0-4386-B628-77E077BC19E9}] => E:\iTunes\iTunes.exe

FirewallRules: [TCP Query User{C6931454-D8BC-408E-8580-17F1F912E6CC}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{047D3345-5768-4BB9-9585-B06F033F14B4}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [{475913B2-3BEB-45ED-A06B-D7E25F3DEDC1}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [TCP Query User{26954AD4-C1AB-41DF-9084-E2FB1FB12E66}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{65F07ACA-1030-4283-8B1D-B5C858901795}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{28E3540D-41EC-4FF8-9E76-C3753D9D8C12}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{F28E5BFC-F054-4FB1-8605-1EAA9B98E265}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{612D9B70-03FC-4F13-A76E-9A378F0AEC3C}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{A20D8834-3817-41FF-B08A-53BB7241555B}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{C43B9841-0042-47C9-A8EA-68E4773166DA}] => C:\Program Files (x86)\Nox\bin\Nox.exe

FirewallRules: [{AB60493C-C540-4EF0-AB6F-CB2723FD9C79}] => C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe

FirewallRules: [{66E19697-C4D0-4FE8-9CB1-9DE9E383991E}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{A7C49B62-CD7C-4A8E-A1F9-02F6589D2D9C}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{201837A4-3840-484C-96EF-8FB837F81056}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{B99CAC97-8CCB-4B73-AD79-A59D25662205}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{BD34A82B-C290-400D-8369-88E5214597A2}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient.exe

FirewallRules: [{FDACF623-1E3B-41CB-9255-16F985E770D4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{AAC1AF14-377F-4AD6-BA15-49BEE643EAB4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{4E6BB467-F3C3-41EB-92DA-2463ED42563E}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd.exe

FirewallRules: [TCP Query User{6C2D550E-977B-419F-9CFE-6976E834946D}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [UDP Query User{46A3FDF3-4DA1-436E-A6D8-5942A88A7C41}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [{D8774863-1344-4E05-AA28-946AD79B2873}] => C:\Users\Stevo Marko\AppData\Local\Amigo\Application\amigo.exe

FirewallRules: [{5A5C5CB6-19CA-470D-AE07-04FCCD871B38}] => E:\KDMO\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{9B08035F-2213-4600-A78A-8E65B8D6A7CA}] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{D47FEC28-B6A5-4449-B670-41873B28DF38}] => E:\KDMO\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{345B93FC-08C1-4A2A-84B3-07C9B48FE060}] => E:\KDMO\SoftEther VPN Client\vpncmd.exe

FirewallRules: [{DA5D5502-CF62-4857-8F85-AE165E11B3F7}] => E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{3AEE9EE4-B12E-48EB-B371-D4D3D97B20B1}] => E:\KDMO\SoftEther VPN Client\vpnclient.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (01/17/2017 03:58:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname StevoMarko-PC.local already in use; will try StevoMarko-PC-2.local instead
 

Error: (01/17/2017 03:58:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 StevoMarko-PC.local. Addr 192.168.2.51
 

Error: (01/17/2017 03:58:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   16 StevoMarko-PC.local. AAAA 2003:006B:0536:FF70:0417:0BD9:D1AF:63B2
 

Error: (01/16/2017 11:25:25 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756

Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.672, Zeitstempel: 0x580ef23f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000007ccfc

ID des fehlerhaften Prozesses: 0x5c

Startzeit der fehlerhaften Anwendung: 0x01d2703ccd65ad62

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\combase.dll

Berichtskennung: 55bde20a-efb5-4102-a07d-e7fef33e0185

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/16/2017 11:06:44 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_a2d6b3cea53ff843.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_ea83eaa5b9bc2149.manifest.
 

Error: (01/16/2017 11:06:23 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\logitech gaming software\drivers\installers\CallScanReg.exe".

Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (01/16/2017 11:06:21 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_a2d6b3cea53ff843.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_ea83eaa5b9bc2149.manifest.
 

Error: (01/16/2017 11:06:13 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_a2d6b3cea53ff843.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_ea83eaa5b9bc2149.manifest.
 

Error: (01/16/2017 10:12:18 PM) (Source: SideBySide) (EventID: 33) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "c:\program files\logitech gaming software\drivers\installers\CallScanReg.exe".

Die abhängige Assemblierung "Microsoft.VC90.MFC,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (01/16/2017 10:12:13 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_a2d6b3cea53ff843.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_ea83eaa5b9bc2149.manifest.
 
 

Systemfehler:

=============

Error: (01/17/2017 09:27:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_9c02bd" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 09:27:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _9c02bd" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 09:27:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_9c02bd" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 09:27:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_9c02bd" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 02:01:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_67fa39" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 02:01:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _67fa39" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 02:01:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_67fa39" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 02:01:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_67fa39" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 11:25:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_2d67e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/16/2017 11:25:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _2d67e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

CodeIntegrity:

===================================

  Date: 2017-01-14 11:12:37.997

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2017-01-11 22:31:20.486

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-17 13:35:54.795

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-11 11:59:18.678

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-10 15:55:36.900

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-29 08:55:41.824

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-16 17:59:09.570

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-15 16:39:45.951

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-16 12:05:23.430

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-02 07:37:05.993

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz

Prozentuale Nutzung des RAM: 31%

Installierter physikalischer RAM: 8143.64 MB

Verfügbarer physikalischer RAM: 5597.36 MB

Summe virtueller Speicher: 16335.64 MB

Verfügbarer virtueller Speicher: 13609.34 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:111.69 GB) (Free:49.87 GB) NTFS

Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:668.94 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9961C39A)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 9397806C)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

--- --- ---

burningice

18.01.2017 17:46

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехрlоrеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
 

E:\Downloads\csgo mod menu wall hack colors aimbot 2016 download free.rar

E:\Downloads\CSGO-Multihack.rar

E:\Downloads\EZfrags_csgo_hack_cheat_2016_free__5bUNDETECTED_5d.rar

E:\Downloads\GlobalHack_RU__EU__13.01.2017_.zip

E:\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe

E:\Downloads\MobileTrans - CHIP-Installer.exe

E:\Downloads\PaintTool SAI - CHIP-Installer.exe

E:\Downloads\WWW.OLDSCHOOLHACK.ME_EZFRAGS_CSGO_MULTI_V8_PUBLIC_PRIVATE.ZIP

E:\Downloads\[CSGO]Aimbot and wallhack.rar

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Wichtig: Speichere die Datei im UTF-8 Format ab, da sie unsichtbare "Sonderzeichen" enthält, die sonst nicht mit gespeichert werden...

Schritt: 2
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

Frage

Hast du noch irgendwelche Probleme mit deinem Rechner?

Die Logfiles deuten stark darauf hin, dass du nicht legal erworbene Software einsetzt. Zudem sind Cracks und Patches aus dubioser Quelle sehr oft mit Schädlingen versehen, womit man sich also fast vorsätzlich infiziert.

stevoboot

18.01.2017 19:37

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-01-2017
durchgeführt von Stevo Marko (18-01-2017 19:31:03) Run:3
Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen
Geladene Profile: Stevo Marko (Verfügbare Profile: Stevo Marko & DefaultAppPool)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Int?rn?t ???l?r?r.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic
Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\G??gl? ?hr?m?.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G??gl? ?hr?m?.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
Shortcut: C:\Users\Public\Desktop\G??gl? ?hr?m?.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

E:\Downloads\csgo mod menu wall hack colors aimbot 2016 download free.rar
E:\Downloads\CSGO-Multihack.rar
E:\Downloads\EZfrags_csgo_hack_cheat_2016_free__5bUNDETECTED_5d.rar
E:\Downloads\GlobalHack_RU__EU__13.01.2017_.zip
E:\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
E:\Downloads\MobileTrans - CHIP-Installer.exe
E:\Downloads\PaintTool SAI - CHIP-Installer.exe
E:\Downloads\WWW.OLDSCHOOLHACK.ME_EZFRAGS_CSGO_MULTI_V8_PUBLIC_PRIVATE.ZIP
E:\Downloads\[CSGO]Aimbot and wallhack.rar
emptytemp:
*****************

"C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Int?rn?t ???l?r?r.lnk" => Konnte nicht verschoben werden.
"C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\G??gl? ?hr?m?.lnk" => Konnte nicht verschoben werden.
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G??gl? ?hr?m?.lnk" => Konnte nicht verschoben werden.
"C:\Users\Public\Desktop\G??gl? ?hr?m?.lnk" => Konnte nicht verschoben werden.
"E:\Downloads\csgo mod menu wall hack colors aimbot 2016 download free.rar" => nicht gefunden.
"E:\Downloads\CSGO-Multihack.rar" => nicht gefunden.
"E:\Downloads\EZfrags_csgo_hack_cheat_2016_free__5bUNDETECTED_5d.rar" => nicht gefunden.
"E:\Downloads\GlobalHack_RU__EU__13.01.2017_.zip" => nicht gefunden.
"E:\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe" => nicht gefunden.
"E:\Downloads\MobileTrans - CHIP-Installer.exe" => nicht gefunden.
"E:\Downloads\PaintTool SAI - CHIP-Installer.exe" => nicht gefunden.
"E:\Downloads\WWW.OLDSCHOOLHACK.ME_EZFRAGS_CSGO_MULTI_V8_PUBLIC_PRIVATE.ZIP" => nicht gefunden.
"E:\Downloads\[CSGO]Aimbot and wallhack.rar" => nicht gefunden.

=========== EmptyTemp: ==========

BITS transfer queue => 569793 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => -14952 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 0 B
Edge => 0 B
Chrome => 414395247 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 438 B
LocalService => 2438 B
NetworkService => 0 B
Stevo Marko => 28261537 B
DefaultAppPool => 0 B

RecycleBin => 0 B
EmptyTemp: => 422.7 MB temporäre Dateien entfernt.

================================

Das System musste neu gestartet werden.

==== Ende von Fixlog 19:31:09 ====
FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-01-2017

durchgeführt von Stevo Marko (Administrator) auf STEVOMARKO-PC (18-01-2017 19:35:20)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Geladene Profile: Stevo Marko (Verfügbare Profile: Stevo Marko & DefaultAppPool)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Scarlet.Crush Productions) C:\PS3 Con\ScpServer\bin\ScpService.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Apple Inc.) E:\iTunes\iTunesHelper.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe

(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1654672 2016-11-24] (Bitdefender)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.)

HKLM\...\Run: [iTunesHelper] => E:\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)

HKLM\...\Run: [SoftEther VPN Client UI Helper] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()

HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe [1451544 2016-11-24] (Bitdefender)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Spotify Web Helper] => C:\Users\Stevo Marko\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-25] (Spotify Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [GalaxyClient] => E:\GalaxyClient\GalaxyClient.exe [3946048 2016-11-03] (GOG.com)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-03-01]

ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2017-01-15]

ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{133eadeb-27bc-4780-8ca1-bf5574c8ab7f}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{732f7719-fb15-4fe4-8a4f-461a226b8911}: [DhcpNameServer] 192.168.2.1

ManualProxies: 
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://digimonmasters.com/

SearchScopes: HKU\S-1-5-21-4176748537-3526997621-266561101-1000 -> {0BAAF030-AF47-4396-B1B1-06A8364F8F8B} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

DPF: HKLM-x32 {3FED5059-7AA5-46D9-902B-124C8CD9A106} hxxp://www.digimonmasters.com/inc/ActiveX/launcher/20140731_2/Digitalic%20Launcher.cab
 

FireFox:

========

FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2015-12-16]

FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-12-16] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2016-05-05] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin HKU\S-1-5-21-4176748537-3526997621-266561101-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Stevo Marko\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://google.de/

CHR StartupUrls: Default -> "hxxps://www.google.de/"

CHR Profile: C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default [2017-01-18]

CHR Extension: (Google Drive) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-29]

CHR Extension: (YouTube) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-29]

CHR Extension: (Adblock Plus) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]

CHR Extension: (Google-Suche) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-29]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-18]

CHR Extension: (Google Mail) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-29]

CHR Extension: (Chrome Media Router) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-02]

CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1362464 2016-05-10] ()

R2 Ds3Service; C:\PS3 Con\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert]

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395024 2016-12-24] (EasyAntiCheat Ltd)

S3 GalaxyClientService; E:\GalaxyClient\GalaxyClientService.exe [284224 2016-11-03] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6581824 2016-10-28] (GOG.com)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [Datei ist nicht signiert]

R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [448000 2015-12-14] (Rivet Networks) [Datei ist nicht signiert]

R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5660512 2016-08-16] (INCA Internet Co., Ltd.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1100392 2016-10-28] (Bitdefender)

R2 SEVPNCLIENT; E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-11-24] (Bitdefender)

R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1695720 2016-11-24] (Bitdefender)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-10-25] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus.sys [20992 2017-01-03] (LG Electronics Inc.)

S3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [878072 2016-11-01] (BitDefender)

S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23568 2016-06-29] (Bitdefender)

R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-29] (BitDefender LLC)

S4 BDVEDISK; C:\WINDOWS\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)

R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bflwfx64.sys [147528 2015-12-11] (Rivet Networks, LLC.)

R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [182944 2016-11-24] (BitDefender LLC)

R0 ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [299816 2016-06-28] (Bitdefender)

R3 Ke2200; C:\WINDOWS\System32\drivers\e22w7x64.sys [125488 2015-03-18] (Qualcomm Atheros, Inc.)

R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)

R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)

R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2017-01-11] (SoftEther Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)

R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2017-01-15] (SoftEther Corporation)

S3 taphss6; C:\WINDOWS\System32\DRIVERS\taphss6.sys [42064 2016-04-19] (Anchorfree Inc.)

R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [520032 2016-06-28] (BitDefender S.R.L.)

R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2016-12-25] (BigNox Corporation)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [36808 2016-10-26] (Wellbia.com Co., Ltd.)

U3 idsvc; kein ImagePath

U3 wpcsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-18 19:22 - 2017-01-18 19:22 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Mark of the Ninja.url

2017-01-16 22:11 - 2017-01-16 22:11 - 00000000 ____D C:\Program Files (x86)\ESET

2017-01-16 21:00 - 2017-01-18 19:35 - 00000000 ____D C:\FRST

2017-01-16 20:59 - 2017-01-18 19:31 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Virenkillen

2017-01-15 18:46 - 2017-01-15 18:46 - 00000965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\SoftEther VPN Client Manager.lnk

2017-01-15 18:46 - 2017-01-15 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftEther VPN Client

2017-01-11 22:44 - 2016-08-16 11:40 - 05660512 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\GameMon.des

2017-01-11 22:43 - 2017-01-11 22:43 - 00000000 ____D C:\Program Files\Common Files\INCA Shared

2017-01-11 22:43 - 2004-12-31 07:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\npptNT2.sys

2017-01-11 22:43 - 2003-07-16 16:17 - 00005174 _____ C:\WINDOWS\SysWOW64\nppt9x.vxd

2017-01-11 22:09 - 2017-01-11 22:09 - 00001283 _____ C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk

2017-01-11 22:09 - 2017-01-11 22:09 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames

2017-01-11 20:00 - 2017-01-11 22:02 - 00000000 ____D C:\WINDOWS\SysWOW64\mgrlist

2017-01-11 19:44 - 2017-01-11 19:44 - 00038216 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\Neo6_x64_VPN.sys

2017-01-11 19:34 - 2017-01-15 18:46 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys

2017-01-11 19:34 - 2017-01-11 19:34 - 00143816 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\WINDOWS\system32\vpncmd.exe

2017-01-11 19:34 - 2017-01-11 19:34 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys.old1

2017-01-11 19:31 - 2017-01-15 18:48 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Vpn

2017-01-11 13:37 - 2016-12-21 10:01 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2017-01-11 13:37 - 2016-12-21 10:01 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2017-01-11 13:37 - 2016-12-21 09:25 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2017-01-11 13:37 - 2016-12-21 08:18 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2017-01-11 13:37 - 2016-12-21 07:56 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2017-01-11 13:37 - 2016-12-21 06:41 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:39 - 22373376 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 06:15 - 07839232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-01-11 13:37 - 2016-12-21 06:06 - 03663872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:03 - 18671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 05:48 - 05658624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-01-11 13:37 - 2016-10-25 07:55 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2017-01-07 15:27 - 2017-01-16 21:39 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Skype

2017-01-07 15:27 - 2017-01-07 15:27 - 00000000 ____D C:\Program Files (x86)\Skype

2017-01-03 01:33 - 2017-01-03 01:33 - 00020992 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetbus.sys

2017-01-03 01:32 - 2017-01-03 01:32 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\HMYGSetting

2017-01-03 01:29 - 2017-01-11 23:27 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Wondershare

2017-01-03 01:24 - 2017-01-03 01:29 - 00000000 ____D C:\Users\Public\Documents\Wondershare

2016-12-25 22:23 - 2016-12-25 22:23 - 00000041 _____ C:\Users\Stevo Marko\inst.ini

2016-12-25 22:23 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\Nox_share

2016-12-25 22:21 - 2017-01-11 23:30 - 00021182 _____ C:\WINDOWS\DPINST.LOG

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ___DC C:\WINDOWS\system32\DRVSTORE

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ____D C:\Program Files (x86)\Nox

2016-12-25 22:21 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\vmlogs

2016-12-25 22:21 - 2016-12-25 22:21 - 00253384 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\XQHDrv.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00127432 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00000000 ____D C:\Program Files\DIFX

2016-12-25 22:19 - 2017-01-11 23:30 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Nox

2016-12-25 01:23 - 2017-01-17 19:36 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\u-launcher

2016-12-25 01:23 - 2017-01-17 19:36 - 00000000 ____D C:\ProgramData\GFACE

2016-12-24 23:33 - 2016-12-24 23:33 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Warface.url

2016-12-23 21:58 - 2016-12-23 21:59 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\XV2INS

2016-12-23 11:57 - 2017-01-18 19:31 - 00000000 ___SH C:\pagefile.sys

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Bee

2016-12-21 19:45 - 2016-12-21 19:45 - 00000673 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2016-12-21 19:45 - 2016-12-21 19:45 - 00000623 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk

2016-12-21 14:14 - 2016-12-25 00:23 - 00000595 _____ C:\Users\Stevo Marko\Desktop\Battle.net.lnk

2016-12-21 14:14 - 2016-12-20 16:31 - 00000222 _____ C:\Users\Stevo Marko\Desktop\DRAGON BALL XENOVERSE 2.url

2016-12-21 14:14 - 2016-11-30 16:35 - 00000815 _____ C:\Users\Stevo Marko\Desktop\Counter-Strike Global Offensive WaRzOnE.lnk

2016-12-21 14:14 - 2016-11-24 13:57 - 00001248 _____ C:\Users\Stevo Marko\Desktop\LeagueClient  Alpha.lnk

2016-12-21 14:14 - 2016-09-26 18:42 - 00000790 _____ C:\Users\Stevo Marko\Desktop\Pokémon Trading Card Game Online.lnk

2016-12-21 14:14 - 2016-06-16 21:15 - 00000222 _____ C:\Users\Stevo Marko\Desktop\ONE PIECE PIRATE WARRIORS 3.url

2016-12-21 14:14 - 2016-05-11 22:02 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Rocket League.url

2016-12-21 14:14 - 2016-05-10 21:24 - 00000222 _____ C:\Users\Stevo Marko\Desktop\South Park The Stick of Truth.url

2016-12-21 14:14 - 2016-05-10 21:22 - 00000220 _____ C:\Users\Stevo Marko\Desktop\BioShock.url

2016-12-21 14:14 - 2016-05-10 21:21 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Subnautica.url

2016-12-21 14:14 - 2016-05-10 21:18 - 00000222 _____ C:\Users\Stevo Marko\Desktop\SMITE.url

2016-12-21 14:14 - 2016-01-20 22:57 - 00001840 _____ C:\Users\Stevo Marko\Desktop\Spotify.lnk

2016-12-21 14:14 - 2016-01-19 11:58 - 00000949 _____ C:\Users\Stevo Marko\Desktop\osu!.lnk
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-18 19:32 - 2015-12-30 22:52 - 00000000 ____D C:\Program Files (x86)\Steam

2017-01-18 19:32 - 2015-12-30 13:30 - 00000000 ____D C:\Program Files\Bitdefender Agent

2017-01-18 19:31 - 2016-06-29 11:20 - 00000000 ____D C:\ProgramData\NVIDIA

2017-01-18 19:31 - 2016-05-05 11:26 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios

2017-01-18 19:31 - 2016-04-27 06:48 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-01-18 19:31 - 2015-12-30 13:40 - 00265978 _____ C:\bdlog.txt

2017-01-18 19:31 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI

2017-01-18 19:30 - 2015-12-29 18:58 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\CrashDumps

2017-01-18 19:09 - 2016-01-20 22:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Spotify

2017-01-18 19:04 - 2016-01-20 22:57 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Spotify

2017-01-18 14:53 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job

2017-01-18 14:45 - 2016-03-15 14:41 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2017-01-18 14:02 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps

2017-01-18 14:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2017-01-18 11:52 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-sys.job

2017-01-17 17:38 - 2016-12-09 17:49 - 00549112 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys

2017-01-16 22:16 - 2016-06-29 11:20 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-01-16 22:16 - 2016-04-27 06:13 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat

2017-01-16 22:16 - 2016-04-27 06:13 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat

2017-01-16 22:16 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF

2017-01-16 22:08 - 2016-07-27 16:53 - 00000000 ____D C:\Users\Stevo Marko\AppData\LocalLow\Temp

2017-01-16 21:42 - 2016-10-06 15:23 - 00000008 __RSH C:\Users\Stevo Marko\ntuser.pol

2017-01-16 21:42 - 2016-10-06 15:21 - 00000000 ____D C:\AdwCleaner

2017-01-16 21:42 - 2016-10-06 14:58 - 00000008 __RSH C:\ProgramData\ntuser.pol

2017-01-16 21:42 - 2016-06-29 11:20 - 00000000 ____D C:\Users\Stevo Marko

2017-01-16 21:29 - 2016-11-06 17:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2017-01-14 13:34 - 2016-08-18 07:01 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\mymacro

2017-01-14 13:34 - 2016-01-08 22:46 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Unity

2017-01-14 13:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2017-01-14 11:12 - 2016-04-29 07:25 - 00000000 ____D C:\Users\Stevo Marko\Documents\My Games

2017-01-13 15:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache

2017-01-13 14:15 - 2015-10-30 07:28 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM

2017-01-11 23:27 - 2016-10-12 22:15 - 00000000 ____D C:\Users\Stevo Marko\.android

2017-01-11 23:27 - 2016-03-11 13:42 - 00000000 ____D C:\Program Files (x86)\Wondershare

2017-01-11 22:27 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe

2017-01-11 20:18 - 2015-12-29 19:16 - 00000000 ____D C:\WINDOWS\system32\MRT

2017-01-11 20:17 - 2015-12-29 19:16 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-01-11 20:17 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2017-01-11 19:51 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files

2017-01-08 12:29 - 2015-12-30 19:43 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wichtige Programme

2017-01-07 15:27 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Skype

2017-01-07 15:25 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-01-07 12:54 - 2016-01-03 21:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\OBS

2017-01-03 23:25 - 2016-05-31 07:28 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Battle.net

2016-12-26 07:04 - 2016-06-29 11:20 - 00524288 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TMContainer00000000000000000001.regtrans-ms

2016-12-26 07:04 - 2016-06-29 11:20 - 00065536 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TM.blf

2016-12-26 02:29 - 2016-06-29 11:30 - 00000174 ___SH C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini

2016-12-25 22:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration

2016-12-25 22:21 - 2015-10-30 07:28 - 00000000 ___RD C:\Program Files

2016-12-25 01:28 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Saved Games

2016-12-24 23:33 - 2016-12-09 17:49 - 00395024 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe

2016-12-24 23:33 - 2016-05-15 22:06 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-22 23:54 - 2015-12-29 16:03 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-22 23:48 - 2015-10-30 08:26 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-12-22 23:48 - 2015-10-30 08:26 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-12-22 14:09 - 2016-06-29 11:20 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{7f07ac96-0c35-11e6-80cd-782bcb392fa8}.TMContainer00000000000000000001.regtrans-ms

2016-12-21 13:44 - 2016-04-25 17:19 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wooxy

2016-12-20 13:39 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Pictures

2016-12-19 19:15 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Documents

2016-12-19 19:13 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Downloads

2016-12-19 18:55 - 2015-12-30 17:55 - 00000000 ____D C:\Users\Stevo Marko\Desktop\PS2

2016-12-19 18:54 - 2016-07-25 11:01 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Musik

2016-12-19 17:22 - 2015-12-29 17:19 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-07-13 17:57 - 2016-07-13 17:57 - 0215846 _____ () C:\Users\Stevo Marko\AppData\Roaming\data02.db

2016-04-01 01:20 - 2016-04-01 01:20 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Roaming\dc.ogt

2016-03-01 23:15 - 2016-03-01 23:15 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Local\Driver_LOM_8161Present.flag

2016-07-15 12:26 - 2016-07-15 12:26 - 0007605 _____ () C:\Users\Stevo Marko\AppData\Local\Resmon.ResmonCfg

2016-03-21 18:36 - 2016-03-21 18:36 - 0000003 _____ () C:\Users\Stevo Marko\AppData\Local\updater.log

2016-03-21 18:36 - 2016-08-13 09:57 - 0000424 _____ () C:\Users\Stevo Marko\AppData\Local\UserProducts.xml

2015-12-30 13:37 - 2015-12-30 13:37 - 0420258 _____ () C:\ProgramData\1451478906.bdinstall.bin

2016-02-29 15:37 - 2016-02-29 15:37 - 0025199 _____ () C:\ProgramData\1456756661.bdinstall.bin

2016-03-22 16:20 - 2016-03-22 16:20 - 0025913 _____ () C:\ProgramData\1458660001.bdinstall.bin

2016-03-22 17:20 - 2016-03-22 17:20 - 0025985 _____ () C:\ProgramData\1458663637.bdinstall.bin

2016-03-31 18:29 - 2016-03-31 18:29 - 0025985 _____ () C:\ProgramData\1459445363.bdinstall.bin

2016-06-14 14:01 - 2016-06-14 14:01 - 0026785 _____ () C:\ProgramData\1465909304.bdinstall.bin

2016-07-11 20:02 - 2016-07-11 20:02 - 0026211 _____ () C:\ProgramData\1468263746.bdinstall.bin

2016-09-20 12:03 - 2016-09-20 12:03 - 0026848 _____ () C:\ProgramData\agent.1474369414.bdinstall.bin

2016-11-02 15:47 - 2016-11-02 15:47 - 0028768 _____ () C:\ProgramData\agent.1478098058.bdinstall.bin
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-01-13 14:54
 

==================== Ende von FRST.txt ============================

--- --- ---FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-01-2017

durchgeführt von Stevo Marko (18-01-2017 19:35:40)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Windows 10 Home Version 1511 (X64) (2016-06-29 10:30:16)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4176748537-3526997621-266561101-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-4176748537-3526997621-266561101-503 - Limited - Disabled)

Gast (S-1-5-21-4176748537-3526997621-266561101-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-4176748537-3526997621-266561101-1002 - Limited - Enabled)

Stevo Marko (S-1-5-21-4176748537-3526997621-266561101-1000 - Administrator - Enabled) => C:\Users\Stevo Marko
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Bitdefender Virenschutz (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}

AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Bitdefender Firewall (Disabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated)

Ansel (Version: 372.70 - NVIDIA Corporation) Hidden

Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BioShock (HKLM\...\Steam App 7670) (Version:  - 2K Boston)

Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.23.1252 - Bitdefender)

Bitdefender Internet Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.24.1290 - Bitdefender)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)

Counter-Strike Global Offensive WaRzOnE (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\CSGO) (Version:  - CS WaRzOnE)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DigimonMasters Online (HKLM-x32\...\DigimonMasters) (Version:  - Move Games)

DigimonMasters Online Launcher (HKLM-x32\...\DigimonMasters Launcher) (Version:  - Move games)

Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)

DRAGON BALL XENOVERSE 2 (HKLM\...\Steam App 454650) (Version:  - QLOC)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

FileZilla Client 3.16.0 (HKLM-x32\...\FileZilla Client) (Version: 3.16.0 - Tim Kosse)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)

Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden

HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.5.5 - Hi-Rez Studios)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Horizon (HKLM-x32\...\{6c4303a5-5115-4cfd-bf48-8af0541cd082}) (Version: 2.8.26 - Daring Development Inc.)

Horizon (x32 Version: 2.8.26 - Daring Development Inc.) Hidden

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden

iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)

Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

Killer Bandwidth Control Filter Driver (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer E220x Drivers (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Network Manager (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.57.1123 - Rivet Networks)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)

Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Mark of the Ninja (HKLM\...\Steam App 214560) (Version:  - Klei Entertainment)

Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

MorphVOX Pro (HKLM-x32\...\{5a385481-7640-4f10-8ca5-04a2030b4623}) (Version: 4.4.65.20341 - Screaming Bee)

MorphVOX Pro (x32 Version: 4.4.65.20341 - Screaming Bee) Hidden

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.70 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.70 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

osu! (HKLM-x32\...\{9e3ba8ec-0407-491b-98a7-97354f85bb67}) (Version: latest - ppy Pty Ltd)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)

PaintTool SAI Ver.1 (HKLM-x32\...\PaintToolSAI) (Version:  - )

PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version:  - )

Pokémon Trading Card Game Online (HKLM-x32\...\{E56D3759-1795-4813-8FC7-CA82C2FECCD8}) (Version: 2.35.0 - The Pokémon Company International)

ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)

Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)

SMITE (HKLM\...\Steam App 386360) (Version:  - Hi-Rez Studios)

SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.22.9634 - SoftEther VPN Project)

South Park™: The Stick of Truth™ (HKLM\...\Steam App 213670) (Version:  - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Subnautica (HKLM\...\Steam App 264710) (Version:  - Unknown Worlds Entertainment)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)

The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.12.1.0 - GOG.com)

TP-LINK Archer T2U_T2UH Driver (HKLM-x32\...\{F2496892-5295-4208-AB93-21F1AFD07C97}) (Version: 1.3.1 - TP-LINK)

Unity Web Player (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)

Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VSDC Free Video Editor Version 4.0.1.475 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 4.0.1.475 - Flash-Integro LLC)

Warface (HKLM\...\Steam App 291480) (Version:  - Crytek)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.30 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)

Wooxy version 1.4.1 (HKLM-x32\...\{C183CD14-47D8-4F98-AF06-4744CB834C8E}_is1) (Version: 1.4.1 - Chewy)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0759F0B1-90B3-4746-B00E-09A301E2770D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {0F0872CF-A603-49C6-AB8F-9EE847D14E71} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {14B6D487-6E40-4313-A845-F0B7A09D2AFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-15] (Adobe Systems Incorporated)

Task: {1A04C0A1-83B7-4BB0-8A10-1EEEE6B54D7D} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeReminderTask => C:\WINDOWS\System32\GWX\GWX.exe

Task: {2509576E-4FD3-4243-961C-307E453CEABA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {2E96D9AC-4152-428A-B301-6651D27A38A1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {342A5FC5-6DE9-4A7B-8283-59F3C68EF4EE} - System32\Tasks\{DE8BA068-7282-45FA-94E4-4A63CDD3A835} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{F2496892-5295-4208-AB93-21F1AFD07C97}\setup.exe" -c -runfromtemp -l0x0009 -removeonly DriverOnly

Task: {4089AD54-FB80-40C5-A7E9-FDF3EE9BA971} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {471EEE60-5C6F-4196-9065-C95D181EFE7A} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {48EAF5C3-3110-47DA-8008-AC8C1326A6EE} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {519E9215-B5AA-457B-A09B-69481A78045E} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {57D666D1-BE65-4CD4-B6D5-F397645CEEA6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)

Task: {68EA38E0-B451-4B69-8D5E-DB33A1C1E605} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo)

Task: {6E814AB7-AD84-45FB-A65B-98D79F03ABC7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {6E86CF00-B6BC-42FE-A820-A358825CD1EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {70197F69-8CF9-48CE-8374-22BD9F6E36DC} - System32\Tasks\{5B18B0C3-296E-4D4C-93E3-1304019C0798} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {70EE8BA2-8BA5-4868-8594-A5B6E961ACC4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {86BE5EAE-75B7-46BA-A7B3-8B69FF095814} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8F8F047D-0D76-4B51-A1CD-DCD5167E8A3A} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {91B14D1B-74C2-40C8-9F2F-1F54AEE3CAED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {9B467767-0347-4C0E-BFB6-64C1ACBAA4F4} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9F0DA49B-71A4-4151-9CA5-17826B03B4F5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {9F50B7B8-EA2E-4CF1-BAA6-2B4A58EF5826} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {AD33D397-A476-455F-ABF4-C4DD2894FDE1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {AE1C94EA-1438-45A8-9855-76AE7ED00F2A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {BDE9480B-5023-4CF0-A0FD-34071B2AB983} - System32\Tasks\{F520FBE6-BB86-4525-AAC7-C5EF190B28C3} => Chrome.exe hxxp://ui.skype.com/ui/0/7.25.0.106/de/abandoninstall?page=tsProgressBar

Task: {C6D9160F-1D62-4EDC-9538-E0BF3E0EFDFD} - System32\Tasks\{D4DEABE0-663F-4F5F-A024-2563CCA8A1FD} => Chrome.exe hxxp://ui.skype.com/ui/0/7.26.0.101/de/abandoninstall?page=tsProgressBar

Task: {CD508CB9-54F5-4BAE-9DCA-4F5E603228FD} - System32\Tasks\{1828F1DF-60FC-44CE-8771-1DE6A2F9154A} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {CD977E74-498D-4460-857F-C375C6603938} - System32\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {D0929682-C0C9-402F-AF41-986D8C7883C9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

Task: {D1E91C75-4A13-491A-BFC4-BC92EB4A44CA} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {DB95F336-3DBD-46B5-8FA4-7B8064A6AAA2} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-10-21] (Bitdefender)

Task: {E1D7655F-F57F-4147-9C68-18490AB567C3} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {E8E85E99-3D2C-4A41-A328-AAF7DBE7507A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F3BAFDC9-8CD6-4E5B-AD34-8F147A700DBC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F4D88F61-06AE-4416-9583-0EA9E9D16046} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехрlоrеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic

Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

Shortcut: C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
 

ShortcutWithArgument: C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com

ShortcutWithArgument: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames\DigimonMastersOnline\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2015-12-30 13:37 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll

2016-11-21 16:13 - 2016-11-21 18:15 - 01008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpbr.mdl

2016-11-21 18:15 - 2016-11-21 18:15 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpdsp.mdl

2016-11-21 18:16 - 2016-11-21 18:16 - 03202816 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpph.mdl

2016-11-21 18:16 - 2016-11-21 18:16 - 01542976 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttprbl.mdl

2016-06-29 11:20 - 2016-08-25 22:12 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-01 09:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-08-23 13:07 - 2016-08-23 13:07 - 01864384 _____ () C:\Users\Stevo Marko\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2016-04-27 06:17 - 2016-04-27 06:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-07-13 18:52 - 2016-07-01 04:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-11-08 22:28 - 2016-10-25 05:49 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-08 22:28 - 2016-10-25 05:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-08 22:28 - 2016-10-25 05:45 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-08 22:28 - 2016-10-25 05:48 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2016-02-12 22:13 - 2016-02-12 22:13 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-05-11 14:55 - 2010-11-04 10:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll

2016-03-11 13:43 - 2016-10-08 16:48 - 01506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2016-03-11 13:43 - 2016-07-21 10:54 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll

2015-12-30 22:54 - 2016-12-08 16:13 - 00656160 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2015-12-30 22:54 - 2016-09-01 02:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll

2015-12-30 22:54 - 2016-12-20 03:25 - 02322720 _____ () C:\Program Files (x86)\Steam\video.dll

2015-12-30 22:54 - 2016-01-27 08:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2015-12-30 22:54 - 2016-01-27 08:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2015-12-30 22:54 - 2016-01-27 08:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2015-12-30 22:54 - 2016-01-27 08:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2015-12-30 22:54 - 2016-01-27 08:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2015-12-30 22:54 - 2016-09-01 02:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2015-12-30 22:54 - 2016-09-01 02:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2015-12-30 22:54 - 2016-12-20 03:25 - 00838944 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2016-03-09 13:44 - 2016-07-04 23:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll

2016-12-13 16:33 - 2016-12-05 17:21 - 67304736 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll

2015-12-30 22:54 - 2015-09-25 00:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2017-01-18 19:31 - 00000002 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Stevo Marko\Desktop\Unknown\forest-wallpaper-8.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GalaxyClient"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GEEQzxIb"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "BlueStacks Agent"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808

FirewallRules: [{131D4802-AE73-429F-A630-9D949BE8CFA8}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [{0FF91854-7C8D-4DF1-B250-347DC65F9740}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [UDP Query User{60B15D7E-EB7C-488B-B45E-D757ACD59E11}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [TCP Query User{51C2FF2D-46E0-4523-937E-71C911349F35}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [{E523C989-860C-4A67-9A39-25A9BD0BE308}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{B7D151CB-34FE-4C7C-AE49-2793F4865FAC}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{8187B945-CCD7-4C59-A883-1237FA318370}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{D0171CA3-7609-4B38-B881-7C9FCBCFCE21}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{27340615-F02E-47C0-8CF0-8B3279322E93}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{2724FDDF-45D6-4B10-B208-94C667634168}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [UDP Query User{D1FA4666-9084-4903-97C7-804A3242E312}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [TCP Query User{C620D03D-D994-4494-9969-5931AF373D2A}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [{D11F6D2F-68D8-4BDB-9BD7-E7A8BB3E2831}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{306E6120-22CF-4D26-870F-93591059E33C}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{F5D7440B-68DC-476B-84D7-03607A13B1E0}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{82657ACE-F50F-4063-AE5C-4217538E7A19}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{163638ED-11C3-42C3-86AD-A336C39016BC}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{588A1AA3-C51E-4354-A74E-14BD0D83DEE9}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{FFF7CE3B-7F74-4F5D-9464-2E6175340B26}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{3E92E1F3-D28F-4B04-8AC3-C2BF18CBC571}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{6B3CFCBF-F9E7-42F8-8C5E-6A32713E30A4}] => LPort=1900

FirewallRules: [{CFF966DA-B632-4550-B064-7E197006EC5D}] => LPort=2869

FirewallRules: [{3A772195-07B8-4C4E-9499-E0C0C6B07B73}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [UDP Query User{FB787A40-AF71-4281-B3CB-D9A1CB989724}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{0A955DBF-AE41-4520-9D88-5FC8BFDE3FB8}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{814537C0-FA96-4D6A-B2C7-B69F861F5A29}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{A481A116-0DF2-4FB1-981C-4F01F200DC03}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [{696CAAB7-7302-442E-888D-F316F4331B97}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{79A35FCC-00C8-47EA-97E4-3FA8F62DD81F}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{34F930BA-2B08-4FA5-A630-FDB154F4A5C7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{544C4B32-999A-4E5B-A78D-F5B1514D16F2}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{2B825826-EDBF-4579-AFBD-8B000852538E}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{90DF9797-5823-46E9-A4DC-6C14CDEB6AF6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{8AAA6E03-4336-4DF5-8672-717227A1B804}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{28FBF77E-8A6F-439B-A13D-F41A7E9F0DA0}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{68B2C8C7-B375-404B-9867-A75E172EB770}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{9937ED6C-5601-4649-887B-92C93B7D3BDA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{178D6B1C-3904-4023-AA6A-A2C693D36810}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{3ABA475D-92D7-4DA5-892C-1F59260A3066}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{2C0ED73B-E102-4933-9FED-46388D33BFFA}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{39A84192-A46C-4E0F-91B0-9A11D377045C}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [TCP Query User{47A8427F-DA86-49FE-92D8-D974293BB92D}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{C8A60F67-88A9-4C2D-84AA-9389DF3A937F}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [TCP Query User{7D6C3EE6-916C-4495-9814-94CDA525B128}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [UDP Query User{0B3D52EF-3E49-4A2B-AAE0-EFA137FE431D}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [TCP Query User{7A949890-0653-485D-9917-A47C59848E22}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [UDP Query User{A8AF8AE8-D7C7-4348-85F6-BC3558E91F72}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [TCP Query User{C539BBF1-416B-4BED-9EF9-7EC95704B6A5}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{BF9B1AF9-789D-44F0-BEA6-8D43B8A506F3}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{F163DDD8-1ACE-495A-9277-42662553A358}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{87D88FE3-5708-4FE1-A410-28EE491556D8}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{291BCC8C-D723-45A6-BEDA-68B576D08EBC}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{974D685C-AC7F-42D6-8AE5-BAFCD5A5F09E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{93EA6BE3-46A0-4386-B628-77E077BC19E9}] => E:\iTunes\iTunes.exe

FirewallRules: [TCP Query User{C6931454-D8BC-408E-8580-17F1F912E6CC}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{047D3345-5768-4BB9-9585-B06F033F14B4}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [{475913B2-3BEB-45ED-A06B-D7E25F3DEDC1}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [TCP Query User{26954AD4-C1AB-41DF-9084-E2FB1FB12E66}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{65F07ACA-1030-4283-8B1D-B5C858901795}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{28E3540D-41EC-4FF8-9E76-C3753D9D8C12}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{F28E5BFC-F054-4FB1-8605-1EAA9B98E265}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{612D9B70-03FC-4F13-A76E-9A378F0AEC3C}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{A20D8834-3817-41FF-B08A-53BB7241555B}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{C43B9841-0042-47C9-A8EA-68E4773166DA}] => C:\Program Files (x86)\Nox\bin\Nox.exe

FirewallRules: [{AB60493C-C540-4EF0-AB6F-CB2723FD9C79}] => C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe

FirewallRules: [{66E19697-C4D0-4FE8-9CB1-9DE9E383991E}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{A7C49B62-CD7C-4A8E-A1F9-02F6589D2D9C}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{201837A4-3840-484C-96EF-8FB837F81056}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{B99CAC97-8CCB-4B73-AD79-A59D25662205}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{BD34A82B-C290-400D-8369-88E5214597A2}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient.exe

FirewallRules: [{FDACF623-1E3B-41CB-9255-16F985E770D4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{AAC1AF14-377F-4AD6-BA15-49BEE643EAB4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{4E6BB467-F3C3-41EB-92DA-2463ED42563E}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd.exe

FirewallRules: [TCP Query User{6C2D550E-977B-419F-9CFE-6976E834946D}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [UDP Query User{46A3FDF3-4DA1-436E-A6D8-5942A88A7C41}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [{D8774863-1344-4E05-AA28-946AD79B2873}] => C:\Users\Stevo Marko\AppData\Local\Amigo\Application\amigo.exe

FirewallRules: [{5A5C5CB6-19CA-470D-AE07-04FCCD871B38}] => E:\KDMO\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{9B08035F-2213-4600-A78A-8E65B8D6A7CA}] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{D47FEC28-B6A5-4449-B670-41873B28DF38}] => E:\KDMO\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{345B93FC-08C1-4A2A-84B3-07C9B48FE060}] => E:\KDMO\SoftEther VPN Client\vpncmd.exe

FirewallRules: [{DA5D5502-CF62-4857-8F85-AE165E11B3F7}] => E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{3AEE9EE4-B12E-48EB-B371-D4D3D97B20B1}] => E:\KDMO\SoftEther VPN Client\vpnclient.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (01/18/2017 07:30:53 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: FRST64.exe, Version: 15.1.2017.0, Zeitstempel: 0x587b7120

Name des fehlerhaften Moduls: FRST64.exe, Version: 15.1.2017.0, Zeitstempel: 0x587b7120

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000026519

ID des fehlerhaften Prozesses: 0x224c

Startzeit der fehlerhaften Anwendung: 0x01d271b8f8f9f849

Pfad der fehlerhaften Anwendung: C:\Users\Stevo Marko\Desktop\Virenkillen\FRST64.exe

Pfad des fehlerhaften Moduls: C:\Users\Stevo Marko\Desktop\Virenkillen\FRST64.exe

Berichtskennung: 5682b373-1331-4e97-bb97-c7b03342b726

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/18/2017 06:55:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname StevoMarko-PC.local already in use; will try StevoMarko-PC-2.local instead
 

Error: (01/18/2017 06:55:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 StevoMarko-PC.local. Addr 192.168.2.51
 

Error: (01/18/2017 06:55:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   16 StevoMarko-PC.local. AAAA 2003:006B:0536:FFBF:2D9D:8166:1B8F:B4C6
 

Error: (01/17/2017 10:58:47 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756

Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.672, Zeitstempel: 0x580ef23f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000007ccfc

ID des fehlerhaften Prozesses: 0x14b8

Startzeit der fehlerhaften Anwendung: 0x01d271002f0b9c9a

Pfad der fehlerhaften Anwendung: C:\WINDOWS\System32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\combase.dll

Berichtskennung: 76a4578d-e4c4-4089-b03f-854f59f12990

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/17/2017 03:58:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname StevoMarko-PC.local already in use; will try StevoMarko-PC-2.local instead
 

Error: (01/17/2017 03:58:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 StevoMarko-PC.local. Addr 192.168.2.51
 

Error: (01/17/2017 03:58:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   16 StevoMarko-PC.local. AAAA 2003:006B:0536:FF70:0417:0BD9:D1AF:63B2
 

Error: (01/16/2017 11:25:25 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756

Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.672, Zeitstempel: 0x580ef23f

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000000000007ccfc

ID des fehlerhaften Prozesses: 0x5c

Startzeit der fehlerhaften Anwendung: 0x01d2703ccd65ad62

Pfad der fehlerhaften Anwendung: C:\WINDOWS\system32\dwm.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\system32\combase.dll

Berichtskennung: 55bde20a-efb5-4102-a07d-e7fef33e0185

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/16/2017 11:06:44 PM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_a2d6b3cea53ff843.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_ea83eaa5b9bc2149.manifest.
 
 

Systemfehler:

=============

Error: (01/18/2017 07:31:45 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
 

Error: (01/18/2017 07:31:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_3d425d5" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/18/2017 03:41:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_200b0bc" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/18/2017 03:41:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _200b0bc" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/18/2017 03:41:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_200b0bc" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/18/2017 03:41:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_200b0bc" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 10:58:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_1c86227" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 09:27:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_9c02bd" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 09:27:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _9c02bd" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/17/2017 09:27:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_9c02bd" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

CodeIntegrity:

===================================

  Date: 2017-01-14 11:12:37.997

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2017-01-11 22:31:20.486

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-17 13:35:54.795

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-11 11:59:18.678

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-10 15:55:36.900

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-29 08:55:41.824

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-16 17:59:09.570

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-15 16:39:45.951

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-16 12:05:23.430

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-02 07:37:05.993

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz

Prozentuale Nutzung des RAM: 30%

Installierter physikalischer RAM: 8143.64 MB

Verfügbarer physikalischer RAM: 5682.62 MB

Summe virtueller Speicher: 16335.64 MB

Verfügbarer virtueller Speicher: 13826.7 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:111.69 GB) (Free:50.15 GB) NTFS

Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:666.65 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9961C39A)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 9397806C)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

--- --- ---
Habe ausversehen, dass ich die Fixlog.txt UTF-8 Format lassen soll.

burningice

19.01.2017 19:58

Du hast den Fix schon wieder nicht korrekt ausgeführt.

Richtig lesen und alle Schritte wiederholen bitte.

stevoboot

20.01.2017 10:45

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 18-01-2017
durchgeführt von Stevo Marko (20-01-2017 10:39:51) Run:4
Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen
Geladene Profile: Stevo Marko (Verfügbare Profile: Stevo Marko & DefaultAppPool)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехрlоrеr.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) <===== Cyrillic
Shortcut: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic
Shortcut: C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) <===== Cyrillic

E:\Downloads\csgo mod menu wall hack colors aimbot 2016 download free.rar
E:\Downloads\CSGO-Multihack.rar
E:\Downloads\EZfrags_csgo_hack_cheat_2016_free__5bUNDETECTED_5d.rar
E:\Downloads\GlobalHack_RU__EU__13.01.2017_.zip
E:\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
E:\Downloads\MobileTrans - CHIP-Installer.exe
E:\Downloads\PaintTool SAI - CHIP-Installer.exe
E:\Downloads\WWW.OLDSCHOOLHACK.ME_EZFRAGS_CSGO_MULTI_V8_PUBLIC_PRIVATE.ZIP
E:\Downloads\[CSGO]Aimbot and wallhack.rar
emptytemp:
*****************

C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Intеrnеt Ехрlоrеr.lnk => erfolgreich verschoben
C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk => erfolgreich verschoben
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk => erfolgreich verschoben
C:\Users\Public\Desktop\Gооglе Сhrоmе.lnk => erfolgreich verschoben
"E:\Downloads\csgo mod menu wall hack colors aimbot 2016 download free.rar" => nicht gefunden.
"E:\Downloads\CSGO-Multihack.rar" => nicht gefunden.
"E:\Downloads\EZfrags_csgo_hack_cheat_2016_free__5bUNDETECTED_5d.rar" => nicht gefunden.
"E:\Downloads\GlobalHack_RU__EU__13.01.2017_.zip" => nicht gefunden.
"E:\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe" => nicht gefunden.
"E:\Downloads\MobileTrans - CHIP-Installer.exe" => nicht gefunden.
"E:\Downloads\PaintTool SAI - CHIP-Installer.exe" => nicht gefunden.
"E:\Downloads\WWW.OLDSCHOOLHACK.ME_EZFRAGS_CSGO_MULTI_V8_PUBLIC_PRIVATE.ZIP" => nicht gefunden.
"E:\Downloads\[CSGO]Aimbot and wallhack.rar" => nicht gefunden.

=========== EmptyTemp: ==========

BITS transfer queue => 1947163 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8560005 B
Java, Flash, Steam htmlcache => 11072657 B
Windows/system/drivers => 7495928 B
Edge => 0 B
Chrome => 367848817 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 438 B
LocalService => 2438 B
NetworkService => 0 B
Stevo Marko => 24059971 B
DefaultAppPool => 0 B

RecycleBin => 0 B
EmptyTemp: => 401.5 MB temporäre Dateien entfernt.

================================

Das System musste neu gestartet werden.

==== Ende von Fixlog 10:39:56 ====
FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 18-01-2017

durchgeführt von Stevo Marko (Administrator) auf STEVOMARKO-PC (20-01-2017 10:43:33)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Geladene Profile: Stevo Marko (Verfügbare Profile: Stevo Marko & DefaultAppPool)

Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\KillerService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Scarlet.Crush Productions) C:\PS3 Con\ScpServer\bin\ScpService.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe

(Microsoft Corporation) C:\Windows\System32\mqsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe

(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe

(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe

(Apple Inc.) E:\iTunes\iTunesHelper.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe

(Rivet Networks) C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe

(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.4.0.1\Lightshot.exe

(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(SoftEther VPN Project at University of Tsukuba, Japan.) E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe

(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe

(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdagent.exe [1654672 2016-11-24] (Bitdefender)

HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15818872 2016-04-28] (Logitech Inc.)

HKLM\...\Run: [iTunesHelper] => E:\iTunes\iTunesHelper.exe [176440 2016-11-01] (Apple Inc.)

HKLM\...\Run: [SoftEther VPN Client UI Helper] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2016-07-11] ()

HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Bitdefender-Geldbörse-Agent] => C:\Program Files\Bitdefender\Bitdefender 2016\bdwtxag.exe [1451544 2016-11-24] (Bitdefender)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2876704 2016-12-20] (Valve Corporation)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [Spotify Web Helper] => C:\Users\Stevo Marko\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-25] (Spotify Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Run: [GalaxyClient] => E:\GalaxyClient\GalaxyClient.exe [3946048 2016-11-03] (GOG.com)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Killer Network Manager.lnk [2016-03-01]

ShortcutTarget: Killer Network Manager.lnk -> C:\Program Files\Killer Networking\Network Manager\NetworkManager.exe (Rivet Networks)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2017-01-15]

ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{133eadeb-27bc-4780-8ca1-bf5574c8ab7f}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{732f7719-fb15-4fe4-8a4f-461a226b8911}: [DhcpNameServer] 192.168.2.1

ManualProxies: 
 

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://digimonmasters.com/

SearchScopes: HKU\S-1-5-21-4176748537-3526997621-266561101-1000 -> {0BAAF030-AF47-4396-B1B1-06A8364F8F8B} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default

BHO: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Bitdefender-Geldbörse -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-28] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-28] (Oracle Corporation)

Toolbar: HKLM - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\pmbxie.dll [2016-06-28] (Bitdefender)

Toolbar: HKLM-x32 - Bitdefender-Geldbörse - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2016\Antispam32\pmbxie.dll [2016-06-28] (Bitdefender)

DPF: HKLM-x32 {3FED5059-7AA5-46D9-902B-124C8CD9A106} hxxp://www.digimonmasters.com/inc/ActiveX/launcher/20140731_2/Digitalic%20Launcher.cab
 

FireFox:

========

FF HKLM\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff [2015-12-16]

FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext [2015-12-16] [ist nicht signiert]

FF HKLM-x32\...\Firefox\Extensions: [bdwteffv20@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\antispam32\bdwteff

FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2016\bdtbext

FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2016-05-05] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-28] (Oracle Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-25] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-18] (Google Inc.)

FF Plugin HKU\S-1-5-21-4176748537-3526997621-266561101-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Stevo Marko\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS)
 

Chrome: 

=======

CHR HomePage: Default -> hxxp://google.de/

CHR StartupUrls: Default -> "hxxps://www.google.de/"

CHR Profile: C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default [2017-01-20]

CHR Extension: (Google Drive) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-29]

CHR Extension: (YouTube) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-29]

CHR Extension: (Adblock Plus) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]

CHR Extension: (Google-Suche) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-29]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-18]

CHR Extension: (Google Mail) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-29]

CHR Extension: (Chrome Media Router) - C:\Users\Stevo Marko\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-02]

CHR HKLM-x32\...\Chrome\Extension: [dhhejlifdlcgcmogbggeomfodgklfaem] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] - hxxps://clients2.google.com/service/update2/crx

CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx
 

==================== Dienste (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1362464 2016-05-10] ()

R2 Ds3Service; C:\PS3 Con\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Datei ist nicht signiert]

S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395024 2016-12-24] (EasyAntiCheat Ltd)

S3 GalaxyClientService; E:\GalaxyClient\GalaxyClientService.exe [284224 2016-11-03] (GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6581824 2016-10-28] (GOG.com)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)

U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [Datei ist nicht signiert]

R2 Killer Service V2; C:\Program Files\Killer Networking\Network Manager\KillerService.exe [448000 2015-12-14] (Rivet Networks) [Datei ist nicht signiert]

R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-04-28] (Logitech Inc.)

S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [5660512 2016-08-16] (INCA Internet Co., Ltd.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)

R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)

R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1100392 2016-10-28] (Bitdefender)

R2 SEVPNCLIENT; E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-15] (SoftEther VPN Project at University of Tsukuba, Japan.)

R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2016\updatesrv.exe [156016 2016-11-24] (Bitdefender)

R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2016\vsserv.exe [1695720 2016-11-24] (Bitdefender)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2016-10-25] (Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-10-25] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ======================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 AndnetBus; C:\WINDOWS\System32\drivers\lgandnetbus.sys [20992 2017-01-03] (LG Electronics Inc.)

S3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [878072 2016-11-01] (BitDefender)

S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23568 2016-06-29] (Bitdefender)

R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [128400 2016-06-29] (BitDefender LLC)

S4 BDVEDISK; C:\WINDOWS\System32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)

R1 BfLwf; C:\WINDOWS\system32\DRIVERS\bflwfx64.sys [147528 2015-12-11] (Rivet Networks, LLC.)

R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [182944 2016-11-24] (BitDefender LLC)

R0 ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [299816 2016-06-28] (Bitdefender)

R3 Ke2200; C:\WINDOWS\System32\drivers\e22w7x64.sys [125488 2015-03-18] (Qualcomm Atheros, Inc.)

R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)

R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [85160 2016-04-19] (Logitech Inc.)

R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2017-01-11] (SoftEther Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)

R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2017-01-15] (SoftEther Corporation)

S3 taphss6; C:\WINDOWS\System32\DRIVERS\taphss6.sys [42064 2016-04-19] (Anchorfree Inc.)

R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [520032 2016-06-28] (BitDefender S.R.L.)

R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2016-12-25] (BigNox Corporation)

S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)

S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)

S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [36808 2016-10-26] (Wellbia.com Co., Ltd.)

U3 idsvc; kein ImagePath

U3 wpcsvc; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-19 21:35 - 2017-01-19 21:35 - 00000000 ___HD C:\$WINDOWS.~BT

2017-01-19 21:35 - 2017-01-19 21:35 - 00000000 ____D C:\WINDOWS\Panther

2017-01-18 19:22 - 2017-01-18 19:22 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Mark of the Ninja.url

2017-01-16 22:11 - 2017-01-16 22:11 - 00000000 ____D C:\Program Files (x86)\ESET

2017-01-16 21:00 - 2017-01-20 10:43 - 00000000 ____D C:\FRST

2017-01-16 20:59 - 2017-01-20 10:39 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Virenkillen

2017-01-15 18:46 - 2017-01-15 18:46 - 00000965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\SoftEther VPN Client Manager.lnk

2017-01-15 18:46 - 2017-01-15 18:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoftEther VPN Client

2017-01-11 22:44 - 2016-08-16 11:40 - 05660512 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\GameMon.des

2017-01-11 22:43 - 2017-01-11 22:43 - 00000000 ____D C:\Program Files\Common Files\INCA Shared

2017-01-11 22:43 - 2004-12-31 07:43 - 00004682 _____ (INCA Internet Co., Ltd.) C:\WINDOWS\SysWOW64\npptNT2.sys

2017-01-11 22:43 - 2003-07-16 16:17 - 00005174 _____ C:\WINDOWS\SysWOW64\nppt9x.vxd

2017-01-11 22:09 - 2017-01-11 22:09 - 00001283 _____ C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk

2017-01-11 22:09 - 2017-01-11 22:09 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames

2017-01-11 20:00 - 2017-01-11 22:02 - 00000000 ____D C:\WINDOWS\SysWOW64\mgrlist

2017-01-11 19:44 - 2017-01-11 19:44 - 00038216 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\Neo6_x64_VPN.sys

2017-01-11 19:34 - 2017-01-15 18:46 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys

2017-01-11 19:34 - 2017-01-11 19:34 - 00143816 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\WINDOWS\system32\vpncmd.exe

2017-01-11 19:34 - 2017-01-11 19:34 - 00051024 _____ (SoftEther Corporation) C:\WINDOWS\system32\Drivers\SeLow_x64.sys.old1

2017-01-11 19:31 - 2017-01-15 18:48 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Vpn

2017-01-11 13:37 - 2016-12-21 10:01 - 01540224 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2017-01-11 13:37 - 2016-12-21 10:01 - 00692136 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll

2017-01-11 13:37 - 2016-12-21 09:25 - 01594416 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll

2017-01-11 13:37 - 2016-12-21 08:18 - 01372312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll

2017-01-11 13:37 - 2016-12-21 07:56 - 01502208 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2017-01-11 13:37 - 2016-12-21 06:41 - 04895744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:39 - 22373376 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 06:15 - 07839232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-01-11 13:37 - 2016-12-21 06:06 - 03663872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-01-11 13:37 - 2016-12-21 06:03 - 18671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-01-11 13:37 - 2016-12-21 05:48 - 05658624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-01-11 13:37 - 2016-10-25 07:55 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2017-01-07 15:27 - 2017-01-16 21:39 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Skype

2017-01-07 15:27 - 2017-01-07 15:27 - 00000000 ____D C:\Program Files (x86)\Skype

2017-01-03 01:33 - 2017-01-03 01:33 - 00020992 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\lgandnetbus.sys

2017-01-03 01:32 - 2017-01-03 01:32 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\HMYGSetting

2017-01-03 01:29 - 2017-01-11 23:27 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Wondershare

2017-01-03 01:24 - 2017-01-03 01:29 - 00000000 ____D C:\Users\Public\Documents\Wondershare

2016-12-25 22:23 - 2016-12-25 22:23 - 00000041 _____ C:\Users\Stevo Marko\inst.ini

2016-12-25 22:23 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\Nox_share

2016-12-25 22:21 - 2017-01-11 23:30 - 00021182 _____ C:\WINDOWS\DPINST.LOG

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ___DC C:\WINDOWS\system32\DRVSTORE

2016-12-25 22:21 - 2017-01-11 23:30 - 00000000 ____D C:\Program Files (x86)\Nox

2016-12-25 22:21 - 2016-12-25 22:23 - 00000000 ____D C:\Users\Stevo Marko\vmlogs

2016-12-25 22:21 - 2016-12-25 22:21 - 00253384 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\XQHDrv.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00127432 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys

2016-12-25 22:21 - 2016-12-25 22:21 - 00000000 ____D C:\Program Files\DIFX

2016-12-25 22:19 - 2017-01-11 23:30 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Nox

2016-12-25 01:23 - 2017-01-19 17:07 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\u-launcher

2016-12-25 01:23 - 2017-01-19 17:07 - 00000000 ____D C:\ProgramData\GFACE

2016-12-24 23:33 - 2016-12-24 23:33 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Warface.url

2016-12-23 21:58 - 2016-12-23 21:59 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\XV2INS

2016-12-23 11:57 - 2017-01-20 10:40 - 00000000 ___SH C:\pagefile.sys

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Screaming Bee

2016-12-22 23:49 - 2016-12-22 23:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Screaming Bee

2016-12-21 19:45 - 2016-12-21 19:45 - 00000673 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk

2016-12-21 19:45 - 2016-12-21 19:45 - 00000623 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk

2016-12-21 14:14 - 2016-12-25 00:23 - 00000595 _____ C:\Users\Stevo Marko\Desktop\Battle.net.lnk

2016-12-21 14:14 - 2016-12-20 16:31 - 00000222 _____ C:\Users\Stevo Marko\Desktop\DRAGON BALL XENOVERSE 2.url

2016-12-21 14:14 - 2016-11-30 16:35 - 00000815 _____ C:\Users\Stevo Marko\Desktop\Counter-Strike Global Offensive WaRzOnE.lnk

2016-12-21 14:14 - 2016-11-24 13:57 - 00001248 _____ C:\Users\Stevo Marko\Desktop\LeagueClient  Alpha.lnk

2016-12-21 14:14 - 2016-09-26 18:42 - 00000790 _____ C:\Users\Stevo Marko\Desktop\Pokémon Trading Card Game Online.lnk

2016-12-21 14:14 - 2016-06-16 21:15 - 00000222 _____ C:\Users\Stevo Marko\Desktop\ONE PIECE PIRATE WARRIORS 3.url

2016-12-21 14:14 - 2016-05-11 22:02 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Rocket League.url

2016-12-21 14:14 - 2016-05-10 21:24 - 00000222 _____ C:\Users\Stevo Marko\Desktop\South Park The Stick of Truth.url

2016-12-21 14:14 - 2016-05-10 21:22 - 00000220 _____ C:\Users\Stevo Marko\Desktop\BioShock.url

2016-12-21 14:14 - 2016-05-10 21:21 - 00000222 _____ C:\Users\Stevo Marko\Desktop\Subnautica.url

2016-12-21 14:14 - 2016-05-10 21:18 - 00000222 _____ C:\Users\Stevo Marko\Desktop\SMITE.url

2016-12-21 14:14 - 2016-01-20 22:57 - 00001840 _____ C:\Users\Stevo Marko\Desktop\Spotify.lnk

2016-12-21 14:14 - 2016-01-19 11:58 - 00000949 _____ C:\Users\Stevo Marko\Desktop\osu!.lnk
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2017-01-20 10:40 - 2016-06-29 11:20 - 00000000 ____D C:\ProgramData\NVIDIA

2017-01-20 10:40 - 2016-05-05 11:26 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios

2017-01-20 10:40 - 2016-04-27 06:48 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-01-20 10:40 - 2015-12-30 13:40 - 00266761 _____ C:\bdlog.txt

2017-01-20 10:40 - 2015-12-30 13:30 - 00000000 ____D C:\Program Files\Bitdefender Agent

2017-01-20 10:40 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps

2017-01-20 10:40 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness

2017-01-20 10:40 - 2015-10-30 07:28 - 00786432 ___SH C:\WINDOWS\system32\config\BBI

2017-01-20 10:40 - 2015-10-30 07:28 - 00065536 ___SH C:\WINDOWS\system32\config\ELAM

2017-01-19 22:53 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job

2017-01-19 22:45 - 2016-03-15 14:41 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

2017-01-19 19:52 - 2016-03-21 18:36 - 00000400 _____ C:\WINDOWS\Tasks\update-sys.job

2017-01-19 17:07 - 2015-12-30 22:52 - 00000000 ____D C:\Program Files (x86)\Steam

2017-01-19 16:56 - 2016-12-09 17:49 - 00549112 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys

2017-01-19 16:50 - 2016-05-31 07:28 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Battle.net

2017-01-18 19:38 - 2016-06-29 11:20 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-01-18 19:38 - 2016-04-27 06:13 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat

2017-01-18 19:38 - 2016-04-27 06:13 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat

2017-01-18 19:38 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF

2017-01-18 19:31 - 2016-01-20 22:57 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Spotify

2017-01-18 19:30 - 2015-12-29 18:58 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\CrashDumps

2017-01-18 19:09 - 2016-01-20 22:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Spotify

2017-01-16 22:08 - 2016-07-27 16:53 - 00000000 ____D C:\Users\Stevo Marko\AppData\LocalLow\Temp

2017-01-16 21:42 - 2016-10-06 15:23 - 00000008 __RSH C:\Users\Stevo Marko\ntuser.pol

2017-01-16 21:42 - 2016-10-06 15:21 - 00000000 ____D C:\AdwCleaner

2017-01-16 21:42 - 2016-10-06 14:58 - 00000008 __RSH C:\ProgramData\ntuser.pol

2017-01-16 21:42 - 2016-06-29 11:20 - 00000000 ____D C:\Users\Stevo Marko

2017-01-16 21:29 - 2016-11-06 17:38 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2017-01-14 13:34 - 2016-08-18 07:01 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\mymacro

2017-01-14 13:34 - 2016-01-08 22:46 - 00000000 ____D C:\Users\Stevo Marko\AppData\Local\Unity

2017-01-14 13:34 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions

2017-01-14 11:12 - 2016-04-29 07:25 - 00000000 ____D C:\Users\Stevo Marko\Documents\My Games

2017-01-13 15:35 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache

2017-01-11 23:27 - 2016-10-12 22:15 - 00000000 ____D C:\Users\Stevo Marko\.android

2017-01-11 23:27 - 2016-03-11 13:42 - 00000000 ____D C:\Program Files (x86)\Wondershare

2017-01-11 22:27 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe

2017-01-11 20:18 - 2015-12-29 19:16 - 00000000 ____D C:\WINDOWS\system32\MRT

2017-01-11 20:17 - 2015-12-29 19:16 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-01-11 20:17 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp

2017-01-11 19:51 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files

2017-01-08 12:29 - 2015-12-30 19:43 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wichtige Programme

2017-01-07 15:27 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Skype

2017-01-07 15:25 - 2015-12-30 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2017-01-07 12:54 - 2016-01-03 21:56 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\OBS

2016-12-26 07:04 - 2016-06-29 11:20 - 00524288 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TMContainer00000000000000000001.regtrans-ms

2016-12-26 07:04 - 2016-06-29 11:20 - 00065536 ___SH C:\Users\Stevo Marko\NTUSER.DAT{ee58083b-0bf7-11e6-aecb-eac008bd0803}.TM.blf

2016-12-26 02:29 - 2016-06-29 11:30 - 00000174 ___SH C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini

2016-12-25 22:21 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration

2016-12-25 22:21 - 2015-10-30 07:28 - 00000000 ___RD C:\Program Files

2016-12-25 01:28 - 2015-12-29 16:01 - 00000000 ___RD C:\Users\Stevo Marko\Saved Games

2016-12-24 23:33 - 2016-12-09 17:49 - 00395024 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe

2016-12-24 23:33 - 2016-05-15 22:06 - 00000000 ____D C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2016-12-22 23:54 - 2015-12-29 16:03 - 00000000 ____D C:\ProgramData\Package Cache

2016-12-22 23:48 - 2015-10-30 08:26 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2016-12-22 23:48 - 2015-10-30 08:26 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2016-12-22 14:09 - 2016-06-29 11:20 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{7f07ac96-0c35-11e6-80cd-782bcb392fa8}.TMContainer00000000000000000001.regtrans-ms

2016-12-21 13:44 - 2016-04-25 17:19 - 00000000 ____D C:\Users\Stevo Marko\Desktop\Wooxy
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-07-13 17:57 - 2016-07-13 17:57 - 0215846 _____ () C:\Users\Stevo Marko\AppData\Roaming\data02.db

2016-04-01 01:20 - 2016-04-01 01:20 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Roaming\dc.ogt

2016-03-01 23:15 - 2016-03-01 23:15 - 0000000 _____ () C:\Users\Stevo Marko\AppData\Local\Driver_LOM_8161Present.flag

2016-07-15 12:26 - 2016-07-15 12:26 - 0007605 _____ () C:\Users\Stevo Marko\AppData\Local\Resmon.ResmonCfg

2016-03-21 18:36 - 2016-03-21 18:36 - 0000003 _____ () C:\Users\Stevo Marko\AppData\Local\updater.log

2016-03-21 18:36 - 2016-08-13 09:57 - 0000424 _____ () C:\Users\Stevo Marko\AppData\Local\UserProducts.xml

2015-12-30 13:37 - 2015-12-30 13:37 - 0420258 _____ () C:\ProgramData\1451478906.bdinstall.bin

2016-02-29 15:37 - 2016-02-29 15:37 - 0025199 _____ () C:\ProgramData\1456756661.bdinstall.bin

2016-03-22 16:20 - 2016-03-22 16:20 - 0025913 _____ () C:\ProgramData\1458660001.bdinstall.bin

2016-03-22 17:20 - 2016-03-22 17:20 - 0025985 _____ () C:\ProgramData\1458663637.bdinstall.bin

2016-03-31 18:29 - 2016-03-31 18:29 - 0025985 _____ () C:\ProgramData\1459445363.bdinstall.bin

2016-06-14 14:01 - 2016-06-14 14:01 - 0026785 _____ () C:\ProgramData\1465909304.bdinstall.bin

2016-07-11 20:02 - 2016-07-11 20:02 - 0026211 _____ () C:\ProgramData\1468263746.bdinstall.bin

2016-09-20 12:03 - 2016-09-20 12:03 - 0026848 _____ () C:\ProgramData\agent.1474369414.bdinstall.bin

2016-11-02 15:47 - 2016-11-02 15:47 - 0028768 _____ () C:\ProgramData\agent.1478098058.bdinstall.bin
 

==================== Bamital & volsnap ======================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert

C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert

C:\WINDOWS\explorer.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert

C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert

C:\WINDOWS\system32\services.exe => Datei ist digital signiert

C:\WINDOWS\system32\User32.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert

C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert

C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert

C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert

C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
 

LastRegBack: 2017-01-13 14:54
 

==================== Ende von FRST.txt ============================

--- --- ---FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 18-01-2017

durchgeführt von Stevo Marko (20-01-2017 10:43:52)

Gestartet von C:\Users\Stevo Marko\Desktop\Virenkillen

Windows 10 Home Version 1511 (X64) (2016-06-29 10:30:16)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-4176748537-3526997621-266561101-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-4176748537-3526997621-266561101-503 - Limited - Disabled)

Gast (S-1-5-21-4176748537-3526997621-266561101-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-4176748537-3526997621-266561101-1002 - Limited - Enabled)

Stevo Marko (S-1-5-21-4176748537-3526997621-266561101-1000 - Administrator - Enabled) => C:\Users\Stevo Marko
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Bitdefender Virenschutz (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}

AS: Bitdefender Spyware-Schutz (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: Bitdefender Firewall (Disabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated)

Ansel (Version: 372.70 - NVIDIA Corporation) Hidden

Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)

Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)

Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BioShock (HKLM\...\Steam App 7670) (Version:  - 2K Boston)

Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.23.1252 - Bitdefender)

Bitdefender Internet Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.24.1290 - Bitdefender)

Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform)

Counter-Strike Global Offensive WaRzOnE (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\CSGO) (Version:  - CS WaRzOnE)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DigimonMasters Online (HKLM-x32\...\DigimonMasters) (Version:  - Move Games)

DigimonMasters Online Launcher (HKLM-x32\...\DigimonMasters Launcher) (Version:  - Move games)

Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)

DRAGON BALL XENOVERSE 2 (HKLM\...\Steam App 454650) (Version:  - QLOC)

ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )

FileZilla Client 3.16.0 (HKLM-x32\...\FileZilla Client) (Version: 3.16.0 - Tim Kosse)

Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)

Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden

HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.5.5 - Hi-Rez Studios)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Horizon (HKLM-x32\...\{6c4303a5-5115-4cfd-bf48-8af0541cd082}) (Version: 2.8.26 - Daring Development Inc.)

Horizon (x32 Version: 2.8.26 - Daring Development Inc.) Hidden

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.20 - Intel(R) Corporation) Hidden

iTunes (HKLM\...\{554C62C7-E6BB-40F1-892B-F0AE02D3C135}) (Version: 12.5.3.17 - Apple Inc.)

Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)

Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation)

Killer Bandwidth Control Filter Driver (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer E220x Drivers (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Network Manager (Version: 1.1.57.1123 - Rivet Networks) Hidden

Killer Performance Suite (HKLM-x32\...\{E70DB50B-10B4-46BC-9DE2-AB8B49E061EE}) (Version: 1.1.57.1123 - Rivet Networks)

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

Lightshot-5.4.0.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.1 - Skillbrains)

Logitech Gaming Software 8.83 (HKLM\...\Logitech Gaming Software) (Version: 8.83.85 - Logitech Inc.)

Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Mark of the Ninja (HKLM\...\Steam App 214560) (Version:  - Klei Entertainment)

Metric Collection SDK (x32 Version: 1.1.0012.00 - Lenovo Group Limited) Hidden

Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)

Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)

MorphVOX Pro (HKLM-x32\...\{5a385481-7640-4f10-8ca5-04a2030b4623}) (Version: 4.4.65.20341 - Screaming Bee)

MorphVOX Pro (x32 Version: 4.4.65.20341 - Screaming Bee) Hidden

Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.70 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)

NVIDIA Grafiktreiber 372.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.70 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

osu! (HKLM-x32\...\{9e3ba8ec-0407-491b-98a7-97354f85bb67}) (Version: latest - ppy Pty Ltd)

Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)

paint.net (HKLM\...\{DADC2AF6-DC9F-4BCF-BFCE-DCEC16EF507C}) (Version: 4.0.9 - dotPDN LLC)

PaintTool SAI Ver.1 (HKLM-x32\...\PaintToolSAI) (Version:  - )

PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version:  - )

Pokémon Trading Card Game Online (HKLM-x32\...\{E56D3759-1795-4813-8FC7-CA82C2FECCD8}) (Version: 2.35.0 - The Pokémon Company International)

ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)

Rocket League (HKLM\...\Steam App 252950) (Version:  - Psyonix)

SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden

Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)

SMITE (HKLM\...\Steam App 386360) (Version:  - Hi-Rez Studios)

SoftEther VPN Client (HKLM\...\softether_sevpnclient) (Version: 4.22.9634 - SoftEther VPN Project)

South Park™: The Stick of Truth™ (HKLM\...\Steam App 213670) (Version:  - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\Spotify) (Version: 1.0.45.186.g3b5036d6 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Subnautica (HKLM\...\Steam App 264710) (Version:  - Unknown Worlds Entertainment)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)

The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.12.1.0 - GOG.com)

TP-LINK Archer T2U_T2UH Driver (HKLM-x32\...\{F2496892-5295-4208-AB93-21F1AFD07C97}) (Version: 1.3.1 - TP-LINK)

Unity Web Player (HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\UnityWebPlayer) (Version: 5.3.5f1 - Unity Technologies ApS)

Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)

Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)

Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)

VSDC Free Video Editor Version 4.0.1.475 (HKLM-x32\...\VSDC Free Video Editor_is1) (Version: 4.0.1.475 - Flash-Integro LLC)

Warface (HKLM\...\Steam App 291480) (Version:  - Crytek)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

WinRAR 5.30 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)

Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)

Wooxy version 1.4.1 (HKLM-x32\...\{C183CD14-47D8-4F98-AF06-4744CB834C8E}_is1) (Version: 1.4.1 - Chewy)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-4176748537-3526997621-266561101-1000_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0759F0B1-90B3-4746-B00E-09A301E2770D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {0F0872CF-A603-49C6-AB8F-9EE847D14E71} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {14B6D487-6E40-4313-A845-F0B7A09D2AFA} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-15] (Adobe Systems Incorporated)

Task: {1A04C0A1-83B7-4BB0-8A10-1EEEE6B54D7D} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeReminderTask => C:\WINDOWS\System32\GWX\GWX.exe

Task: {2509576E-4FD3-4243-961C-307E453CEABA} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

Task: {2E96D9AC-4152-428A-B301-6651D27A38A1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {342A5FC5-6DE9-4A7B-8283-59F3C68EF4EE} - System32\Tasks\{DE8BA068-7282-45FA-94E4-4A63CDD3A835} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{F2496892-5295-4208-AB93-21F1AFD07C97}\setup.exe" -c -runfromtemp -l0x0009 -removeonly DriverOnly

Task: {4089AD54-FB80-40C5-A7E9-FDF3EE9BA971} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {471EEE60-5C6F-4196-9065-C95D181EFE7A} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {48EAF5C3-3110-47DA-8008-AC8C1326A6EE} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {519E9215-B5AA-457B-A09B-69481A78045E} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {57D666D1-BE65-4CD4-B6D5-F397645CEEA6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd)

Task: {68EA38E0-B451-4B69-8D5E-DB33A1C1E605} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 => C:\Program Files (x86)\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [2015-07-08] (Lenovo)

Task: {6E814AB7-AD84-45FB-A65B-98D79F03ABC7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {6E86CF00-B6BC-42FE-A820-A358825CD1EF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {70197F69-8CF9-48CE-8374-22BD9F6E36DC} - System32\Tasks\{5B18B0C3-296E-4D4C-93E3-1304019C0798} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {70EE8BA2-8BA5-4868-8594-A5B6E961ACC4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {86BE5EAE-75B7-46BA-A7B3-8B69FF095814} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {8F8F047D-0D76-4B51-A1CD-DCD5167E8A3A} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {91B14D1B-74C2-40C8-9F2F-1F54AEE3CAED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {9B467767-0347-4C0E-BFB6-64C1ACBAA4F4} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {9F0DA49B-71A4-4151-9CA5-17826B03B4F5} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {9F50B7B8-EA2E-4CF1-BAA6-2B4A58EF5826} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {AD33D397-A476-455F-ABF4-C4DD2894FDE1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-29] (Google Inc.)

Task: {AE1C94EA-1438-45A8-9855-76AE7ED00F2A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {BDE9480B-5023-4CF0-A0FD-34071B2AB983} - System32\Tasks\{F520FBE6-BB86-4525-AAC7-C5EF190B28C3} => Chrome.exe hxxp://ui.skype.com/ui/0/7.25.0.106/de/abandoninstall?page=tsProgressBar

Task: {C6D9160F-1D62-4EDC-9538-E0BF3E0EFDFD} - System32\Tasks\{D4DEABE0-663F-4F5F-A024-2563CCA8A1FD} => Chrome.exe hxxp://ui.skype.com/ui/0/7.26.0.101/de/abandoninstall?page=tsProgressBar

Task: {CD508CB9-54F5-4BAE-9DCA-4F5E603228FD} - System32\Tasks\{1828F1DF-60FC-44CE-8771-1DE6A2F9154A} => Chrome.exe hxxp://ui.skype.com/ui/0/7.27.64.101/de/abandoninstall?page=tsProgressBar

Task: {CD977E74-498D-4460-857F-C375C6603938} - System32\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-11-28] ()

Task: {D0929682-C0C9-402F-AF41-986D8C7883C9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe

Task: {D1E91C75-4A13-491A-BFC4-BC92EB4A44CA} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe

Task: {DB95F336-3DBD-46B5-8FA4-7B8064A6AAA2} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-10-21] (Bitdefender)

Task: {E1D7655F-F57F-4147-9C68-18490AB567C3} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe

Task: {E8E85E99-3D2C-4A41-A328-AAF7DBE7507A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe

Task: {F3BAFDC9-8CD6-4E5B-AD34-8F147A700DBC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe

Task: {F4D88F61-06AE-4416-9583-0EA9E9D16046} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\WINDOWS\Tasks\update-S-1-5-21-4176748537-3526997621-266561101-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\Stevo Marko\Desktop\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com

ShortcutWithArgument: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movegames\DigimonMastersOnline\DigimonMasters.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.digimonmasters.com

ShortcutWithArgument: C:\Users\Stevo Marko\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll

2015-12-30 13:37 - 2013-09-03 13:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll

2016-11-21 16:13 - 2016-11-21 18:15 - 01008448 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpbr.mdl

2016-11-21 18:15 - 2016-11-21 18:15 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpdsp.mdl

2016-11-21 18:16 - 2016-11-21 18:16 - 03202816 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttpph.mdl

2016-11-21 18:16 - 2016-11-21 18:16 - 01542976 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02351_008\ashttprbl.mdl

2016-06-29 11:20 - 2016-08-25 22:12 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-10-05 18:17 - 2016-10-05 18:17 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll

2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll

2016-03-01 09:32 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll

2016-03-01 09:21 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll

2016-11-08 22:28 - 2016-10-25 10:42 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll

2016-08-23 13:07 - 2016-08-23 13:07 - 01864384 _____ () C:\Users\Stevo Marko\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe

2016-04-27 06:17 - 2016-04-27 06:17 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll

2016-07-13 18:52 - 2016-07-01 04:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll

2016-06-09 19:39 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll

2016-11-08 22:28 - 2016-10-25 05:49 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll

2016-11-08 22:28 - 2016-10-25 05:44 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2016-11-08 22:28 - 2016-10-25 05:45 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll

2016-11-08 22:28 - 2016-10-25 05:48 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll

2015-03-07 01:07 - 2015-03-07 01:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll

2016-04-28 23:49 - 2016-04-28 23:49 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll

2016-02-12 22:13 - 2016-02-12 22:13 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

2016-06-29 12:12 - 2016-06-29 12:13 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

2015-12-29 18:56 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll

2016-05-11 14:55 - 2010-11-04 10:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll

2016-03-11 13:43 - 2016-07-21 10:54 - 00137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2016-03-11 13:43 - 2016-10-08 16:48 - 01506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll

2016-12-09 22:25 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 03:34 - 2017-01-20 10:40 - 00000002 ____A C:\WINDOWS\system32\Drivers\etc\hosts
 
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Stevo Marko\Desktop\Unknown\forest-wallpaper-8.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GalaxyClient"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "GEEQzxIb"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Skype"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Spotify Web Helper"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-4176748537-3526997621-266561101-1000\...\StartupApproved\Run: => "BlueStacks Agent"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [vm-monitoring-nb-session] => LPort=139

FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe

FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808

FirewallRules: [{131D4802-AE73-429F-A630-9D949BE8CFA8}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [{0FF91854-7C8D-4DF1-B250-347DC65F9740}] => E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe

FirewallRules: [UDP Query User{60B15D7E-EB7C-488B-B45E-D757ACD59E11}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [TCP Query User{51C2FF2D-46E0-4523-937E-71C911349F35}E:\overwatch\overwatch.exe] => E:\overwatch\overwatch.exe

FirewallRules: [{E523C989-860C-4A67-9A39-25A9BD0BE308}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{B7D151CB-34FE-4C7C-AE49-2793F4865FAC}] => E:\SteamLibrary\steamapps\common\OPPW3\oppw3.exe

FirewallRules: [{8187B945-CCD7-4C59-A883-1237FA318370}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{D0171CA3-7609-4B38-B881-7C9FCBCFCE21}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe

FirewallRules: [{27340615-F02E-47C0-8CF0-8B3279322E93}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [{2724FDDF-45D6-4B10-B208-94C667634168}] => C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe

FirewallRules: [UDP Query User{D1FA4666-9084-4903-97C7-804A3242E312}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [TCP Query User{C620D03D-D994-4494-9969-5931AF373D2A}C:\program files\logitech gaming software\lcore.exe] => C:\program files\logitech gaming software\lcore.exe

FirewallRules: [{D11F6D2F-68D8-4BDB-9BD7-E7A8BB3E2831}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{306E6120-22CF-4D26-870F-93591059E33C}] => E:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\HirezBridge.exe

FirewallRules: [{F5D7440B-68DC-476B-84D7-03607A13B1E0}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{82657ACE-F50F-4063-AE5C-4217538E7A19}] => E:\SteamLibrary\steamapps\common\Subnautica\Subnautica.exe

FirewallRules: [{163638ED-11C3-42C3-86AD-A336C39016BC}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{588A1AA3-C51E-4354-A74E-14BD0D83DEE9}] => E:\SteamLibrary\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe

FirewallRules: [{FFF7CE3B-7F74-4F5D-9464-2E6175340B26}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{3E92E1F3-D28F-4B04-8AC3-C2BF18CBC571}] => E:\SteamLibrary\steamapps\common\Bioshock\Builds\Release\Bioshock.exe

FirewallRules: [{6B3CFCBF-F9E7-42F8-8C5E-6A32713E30A4}] => LPort=1900

FirewallRules: [{CFF966DA-B632-4550-B064-7E197006EC5D}] => LPort=2869

FirewallRules: [{3A772195-07B8-4C4E-9499-E0C0C6B07B73}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [UDP Query User{FB787A40-AF71-4281-B3CB-D9A1CB989724}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{0A955DBF-AE41-4520-9D88-5FC8BFDE3FB8}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{814537C0-FA96-4D6A-B2C7-B69F861F5A29}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{A481A116-0DF2-4FB1-981C-4F01F200DC03}C:\users\stevo marko\appdata\roaming\spotify\spotify.exe] => C:\users\stevo marko\appdata\roaming\spotify\spotify.exe

FirewallRules: [{696CAAB7-7302-442E-888D-F316F4331B97}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{79A35FCC-00C8-47EA-97E4-3FA8F62DD81F}] => C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{34F930BA-2B08-4FA5-A630-FDB154F4A5C7}] => C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [UDP Query User{544C4B32-999A-4E5B-A78D-F5B1514D16F2}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{2B825826-EDBF-4579-AFBD-8B000852538E}C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\stevo marko\desktop\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{90DF9797-5823-46E9-A4DC-6C14CDEB6AF6}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{8AAA6E03-4336-4DF5-8672-717227A1B804}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{28FBF77E-8A6F-439B-A13D-F41A7E9F0DA0}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{68B2C8C7-B375-404B-9867-A75E172EB770}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{9937ED6C-5601-4649-887B-92C93B7D3BDA}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe

FirewallRules: [{178D6B1C-3904-4023-AA6A-A2C693D36810}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{3ABA475D-92D7-4DA5-892C-1F59260A3066}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [TCP Query User{2C0ED73B-E102-4933-9FED-46388D33BFFA}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{39A84192-A46C-4E0F-91B0-9A11D377045C}E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe] => E:\steamlibrary\steamapps\common\smite\binaries\win32\smite.exe

FirewallRules: [TCP Query User{47A8427F-DA86-49FE-92D8-D974293BB92D}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{C8A60F67-88A9-4C2D-84AA-9389DF3A937F}C:\games\counter-strike global offensive\csgo.exe] => C:\games\counter-strike global offensive\csgo.exe

FirewallRules: [TCP Query User{7D6C3EE6-916C-4495-9814-94CDA525B128}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [UDP Query User{0B3D52EF-3E49-4A2B-AAE0-EFA137FE431D}C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe] => C:\program files (x86)\java\jre1.8.0_73\bin\javaw.exe

FirewallRules: [TCP Query User{7A949890-0653-485D-9917-A47C59848E22}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [UDP Query User{A8AF8AE8-D7C7-4348-85F6-BC3558E91F72}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => C:\program files\java\jre1.8.0_101\bin\javaw.exe

FirewallRules: [TCP Query User{C539BBF1-416B-4BED-9EF9-7EC95704B6A5}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{BF9B1AF9-789D-44F0-BEA6-8D43B8A506F3}C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => C:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{F163DDD8-1ACE-495A-9277-42662553A358}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{87D88FE3-5708-4FE1-A410-28EE491556D8}] => C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{291BCC8C-D723-45A6-BEDA-68B576D08EBC}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{974D685C-AC7F-42D6-8AE5-BAFCD5A5F09E}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{93EA6BE3-46A0-4386-B628-77E077BC19E9}] => E:\iTunes\iTunes.exe

FirewallRules: [TCP Query User{C6931454-D8BC-408E-8580-17F1F912E6CC}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [UDP Query User{047D3345-5768-4BB9-9585-B06F033F14B4}E:\games\counter-strike global offensive\csgo.exe] => E:\games\counter-strike global offensive\csgo.exe

FirewallRules: [{475913B2-3BEB-45ED-A06B-D7E25F3DEDC1}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [TCP Query User{26954AD4-C1AB-41DF-9084-E2FB1FB12E66}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [UDP Query User{65F07ACA-1030-4283-8B1D-B5C858901795}E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe] => E:\games\counter-strike global offensive\launcher\tools\steamcmd.exe

FirewallRules: [{28E3540D-41EC-4FF8-9E76-C3753D9D8C12}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{F28E5BFC-F054-4FB1-8605-1EAA9B98E265}] => C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{612D9B70-03FC-4F13-A76E-9A378F0AEC3C}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{A20D8834-3817-41FF-B08A-53BB7241555B}] => E:\SteamLibrary\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe

FirewallRules: [{C43B9841-0042-47C9-A8EA-68E4773166DA}] => C:\Program Files (x86)\Nox\bin\Nox.exe

FirewallRules: [{AB60493C-C540-4EF0-AB6F-CB2723FD9C79}] => C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe

FirewallRules: [{66E19697-C4D0-4FE8-9CB1-9DE9E383991E}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{A7C49B62-CD7C-4A8E-A1F9-02F6589D2D9C}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe

FirewallRules: [{201837A4-3840-484C-96EF-8FB837F81056}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{B99CAC97-8CCB-4B73-AD79-A59D25662205}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{BD34A82B-C290-400D-8369-88E5214597A2}] => E:\Neuer Ordner\SoftEther VPN Client\vpnclient.exe

FirewallRules: [{FDACF623-1E3B-41CB-9255-16F985E770D4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{AAC1AF14-377F-4AD6-BA15-49BEE643EAB4}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{4E6BB467-F3C3-41EB-92DA-2463ED42563E}] => E:\Neuer Ordner\SoftEther VPN Client\vpncmd.exe

FirewallRules: [TCP Query User{6C2D550E-977B-419F-9CFE-6976E834946D}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [UDP Query User{46A3FDF3-4DA1-436E-A6D8-5942A88A7C41}E:\kdmo\launcher\d-player.exe] => E:\kdmo\launcher\d-player.exe

FirewallRules: [{D8774863-1344-4E05-AA28-946AD79B2873}] => C:\Users\Stevo Marko\AppData\Local\Amigo\Application\amigo.exe

FirewallRules: [{5A5C5CB6-19CA-470D-AE07-04FCCD871B38}] => E:\KDMO\SoftEther VPN Client\vpncmd_x64.exe

FirewallRules: [{9B08035F-2213-4600-A78A-8E65B8D6A7CA}] => E:\KDMO\SoftEther VPN Client\vpnclient_x64.exe

FirewallRules: [{D47FEC28-B6A5-4449-B670-41873B28DF38}] => E:\KDMO\SoftEther VPN Client\vpncmgr.exe

FirewallRules: [{345B93FC-08C1-4A2A-84B3-07C9B48FE060}] => E:\KDMO\SoftEther VPN Client\vpncmd.exe

FirewallRules: [{DA5D5502-CF62-4857-8F85-AE165E11B3F7}] => E:\KDMO\SoftEther VPN Client\vpncmgr_x64.exe

FirewallRules: [{3AEE9EE4-B12E-48EB-B371-D4D3D97B20B1}] => E:\KDMO\SoftEther VPN Client\vpnclient.exe

FirewallRules: [{0A73DD63-81DB-47E5-ABD8-158E722CD137}] => E:\SteamLibrary\steamapps\common\mark_of_the_ninja\bin\game.exe

FirewallRules: [{33FEA396-37A0-411F-91C2-C11B2E815E42}] => E:\SteamLibrary\steamapps\common\mark_of_the_ninja\bin\game.exe
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: 

Description: 

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (01/20/2017 10:43:25 AM) (Source: SideBySide) (EventID: 78) (User: )

Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Stevo Marko\Desktop\Virenkillen\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .

Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.

In Konflikt stehende Komponenten:.

Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_a2d6b3cea53ff843.manifest.

Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.672_none_ea83eaa5b9bc2149.manifest.
 

Error: (01/20/2017 10:40:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   23 3.6.9.A.B.E.1.9.7.7.B.4.6.D.8.F.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR StevoMarko-PC-2.local.
 

Error: (01/20/2017 10:40:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   21 3.6.9.A.B.E.1.9.7.7.B.4.6.D.8.F.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR StevoMarko-PC.local.
 

Error: (01/20/2017 10:40:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   23 51.2.168.192.in-addr.arpa. PTR StevoMarko-PC-2.local.
 

Error: (01/20/2017 10:40:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   21 51.2.168.192.in-addr.arpa. PTR StevoMarko-PC.local.
 

Error: (01/20/2017 10:40:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: Local Hostname StevoMarko-PC.local already in use; will try StevoMarko-PC-2.local instead
 

Error: (01/20/2017 10:40:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 StevoMarko-PC.local. Addr 192.168.2.51
 

Error: (01/20/2017 10:40:39 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   16 StevoMarko-PC.local. AAAA 2003:006B:0536:FF97:F8D6:4B77:91EB:A963
 

Error: (01/20/2017 10:40:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Resetting to Probing:   16 StevoMarko-PC.local. AAAA FE80:0000:0000:0000:F8D6:4B77:91EB:A963
 

Error: (01/20/2017 10:40:38 AM) (Source: Bonjour Service) (EventID: 100) (User: )

Description: mDNSCoreReceiveResponse: Received from 192.168.2.51:5353   16 StevoMarko-PC.local. AAAA 2003:006B:0536:FF97:F8D6:4B77:91EB:A963
 
 

Systemfehler:

=============

Error: (01/20/2017 10:40:30 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
 

Error: (01/20/2017 10:40:00 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_55703da" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/19/2017 11:39:39 PM) (Source: DCOM) (EventID: 10010) (User: StevoMarko-PC)

Description: Der Server "App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (01/19/2017 11:39:39 PM) (Source: DCOM) (EventID: 10010) (User: StevoMarko-PC)

Description: Der Server "App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (01/19/2017 11:39:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_1d01ccb" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/19/2017 11:39:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenspeicher _1d01ccb" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/19/2017 11:39:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Kontaktdaten_1d01ccb" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/19/2017 11:39:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Synchronisierungshost_1d01ccb" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/19/2017 09:35:25 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: Funktionsupdate für Windows 10 – Version 1607
 

Error: (01/19/2017 12:00:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Benutzerdatenzugriff_2d685" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

CodeIntegrity:

===================================

  Date: 2017-01-14 11:12:37.997

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2017-01-11 22:31:20.486

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-12-17 13:35:54.795

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-11 11:59:18.678

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-11-10 15:55:36.900

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-29 08:55:41.824

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-16 17:59:09.570

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-10-15 16:39:45.951

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-16 12:05:23.430

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 

  Date: 2016-09-02 07:37:05.993

  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Xeon(R) CPU E3-1231 v3 @ 3.40GHz

Prozentuale Nutzung des RAM: 30%

Installierter physikalischer RAM: 8143.64 MB

Verfügbarer physikalischer RAM: 5658.57 MB

Summe virtueller Speicher: 16335.64 MB

Verfügbarer virtueller Speicher: 13841.95 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:111.69 GB) (Free:46.47 GB) NTFS

Drive e: (Volume) (Fixed) (Total:931.39 GB) (Free:666.46 GB) NTFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 9961C39A)
 

Partition: GPT.
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 9397806C)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

--- --- ---
Diesmal sollte es richtig sein.

burningice

21.01.2017 14:28

sehr gut gemacht!

Hast du noch irgendwelche Probleme mit deinem Rechner?

stevoboot

21.01.2017 17:25

Eigentlich nicht, nur fällt mir auf, dass der Mauscursor immer am ''laden'' ist und nich aufhört. Also dieser Kreis der sich dreht.

Alle Zeitangaben in WEZ +1. Es ist jetzt 18:04 Uhr.

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131