| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._.Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
11.02.2015, 13:17
| #1 |
| | ![Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. - Frage](images/icons/icon5.gif){kind=icon} Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. Hallo, ich bin schon ganz verzweifelt, vielleicht mach ich das jetzt ganz falsch aber ich hoffe einfach auf Hilfe :/ Aaalso. Ich hab mir durch das Installieren eines Spieles, das ich erstmal antesten wollte bevor ich es kaufe, wohl eben jenen Trojaner aus der Treadüberschrift eingehandelt.. Avast schlägt nun seit ner halben stunde Alarm und Sperrt eine Datei namens C:\Fairlight\Steamapp.exe Weg und sagt es mir auch jedes mal. Nur was auch immer das Verursacht, scheint Immer wieder eine neue Datei zu erstellen. ich befürchte ja, dass das nur ein Ablenkungsmanöver für den Virenscanner ist, der dann nur damit beschäftigt ist und der Trojaner machen kann, was er will. Ich hoffe um schnelle hilfe bei meinem Problem. Bisher hab ich nur das Spiel deinstalliert, hat aber nicht geholfen. |
|
11.02.2015, 13:22
| #2 |
| /// the machine /// TB-Ausbilder    | ![Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. - Standard](images/icons/icon1.gif){kind=icon} Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
11.02.2015, 14:14
| #3 |
| | Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. Danke für die schnelle Reaktion!
__________________Hier erstmal die Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-02-2015
Ran by KnuxSD at 2015-02-11 14:09:02
Running from E:\Downloads FF
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: ZoneAlarm Free Firewall Firewall (Enabled) {E6380B7E-D4B2-19F1-083E-56486607704B}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
A.R.E.S. (HKLM-x32\...\Steam App 92300) (Version: - Extend Studio)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.249 - Adobe Systems Incorporated)
Adobe Flash Player 16 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Flash Player 16 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 16.0.0.305 - Adobe Systems Incorporated)
Adobe Illustrator CC 2014 (HKLM-x32\...\{2B4B4082-8043-4646-8334-B0A29E641211}) (Version: 18.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.5.155 - Adobe Systems, Inc.)
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version: - Reloaded Productions)
Assassin's Creed Revelations (HKLM-x32\...\Steam App 201870) (Version: - Ubisoft Montreal)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Awesomenauts (HKLM-x32\...\Steam App 204300) (Version: - Ronimo Games)
Banished (HKLM-x32\...\GOGPACKBANISHED_is1) (Version: 2.0.0.3 - GOG.com)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BattleBlock Theater (HKLM-x32\...\Steam App 238460) (Version: - The Behemoth)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.3.2.3825 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )
Black and White (HKLM-x32\...\{E51B4CD9-A0A6-4324-B26A-31B3F2DE26CE}) (Version: - )
Blacklight: Retribution (HKLM-x32\...\Steam App 209870) (Version: - Zombie, Inc.)
Blade of Darkness (HKLM-x32\...\GOGPACKBLADEOFDARKNESS_is1) (Version: 2.0.0.5 - GOG.com)
Blood Bowl: Chaos Edition (HKLM-x32\...\Steam App 216890) (Version: - Cyanide Studios)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.4.4078 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{152E0B21-19D5-4772-9EF8-8E76074B0C0A}) (Version: 0.9.4.4078 - BlueStack Systems, Inc.)
Borderlands (HKLM-x32\...\Steam App 8980) (Version: - Gearbox Software)
Borderlands 2 (HKLM-x32\...\Steam App 49520) (Version: - Gearbox Software)
Borderlands: The Pre-Sequel (HKLM-x32\...\Qm9yZGVybGFuZHNUaGVQcmVTZXF1ZWw=_is1) (Version: 1 - )
Brütal Legend (HKLM-x32\...\Steam App 225260) (Version: - Double Fine Productions)
Castle Crashers (HKLM-x32\...\Steam App 204360) (Version: - The Behemoth)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version: - Torn Banner Studios)
Command and Conquer: Red Alert 3 (HKLM-x32\...\Steam App 17480) (Version: - EA Los Angeles)
Commandos Complete Edition (HKLM-x32\...\{FF32D38D-2B29-4FA0-A5C1-956181A6D1F1}_is1) (Version: v1.0 - RAF)
Company of Heroes (New Steam Version) (HKLM-x32\...\Steam App 228200) (Version: - Relic)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
Curse Client (HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.820 - Curse)
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Damned (HKLM-x32\...\Steam App 251170) (Version: - )
DayZ Commander (HKLM-x32\...\{B3653588-3AC0-4A1D-950F-D96531E84374}) (Version: 0.92.91 - Dotjosh Studios)
Dead Island (HKLM-x32\...\Steam App 91310) (Version: - Techland)
Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version: - Capcom Game Studio Vancouver)
Deadpool (HKLM-x32\...\Deadpool_is1) (Version: 1.0 - Activision)
Dino D-Day (HKLM-x32\...\Steam App 70000) (Version: - 800 North and Digital Ranch)
D-i-v-X AVI Codec Pack Pro 2.4.0 (HKLM-x32\...\D-i-v-X - AVI Codec Pack Pro) (Version: - D-i-v-X AVI Codec Pack Pro)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - Klei Entertainment)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - Klei Entertainment)
Dota 2 (HKLM-x32\...\Steam App 570) (Version: - Valve)
Dungeon Siege III (HKLM-x32\...\Steam App 39160) (Version: - Obsidian Entertainment)
Dxtory version 2.0.122 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.122 - Dxtory Software)
Earth 2150: The Moon Project (HKLM-x32\...\Steam App 259280) (Version: - )
Edge of Space (HKLM-x32\...\Steam App 238240) (Version: - Handyman Studios)
Electronic Super Joy (HKLM-x32\...\Steam App 244870) (Version: - Michael Todd Games)
EVGA Precision X 4.1.0 (HKLM-x32\...\PrecisionX) (Version: 4.1.0 - EVGA Corporation)
F.E.A.R. 3 (HKLM-x32\...\Steam App 21100) (Version: - Day 1 Studios)
FindRight (HKLM\...\FindRight) (Version: 2014.02.18.181234 - FindRight) <==== ATTENTION
Firefall (HKLM-x32\...\Steam App 227700) (Version: - Red 5 Studios)
Firestorm-Release (remove only) (HKLM-x32\...\Firestorm-Release) (Version: 4.6.1.40478 - The Phoenix Firestorm Project, Inc.)
Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - )
Frets On Fire (HKLM-x32\...\Frets on Fire) (Version: 1.3.110-win32 - )
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 40.0.2214.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.26.9 - Google Inc.) Hidden
Guitar Hero III (HKLM-x32\...\{0CE1A6C0-F3F7-49E6-8F9D-2431F9827441}) (Version: 1.3 - Activision)
Guns of Icarus Online (HKLM-x32\...\Steam App 209080) (Version: - Muse Games)
Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve)
Half-Life 2: Episode One (HKLM-x32\...\Steam App 380) (Version: - Valve)
Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version: - Valve)
Hammerfight (HKLM-x32\...\Steam App 41100) (Version: - Konstantin Koshutin)
HAWKEN (HKLM-x32\...\Steam App 271290) (Version: - Adhesive Games)
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Honorbuddy (HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\{b4df27dd-3732-4161-b41b-f0c16e37f3d4}) (Version: 2.5.10121.730 - Bossland GmbH)
Honorbuddy (x32 Version: 2.5.10121.730 - Bossland GmbH) Hidden
Hotline Miami (HKLM-x32\...\Steam App 219150) (Version: - Dennaton Games)
InfiniteCrisis_E7D665874CB6 (HKLM-x32\...\InfiniteCrisis_E7D665874CB6) (Version: - Turbine, Inc)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1011 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Small Business Advantage (HKLM-x32\...\{6A6D86CD-B004-46b7-8951-7BB75A776F8C}) (Version: 2.2.39.7991 - Intel(R) Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{B1AC3709-3E98-4F2C-A84E-4BCA2A452E64}) (Version: 4.2.40.2418 - Intel Corporation)
Intel(R) Update Manager (x32 Version: 1.0.0.36888 - Intel Corporation) Hidden
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Kane & Lynch 2: Dog Days (HKLM-x32\...\Steam App 28000) (Version: - IO Interactive)
Kerbal Space Program (HKLM-x32\...\Steam App 220200) (Version: - Squad)
K-Lite Codec Pack 10.8.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.8.0 - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve)
Loadout (HKLM-x32\...\Steam App 208090) (Version: - Edge of Reality)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.303 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.303 - LogMeIn, Inc.) Hidden
Luftrausers (HKLM-x32\...\GOGPACKLUFTRAUSERS_is1) (Version: 2.0.0.2 - GOG.com)
Magicka (HKLM-x32\...\Steam App 42910) (Version: - Arrowhead Game Studios)
Magicka: Wizard Wars (HKLM-x32\...\Steam App 202090) (Version: - Paradox North)
MEGAMANX8 (HKLM-x32\...\{AF13E972-FFD5-42FF-8122-46E2F08CEDAF}) (Version: 1.00.0000 - CAPCOM)
METAL SLUG 3 (HKLM-x32\...\Steam App 250180) (Version: - DotEmu)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Monaco (HKLM-x32\...\Steam App 113020) (Version: - Pocketwatch Games)
Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version: - TaleWorlds Entertainment)
Mozilla Firefox 35.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 35.0.1 (x86 de)) (Version: 35.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Mumble 1.2.8 (HKLM-x32\...\{1BC144A3-20EF-49DD-8EBB-E421E128E30F}) (Version: 1.2.8 - Thorvald Natvig)
Natural Selection 2 (HKLM-x32\...\Steam App 4920) (Version: - Unknown Worlds Entertainment)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.51.0 - Black Tree Gaming)
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150131.101358 - Square Enix Ltd)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.11 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.11 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.11 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.11 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA Photoshop Plug-ins 64 bit (HKLM-x32\...\{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}) (Version: 8.50 - )
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Octodad: Dadliest Catch (HKLM-x32\...\Steam App 224480) (Version: - Young Horses)
Oil Rush (HKLM-x32\...\Steam App 200390) (Version: - Unigine Corp.)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 9.4.5.195 - Electronic Arts, Inc.)
Outlast (HKLM-x32\...\GOGPACKOUTLAST_is1) (Version: 2.0.0.3 - GOG.com)
Patch v4.17b Update (HKLM-x32\...\{THEGUILDREN-0010-2010-300520102330}_is1) (Version: - RUNEFORGE Games Studios)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.)
Planetary Annihilation (HKLM-x32\...\Steam App 233250) (Version: - Uber Entertainment)
Poker Night 2 (HKLM-x32\...\Steam App 234710) (Version: - Telltale Games)
Poker Night at the Inventory (HKLM-x32\...\Steam App 31280) (Version: - Telltale Games)
Portal (HKLM-x32\...\Steam App 400) (Version: - Valve)
Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve)
Probably Archery (HKLM-x32\...\Steam App 263420) (Version: - South East Games)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.0.2 r2161 - )
Rayman Legends (HKLM-x32\...\Steam App 242550) (Version: - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.72.410.2013 - Realtek)
Renegade X (HKLM-x32\...\UDK-4fc3a6b6-3d0e-4dce-b127-8e60191e2b1e) (Version: Open Beta 1 - Totem Arts)
Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam)
RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software) <==== ATTENTION!
Rogue Legacy (HKLM-x32\...\Steam App 241600) (Version: - Cellar Door Games)
Rust (HKLM-x32\...\Steam App 252490) (Version: - Facepunch Studios)
SageThumbs 2.0.0.19 (HKLM\...\SageThumbs) (Version: 2.0.0.19 - Cherubic Software)
Saints Row 2 (HKLM-x32\...\Steam App 9480) (Version: - Volition)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version: - Deep Silver Volition)
Saints Row: The Third (HKLM-x32\...\Steam App 55230) (Version: - Volition)
SEGA Genesis & Mega Drive Classics (HKLM-x32\...\Steam App 34270) (Version: - Sega)
Shank 2 (HKLM-x32\...\Steam App 102840) (Version: - Klei Entertainment)
ShareX 9.7.0 (HKLM\...\82E6AC09-0FEF-4390-AD9F-0DD3F5561EFC_is1) (Version: 9.7.0 - ShareX Developers)
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Skullgirls (HKLM-x32\...\Steam App 245170) (Version: - Lab Zero Games)
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2533.0 - Hi-Rez Studios)
Sonic & All-Stars Racing Transformed (HKLM-x32\...\Steam App 212480) (Version: - Sumo Digital)
Sonic and SEGA All Stars Racing (HKLM-x32\...\Steam App 34190) (Version: - Sumo Digital)
Sonic CD (HKLM-x32\...\Steam App 200940) (Version: - Blit Software)
Sonic Generations (HKLM-x32\...\Sonic Generations_is1) (Version: 1.0 - SEGA)
Sonic Generations (HKLM-x32\...\Steam App 71340) (Version: - Devil's Details)
SONIC THE HEDGEHOG 4 Episode I (HKLM-x32\...\Steam App 202530) (Version: - SEGA)
SONIC THE HEDGEHOG 4 Episode II (HKLM-x32\...\Steam App 203650) (Version: - SEGA)
Starbound (HKLM-x32\...\Steam App 211820) (Version: - )
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Super-Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.020 - MSI)
Supreme Commander: Forged Alliance (HKLM-x32\...\Steam App 9420) (Version: - Gas Powered Games)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.27614 - TeamViewer)
TeeBoard: The Twitch Army Knife (HKLM-x32\...\be.gip.twitch.TeeBoard) (Version: 0.1.5 - UNKNOWN)
TeeBoard: The Twitch Army Knife (x32 Version: 0.1.5 - UNKNOWN) Hidden
Teenage Mutant Ninja Turtles: Out of the Shadows (HKLM-x32\...\Steam App 228560) (Version: - )
Telegram Desktop version 0.7.6 (HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.7.6 - Telegram Messenger LLP)
TG-30 USB GAME PAD (HKLM-x32\...\{E3BFC829-C9E7-4B01-B344-0BCB65D1666B}) (Version: 1.00.0000 - GASIA)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Lord of the Rings: War in the North (HKLM-x32\...\Steam App 32800) (Version: - Snowblind Studios)
The Secret World (HKLM-x32\...\The Secret World_is1) (Version: 1.0.0 - Funcom)
The Ship (HKLM-x32\...\Steam App 2400) (Version: - Outerlight Ltd.)
The Ship Single Player (HKLM-x32\...\Steam App 2420) (Version: - Outerlight Ltd.)
The Showdown Effect (HKLM-x32\...\Steam App 204080) (Version: - Arrowhead Game Studios)
The Stanley Parable (HKLM-x32\...\Steam App 221910) (Version: - Galactic Cafe)
The Witcher: Enhanced Edition (HKLM-x32\...\Steam App 20900) (Version: - CD Projekt RED)
Thief (HKLM-x32\...\VGhpZWY=_is1) (Version: 1 - )
Tiny and Big: Grandpa's Leftovers (HKLM-x32\...\Steam App 205910) (Version: - Black Pants Game Studio)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.5.7 - Electronic Arts)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version: - Crystal Dynamics)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version: - Runic Games)
Toribash (HKLM-x32\...\Steam App 248570) (Version: - Nabi Studios)
Tunngle Version Tunngle (HKLM-x32\...\Tunngle_is1) (Version: Tunngle - Tunngle.net GmbH)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UE4 Prerequisites (HKLM\...\{E8F64548-5B1F-405A-89EA-9D3147E9DE39}) (Version: 1.0.6.0 - Epic Games, Inc.)
Ultimate Control version 1.2 (HKLM-x32\...\{4D649577-47C2-4068-B7B8-09D1FEE7EF03}_is1) (Version: 1.2 - NEGU Soft)
Unity Web Player (HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Uplay (HKLM-x32\...\Uplay) (Version: 4.5 - Ubisoft)
Vegas Pro 13.0 (64-bit) (HKLM\...\{386F5740-091D-11E4-B13E-F04DA23A5C58}) (Version: 13.0.373 - Sony)
VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.7 - MSI)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version: - Gaijin Entertainment)
Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment)
Warhammer 40,000 Space Marine (HKLM-x32\...\Steam App 55150) (Version: - Relic)
Warhammer® 40,000™: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version: - Relic Entertainment)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc)
Wolfenstein The New Order German Edition [Full Uncut] 1.0.0.1 (HKLM-x32\...\Wolfenstein The New Order German Edition [Full Uncut] 1.0.0.1) (Version: - )
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
World of Warcraft Beta (HKLM-x32\...\World of Warcraft Beta) (Version: - Blizzard Entertainment)
World of Warcraft Public Test (HKLM-x32\...\World of Warcraft Public Test) (Version: - Blizzard Entertainment)
Worms Revolution (HKLM-x32\...\Steam App 200170) (Version: - Team17 Digital Ltd.)
Worms Ultimate Mayhem (HKLM-x32\...\Steam App 70600) (Version: - Team17 Software Ltd.)
Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org)
XSplit Broadcaster (HKLM-x32\...\{3A1F3A32-7E9D-4AD2-A2E2-DFC98BAA9DC7}) (Version: 1.3.1403.1202 - SplitMediaLabs)
Z Remastered (HKLM-x32\...\Z Remastered_is1) (Version: - )
Ziggurat (HKLM-x32\...\Ziggurat_is1) (Version: - )
ZoneAlarm Firewall (x32 Version: 12.0.121.000 - Check Point Software Technologies Ltd.) Hidden
ZoneAlarm Free Firewall (HKLM-x32\...\ZoneAlarm Free Firewall) (Version: 12.0.121.000 - Check Point)
ZoneAlarm Security (x32 Version: 12.0.121.000 - Check Point Software Technologies Ltd.) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-146171499-3385175679-1513921287-1000_Classes\CLSID\{1a05b777-5117-494f-80a3-653734a85c45}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
==================== Restore Points =========================
06-02-2015 15:42:22 DirectX wurde installiert
06-02-2015 15:42:29 DirectX wurde installiert
08-02-2015 08:21:54 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
08-02-2015 08:21:59 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
08-02-2015 08:22:05 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
08-02-2015 08:22:10 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005
08-02-2015 08:22:17 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
08-02-2015 08:22:23 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 03:34 - 2014-11-30 04:02 - 00001132 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 na1r.services.adobe.com
127.0.0.1 hlrcv.stage.adobe.com
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {01280F54-2AE5-4AC9-9D13-E6D05CD8B50B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-13] (Google Inc.)
Task: {22449D98-5DC9-45E8-804F-05A81354E286} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-09-24] (AVAST Software)
Task: {32D91913-8693-4F0F-AC8E-03C8C3743E11} - System32\Tasks\BaronReplays => E:\Tools\Baronreplays\BaronReplays\BaronReplays.exe
Task: {64F9D3F5-B5CE-42D2-88E3-334634FE4933} - System32\Tasks\{C257E142-A14C-4289-8927-920C5F8998E8} => E:\Tools\Honorbuddy\Honorbuddy.exe [2014-10-24] (Bossland GmbH)
Task: {73973688-B0EA-4C0F-8184-CA823C7F0A2B} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2014-10-06] ()
Task: {91604B34-198E-4797-AF74-62EE334D7EED} - System32\Tasks\AdobeAAMUpdater-1.0-Knux-PC-KnuxSD => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {D58B3418-E757-4023-9F19-0493C6DEF3B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-13] (Google Inc.)
Task: {F40E25F7-5552-4E11-BE23-739D35FD3B28} - System32\Tasks\{ABF482DC-DC55-4F57-8DA6-005D8E485061} => C:\Users\KnuxSD\Desktop\Xinputemu 3.1 Version Final\XInputTest.exe
Task: {FE69FF8C-EFD5-4C63-BEFD-9D684AA4C1F7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-06] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) ==============
2014-02-13 21:28 - 2014-09-13 22:53 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-10-29 21:45 - 2013-10-29 21:45 - 00036536 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2013-10-29 21:45 - 2013-10-29 21:45 - 00798392 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2013-08-01 17:31 - 2013-08-01 17:31 - 00198120 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
2013-08-01 17:31 - 2013-08-01 17:31 - 00054760 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\NetworkHeuristic.dll
2013-08-01 17:31 - 2013-08-01 17:31 - 00034792 _____ () C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\ISCTNetMon.dll
2014-08-23 21:18 - 2014-08-23 21:18 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2014-10-09 20:35 - 2014-10-09 20:34 - 00016384 ____N () C:\Users\KnuxSD\AppData\Local\Apps\2.0\B94WC4G0.ZLB\MN4RT9JH.QVG\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b62a0ea0a2ec\Curse.CurseClient.WowDb.dll
2014-03-27 11:19 - 2014-03-27 11:18 - 00035840 _____ () C:\Users\KnuxSD\AppData\Local\Apps\2.0\B94WC4G0.ZLB\MN4RT9JH.QVG\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b62a0ea0a2ec\Curse.Advertising.dll
2014-10-09 20:35 - 2014-10-09 20:34 - 00099840 ____N () C:\Users\KnuxSD\AppData\Local\Apps\2.0\B94WC4G0.ZLB\MN4RT9JH.QVG\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b62a0ea0a2ec\Curse.CurseClient.CMOD2.dll
2014-09-24 00:20 - 2014-09-24 00:20 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2015-02-10 20:16 - 2015-02-10 20:16 - 02912768 _____ () C:\Program Files\AVAST Software\Avast\defs\15021001\algo.dll
2015-02-11 14:05 - 2015-02-11 14:05 - 02912256 _____ () C:\Program Files\AVAST Software\Avast\defs\15021100\algo.dll
2014-05-19 16:04 - 2014-05-19 16:04 - 00307712 _____ () C:\Users\KnuxSD\AppData\Roaming\Curse Client\Bin\opus.dll
2014-05-19 16:05 - 2014-05-19 16:05 - 00437248 _____ () C:\Users\KnuxSD\AppData\Roaming\Curse Client\Bin\WebRTC_CSharpWrapper.dll
2014-09-24 00:20 - 2014-09-24 00:20 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-08-29 00:20 - 2014-12-01 22:31 - 02396672 _____ () E:\Steam\libavcodec-56.dll
2014-08-29 00:20 - 2014-12-01 22:31 - 00442880 _____ () E:\Steam\libavutil-54.dll
2014-08-29 00:20 - 2014-12-01 22:31 - 00479744 _____ () E:\Steam\libavformat-56.dll
2014-08-29 00:20 - 2014-12-01 22:31 - 00332800 _____ () E:\Steam\libavresample-2.dll
2014-02-13 21:54 - 2014-11-11 19:47 - 00774656 _____ () E:\Steam\SDL2.dll
2015-01-05 19:47 - 2014-12-02 01:29 - 05002752 _____ () E:\Steam\v8.dll
2015-01-05 19:47 - 2014-12-02 01:29 - 01612800 _____ () E:\Steam\icui18n.dll
2015-01-05 19:47 - 2014-12-02 01:29 - 01210368 _____ () E:\Steam\icuuc.dll
2014-05-21 19:52 - 2015-02-11 01:06 - 02356928 _____ () E:\Steam\video.dll
2014-08-29 00:20 - 2014-12-01 22:31 - 00485888 _____ () E:\Steam\libswscale-3.dll
2014-02-13 21:54 - 2015-02-11 01:05 - 00702656 _____ () E:\Steam\bin\chromehtml.DLL
2014-02-13 21:54 - 2015-01-28 02:30 - 34641288 _____ () E:\Steam\bin\libcef.dll
2014-02-13 21:11 - 2013-09-16 20:19 - 01242584 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-08-15 11:31 - 2015-01-28 02:30 - 01709960 _____ () E:\Steam\bin\ffmpegsumo.dll
2015-01-27 04:12 - 2015-01-27 04:12 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"
==================== EXE Association (whitelisted) ===============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== Other Registry Areas =====================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== Accounts: =============================
Administrator (S-1-5-21-146171499-3385175679-1513921287-500 - Administrator - Disabled)
Gast (S-1-5-21-146171499-3385175679-1513921287-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-146171499-3385175679-1513921287-1004 - Limited - Enabled)
KnuxSD (S-1-5-21-146171499-3385175679-1513921287-1000 - Administrator - Enabled) => C:\Users\KnuxSD
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (02/11/2015 02:03:26 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/11/2015 02:03:21 PM) (Source: SetupARService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei SetupAfterRebootService.SetupARService.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/09/2015 04:19:48 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm rads_user_kernel.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 2de0
Startzeit: 01d044173a345250
Endzeit: 2
Anwendungspfad: E:\Games\League of Legends\RADS\system\rads_user_kernel.exe
Berichts-ID: 7d4661e4-b00a-11e4-be79-448a5b2acd32
Error: (02/08/2015 05:15:06 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/08/2015 05:14:45 AM) (Source: SetupARService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei SetupAfterRebootService.SetupARService.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/06/2015 10:45:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm SC2.exe, Version 2.1.8.33553 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 25a4
Startzeit: 01d0424b44c939b7
Endzeit: 225
Anwendungspfad: E:\Games\StarCraft II\Versions\Base32283\SC2.exe
Berichts-ID: 7d14fae7-ae49-11e4-8294-448a5b2acd32
Error: (02/06/2015 07:04:00 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm NVIDIA User Experience Driver Component wurde wegen dieses Fehlers geschlossen.
Programm: NVIDIA User Experience Driver Component
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0
Error: (02/06/2015 07:04:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvxdsync.exe, Version: 8.17.13.4411, Zeitstempel: 0x5414aaed
Name des fehlerhaften Moduls: nvapi64.dll, Version: 9.18.13.4411, Zeitstempel: 0x5414a0e3
Ausnahmecode: 0xc000001d
Fehleroffset: 0x0000000000205e50
ID des fehlerhaften Prozesses: 0x7d8
Startzeit der fehlerhaften Anwendung: 0xnvxdsync.exe0
Pfad der fehlerhaften Anwendung: nvxdsync.exe1
Pfad des fehlerhaften Moduls: nvxdsync.exe2
Berichtskennung: nvxdsync.exe3
Error: (02/06/2015 06:55:40 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm NVIDIA User Experience Driver Component wurde wegen dieses Fehlers geschlossen.
Programm: NVIDIA User Experience Driver Component
Datei:
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: 00000000
Datenträgertyp: 0
Error: (02/06/2015 06:55:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvxdsync.exe, Version: 8.17.13.4411, Zeitstempel: 0x5414aaed
Name des fehlerhaften Moduls: nvapi64.dll, Version: 9.18.13.4411, Zeitstempel: 0x5414a0e3
Ausnahmecode: 0xc000001d
Fehleroffset: 0x0000000000205e50
ID des fehlerhaften Prozesses: 0x56c
Startzeit der fehlerhaften Anwendung: 0xnvxdsync.exe0
Pfad der fehlerhaften Anwendung: nvxdsync.exe1
Pfad des fehlerhaften Moduls: nvxdsync.exe2
Berichtskennung: nvxdsync.exe3
System errors:
=============
Error: (02/11/2015 02:03:26 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (02/08/2015 05:15:06 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (02/06/2015 04:50:36 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (02/05/2015 04:47:15 AM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error: (02/05/2015 04:47:02 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (02/05/2015 04:26:24 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "YOUNGKOBE",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{0B5D7BDD-E2D5-47F7-9C1C-A456FD8ACF4D}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (02/02/2015 00:22:32 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
Error: (02/01/2015 04:22:23 PM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "MARLON-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{0B5D7BDD-E2D5-47F7-9C1C-A456FD8ACF4D}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error: (01/31/2015 09:42:04 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet:
%%1064
Error: (01/31/2015 09:41:50 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am 31.01.2015 um 20:57:53 unerwartet heruntergefahren.
Microsoft Office Sessions:
=========================
Error: (02/11/2015 02:03:26 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/11/2015 02:03:21 PM) (Source: SetupARService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei SetupAfterRebootService.SetupARService.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/09/2015 04:19:48 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: rads_user_kernel.exe0.0.0.02de001d044173a3452502E:\Games\League of Legends\RADS\system\rads_user_kernel.exe7d4661e4-b00a-11e4-be79-448a5b2acd32
Error: (02/08/2015 05:15:06 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service. Service did not stop gracefully the last time it was run.
bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/08/2015 05:14:45 AM) (Source: SetupARService) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.NullReferenceException: Der Objektverweis wurde nicht auf eine Objektinstanz festgelegt.
bei SetupAfterRebootService.SetupARService.OnStart(String[] args)
bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
Error: (02/06/2015 10:45:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: SC2.exe2.1.8.3355325a401d0424b44c939b7225E:\Games\StarCraft II\Versions\Base32283\SC2.exe7d14fae7-ae49-11e4-8294-448a5b2acd32
Error: (02/06/2015 07:04:00 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: NVIDIA User Experience Driver Component000000000
Error: (02/06/2015 07:04:00 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvxdsync.exe8.17.13.44115414aaednvapi64.dll9.18.13.44115414a0e3c000001d0000000000205e507d801d041d18a303320C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exeC:\Windows\system32\nvapi64.dllf160acd1-adc5-11e4-8294-448a5b2acd32
Error: (02/06/2015 06:55:40 AM) (Source: Application Error) (EventID: 1005) (User: )
Description: NVIDIA User Experience Driver Component000000000
Error: (02/06/2015 06:55:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: nvxdsync.exe8.17.13.44115414aaednvapi64.dll9.18.13.44115414a0e3c000001d0000000000205e5056c01d041bff033487eC:\Program Files\NVIDIA Corporation\Display\nvxdsync.exeC:\Windows\system32\nvapi64.dllc763cb53-adc4-11e4-8294-448a5b2acd32
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4570 CPU @ 3.20GHz
Percentage of memory in use: 42%
Total physical RAM: 8120.07 MB
Available physical RAM: 4641.88 MB
Total Pagefile: 16238.28 MB
Available Pagefile: 12871.78 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:111.69 GB) (Free:34.98 GB) NTFS
Drive e: (Daten) (Fixed) (Total:1863.01 GB) (Free:281.3 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 73472A89)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.7 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: D7708072)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== End Of Log ============================
FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-02-2015
Ran by KnuxSD (administrator) on KNUXSD on 11-02-2015 14:08:37
Running from E:\Downloads FF
Loaded Profiles: KnuxSD (Available profiles: KnuxSD)
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe
(Curse, Inc) C:\Users\KnuxSD\AppData\Roaming\Curse Client\Bin\Curse.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Check Point Software Technologies LTD) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(ShareX Developers) C:\Program Files\ShareX\ShareX.exe
(NEGU Soft) C:\Program Files (x86)\Ultimate Control\ucontrol.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\System32\PnkBstrA.exe
(TeamViewer GmbH) C:\Users\Public\temp\TeamViewer\Version9\TeamViewer_Service.exe
(Curse) C:\Users\KnuxSD\AppData\Local\Apps\2.0\B94WC4G0.ZLB\MN4RT9JH.QVG\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b62a0ea0a2ec\CurseClient.exe
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Valve Corporation) E:\Steam\Steam.exe
(Valve Corporation) E:\Steam\bin\steamwebhelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Hi-Rez Studios) E:\Games\Hi-Rez Studios\HiPatchService.exe
(Valve Corporation) E:\Steam\bin\steamwebhelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585928 2015-01-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-09-16] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [Super-Charger] => C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [490480 2013-09-09] (MSI)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-09-24] (AVAST Software)
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [74160 2014-01-29] (Check Point Software Technologies LTD)
HKLM-x32\...\Run: [Ultimate Control] => C:\Program Files (x86)\Ultimate Control\ucontrol.exe [349696 2012-08-10] (NEGU Soft)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-07] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3977576 2015-01-20] (LogMeIn Inc.)
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\Run: [DAEMON Tools Lite] => E:\Tools\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [30872168 2014-12-11] (Skype Technologies S.A.)
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\...\MountPoints2: D - D:\setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ISCTSystray.lnk
ShortcutTarget: ISCTSystray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray8.exe (Intel Corporation)
Startup: C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Curse.lnk
ShortcutTarget: Curse.lnk -> C:\Users\KnuxSD\AppData\Roaming\Curse Client\Bin\Curse.exe (Curse, Inc)
Startup: C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ShareX.lnk
ShortcutTarget: ShareX.lnk -> C:\Program Files\ShareX\ShareX.exe (ShareX Developers)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd0202ff&cd=2XzuyEtN2Y1L1QzuyEyEzz0AyD0BtB0A0C0DtAtBtCtD0AyBtN0D0Tzu0CyBzytDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1730006262&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://de.yahoo.com?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-146171499-3385175679-1513921287-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://de.yahoo.com?fr=hp-avast&type=avastbcl
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0202ff&cd=2XzuyEtN2Y1L1QzuyEyEzz0AyD0BtB0A0C0DtAtBtCtD0AyBtN0D0Tzu0CyBzytDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1730006262&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0202ff&cd=2XzuyEtN2Y1L1QzuyEyEzz0AyD0BtB0A0C0DtAtBtCtD0AyBtN0D0Tzu0CyBzytDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1730006262&ir=
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-146171499-3385175679-1513921287-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0202ff&cd=2XzuyEtN2Y1L1QzuyEyEzz0AyD0BtB0A0C0DtAtBtCtD0AyBtN0D0Tzu0CyBzytDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1730006262&ir=
SearchScopes: HKU\S-1-5-21-146171499-3385175679-1513921287-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0202ff&cd=2XzuyEtN2Y1L1QzuyEyEzz0AyD0BtB0A0C0DtAtBtCtD0AyBtN0D0Tzu0CyBzytDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=1730006262&ir=
SearchScopes: HKU\S-1-5-21-146171499-3385175679-1513921287-1000 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = https://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll No File
BHO-x32: No Name -> {cf710881-c002-4ea4-860a-b6931b040948} -> No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\KnuxSD\AppData\Roaming\Mozilla\Firefox\Profiles\b8oev64r.default
FF DefaultSearchUrl: https://de.search.yahoo.com/yhs/search
FF SearchEngineOrder.1: Yahoo! (Avast)
FF Homepage: hxxp://www.newgrounds.com/
FF Keyword.URL: https://de.search.yahoo.com/yhs/search
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*'))%20%7B%20return%20'PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1215155.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Windows\system32\C2MP\npdivx32.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll No File
FF Plugin HKU\S-1-5-21-146171499-3385175679-1513921287-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\KnuxSD\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-146171499-3385175679-1513921287-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Extension: BetterTTV - C:\Users\KnuxSD\AppData\Roaming\Mozilla\Firefox\Profiles\b8oev64r.default\Extensions\jid0-OeCFXKAPh2tC0bN3Li9ajRAZx6c@jetpack.xpi [2014-09-13]
FF Extension: ProxMate - C:\Users\KnuxSD\AppData\Roaming\Mozilla\Firefox\Profiles\b8oev64r.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2014-02-17]
FF Extension: Personas Plus - C:\Users\KnuxSD\AppData\Roaming\Mozilla\Firefox\Profiles\b8oev64r.default\Extensions\personas@christopher.beard.xpi [2014-05-12]
FF Extension: Adblock Plus - C:\Users\KnuxSD\AppData\Roaming\Mozilla\Firefox\Profiles\b8oev64r.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-02-17]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-17]
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://grooveshark.com/"
CHR Profile: C:\Users\KnuxSD\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\KnuxSD\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-11-14]
CHR Extension: (Hola Besseres Internet) - C:\Users\KnuxSD\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2014-11-30]
CHR Extension: (Avast Online Security) - C:\Users\KnuxSD\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-17]
CHR Extension: (ProxMate) - C:\Users\KnuxSD\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifalmiidchkjjmkkbkoaibpmoeichmki [2014-11-30]
CHR Extension: (Google Wallet) - C:\Users\KnuxSD\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-09-24]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-09-24] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [448384 2014-08-07] ()
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-07] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-07] (BlueStack Systems, Inc.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [175136 2014-09-24] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2015-01-16] (NVIDIA Corporation)
R2 HiPatchService; E:\games\Hi-Rez Studios\HiPatchService.exe [9216 2015-02-09] (Hi-Rez Studios) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
S3 intelsba; C:\Program Files\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [54976 2013-07-25] (Intel Corporation)
R2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [198120 2013-08-01] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-01-14] (LogMeIn, Inc.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161776 2013-09-09] (MSI)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706312 2015-01-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833544 2015-01-16] (NVIDIA Corporation)
S3 Origin Client Service; E:\Games\Origin\OriginClientService.exe [1903472 2014-12-27] (Electronic Arts)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2014-08-23] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-08-23] ()
S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [24576 2014-02-17] (Realtek Semiconductor.) [File not signed]
R2 TeamViewer9; C:\Users\Public\temp\TeamViewer\Version9\TeamViewer_Service.exe [4972864 2014-04-02] (TeamViewer GmbH)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [762320 2014-11-04] (Tunngle.net GmbH)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [2445816 2014-01-29] (Check Point Software Technologies LTD)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [50704 2013-10-15] (Check Point Software Technologies, Ltd.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-09-24] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-09-24] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-09-24] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-09-24] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-09-24] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-09-24] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-09-24] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-07] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-07-08] (Disc Soft Ltd)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [21408 2013-08-01] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [21920 2013-08-01] ()
R3 INETMON; C:\Windows\System32\Drivers\INETMON.sys [29088 2013-08-01] ()
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-01] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2015-01-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [454168 2013-10-23] (Check Point Software Technologies LTD)
S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [X]
S3 MBfilt; system32\drivers\MBfilt64.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-11 14:08 - 2015-02-11 14:08 - 00000000 ____D () C:\FRST
2015-02-11 10:44 - 2015-02-11 13:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Life Is Strange - Episode I
2015-02-05 05:05 - 2015-02-05 05:05 - 00000000 ____D () C:\Users\KnuxSD\AppData\Local\Steam
2015-02-05 04:47 - 2015-02-05 04:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2015-02-05 04:47 - 2015-02-05 04:47 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2015-02-02 17:23 - 2015-02-02 17:43 - 00000193 _____ () C:\Windows\WORDPAD.INI
2015-02-01 01:04 - 2015-02-01 01:04 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Notepad++
2015-02-01 01:04 - 2015-02-01 01:04 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-02-01 01:04 - 2015-02-01 01:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-02-01 01:04 - 2015-02-01 01:04 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2015-01-29 01:11 - 2015-01-29 01:11 - 00000000 ____D () C:\Users\KnuxSD\Documents\Pyro Studios
2015-01-28 03:28 - 2015-01-28 03:28 - 00000000 ____D () C:\Users\KnuxSD\Documents\Aspyr
2015-01-28 03:28 - 2015-01-28 03:28 - 00000000 ____D () C:\Users\KnuxSD\AppData\Local\Aspyr
2015-01-28 03:25 - 2015-01-28 03:25 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2015-01-28 03:23 - 2015-01-28 03:23 - 00000535 _____ () C:\Windows\Xbox_360_CC_Driver.log
2015-01-28 02:40 - 2015-01-28 02:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Commandos Complete Edition
2015-01-27 04:12 - 2015-01-27 04:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-26 20:54 - 2015-01-26 20:54 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\java
2015-01-26 20:07 - 2015-02-11 14:04 - 00000000 ____D () C:\Users\KnuxSD\AppData\Local\LogMeIn Hamachi
2015-01-26 04:19 - 2015-01-26 04:19 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FoFiX
2015-01-26 04:19 - 2015-01-26 04:19 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\fofix
2015-01-26 04:15 - 2015-01-26 04:16 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\fretsonfire
2015-01-26 04:15 - 2015-01-26 04:15 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Frets on Fire
2015-01-26 04:11 - 2015-01-26 04:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Frets on Fire
2015-01-22 15:01 - 2015-01-22 16:16 - 00000000 ____D () C:\Users\KnuxSD\Desktop\Anträge
2015-01-21 00:35 - 2015-01-21 01:01 - 00008508 _____ () C:\Users\KnuxSD\Desktop\avatarBorderOnline.tga
2015-01-20 15:43 - 2015-01-22 15:02 - 00000000 ____D () C:\Users\KnuxSD\AppData\Local\Adobe
2015-01-18 07:40 - 2015-01-18 07:42 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Cubic
2015-01-14 23:40 - 2015-01-14 23:40 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\dvdcss
2015-01-12 22:32 - 2015-01-12 22:32 - 00293304 _____ () C:\Windows\Minidump\011215-8408-01.dmp
2015-01-12 22:24 - 2015-01-12 22:24 - 00001817 _____ () C:\Users\Public\Desktop\Apps.lnk
2015-01-12 22:24 - 2015-01-12 22:24 - 00001807 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2015-01-12 22:24 - 2015-01-12 22:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2015-01-12 22:24 - 2015-01-12 22:24 - 00000000 ____D () C:\ProgramData\BlueStacks
2015-01-12 22:24 - 2015-01-12 22:24 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2015-01-12 22:23 - 2015-01-12 22:30 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2015-01-12 22:23 - 2015-01-12 22:23 - 00000000 ____D () C:\Users\KnuxSD\AppData\Local\Bluestacks
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-11 14:06 - 2014-02-13 21:07 - 01114095 _____ () C:\Windows\WindowsUpdate.log
2015-02-11 14:05 - 2014-03-01 11:02 - 00000003 _____ () C:\Windows\system32\HRUPPROG.TXT
2015-02-11 14:04 - 2014-03-27 11:15 - 00000000 ____D () C:\Users\KnuxSD\AppData\Local\Deployment
2015-02-11 14:04 - 2014-02-17 21:24 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Skype
2015-02-11 14:03 - 2014-09-21 12:50 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2015-02-11 14:03 - 2014-07-23 01:10 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Curse Client
2015-02-11 14:03 - 2014-02-13 21:29 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-02-11 14:03 - 2014-02-13 21:11 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-02-11 14:03 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-02-11 14:03 - 2009-07-14 05:51 - 00282075 _____ () C:\Windows\setupact.log
2015-02-11 14:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2015-02-11 13:25 - 2014-02-28 21:31 - 00000000 ____D () C:\Program Files (x86)\FindRight
2015-02-11 13:22 - 2014-03-06 07:49 - 00000000 ____D () C:\Users\KnuxSD\AppData\Local\Battle.net
2015-02-11 13:15 - 2014-08-31 12:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShareX
2015-02-11 13:15 - 2014-08-31 12:57 - 00000000 ____D () C:\Program Files\ShareX
2015-02-11 13:12 - 2014-07-01 05:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-02-11 13:00 - 2014-02-13 21:11 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-02-11 12:57 - 2009-07-14 05:45 - 00019488 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-02-11 12:57 - 2009-07-14 05:45 - 00019488 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-02-11 12:26 - 2014-08-19 03:44 - 41643008 _____ () C:\Users\KnuxSD\AppData\Local\SageThumbs.db3
2015-02-11 10:40 - 2005-04-08 03:16 - 00000000 ___HD () C:\Users\KnuxSD\AppData\Roaming\860010A7
2015-02-11 10:31 - 2014-05-28 08:53 - 00000494 _____ () C:\Users\KnuxSD\Desktop\Wichtiger Scheiß.txt
2015-02-08 08:22 - 2014-02-18 02:16 - 00000000 ____D () C:\ProgramData\Package Cache
2015-02-08 08:18 - 2009-07-14 06:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-02-08 05:20 - 2009-07-14 18:58 - 00699462 _____ () C:\Windows\system32\perfh007.dat
2015-02-08 05:20 - 2009-07-14 18:58 - 00149602 _____ () C:\Windows\system32\perfc007.dat
2015-02-08 05:20 - 2009-07-14 06:13 - 01620812 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-08 05:14 - 2014-02-17 21:22 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-06 21:23 - 2014-02-26 20:45 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\vlc
2015-02-06 15:43 - 2014-02-13 21:30 - 00919932 _____ () C:\Windows\DirectX.log
2015-02-06 06:12 - 2014-07-01 05:33 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-02-06 06:12 - 2014-02-17 18:03 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-06 06:12 - 2014-02-17 18:03 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-05 10:55 - 2014-02-13 21:11 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-02-05 10:55 - 2014-02-13 21:11 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-02-05 04:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-02-04 20:30 - 2014-02-19 22:11 - 00283032 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2015-02-04 20:30 - 2014-02-19 21:55 - 00283032 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2015-02-04 05:47 - 2014-02-18 20:23 - 00000000 ____D () C:\Users\KnuxSD\AppData\Local\CrashDumps
2015-02-03 22:16 - 2014-02-13 22:07 - 00000000 ____D () C:\Users\KnuxSD\Documents\my games
2015-02-01 04:10 - 2014-02-19 21:55 - 00283032 _____ () C:\Windows\SysWOW64\PnkBstrB.ex0
2015-01-31 21:41 - 2014-02-17 22:38 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-28 16:47 - 2014-06-18 12:38 - 00000000 ____D () C:\Users\KnuxSD\Desktop\Shortcuts
2015-01-28 02:41 - 2014-04-05 03:24 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-01-26 21:18 - 2014-02-26 17:45 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\.minecraft
2015-01-26 19:38 - 2014-02-26 17:39 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\.technic
2015-01-24 14:16 - 2014-06-18 12:38 - 00000000 ____D () C:\Users\KnuxSD\Desktop\pics
2015-01-23 18:54 - 2014-06-10 15:58 - 00000000 ____D () C:\Program Files (x86)\Battlelog Web Plugins
2015-01-23 18:54 - 2014-02-13 21:13 - 00239042 _____ () C:\Windows\PFRO.log
2015-01-23 18:54 - 2009-07-14 05:45 - 00289560 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-22 15:06 - 2014-08-21 21:51 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-01-22 15:02 - 2014-12-29 15:18 - 00000000 ____D () C:\Users\KnuxSD\AppData\Roaming\Adobe
2015-01-21 01:01 - 2014-08-19 04:32 - 00000132 _____ () C:\Users\KnuxSD\AppData\Roaming\Adobe CS6-Targa-Format - Voreinstellungen
2015-01-21 00:30 - 2014-02-13 21:16 - 00066512 _____ () C:\Users\KnuxSD\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-18 03:21 - 2014-02-18 19:33 - 00014507 _____ () C:\Users\KnuxSD\Documents\TombRaider.log
2015-01-17 03:19 - 2014-02-18 02:12 - 00000000 ____D () C:\ProgramData\Origin
2015-01-16 07:41 - 2014-06-09 01:34 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-01-16 07:41 - 2014-06-09 01:34 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-01-16 07:41 - 2014-02-13 21:48 - 01514528 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-01-16 07:41 - 2014-02-13 21:48 - 01278920 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-01-14 11:32 - 2014-12-02 13:38 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2015-01-12 22:32 - 2014-03-30 13:41 - 706360139 _____ () C:\Windows\MEMORY.DMP
2015-01-12 22:32 - 2014-03-30 13:41 - 00000000 ____D () C:\Windows\Minidump
2015-01-12 22:24 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
==================== Files in the root of some directories =======
2014-03-27 20:12 - 2014-12-29 14:10 - 0000132 _____ () C:\Users\KnuxSD\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2014-08-19 04:32 - 2015-01-21 01:01 - 0000132 _____ () C:\Users\KnuxSD\AppData\Roaming\Adobe CS6-Targa-Format - Voreinstellungen
2014-11-30 04:04 - 2014-11-30 04:04 - 0000034 _____ () C:\Users\KnuxSD\AppData\Roaming\AdobeWLCMCache.dat
2014-12-10 19:54 - 2014-12-10 19:54 - 0001456 _____ () C:\Users\KnuxSD\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2014-05-10 20:40 - 2014-05-10 20:40 - 0003072 _____ () C:\Users\KnuxSD\AppData\Local\file__0.localstorage
2014-08-19 03:44 - 2015-02-11 12:26 - 41643008 _____ () C:\Users\KnuxSD\AppData\Local\SageThumbs.db3
Some content of TEMP:
====================
C:\Users\KnuxSD\AppData\Local\Temp\99132uninstall.exe
C:\Users\KnuxSD\AppData\Local\Temp\buddyupdater193002689.exe
C:\Users\KnuxSD\AppData\Local\Temp\buddyupdater74162594.exe
C:\Users\KnuxSD\AppData\Local\Temp\CmdLineExt02.dll
C:\Users\KnuxSD\AppData\Local\Temp\devcon64.exe
C:\Users\KnuxSD\AppData\Local\Temp\drm_dialogs.dll
C:\Users\KnuxSD\AppData\Local\Temp\drm_dyndata_7340014.dll
C:\Users\KnuxSD\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\KnuxSD\AppData\Local\Temp\DTLite4491-0356.exe
C:\Users\KnuxSD\AppData\Local\Temp\Nexus%20Mod%20Manager-0.51.0.exe
C:\Users\KnuxSD\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\KnuxSD\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\KnuxSD\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\KnuxSD\AppData\Local\Temp\nvStInst.exe
C:\Users\KnuxSD\AppData\Local\Temp\setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\ShareX-9.3.0-setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\ShareX-9.3.1-setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\ShareX-9.4.0-setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\ShareX-9.4.1-setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\ShareX-9.4.2-setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\ShareX-9.5.0-setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\ShareX-9.6.1-setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\ShareX-9.7.0-setup.exe
C:\Users\KnuxSD\AppData\Local\Temp\SIntf16.dll
C:\Users\KnuxSD\AppData\Local\Temp\SIntf32.dll
C:\Users\KnuxSD\AppData\Local\Temp\SIntfNT.dll
C:\Users\KnuxSD\AppData\Local\Temp\SkypeSetup.exe
C:\Users\KnuxSD\AppData\Local\Temp\sonarinst.exe
C:\Users\KnuxSD\AppData\Local\Temp\Sqlite3.dll
C:\Users\KnuxSD\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\KnuxSD\AppData\Local\Temp\Tsu802CD6D1.dll
C:\Users\KnuxSD\AppData\Local\Temp\vlc-2.1.5-win32.exe
C:\Users\KnuxSD\AppData\Local\Temp\xmlUpdater.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-01-28 06:15
==================== End Of Log ============================
Ich habe ausserdem jetzt nachdem ich Avast! Habe durchlaufen lassen wie vom Programm vorgeschlagen einen neustart mit anschließendem test VOR dem Starten von Windows ausführen lassen, wobei er einiges gelöscht hat, seit dem schreit Avast! auch nicht mehr, dass etwas angreifen würde. Keine Ahnung ob das schon gereicht hat aber ich werd's ja von dir erfahren hoffe ich  |
|
11.02.2015, 18:10
| #4 | |
| /// the machine /// TB-Ausbilder | Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._.Zitat:
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.02.2015, 00:36
| #5 | |
| | Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._.Zitat:
Aber ich schätze mal aus deiner Antwort gehen zwei Möglichkeiten heraus: 1. Du hast keine Lust jemandem zu helfen, der sich software für den eigengebrauch herunterlädt, Oder 2. Der PC ist wieder sicher. ._. Geändert von KnuxSD (12.02.2015 um 01:27 Uhr) |
|
12.02.2015, 18:29
| #6 |
| /// the machine /// TB-Ausbilder | Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. Fast. ICh mache mich nicht mit strafbar, deswegen gibt es her erst Support wen alles Illegale entfernt wurde.
__________________ --> Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. |
|
13.02.2015, 05:51
| #7 |
| | Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. Und wie entferne ich diese Illegalen Zeilen dort? ._. also wie genau so dass sie im log verschwinden |
|
13.02.2015, 17:23
| #8 |
| /// the machine /// TB-Ausbilder | Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. Die enferne ich dann, du musst nur die Programme deinstallieren, also das gecrackte Adobe Produkt, und auch alles andere was eventuell gecrackt ist, falls noch was da is. Finde ich im Laufe der bereinigung nochmal was ist Schluss mit Support
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._. |
| alarm, avast, beschäftigt, datei, deinstalliert, einfach, falsch, greift, hoffe, installieren, namens, neue, scan, scanner, schei, schlägt, schnelle, sperrt, testen, trojaner, verursacht, virenscan, virenscanner, win, win32, win32:backdoor-acx[trj] |
![Win32:Backdoor-ACX[Trj] Trojaner greift PC an, bitte um Hilfe ._.](iconimages/plagegeister-aller-art-deren-bekaempfung/win32-backdoor-acx-trj-trojaner-greift-pc-bitte-um-hilfe-__ltr.gif)
Linear-Darstellung
