Nach Bluestacksroot Download installieren sich dauernd Programme

EnneBua · 16.09.2015, 14:19

Hallo,
ich habe mir vor 3 Tagen einen Root für Bluestacks gedownloaded, ließ es aber dann sein weil sich mit dem Download unzähliche andere Programme mitzogen..
Avast hat mir dann bis zu 11 Virenmeldung innerhalb einer Minute reingeschickt was mir sehr Sorgen machte.
Programme wie AnyProtect(Ex), crossbrowse und irgendwelche PC Optimizer installieren sich nach jedem Start/Neustart
Habe Avast auch schon 2x nachschauen lassen, hat nichts geholfen..
Mittlerweile kann ich am Desktop gar nicht mehr anklicken, lediglich auf der Taskleiste kann ich was machen.
Da ich nun wirklich nicht mehr weiter weiß und es ja nichtmal mein Laptop ist wäre ich echt froh wenn mir hier jemand Helfen könnte!
Laptop : Samsung RV 520 mit Windows 7, sehr alt - gekauft September 2011

Edit : Meine Firefox Einstellung sind auch immer anders. Anfangs konnte ich die Startseite "mystartsearch" oder so nicht ändern, mittlerweile gehts wieder. Aber wenn ich Tabs öffne kommt irgendwas, was Firefox nicht findet und nicht meine meist genutzen Seiten.
LG

schrauber · 16.09.2015, 14:31

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

EnneBua · 16.09.2015, 14:37

Hoffe das stimmt so.

schrauber · 17.09.2015, 05:51

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

EnneBua · 18.09.2015, 20:19

Bekomme es nicht hin. Ich kann ja nicht auf dem Desktop arbeiten aber kann über Ordner auf den Desktop zugreifen. Wenn ich FRST und Addition makiere und hier, zwischen CODE, einfügen will passiert nicht.

schrauber · 19.09.2015, 16:28

Du musst die Logs öffnen, den Inhalt markieren, dann hier einfügen

EnneBua · 19.09.2015, 18:04

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
durchgeführt von EnneBua (Administrator) auf ENNE-PC (16-09-2015 15:33:00)
Gestartet von C:\Users\EnneBua\Downloads
Geladene Profile: EnneBua (Verfügbare Profile: Enne & EnneBua & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\hnszDC20.tmp
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
() C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\jnsjC228.tmp
() C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\knss2523.tmp
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
(DTools LIMITED) C:\ProgramData\UWdsManProU\WdsManPro.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
(BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\DeviceDisplayObjectProvider.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Spotify Ltd) C:\Users\EnneBua\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Samsung Electronics CO., LTD.) C:\Program Files\SAMSUNG\S Agent\CommonAgent.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\SAMSUNG\SamsungFastStart\SmartRestarter.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(Crossbrowse) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
(MyBrowser 1.0.2V16.09) C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-10.exe
(MyBrowser 1.0.2V16.09) C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-6.exe
(MyBrowser 1.0.2V16.09) C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11780712 2011-02-27] (Realtek Semiconductor)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe [87336 2010-09-20] (CyberLink Corp.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-07] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [RoccatKonePure] => C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE [561152 2014-01-20] (ROCCAT GmbH)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-13] (Avast Software s.r.o.)
HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKU\S-1-5-21-336442205-827502387-1674173946-1162\...\Run: [Spotify Web Helper] => C:\Users\EnneBua\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2017848 2015-07-29] (Spotify Ltd)
HKU\S-1-5-21-336442205-827502387-1674173946-1162\...\Run: [GoogleChromeAutoLaunch_52B1C02B9CA4DE5CF6D58E624CF3ABF1] => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [770048 2015-05-11] (Crossbrowse)
HKU\S-1-5-18\...\Run: [SearchProtect] => \SearchProtect\bin\cltmng.exe
IFEO\appvlp.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\bejeweled 2 deluxe-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\build-a-lot-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\ccleaner64.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\chuzzle deluxe-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\deathonthenile-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\dinerdash2-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\drivegreen1-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\excel.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\farm-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\golf-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\insaniquarium-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\media+player10.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\msaccess.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\msouc.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\mspub.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\nobuclient.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\onenote.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\onenotem.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\onplay.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\outlook.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\peggle-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\penguins-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\plants vs. zombies-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\powerpnt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\provider.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\setlang.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\signalislandui.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\smanager.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\uninst.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
IFEO\winword.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\zuma deluxe-wt.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-26] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  Keine Datei
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  Keine Datei
Startup: C:\Users\EnneBua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk [2015-09-16]
ShortcutTarget: crossbrowse.lnk -> C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (Crossbrowse)
Startup: C:\Users\EnneBua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk [2014-08-25]
ShortcutTarget: Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk -> C:\Program Files\Intel\TurboBoost\SignalIslandUi.exe (Intel® Corporation)
Startup: C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-08-22]
ShortcutTarget: Dropbox.lnk -> C:\Users\EnneBua\AppData\Roaming\Dropbox\bin\Dropbox.exe (Keine Datei)
GroupPolicy: Beschränkung - Chrome <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

ProxyEnable: [.DEFAULT] => Proxy ist aktiviert.
ProxyServer: [.DEFAULT] => http=127.0.0.1:59497;https=127.0.0.1:59497
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{E420E3BF-C2A1-4233-BA32-746E24431A49}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{FC00FDC7-FEBF-4AF7-A5B7-5B4A41982D0C}: [DhcpNameServer] 10.0.0.138

Internet Explorer:
==================
HKU\S-1-5-21-336442205-827502387-1674173946-1162\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sweet-page.com/?type=hp&ts=1394741442&from=wpc&uid=WDCXWD5000BEVT-35A0RT0_WD-WXT1EC0JURR5JURR5
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://at.search.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1394741442&from=wpc&uid=WDCXWD5000BEVT-35A0RT0_WD-WXT1EC0JURR5JURR5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://at.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.sweet-page.com/?type=hp&ts=1394741442&from=wpc&uid=WDCXWD5000BEVT-35A0RT0_WD-WXT1EC0JURR5JURR5
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394741442&from=wpc&uid=WDCXWD5000BEVT-35A0RT0_WD-WXT1EC0JURR5JURR5&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-336442205-827502387-1674173946-1162\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://at.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-336442205-827502387-1674173946-1162\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://at.search.yahoo.com/?fr=hp-avast&type=avastbcl
HKU\S-1-5-21-336442205-827502387-1674173946-1162\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/
HKU\S-1-5-21-336442205-827502387-1674173946-1162\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://at.search.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM -> DefaultScope {828B641D-962F-424E-BE43-67BBBE1B64EF} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394741442&from=wpc&uid=WDCXWD5000BEVT-35A0RT0_WD-WXT1EC0JURR5JURR5&q={searchTerms}
SearchScopes: HKLM -> {828B641D-962F-424E-BE43-67BBBE1B64EF} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=484&systemid=406&v=a13251-114&apn_uid=1820337542134426&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://at.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRa8ldwnKG51HJOT1XRoA82gVkpDLIiC3wcwpHk-U5DpeJDLCABhq3q-4C46rogALm_OgwuSHcb35zouzijPINKcbWl6Dzc0ehVudc_MyLGxCavoUvMU4eKXRXNYC0fnvKml7z49XIzC7FkLadxC_RramjvAWi8A7Dk6J7bmkr8coZPf_qW15B2DHNWg,&q={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1394741442&from=wpc&uid=WDCXWD5000BEVT-35A0RT0_WD-WXT1EC0JURR5JURR5&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=484&systemid=406&v=a13251-114&apn_uid=1820337542134426&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://at.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2625848&SSPV=TB_IEOB22
SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = 
SearchScopes: HKU\S-1-5-21-336442205-827502387-1674173946-1162 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://at.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-336442205-827502387-1674173946-1162 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRa8ldwnKG51HJOT1XRoA82gVkpDLIiC3wcwpHk-U5DpeJDLCABhq3q-4C46rogALm_OgwuSHcb35zouzijPINKcbWl6Dzc0ehVudc_MyLGxCavoUvMU4eKXRXNYC0fnvKml7z49XIzC7FkLadxC_RramjvAWi8A7Dk6J6ulssmo0vj17jHORS0N4qAQ,&q={searchTerms}
SearchScopes: HKU\S-1-5-21-336442205-827502387-1674173946-1162 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKU\S-1-5-21-336442205-827502387-1674173946-1162 -> {828B641D-962F-424E-BE43-67BBBE1B64EF} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-336442205-827502387-1674173946-1162 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://at.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-11-04] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-09-14] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-26] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2014-11-12] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-11-12] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-09-14] (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-26] (Avast Software s.r.o.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Samsung BHO Class -> {AA609D72-8482-4076-8991-8CDAE5B93BCB} -> C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll [2010-10-25] ()
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17] (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2014-11-12] (Microsoft Corporation)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  Keine Datei
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKLM-x32 - Kein Name - {9E131A93-EED7-4BEB-B015-A0ADB30B5646} -  Keine Datei
Toolbar: HKLM-x32 - Kein Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  Keine Datei
Toolbar: HKLM-x32 - Kein Name - {377e5d4d-77e5-476a-8716-7e70a9272da0} -  Keine Datei
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
Toolbar: HKU\S-1-5-21-336442205-827502387-1674173946-1162 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-11-01] (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-01-17] (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.sweet-page.com/?type=sc&ts=1394741442&from=wpc&uid=WDCXWD5000BEVT-35A0RT0_WD-WXT1EC0JURR5JURR5

FireFox:
========
FF ProfilePath: C:\Users\EnneBua\AppData\Roaming\Mozilla\Firefox\Profiles\7e0rd251.default
FF NewTab: chrome://quick_start/content/index.html
FF SearchEngineOrder.1: SuchMaschine
FF SelectedSearchEngine: mystartsearch
FF Homepage: hxxps://www.google.at/?gws_rd=ssl
FF Keyword.URL: hxxp://www.sm.de/?q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @java.com/DTPlugin,version=10.80.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-09-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.80.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-09-14] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-10-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-09-16] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [2015-09-16] (globalUpdate)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-09-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\EnneBua\AppData\Roaming\Mozilla\Firefox\Profiles\7e0rd251.default\searchplugins\search_engine.xml [2014-09-26]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml [2014-07-04]
FF Extension: Adblock Plus - C:\Users\EnneBua\AppData\Roaming\Mozilla\Firefox\Profiles\7e0rd251.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-08-28]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-02]
FF HKLM-x32\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\EnneBua\AppData\Roaming\Mozilla\Firefox\Profiles\7e0rd251.default\extensions\defsearchp@gmail.com
FF HKLM-x32\...\Firefox\Extensions: [deskCutv2@gmail.com] - C:\Users\EnneBua\AppData\Roaming\Mozilla\Firefox\Profiles\7e0rd251.default\extensions\deskCutv2@gmail.com
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.mystartsearch.com/?type=sc&ts=1442408381&z=22a5dadc6b9939acf160a6bgdzfzeo9z1e2b1odg3w&from=cmi&uid=WDCXWD5000BEVT-35A0RT0_WD-WXT1EC0JURR5JURR5

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [bhphemoobgnikcoofkgackkaimpfmenm] - C:\Users\Enne\AppData\Local\CRE\bhphemoobgnikcoofkgackkaimpfmenm.crx [2012-12-01]
CHR HKLM-x32\...\Chrome\Extension: [bodddioamolcibagionmmobehnbhiakf] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [clbfjfbnelcflpgpklppgplejolacbej] - C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [gclijllifhfpomppedeljakfegbcpojn] - C:\Users\Enne\AppData\Local\CRE\gclijllifhfpomppedeljakfegbcpojn.crx [2012-11-08]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-02]
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Enne\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [kdfbddbdpnahdahmamlolacimfdbeckk] - C:\Users\Gast\AppData\Local\CRE\kdfbddbdpnahdahmamlolacimfdbeckk.crx [2013-06-09]
CHR HKLM-x32\...\Chrome\Extension: [khialnikbocfgkohdegnebhmmaifoglp] - C:\Program Files (x86)\LyricsMonkey\Chrome.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [lbbbdmbjkgojacipgefbifkiebpcdjhn] - C:\Program Files (x86)\Movie2KDownloader.com\m2kDownloader10.crx [2013-04-08]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-08-16]
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Enne\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx <nicht gefunden>
CHR HKLM-x32\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files (x86)\Gophoto.it\gophotoit14.crx [2012-07-31]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-26] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-26] (Avast Software)
R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-07] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-07] (BlueStack Systems, Inc.)
S4 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2719928 2015-04-22] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-09-16] (globalUpdate) [Datei ist nicht signiert] <==== ACHTUNG
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [68608 2015-09-16] (globalUpdate) [Datei ist nicht signiert] <==== ACHTUNG
R2 gyvixodu; C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\hnszDC20.tmp [203776 2015-09-14] () [Datei ist nicht signiert]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
R2 lehicewu; C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\jnsjC228.tmp [181760 2015-09-14] () [Datei ist nicht signiert]
R2 lyryzido; C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\knss2523.tmp [1480192 2015-09-15] () [Datei ist nicht signiert]
S4 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-01] (Symantec Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2009-12-01] () [Datei ist nicht signiert]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
S4 SWUpdateService; C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2879176 2012-12-27] (Samsung Electronics CO., LTD.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2140984 2014-04-15] (TuneUp Software)
R4 WdsManPro; C:\ProgramData\UWdsManProU\WdsManPro.exe [451720 2015-09-15] (DTools LIMITED)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-26] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-26] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-27] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-26] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-26] ()
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-07] (BlueStack Systems)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 rtport; C:\Windows\SysWOW64\drivers\rtport.sys [15144 2011-07-06] (Windows (R) 2003 DDK 3790 provider)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2013-07-11] () [Datei ist nicht signiert]
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2014-03-26] (TuneUp Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-26] (Avast Software)
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 SBIOSIO; \??\C:\Users\Enne\AppData\Local\Temp\__Samsung_Update\SBIOSIO64.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-16 15:33 - 2015-09-16 15:33 - 00035816 _____ C:\Users\EnneBua\Downloads\FRST.txt
2015-09-16 15:32 - 2015-09-16 15:33 - 00000000 ____D C:\FRST
2015-09-16 15:32 - 2015-09-16 15:32 - 02191360 _____ (Farbar) C:\Users\EnneBua\Downloads\FRST64.exe
2015-09-16 15:03 - 2015-09-16 15:03 - 00007528 _____ C:\Windows\System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-4
2015-09-16 15:03 - 2015-09-16 15:03 - 00006508 _____ C:\Windows\System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-7
2015-09-16 15:03 - 2015-09-16 15:03 - 00006170 _____ C:\Windows\System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6
2015-09-16 15:03 - 2015-09-16 15:03 - 00005480 _____ C:\Windows\System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5
2015-09-16 15:03 - 2015-09-16 15:03 - 00004498 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-4.job
2015-09-16 15:03 - 2015-09-16 15:03 - 00004048 _____ C:\Windows\System32\Tasks\Z7CJuG5dlbQyzHDRvnDa
2015-09-16 15:03 - 2015-09-16 15:03 - 00004046 _____ C:\Windows\System32\Tasks\Wk4i3RsqyloGQunJt8g
2015-09-16 15:03 - 2015-09-16 15:03 - 00003478 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-7.job
2015-09-16 15:03 - 2015-09-16 15:03 - 00003142 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6.job
2015-09-16 15:03 - 2015-09-16 15:03 - 00002450 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5_user.job
2015-09-16 15:03 - 2015-09-16 15:03 - 00002450 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5.job
2015-09-16 15:03 - 2015-09-16 15:03 - 00001020 _____ C:\Windows\Tasks\Z7CJuG5dlbQyzHDRvnDa.job
2015-09-16 15:03 - 2015-09-16 15:03 - 00001018 _____ C:\Windows\Tasks\Wk4i3RsqyloGQunJt8g.job
2015-09-16 15:02 - 2015-09-16 15:07 - 00001002 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-09-16 15:02 - 2015-09-16 15:07 - 00000998 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-09-16 15:02 - 2015-09-16 15:03 - 00000000 ____D C:\Program Files (x86)\MyBrowser 1.0.2V16.09
2015-09-16 15:02 - 2015-09-16 15:02 - 00008552 _____ C:\Windows\System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-7
2015-09-16 15:02 - 2015-09-16 15:02 - 00008550 _____ C:\Windows\System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-6
2015-09-16 15:02 - 2015-09-16 15:02 - 00007528 _____ C:\Windows\System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-3
2015-09-16 15:02 - 2015-09-16 15:02 - 00005522 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-7.job
2015-09-16 15:02 - 2015-09-16 15:02 - 00005522 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-6.job
2015-09-16 15:02 - 2015-09-16 15:02 - 00004498 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-3.job
2015-09-16 15:02 - 2015-09-16 15:02 - 00004000 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-09-16 15:02 - 2015-09-16 15:02 - 00003746 _____ C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-09-16 15:02 - 2015-09-16 15:02 - 00002116 _____ C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-10_user.job
2015-09-16 15:02 - 2015-09-16 15:02 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-09-16 15:02 - 2015-09-16 15:02 - 00000000 ____D C:\Users\EnneBua\AppData\Local\globalUpdate
2015-09-16 15:02 - 2015-09-16 15:02 - 00000000 ____D C:\Program Files (x86)\globalUpdate
2015-09-16 15:02 - 2015-09-16 15:02 - 00000000 ____D C:\Program Files (x86)\ff19d77c-47f2-4652-8f41-3c2fb237f075
2015-09-16 15:01 - 2015-09-16 15:01 - 00613255 _____ (CMI Limited) C:\Users\EnneBua\AppData\Local\nswE0B2.tmp
2015-09-16 15:01 - 2015-09-16 15:01 - 00004088 _____ C:\Windows\System32\Tasks\Crossbrowse
2015-09-16 15:01 - 2015-09-16 15:01 - 00001060 _____ C:\Windows\Tasks\Crossbrowse.job
2015-09-16 15:01 - 2015-09-16 15:01 - 00000000 ____D C:\Users\EnneBua\AppData\Local\Crossbrowse
2015-09-16 15:00 - 2015-09-16 15:00 - 00002386 _____ C:\Users\Public\Desktop\Crossbrowse.lnk
2015-09-16 15:00 - 2015-09-16 15:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
2015-09-16 15:00 - 2015-09-16 15:00 - 00000000 ____D C:\ProgramData\8WdsManPro8
2015-09-16 15:00 - 2015-09-16 15:00 - 00000000 ____D C:\Program Files (x86)\Crossbrowse
2015-09-15 16:27 - 2015-09-16 15:00 - 00000102 _____ C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2015-09-15 16:27 - 2015-09-16 00:14 - 00000000 ____D C:\Program Files (x86)\SFK
2015-09-15 16:27 - 2015-09-15 16:27 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\mystartsearch
2015-09-15 16:27 - 2015-09-15 16:27 - 00000000 ____D C:\ProgramData\UWdsManProU
2015-09-14 19:11 - 2015-09-14 19:11 - 00320424 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2015-09-14 19:11 - 2015-09-14 19:11 - 00189864 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2015-09-14 19:11 - 2015-09-14 19:11 - 00189864 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2015-09-14 19:11 - 2015-09-14 19:11 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2015-09-14 19:11 - 2015-09-14 19:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-09-14 19:09 - 2015-09-14 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-09-14 19:05 - 2015-09-14 19:05 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-09-14 18:58 - 2015-09-16 15:23 - 00000378 _____ C:\Windows\Tasks\APSnotifierPP1.job
2015-09-14 18:58 - 2015-09-16 15:03 - 00002832 _____ C:\Windows\System32\Tasks\APSnotifierPP1
2015-09-14 18:58 - 2015-09-16 15:03 - 00002830 _____ C:\Windows\System32\Tasks\APSnotifierPP3
2015-09-14 18:58 - 2015-09-16 15:03 - 00002830 _____ C:\Windows\System32\Tasks\APSnotifierPP2
2015-09-14 18:58 - 2015-09-16 15:03 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP3.job
2015-09-14 18:58 - 2015-09-16 15:03 - 00000376 _____ C:\Windows\Tasks\APSnotifierPP2.job
2015-09-14 18:56 - 2015-09-14 18:56 - 00613255 _____ (CMI Limited) C:\Users\EnneBua\AppData\Local\nsrD089.tmp
2015-09-14 18:56 - 2015-09-14 18:56 - 00000000 __SHD C:\Users\EnneBua\AppData\Roaming\AnyProtectEx
2015-09-14 15:13 - 2015-09-16 00:59 - 00000000 ____D C:\Users\EnneBua\AppData\Local\CC3CA460-1442243583-11B2-8000-EC391B6A5670
2015-09-14 15:11 - 2015-09-14 15:11 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2015-09-14 15:11 - 2014-11-09 16:31 - 00001067 _____ C:\Windows\system32\Drivers\etc\hp.bak
2015-09-14 15:10 - 2015-09-16 02:55 - 00000000 ____D C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670
2015-09-14 15:10 - 2015-09-14 15:11 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\ASPackage
2015-09-14 15:09 - 2015-09-14 18:55 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\Opera Software
2015-09-14 15:09 - 2015-09-14 18:55 - 00000000 ____D C:\Users\EnneBua\AppData\Local\Opera Software
2015-09-14 15:07 - 2015-09-14 18:55 - 00000000 ____D C:\Program Files (x86)\Opera
2015-09-12 18:08 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-12 18:08 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-12 18:08 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-12 18:08 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-12 18:08 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-12 18:08 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-12 18:08 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-12 18:08 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-12 18:08 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-12 18:08 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-12 18:08 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-12 18:08 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-12 18:08 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-12 18:08 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-12 18:08 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-12 18:08 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-12 18:08 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-12 18:08 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-12 18:08 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-09-12 18:08 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-12 18:08 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-12 18:08 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-12 18:08 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-12 18:08 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-09-12 18:08 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-09-12 18:08 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-12 18:08 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-09-12 18:08 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-09-12 18:08 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-12 18:08 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-09-12 18:08 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-09-12 18:08 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-09-12 18:08 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-12 18:08 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-09-12 18:08 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-09-12 18:08 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-12 18:08 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-12 18:08 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-12 18:08 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-12 18:08 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-09-12 18:08 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-12 18:08 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-12 18:08 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-09-12 18:08 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-09-12 18:08 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-09-12 18:08 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-12 18:08 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-12 18:08 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-12 18:08 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-12 18:08 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-12 18:08 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-09-12 18:08 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-12 18:08 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-12 18:08 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-12 18:08 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-12 18:08 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-12 18:08 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-12 18:08 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-12 18:08 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-12 18:08 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-12 18:08 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-12 18:08 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-12 18:08 - 2015-07-09 19:58 - 01632256 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-09-12 18:08 - 2015-07-09 19:58 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-09-12 18:08 - 2015-07-09 19:42 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-09-12 18:08 - 2015-07-09 19:42 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-09-12 18:07 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-12 18:07 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-12 18:07 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-12 18:07 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-12 18:05 - 2015-08-27 20:18 - 02004480 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2015-09-12 18:05 - 2015-08-27 20:18 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-09-12 18:05 - 2015-07-23 02:06 - 05568960 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-09-12 18:05 - 2015-07-23 02:06 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-09-12 18:05 - 2015-07-23 02:06 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-09-12 18:05 - 2015-07-23 02:03 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-09-12 18:05 - 2015-07-23 02:03 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-09-12 18:05 - 2015-07-23 02:03 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-09-12 18:05 - 2015-07-23 02:03 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-09-12 18:05 - 2015-07-23 02:03 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 01390592 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-09-12 18:05 - 2015-07-23 02:02 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-09-12 18:05 - 2015-07-23 02:02 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-09-12 18:05 - 2015-07-23 02:02 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-09-12 18:05 - 2015-07-23 02:01 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-09-12 18:05 - 2015-07-23 02:01 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-09-12 18:05 - 2015-07-23 02:01 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-09-12 18:05 - 2015-07-23 01:58 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-09-12 18:05 - 2015-07-23 01:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:52 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-09-12 18:05 - 2015-07-23 01:51 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-09-12 18:05 - 2015-07-22 19:57 - 03989952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-09-12 18:05 - 2015-07-22 19:57 - 03934656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-09-12 18:05 - 2015-07-22 19:54 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-09-12 18:05 - 2015-07-22 19:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-09-12 18:05 - 2015-07-22 19:52 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-09-12 18:05 - 2015-07-22 19:52 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-09-12 18:05 - 2015-07-22 19:52 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-09-12 18:05 - 2015-07-22 19:52 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-09-12 18:05 - 2015-07-22 19:52 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-09-12 18:05 - 2015-07-22 19:52 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-09-12 18:05 - 2015-07-22 19:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-09-12 18:05 - 2015-07-22 19:47 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-09-12 18:05 - 2015-07-22 19:46 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 19:42 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 18:48 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-09-12 18:05 - 2015-07-22 18:45 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-09-12 18:05 - 2015-07-22 18:44 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-09-12 18:05 - 2015-07-22 18:44 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-09-12 18:05 - 2015-07-22 18:34 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-09-12 18:05 - 2015-07-22 18:34 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-09-12 18:05 - 2015-07-22 18:31 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 18:31 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 18:31 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-09-12 18:05 - 2015-07-22 18:31 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-09-12 18:05 - 2015-06-25 12:06 - 00115136 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-09-12 18:05 - 2015-06-25 12:01 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-09-12 18:05 - 2015-06-25 12:01 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-09-12 18:05 - 2015-06-25 11:44 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-09-12 18:04 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-12 18:04 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-12 18:04 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-12 18:04 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-12 18:04 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-12 18:04 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-12 18:04 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-12 18:04 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-12 18:04 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-12 18:04 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-12 18:04 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-12 18:04 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2015-09-12 18:04 - 2015-08-27 20:13 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-09-12 18:04 - 2015-08-27 19:58 - 01391104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2015-09-12 18:04 - 2015-08-27 19:58 - 01241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2015-09-12 18:04 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2015-09-12 18:04 - 2015-08-27 19:51 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2015-09-12 18:04 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-12 18:04 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-12 18:04 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-12 18:04 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-12 18:04 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-12 18:04 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-12 18:04 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-12 18:04 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-12 18:04 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-12 18:04 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-12 18:04 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-12 18:04 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-12 18:04 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-12 18:04 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-12 18:04 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-09-12 18:04 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-12 18:04 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-09-12 18:04 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-09-12 18:04 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-12 18:04 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-12 18:04 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-12 18:04 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-12 18:04 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-12 18:04 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-12 18:04 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-04 21:50 - 2015-09-04 21:50 - 00002070 _____ C:\Users\EnneBua\AppData\Local\recently-used.xbel
2015-09-02 21:25 - 2015-09-02 21:44 - 00000000 ____D C:\Users\Enne\Desktop\Maison-X
2015-09-02 19:56 - 2015-09-02 19:57 - 00000000 ____D C:\Users\Enne\AppData\Local\Citrix
2015-09-01 19:51 - 2015-09-14 18:57 - 00000000 ____D C:\Users\EnneBua\AppData\Local\Citrix
2015-08-28 15:55 - 2015-09-02 11:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-21 22:32 - 2015-08-21 22:32 - 00000000 ____D C:\Users\EnneBua\Desktop\Claudia
2015-08-21 22:31 - 2015-08-21 22:31 - 00000000 ____D C:\Users\EnneBua\Desktop\landwirt.com
2015-08-20 00:26 - 2015-08-20 00:26 - 02281857 _____ C:\Users\EnneBua\Downloads\Coc-Truppenrechner v1.1.3.8.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-16 15:28 - 2013-05-06 14:12 - 00131236 _____ C:\Windows\setupact.log
2015-09-16 15:16 - 2011-03-18 00:55 - 01897801 _____ C:\Windows\WindowsUpdate.log
2015-09-16 15:05 - 2014-10-10 15:53 - 00000000 ____D C:\Users\EnneBua\AppData\Local\Google
2015-09-16 15:05 - 2011-09-16 21:51 - 00000000 ____D C:\Program Files (x86)\Google
2015-09-16 15:03 - 2009-07-14 06:45 - 00022976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-16 15:03 - 2009-07-14 06:45 - 00022976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-16 15:02 - 2012-07-11 00:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-16 15:02 - 2012-01-13 14:41 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-09-16 15:01 - 2015-04-02 22:45 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-09-16 00:54 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-16 00:53 - 2013-05-19 09:52 - 00729992 _____ C:\Windows\PFRO.log
2015-09-16 00:53 - 2012-11-16 16:29 - 00000000 ____D C:\Program Files\WinRAR
2015-09-16 00:24 - 2014-07-08 11:15 - 00000000 ____D C:\Program Files (x86)\NeeXtCOUp
2015-09-16 00:24 - 2013-04-23 14:20 - 00000000 ____D C:\Program Files (x86)\LyricsMonkey
2015-09-16 00:15 - 2013-05-21 13:11 - 00000000 ____D C:\Program Files (x86)\Movie2KDownloader.com
2015-09-14 19:11 - 2013-08-14 10:20 - 00000000 ____D C:\Program Files\Java
2015-09-14 19:10 - 2014-08-25 22:00 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\Skype
2015-09-14 19:10 - 2011-09-14 20:20 - 00000000 ____D C:\ProgramData\Skype
2015-09-14 19:09 - 2011-09-16 21:51 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-09-14 19:06 - 2014-10-10 14:47 - 00000000 ____D C:\Users\EnneBua\AppData\Local\Adobe
2015-09-14 19:06 - 2014-08-25 21:52 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\Adobe
2015-09-14 19:05 - 2013-03-29 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-09-14 18:55 - 2014-08-25 21:52 - 00001421 _____ C:\Users\EnneBua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-09-14 16:48 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-09-14 16:06 - 2011-03-18 08:18 - 00700134 _____ C:\Windows\system32\perfh007.dat
2015-09-14 16:06 - 2011-03-18 08:18 - 00149984 _____ C:\Windows\system32\perfc007.dat
2015-09-14 16:06 - 2009-07-14 07:13 - 01622300 _____ C:\Windows\system32\PerfStringBackup.INI
2015-09-14 15:57 - 2009-07-14 06:45 - 00449808 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-14 15:54 - 2011-03-18 07:57 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-14 15:54 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-14 15:51 - 2013-07-18 18:01 - 00000000 ____D C:\Windows\system32\MRT
2015-09-13 18:15 - 2015-03-08 21:07 - 00000000 ____D C:\Users\Enne\AppData\Local\LogMeIn Hamachi
2015-09-11 16:42 - 2011-12-08 11:17 - 00000000 ____D C:\Users\Enne\AppData\Local\CrashDumps
2015-09-06 18:40 - 2014-08-26 13:27 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\.minecraft
2015-09-05 12:25 - 2014-11-29 21:31 - 00000000 ____D C:\ProgramData\CanonIJPLM
2015-09-04 21:59 - 2014-10-24 15:31 - 00000000 ____D C:\Users\EnneBua\.gimp-2.8
2015-09-04 21:50 - 2014-10-24 15:40 - 00000000 ____D C:\Users\EnneBua\AppData\Local\gtk-2.0
2015-09-04 21:49 - 2014-09-16 17:05 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\TS3Client
2015-09-04 20:54 - 2014-08-29 21:57 - 00000000 ____D C:\Users\EnneBua\AppData\Local\CrashDumps
2015-09-02 11:41 - 2012-07-01 00:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-29 21:21 - 2014-12-03 18:46 - 00000000 ____D C:\Users\EnneBua\AppData\Local\Johannes_Krieger_(Knato)
2015-08-28 21:38 - 2014-11-07 21:57 - 00000000 ____D C:\Users\EnneBua\AppData\Local\Spotify
2015-08-28 21:38 - 2014-08-25 22:05 - 00000000 ____D C:\Users\EnneBua\Desktop\Anton
2015-08-28 21:19 - 2014-11-07 21:55 - 00000000 ____D C:\Users\EnneBua\AppData\Roaming\Spotify
2015-08-26 18:37 - 2012-01-13 14:13 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-06-01 19:21 - 2013-06-01 19:06 - 0990687 _____ () C:\Program Files (x86)\AA_LS.png
2012-01-13 14:42 - 2012-01-13 14:42 - 0002019 _____ () C:\Program Files (x86)\Adobe Reader X.lnk
2013-12-19 14:22 - 2013-12-19 14:22 - 0001966 _____ () C:\Program Files (x86)\avast! Free Antivirus.lnk
2013-02-25 15:27 - 2013-02-25 15:27 - 0001428 _____ () C:\Program Files (x86)\Bus-Simulator 2012 (Basic-Version).lnk
2013-02-25 15:27 - 2013-02-25 15:27 - 0001421 _____ () C:\Program Files (x86)\Bus-Simulator 2012 (High-Version).lnk
2012-01-13 13:44 - 2013-01-03 16:09 - 0000822 _____ () C:\Program Files (x86)\CCleaner.lnk
2012-10-20 23:01 - 2012-10-20 23:01 - 0001277 _____ () C:\Program Files (x86)\CyberLink YouCam (2).lnk
2012-07-21 11:13 - 2012-07-21 11:13 - 0001046 _____ () C:\Program Files (x86)\DJ Anonym.lnk
2011-11-25 20:15 - 2012-10-13 16:11 - 0001239 _____ () C:\Program Files (x86)\DVDVideoSoft Free Studio.lnk
2011-10-29 15:35 - 2011-10-29 15:35 - 0001177 _____ () C:\Program Files (x86)\Euro Truck Simulator.lnk
2013-03-26 17:52 - 2013-03-26 17:52 - 0000959 _____ () C:\Program Files (x86)\freac - free audio converter.lnk
2013-03-18 16:46 - 2013-03-18 16:46 - 0503296 _____ () C:\Program Files (x86)\freac.exe
2011-11-25 20:15 - 2011-11-25 20:15 - 0001295 _____ () C:\Program Files (x86)\Free Audio CD Burner.lnk
2012-12-29 13:01 - 2012-12-29 13:01 - 0001398 _____ () C:\Program Files (x86)\Free YouTube to MP3 Converter.lnk
2013-04-12 23:10 - 2013-04-13 00:15 - 0665102 _____ () C:\Program Files (x86)\Gülle fahrn alda ;D.png
2011-12-01 18:05 - 2011-12-01 18:05 - 0001301 _____ () C:\Program Files (x86)\Landwirtschafts Simulator 2011 .lnk
2012-11-08 17:08 - 2012-11-08 17:08 - 0001283 _____ () C:\Program Files (x86)\Landwirtschafts Simulator 2013 .lnk
2012-01-13 14:13 - 2013-01-03 15:29 - 0001109 _____ () C:\Program Files (x86)\ Malwarebytes Anti-Malware .lnk
2011-09-14 21:00 - 2011-09-14 20:40 - 0002463 _____ () C:\Program Files (x86)\Microsoft Excel Starter 2010.lnk
2011-09-14 21:00 - 2011-09-14 20:40 - 0002461 _____ () C:\Program Files (x86)\Microsoft Word Starter 2010.lnk
2013-04-20 15:38 - 2013-04-20 15:38 - 0001143 _____ () C:\Program Files (x86)\Mozilla Firefox.lnk
2011-11-10 17:38 - 2012-03-11 15:06 - 0001031 _____ () C:\Program Files (x86)\Photoshop.lnk
2012-02-02 18:31 - 2012-02-02 18:31 - 0001257 _____ () C:\Program Files (x86)\Skiregion Simulator 2012 .lnk
2012-02-09 23:07 - 2012-02-09 23:07 - 0002517 _____ () C:\Program Files (x86)\Skype.lnk
2012-12-29 17:03 - 2012-12-29 17:03 - 0000351 _____ () C:\Program Files (x86)\Spiele - Verknüpfung.lnk
2013-02-19 16:04 - 2013-02-19 16:04 - 0001046 _____ () C:\Program Files (x86)\VirtualDJ Home FREE.lnk
2012-12-31 11:40 - 2012-12-31 11:40 - 0000022 _____ () C:\Program Files (x86)\WinRAR-ZIP-Archiv (neu).zip
2015-04-14 18:28 - 2015-04-14 18:28 - 0004387 _____ () C:\Users\EnneBua\AppData\Roaming\Wk4i3RsqyloGQunJt8g
2015-04-20 16:05 - 2015-04-20 16:05 - 1246720 _____ () C:\Users\EnneBua\AppData\Roaming\Wk4i3RsqyloGQunJt8g.exe
2015-04-19 14:20 - 2015-04-19 14:20 - 0005872 _____ () C:\Users\EnneBua\AppData\Roaming\Z7CJuG5dlbQyzHDRvnDa
2015-04-20 16:05 - 2015-04-20 16:05 - 1579520 _____ () C:\Users\EnneBua\AppData\Roaming\Z7CJuG5dlbQyzHDRvnDa.exe
2015-09-14 18:56 - 2015-09-14 18:56 - 0613255 _____ (CMI Limited) C:\Users\EnneBua\AppData\Local\nsrD089.tmp
2015-09-16 15:01 - 2015-09-16 15:01 - 0613255 _____ (CMI Limited) C:\Users\EnneBua\AppData\Local\nswE0B2.tmp
2015-09-04 21:50 - 2015-09-04 21:50 - 0002070 _____ () C:\Users\EnneBua\AppData\Local\recently-used.xbel
2014-09-04 13:57 - 2015-01-07 19:26 - 0007605 _____ () C:\Users\EnneBua\AppData\Local\Resmon.ResmonCfg
2015-07-01 19:08 - 2015-07-01 19:08 - 0000000 _____ () C:\Users\EnneBua\AppData\Local\{F1391AB7-BC7D-42BA-A1D6-0ABE7FA4830D}
2011-03-18 01:04 - 2011-03-18 01:04 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2015-09-15 16:27 - 2015-09-16 15:00 - 0000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2011-03-18 00:58 - 2011-03-18 00:58 - 0000113 _____ () C:\ProgramData\{34FBC7C4-CD31-4D93-A428-0E524EAC4586}.log
2011-03-18 01:01 - 2011-03-18 01:02 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2011-03-18 00:58 - 2011-03-18 01:01 - 0000106 _____ () C:\ProgramData\{80E158EA-7181-40FE-A701-301CE6BE64AB}.log
2011-03-18 01:02 - 2011-03-18 01:03 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat


Einige Dateien in TEMP:
====================
C:\Users\EnneBua\AppData\Local\Temp\7453.exe
C:\Users\EnneBua\AppData\Local\Temp\9768.exe
C:\Users\EnneBua\AppData\Local\Temp\Opera_NI_stable.exe
C:\Users\EnneBua\AppData\Local\Temp\Uninstall.exe
C:\Users\Gast\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpnuo7ru.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-13 20:00

==================== Ende von FRST.txt ============================

EnneBua · 19.09.2015, 18:06

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von EnneBua (2015-09-16 15:33:53)
Gestartet von C:\Users\EnneBua\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2011-09-14 22:53:31)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-336442205-827502387-1674173946-500 - Administrator - Disabled)
Enne (S-1-5-21-336442205-827502387-1674173946-1000 - Administrator - Enabled) => C:\Users\Enne
EnneBua (S-1-5-21-336442205-827502387-1674173946-1162 - Administrator - Enabled) => C:\Users\EnneBua
Gast (S-1-5-21-336442205-827502387-1674173946-501 - Administrator - Enabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-336442205-827502387-1674173946-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

„Windows Live Essentials“ (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
„Windows Live Mail“ (x32 Version: 15.4.3502.0922 - „Microsoft Corporation“) Hidden
„Windows Live“ fotogalerija (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Adobe Acrobat 4.0 (HKLM-x32\...\Adobe Acrobat 4.0) (Version:  - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.199 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.5 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.8 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.82 - WildTangent) Hidden
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Badoo Desktop (HKLM-x32\...\{040FF9BD-17BE-427B-85DD-67694FB8F786}) (Version: 1.6.48.1082 - Badoo)
BatteryLifeExtender (HKLM-x32\...\{FFD0E594-823B-4E2B-B680-720B3C852588}) (Version: 1.0.11 - Samsung)
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.4.4078 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{152E0B21-19D5-4772-9EF8-8E76074B0C0A}) (Version: 0.9.4.4078 - BlueStack Systems, Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 5.60.48.55 - Broadcom Corporation)
Build-a-lot (x32 Version: 2.2.0.82 - WildTangent) Hidden
Camtasia Studio 8 (HKLM-x32\...\{C4E35316-77F1-4EBD-9785-C72E55B1D219}) (Version: 8.4.2.1768 - TechSmith Corporation)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - ‪Canon Inc.‬)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version:  - ‪Canon Inc.‬)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.0.0 - Canon Inc.)
Canon MG4200 series Benutzerregistrierung (HKLM-x32\...\Canon MG4200 series Benutzerregistrierung) (Version:  - Canon Inc.‎)
Canon MG4200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG4200_series) (Version: 1.01 - Canon Inc.)
Canon MG4200 series On-screen Manual (HKLM-x32\...\Canon MG4200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.0.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.0.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.01 - Piriform)
Chuzzle Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
Citrix Online Launcher (HKLM-x32\...\{DB014C85-A264-4BCA-A66F-6DD1FCF8EC36}) (Version: 1.0.335 - Citrix)
Crossbrowse (HKLM-x32\...\Crossbrowse) (Version: 39.6.2171.95 - The Crossbrowse Authors) <==== ACHTUNG
CyberLink Media Suite (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2227 - CyberLink Corp.)
CyberLink Media+ Player10 (HKLM-x32\...\InstallShield_{34FBC7C4-CD31-4D93-A428-0E524EAC4586}) (Version: 10.0.1110.00 - CyberLink Corp.)
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1130a - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3802 - CyberLink Corp.)
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3306 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3509 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DealPly (HKU\.DEFAULT\...\DealPly) (Version:  - ) <==== ACHTUNG
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.82 - WildTangent) Hidden
Easy Content Share (HKLM-x32\...\{2DDC70C1-C77A-4D08-89D2-9AB648504533}) (Version: 1.0 - Samsung Electronics Co., LTD)
Easy Display Manager (HKLM-x32\...\{17283B95-21A8-4996-97DA-547A48DB266F}) (Version: 3.2 - Samsung Electronics Co., Ltd.)
Easy Migration (HKLM-x32\...\{AD86049C-3D9C-43E1-BE73-643F57D83D50}) (Version: 1.0.0.5 - Samsung Electronics Co., Ltd.)
Easy Network Manager (HKLM-x32\...\{8732818E-CA78-4ACB-B077-22311BF4C0E4}) (Version: 4.4.7 - Samsung)
Easy SpeedUp Manager (HKLM-x32\...\{EF367AA4-070B-493C-9575-85BE59D789C9}) (Version: 2.1.1.1 - Samsung Electronics Co.,Ltd.)
EasyBatteryManager (HKLM-x32\...\{4A331D24-A9E8-484F-835E-1BA7B139689C}) (Version: 4.0.0.4 - Samsung)
EasyFileShare (HKLM-x32\...\{16880765-677F-440B-B16A-BFD9B9C00012}) (Version: 1.0.12 - Samsung)
ETDWare PS/2-X64 8.0.7.2_WHQL (HKLM\...\Elantech) (Version: 8.0.7.2 - ELAN Microelectronic Corp.)
Farm Frenzy (x32 Version: 2.2.0.82 - WildTangent) Hidden
Fast Start (HKLM-x32\...\{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}) (Version: 2.2.0.1 - SAMSUNG)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ACHTUNG
Insaniquarium Deluxe (x32 Version: 2.2.0.82 - WildTangent) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{1927E640-A2C6-4BA7-8F43-FFD2AE3DFCF3}) (Version: 14.0.2000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)
Java 7 Update 80 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417080FF}) (Version: 7.0.800 - Oracle)
John Deere Drive Green (x32 Version: 2.2.0.82 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Landwirtschafts Simulator 15 (HKLM-x32\...\FarmingSimulator2015DE_is1) (Version: 1.2.0.0 - GIANTS Software)
Malwarebytes Anti-Malware Version 1.70.0.1100 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.70.0.1100 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{8FB1B528-E260-451E-9B55-E9152F94B80B}) (Version: 3.2.3.0 - Microsoft Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4675.1003 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Color Enhancer (HKLM-x32\...\{7F6F62F0-7884-4CFB-B86C-597A4A6D9C4D}) (Version: 1.0 - Samsung Electronics Co., Ltd.)
Mozilla Firefox 40.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)
MyBrowser 1.0.2V16.09 (HKLM-x32\...\MyBrowser 1.0.2V16.09) (Version: 1.36.01.22 - MyBrowser 1.0.2V16.09)
Need For Speed™ World (HKLM-x32\...\{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1) (Version: 1.0.0.1599 - Electronic Arts)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4675.1003 - Microsoft Corporation) Hidden
Peggle (x32 Version: 2.2.0.82 - WildTangent) Hidden
Penguins! (x32 Version: 2.2.0.82 - WildTangent) Hidden
PhoneShare (HKLM-x32\...\{3F50512F-53DF-46B1-8CCB-6C7E638CADD6}) (Version: 9.1.4 - Samsung)
Plants vs. Zombies (x32 Version: 2.2.0.82 - WildTangent) Hidden
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Polar Golfer (x32 Version: 2.2.0.82 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.40.126.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6318 - Realtek Semiconductor Corp.)
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)
ROCCAT Kone Pure Mouse Driver (HKLM-x32\...\{4905245D-56E7-4176-BE68-962728B803D6}) (Version:  - Roccat GmbH)
S Agent (Version: 1.0.9 - Samsung Electronics CO., LTD.) Hidden
Samsung AnyWeb Print (HKLM-x32\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 2.0.67.1 - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version:  - Samsung Electronics Co., Ltd.)
Samsung Support Center (HKLM-x32\...\{F687E657-F636-44DF-8125-9FEEA2C362F5}) (Version: 1.1.24 - Samsung)
Samsung Universal Print Driver (HKLM-x32\...\Samsung Universal Print Driver) (Version: 2.02.05.00:27 - Samsung Electronics Co., Ltd.)
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 1.2.5.0 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.49.0 - SAMSUNG Electronics Co., Ltd.)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
SISShortcut (HKLM-x32\...\{FDAE128F-A355-42B1-8422-1AF3ACEE34F4}) (Version: 1.00.000 - Samsung)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 7.10 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.10.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-336442205-827502387-1674173946-1162\...\Spotify) (Version: 1.0.10.107.gd0dfca3a - Spotify AB)
SRS Premium Sound Control Panel (HKLM\...\{F3C66EC8-2F33-452D-9CFF-E8C886B3ECC4}) (Version: 1.11.1300 - SRS Labs, Inc.)
SW Update (HKLM-x32\...\{F5B5BA56-8FEB-494B-84E6-C8DA9C2BEE50}) (Version: 2.1.6 - Samsung Electronics CO., LTD.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKU\S-1-5-21-336442205-827502387-1674173946-1162\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.296 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.296 - TuneUp Software) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.0.82.0 - Intel)
User Guide (HKLM-x32\...\{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}) (Version: 1.0 - )
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.7900 - Broadcom Corporation)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.1.5 - WildTangent)
WildTangent ORB Game Console (x32 Version:  - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

22-05-2015 18:58:24 Windows Update
26-05-2015 19:38:42 Windows Update
30-05-2015 14:53:03 Windows Update
02-06-2015 19:40:10 Installed Minecraft
02-06-2015 19:52:34 Windows Update
05-06-2015 21:50:10 Windows Update
09-06-2015 14:52:14 Windows Update
12-06-2015 17:09:29 Windows Update
18-06-2015 07:49:44 Windows Update
23-06-2015 14:19:27 Windows Update
24-06-2015 20:26:49 Windows Update
03-07-2015 20:03:07 Windows Update
07-07-2015 09:27:48 Windows Update
10-07-2015 21:13:45 Windows Update
14-07-2015 09:55:31 Windows Update
16-07-2015 09:24:47 Windows Update
22-07-2015 01:22:40 Windows Update
28-07-2015 09:44:59 Windows Update
28-07-2015 23:37:37 Windows Update
07-08-2015 20:42:33 Windows Update
11-08-2015 13:10:29 Windows Update
13-08-2015 01:06:12 Windows Update
19-08-2015 11:28:37 Windows Update
20-08-2015 21:45:23 Windows Update
25-08-2015 15:58:08 Windows Update
01-09-2015 14:44:05 Windows Update
08-09-2015 15:48:47 Windows Update
13-09-2015 16:50:11 Windows Update
14-09-2015 15:24:08 Windows Update
14-09-2015 18:58:41 Removed LogMeIn Hamachi

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2014-11-09 16:31 - 00001067 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {00B5E657-8A81-4ACE-AFA4-D2EA470169B6} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {0EAFD584-9675-4985-ADF7-BC9F45104A8A} - System32\Tasks\EasyBatteryManager => C:\Program Files (x86)\Samsung\EasyBatteryManager\EasyBatteryMgr4.exe [2010-07-20] (SAMSUNG Electronics co., LTD.)
Task: {0F4B5E3B-B976-4E98-B2BD-2C3B42441322} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {0FBAEC69-6791-4444-8B9A-B0ACE674DAA9} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-04-22] (Microsoft Corporation)
Task: {18F6E21F-A3B3-4776-9C68-DA98B90C41A8} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-6 => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-6.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {225DEAF4-C48B-42FD-A94F-D191AACC4CD9} - System32\Tasks\WifiManager => C:\Program Files (x86)\Samsung\Easy Display Manager\WifiManager.exe [2011-01-04] (Samsung Electronics Co., Ltd.)
Task: {272CAD1B-D2D9-4412-9366-64D202646853} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6 => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {2C570A02-B6B9-48C4-8F37-D9779A50A5CA} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2014-04-15] (TuneUp Software)
Task: {2C5BCFC3-9FA4-4D67-886B-74E76E379549} - System32\Tasks\Crossbrowse => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe [2015-09-16] () <==== ACHTUNG
Task: {2DAA6D8B-412F-4808-9FC2-EEB57604AEBF} - System32\Tasks\{C800E24D-5B07-4029-9E07-9D1747F3C353} => pcalua.exe -a C:\Users\Enne\Downloads\AVM_FRITZ_WLAN_Repeater_310_Assistent.exe -d C:\Users\Enne\Downloads
Task: {32C59580-8411-4434-AF66-8D29DA4AAF25} - System32\Tasks\SRS Premium Sound => C:\Program Files\SRS Labs\SRS Control Panel\srspanel_64.exe [2011-02-24] (SRS Labs, Inc.)
Task: {38DCA0E0-0C7C-4765-B337-47FAF53D2321} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {3BCC5124-8DAE-4424-82CF-833EE291559A} - System32\Tasks\{E7744FB4-036E-4AB5-8833-942A02E10342} => Chrome.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&amp;page=tsProgressBar
Task: {3C85FAE4-5714-4943-BD4B-6F827E226B2C} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-10_user => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-10.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {3DB476D2-9F8D-4AC3-B232-94861F1F0395} - System32\Tasks\SAgent => C:\Program Files\Samsung\S Agent\CommonAgent.exe [2012-10-25] (Samsung Electronics CO., LTD.)
Task: {4D3FF25D-BB13-42BB-89AA-5B5192E76186} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5 => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-5.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {4F94A0B4-B548-4164-AE96-18B6A020E3F5} - System32\Tasks\SmartRestarter => C:\Program Files\Samsung\SamsungFastStart\SmartRestarter.exe [2010-08-05] (Samsung Electronics Co., Ltd.)
Task: {5360C34C-1089-4B4B-A2B4-62B17AA79A5D} - System32\Tasks\DealPly => C:\Users\Gast\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ACHTUNG
Task: {5C76F315-8645-4FF2-B129-40DA0ECED18E} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2010-11-10] (CyberLink)
Task: {64776104-38BF-464A-BECB-789E2A418387} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2014-11-12] (Microsoft Corporation)
Task: {65CB1F0C-6983-4015-8F45-C076629CB2AA} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-7 => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-1-7.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {6AC7B786-D75F-4263-94BE-08AE9BCD0580} - System32\Tasks\{EDA2F00A-51D7-459D-A3A8-C904542E5E7A} => pcalua.exe -a "C:\Program Files (x86)\HyperCam 3\Uninstall.exe" -c "C:\Program Files (x86)\HyperCam 3\install.log" -u
Task: {6E3800FA-B4D8-45CC-B827-B29887152F11} - System32\Tasks\Z7CJuG5dlbQyzHDRvnDa => C:\Users\EnneBua\AppData\Roaming\Z7CJuG5dlbQyzHDRvnDa.exe [2015-04-20] () <==== ACHTUNG
Task: {70FC2F7A-60C2-4A54-95C0-B06C171FFDD1} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {720F4CD4-37B6-417B-9A19-28BDF4C3897B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-04-23] (Piriform Ltd)
Task: {74AAB76F-1888-44F3-83A3-D904194C53F3} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {7A175478-CD5A-4EAE-9133-2B2D2C867138} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5_user => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-5.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {82767D57-8AC8-48C7-AAEA-2439F3DF51EA} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-16] (globalUpdate) <==== ACHTUNG
Task: {988FFBD8-EC7A-45EE-AECA-69AB2070A686} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-16] (globalUpdate) <==== ACHTUNG
Task: {A13B59B3-F621-4B4B-904C-2C81547A33CE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)
Task: {A267FC23-BAEE-4C40-A307-E6BE109992FC} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-7 => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-7.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {A6C6CD30-45F7-49DA-A7D6-2BAA28B08094} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {A9088378-A70F-4BDF-81E3-A8EB12C0C5C0} - System32\Tasks\MovieColorEnhancer => C:\Program Files (x86)\Samsung\Movie Color Enhancer\MovieColorEnhancer.exe [2010-11-29] (Samsung Electronics Co., Ltd.)
Task: {B03A3706-B97D-4AEE-8EE6-2114D3F3B5B1} - System32\Tasks\EasyDisplayMgr => C:\Program Files (x86)\Samsung\Easy Display Manager\dmhkcore.exe [2010-12-23] (Samsung Electronics Co., Ltd.)
Task: {B3C173AC-1725-4E54-BA0D-819E054B3795} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: {B43D5CAB-B696-4F70-8EAA-8EB142F3ED17} - System32\Tasks\TurboBoostGadget => C:\Windows\temp\Gadget.exe
Task: {C1742DCC-A3E4-4806-95C4-8DE1D1D043CA} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => Rundll32.exe invagent.dll,RunUpdate -noappraiser
Task: {C1AC9A28-479A-48AC-BF41-72F095FDD2BE} - System32\Tasks\Wk4i3RsqyloGQunJt8g => C:\Users\EnneBua\AppData\Roaming\Wk4i3RsqyloGQunJt8g.exe [2015-04-20] () <==== ACHTUNG
Task: {CD720C58-8852-473B-9A46-D65200DE3AA5} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-3 => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-3.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {D3CA7303-5202-4FDA-A643-07AF751C9A80} - System32\Tasks\BatteryLifeExtender => C:\Program Files (x86)\Samsung\BatteryLifeExtender\BatteryLifeExtender.exe [2010-12-18] (Samsung Electronics. Co. Ltd.)
Task: {E7CB5596-CF58-4193-A071-82C5AF0F63B2} - System32\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-4 => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-4.exe [2015-09-16] (MyBrowser 1.0.2V16.09) <==== ACHTUNG
Task: {F066E4A4-B751-4CCB-88AB-52511A0041DC} - System32\Tasks\{0BBE9B40-D919-4D06-9A69-BC7BF9EB267C} => Firefox.exe hxxp://ui.skype.com/ui/0/5.8.0.158/de/abandoninstall?page=tsProgressBar
Task: {FB9B8C05-52D0-4311-A0B5-B0E688AB8BE0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-04-22] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-7.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-1-7.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-10_user.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-10.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-3.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-3.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-4.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-4.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-5.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5_user.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-5.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-6.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-6.exe <==== ACHTUNG
Task: C:\Windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-7.job => C:\Program Files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-7.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Crossbrowse.job => C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe <==== ACHTUNG
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ACHTUNG
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Wk4i3RsqyloGQunJt8g.job => C:\Users\EnneBua\AppData\Roaming\Wk4i3RsqyloGQunJt8g.exe <==== ACHTUNG
Task: C:\Windows\Tasks\Z7CJuG5dlbQyzHDRvnDa.job => C:\Users\EnneBua\AppData\Roaming\Z7CJuG5dlbQyzHDRvnDa.exe <==== ACHTUNG

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-10-31 21:37 - 2014-10-16 16:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-03-18 07:36 - 2008-06-05 01:53 - 00027648 _____ () C:\Windows\System32\spd__l.dll
2015-09-14 15:11 - 2015-09-14 15:11 - 00203776 _____ () C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\hnszDC20.tmp
2014-11-29 21:35 - 2012-03-28 14:49 - 00140456 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2015-09-14 15:11 - 2015-09-14 15:11 - 00181760 _____ () C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\jnsjC228.tmp
2015-09-15 16:34 - 2015-09-15 16:34 - 01480192 _____ () C:\Program Files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\knss2523.tmp
2011-03-18 01:01 - 2009-12-01 09:21 - 00244904 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2014-04-15 15:59 - 2014-04-15 15:59 - 00675640 _____ () C:\Program Files (x86)\TuneUp Utilities 2014\avgrepliba.dll
2015-04-26 15:00 - 2015-04-26 15:00 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-26 15:00 - 2015-04-26 15:00 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-09-15 10:12 - 2015-09-15 10:12 - 02962944 _____ () C:\Program Files\AVAST Software\Avast\defs\15091500\algo.dll
2015-09-16 00:57 - 2015-09-16 00:57 - 02962944 _____ () C:\Program Files\AVAST Software\Avast\defs\15091501\algo.dll
2015-03-31 14:28 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2011-03-18 01:07 - 2010-07-05 12:42 - 00203776 _____ () C:\Program Files (x86)\Samsung\Movie Color Enhancer\WinCRT.dll
2015-01-07 17:27 - 2012-06-23 15:54 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone Pure Mouse\hiddriver.dll
2015-04-02 22:44 - 2015-04-02 22:44 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-05-15 12:56 - 2010-11-04 11:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll
2011-03-18 01:06 - 2006-08-12 05:48 - 00049152 _____ () C:\Program Files (x86)\Samsung\Easy Display Manager\HookDllPS2.dll
2015-09-16 15:00 - 2015-05-11 18:01 - 01070592 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libglesv2.dll
2015-09-16 15:00 - 2015-05-11 18:01 - 00204800 _____ () C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-336442205-827502387-1674173946-1162\Control Panel\Desktop\\Wallpaper -> C:\Users\EnneBua\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: btwdins => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Enne^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Facebook Messenger.lnk => C:\Windows\pss\Facebook Messenger.lnk.Startup
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{51A20AE0-3FE6-4B48-8187-B8430100023A}] => (Allow) C:\Program Files (x86)\CyberLink\Media+Player10\Media+Player10.exe
FirewallRules: [{1D6F9FE6-BE5E-4D71-8C50-83FF64BECBBF}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE
FirewallRules: [{31D3E3C6-761A-465E-911A-1D80D96FFE9F}] => (Allow) C:\Windows\System32\SUPDSvc.exe
FirewallRules: [{5007E510-13EF-449C-A29E-D3D27193A624}] => (Allow) C:\Windows\System32\SUPDSvc.exe
FirewallRules: [{58B47397-983E-47BB-9DA6-C6B988C215E7}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\USDAgent.exe
FirewallRules: [{1069484D-850A-43AE-8724-44C63BC6A54F}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\USDAgent.exe
FirewallRules: [{E6B9CC2E-B1AE-43C7-B08D-FFD600EDF3F0}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ICCUpdater.exe
FirewallRules: [{4176CD70-D09C-4C5A-93BC-8173CB7AEF17}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ICCUpdater.exe
FirewallRules: [{9C964C05-4D9A-4D12-A815-7BBCDA50CEEB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{8C8E152D-5BFE-40D3-95E1-53F88FD721AA}] => (Allow) LPort=2869
FirewallRules: [{D606900E-9ABF-4906-BC1C-E5B4C2E6B1E6}] => (Allow) LPort=1900
FirewallRules: [{0EB15C0E-F4C3-4103-B296-45C1F3FB3D5F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{916689D5-1706-4C8C-ABD8-2096FD7A6E52}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{91259C5E-6238-41A1-9BB8-89C667CE3387}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{473C0B62-7D6E-4A62-AC8F-E56FB66357DE}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [TCP Query User{9786A2BF-F948-4FE5-8B95-074A1E32CD05}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Block) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [UDP Query User{00A79D7C-8740-4746-B486-5F6C5DFD4661}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Block) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [TCP Query User{C25766C9-D66A-45CE-AAE0-A1E94A0BCC41}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Block) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [UDP Query User{CA3850C5-A03B-4472-8788-3E374D31FB7D}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Block) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [TCP Query User{9006A1A2-19CB-4DF7-8149-3775AD88428A}C:\windows\syswow64\javaw.exe] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{810C1691-0E2A-4413-9666-4340B92D2C21}C:\windows\syswow64\javaw.exe] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [TCP Query User{0F59E961-F53B-468F-B1A9-50440A8486CF}C:\windows\syswow64\javaw.exe] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [UDP Query User{4DC4CB2A-FB74-40E0-AFFB-0641EF80BBEB}C:\windows\syswow64\javaw.exe] => (Block) C:\windows\syswow64\javaw.exe
FirewallRules: [{A8B711F3-4131-49B9-B8C5-BB997A18AC19}] => (Allow) C:\Users\Enne\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{865C75E2-87E6-4E3F-84BF-B0405870F611}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [TCP Query User{D53D6A04-F3E1-4EDB-BDE7-A09288462DF0}C:\users\gast\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\gast\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{0DC88BED-D66B-42EB-9867-AE3F9E9461FB}C:\users\gast\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\gast\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{1A9A4AA6-65B0-471C-9EDF-ABB5C2C04BA6}C:\users\gast\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\gast\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{8237471D-8BEE-40FE-A209-E3B30A94E4B8}C:\users\gast\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\gast\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{3D17A8AC-0DD0-4B26-BE97-A68F0057733B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{11A376E9-99E3-40B7-B126-ACF52AD49AC2}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{80969BAC-0223-4049-85DA-444B5FE9CC87}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\FarmingSimulator2015.exe
FirewallRules: [{B74D2922-A629-4230-9719-85C16698EF28}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{55B59597-5103-4AED-8187-DF3D82DDCE42}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\x86\FarmingSimulator2015Game.exe
FirewallRules: [{32BC22A7-176E-46D2-B4E0-297D03890251}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{3F7CFB41-8737-4C60-8CCA-5FEAA5BCDE83}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2015\x64\FarmingSimulator2015Game.exe
FirewallRules: [{65CE0AAC-1EF2-4B9C-BD37-6F8DC3358AD3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{DFCC2908-A824-46A6-8C72-262AA07AA670}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{12FC8A33-D65D-44E0-A580-54CC95EAD7FA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{6F852C5A-E8AA-4BB9-84EB-D482033B6AF5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{4D60BC7C-CD27-4FED-B0CE-D4E8B8F58210}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{D9EB24FB-AA5C-4B87-B4FB-341B5DEAC7B6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{3E711D93-F36D-4ECE-B901-6AF77B8BF17C}C:\program files (x86)\landwirtschafts simulator 2015\x64\farmingsimulator2015game.exe] => (Allow) C:\program files (x86)\landwirtschafts simulator 2015\x64\farmingsimulator2015game.exe
FirewallRules: [UDP Query User{2A99C525-A913-4812-A10F-94FE15E15626}C:\program files (x86)\landwirtschafts simulator 2015\x64\farmingsimulator2015game.exe] => (Allow) C:\program files (x86)\landwirtschafts simulator 2015\x64\farmingsimulator2015game.exe
FirewallRules: [TCP Query User{5C89A07E-860A-41F1-8CC9-10DCB708CA13}C:\users\ennebua\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ennebua\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{32EA681D-D4E7-4B7E-976E-581F6AE385A9}C:\users\ennebua\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ennebua\appdata\roaming\spotify\spotify.exe
FirewallRules: [{355926B1-29E1-4BAE-935E-3E120C8BE4B9}] => (Allow) LPort=8317
FirewallRules: [TCP Query User{73AF836C-780A-4C7E-A746-BA74B687E8B9}C:\users\ennebua\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ennebua\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{B3B6A637-0CB7-412F-88E3-6FDCC7C4D1CD}C:\users\ennebua\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ennebua\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{EFC22672-D85B-4C30-A315-1C6094C8B700}C:\users\enne\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\enne\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe
FirewallRules: [UDP Query User{B140904B-F822-4D0B-B3FF-C6C9FF3FA9A3}C:\users\enne\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\enne\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe
FirewallRules: [{BB742F94-F7C4-4E94-A0AB-7E07E1B23883}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A58B71FB-4F80-4541-A56F-E07294DEDAE4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{5C6472E6-343D-4F91-88CD-259F3E6D5AEF}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{01F4A73C-2D18-47F6-8748-9D57A9142932}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{F6D7F545-8607-4EB4-9643-CEC9D776B0EF}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{01BF16F3-B66D-4368-A26D-11538D25F3E8}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{ED7BE20E-E112-45F5-BF9E-34ADC3E2FAAC}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{6E360895-0AD5-46AB-8E0D-6B4D33847E12}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [TCP Query User{84ED5298-4B89-41D7-ACF6-CB03BD1CFFEE}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{81EFCBAD-19DE-4E19-852F-3FB0854F5CCB}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{84AF9FF7-2C5E-495A-8A22-B230C9B2BFF8}] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{16C42CFB-FF19-4CE6-9040-D6B7946F811A}] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{0D950B52-031A-44B6-8BDD-D9835361271E}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/15/2015 07:06:19 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]

Error: (09/15/2015 07:06:19 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (09/15/2015 04:44:55 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]

Error: (09/14/2015 07:23:06 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Skype.exe, Version 7.10.0.101 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1fe0

Startzeit: 01d0ef1030f69c8c

Endzeit: 20

Anwendungspfad: C:\Program Files (x86)\Skype\Phone\Skype.exe

Berichts-ID:

Error: (09/14/2015 06:56:53 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iexplore.exe, Version 11.0.9600.18015 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 3a4

Startzeit: 01d0ef0e44b7e64e

Endzeit: 11

Anwendungspfad: C:\Program Files\Internet Explorer\iexplore.exe

Berichts-ID: 8e6cf3ef-5b01-11e5-a87c-90a4de538784

Error: (09/14/2015 04:03:59 PM) (Source: .NET Runtime Optimization Service) (EventID: 1101) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v4.0.30319_64) - Failed to compile: PresentationCore, Version=3.0.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=amd64 . Error code = 0x80070020

Error: (09/13/2015 06:16:46 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [0]

Error: (09/13/2015 06:16:16 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (09/13/2015 06:15:39 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [0]

Error: (09/12/2015 06:11:25 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed continue stopping. [6]


Systemfehler:
=============
Error: (09/14/2015 04:01:13 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "WaIntEnhancer Service" wurde nicht richtig gestartet.

Error: (09/09/2015 12:11:40 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{FC00FDC7-FEBF-4AF7-A5B7-5B4A41982D0C} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (09/05/2015 09:13:26 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde nicht richtig gestartet.

Error: (09/05/2015 09:12:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/05/2015 09:12:01 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst LogMeIn Hamachi Tunneling Engine erreicht.

Error: (09/03/2015 12:22:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BlueStacks Updater Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/03/2015 12:22:29 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BlueStacks Updater Service erreicht.

Error: (09/03/2015 12:21:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BlueStacks Log Rotator Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (09/03/2015 12:21:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BlueStacks Log Rotator Service erreicht.

Error: (08/31/2015 05:11:06 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 55%
Installierter physikalischer RAM: 5619.55 MB
Verfügbarer physikalischer RAM: 2524.79 MB
Summe virtueller Speicher: 11237.3 MB
Verfügbarer virtueller Speicher: 7598.17 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:442.31 GB) (Free:136.63 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: AECDB9E2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=442.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=23.3 GB) - (Type=27)

==================== Ende von Addition.txt ============================

schrauber · 20.09.2015, 12:10

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ACHTUNG

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Crossbrowse

DealPly

globalupdate Helper
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

EnneBua · 20.09.2015, 20:47

Nach dem Combofix Neustart öffneten sich in Firefox dauernd irgendwelche Pop Ups, hab Firefox neu geöffnet. Hatte es seitdem nicht mehr, kann es sein dass das war weil avast noch deaktiviert war? Edit : Komischerweise waren Addons in Firefox die mir immer Pop Ups und nervige Werbung gezeigt haben, also dieses Problem wäre wieder weg.

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von EnneBua (2015-09-20 20:40:30) Run:1
Gestartet von C:\Users\EnneBua\Downloads
Geladene Profile: EnneBua (Verfügbare Profile: Enne & EnneBua & Gast)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
globalupdate Helper (x32 Version: 1.3.25.0 - globalupdate Inc.) Hidden <==== ACHTUNG
*****************

HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}\\SystemComponent => Wert erfolgreich entfernt

==== Ende von Fixlog 20:40:30 ====

Code:

ATTFilter

ComboFix 15-09-07.01 - EnneBua 20.09.2015  21:08:43.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.43.1031.18.5620.2010 [GMT 2:00]
ausgeführt von:: c:\users\EnneBua\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
C:\Install.exe
c:\program files (x86)\Adobe\c28454a2-1fd7-4069-b4f2-ee58091b7806.dll
c:\program files (x86)\Adobe\ff19d77c-47f2-4652-8f41-3c2fb237f075.dll
c:\program files (x86)\ff19d77c-47f2-4652-8f41-3c2fb237f075\63ed6bbe-fe23-4d56-870b-5303210df548.dll
c:\program files (x86)\ff19d77c-47f2-4652-8f41-3c2fb237f075\bc5cb58f-1df2-4631-9d23-abaa92a298c9.dll
c:\program files (x86)\LyricsMonkey
c:\program files (x86)\LyricsMonkey\FF\chrome\content\icon.png
c:\program files (x86)\LyricsMonkey\FF\install.rdf
c:\program files (x86)\MyBrowser 1.0.2V16.09\1a35ebac-57f4-4055-b97c-4c42eb4294f9.dll
c:\program files (x86)\MyBrowser 1.0.2V16.09\48ee0560-0343-4ef1-82b4-c3946c9c18df.dll
c:\program files (x86)\SW-Booster
c:\program files (x86)\XingHaoLyrics
c:\program files (x86)\YoutubeAdblocker
c:\programdata\ntuser.pol
c:\programdata\Wincert\WIN32C~1.DLL
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\nafj.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\nWxsaxUQY7v3.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\V4A.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\nafj.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\nWxsaxUQY7v3.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\V4A.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\nafj.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\nWxsaxUQY7v3.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\V4A.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\nafj.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\nWxsaxUQY7v3.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\V4A.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\Enne\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\EnneBua\AppData\Local\nsrD089.tmp
c:\users\EnneBua\AppData\Local\nswE0B2.tmp
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
c:\users\Gast\AppData\Local\Microsoft\Windows\Temporary Internet Files\{93EAFD12-B15D-4820-A729-AAB36BE74E2C}.xps
c:\users\Gast\AppData\Roaming\Google Chrome.lnk
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\nafj.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\nWxsaxUQY7v3.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\V4A.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\nafj.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\nWxsaxUQY7v3.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\V4A.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\nafj.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\nWxsaxUQY7v3.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\V4A.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\adnjmadoifmhholikpcjhffgfodmifpp\1.0\zlatEyv0wS.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ejbhfecefjoepfhfblpdbjiflbcniapm\1.0\nafj.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ffbhefmlcoihbjcmibbfkocmnaiacinp\111\nWxsaxUQY7v3.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\hpehmjlbhkcpljgnmdnjikfmeodomijc\1.1\V4A.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\background.html
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\content.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\iflkmjhchkmnajolaeddgpdnahkfcjag\1.0\pOz948VpwH.js
c:\windows\IsUn0407.exe
c:\windows\SysWow64\DEBUG.log
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_ACEDRV11
-------\Service_acedrv11
-------\Service_globalUpdate
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-08-20 bis 2015-09-20  ))))))))))))))))))))))))))))))
.
.
2015-09-20 19:22 . 2015-09-20 19:22	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2015-09-20 18:42 . 2015-09-20 18:42	--------	d-----w-	c:\program files (x86)\VS Revo Group
2015-09-16 13:32 . 2015-09-20 18:40	--------	d-----w-	C:\FRST
2015-09-16 13:02 . 2015-09-20 19:20	--------	d-----w-	c:\program files (x86)\ff19d77c-47f2-4652-8f41-3c2fb237f075
2015-09-16 13:02 . 2015-09-16 13:02	--------	d-----w-	c:\users\EnneBua\AppData\Local\globalUpdate
2015-09-16 13:02 . 2015-09-16 13:02	--------	d-----w-	c:\program files (x86)\globalUpdate
2015-09-16 13:02 . 2015-09-20 19:20	--------	d-----w-	c:\program files (x86)\MyBrowser 1.0.2V16.09
2015-09-16 13:01 . 2015-09-16 13:01	--------	d-----w-	c:\users\EnneBua\AppData\Local\Crossbrowse
2015-09-16 13:00 . 2015-09-16 13:00	--------	d-----w-	c:\program files (x86)\Crossbrowse
2015-09-16 13:00 . 2015-09-16 13:00	--------	d-----w-	c:\programdata\8WdsManPro8
2015-09-15 14:27 . 2015-09-15 22:14	--------	d-----w-	c:\program files (x86)\SFK
2015-09-15 14:27 . 2015-09-15 14:27	--------	d-----w-	c:\programdata\UWdsManProU
2015-09-15 14:27 . 2015-09-15 14:27	--------	d-----w-	c:\users\EnneBua\AppData\Roaming\mystartsearch
2015-09-14 17:11 . 2015-09-14 17:11	320424	----a-w-	c:\windows\system32\javaws.exe
2015-09-14 17:11 . 2015-09-14 17:11	189864	----a-w-	c:\windows\system32\javaw.exe
2015-09-14 17:11 . 2015-09-14 17:11	189864	----a-w-	c:\windows\system32\java.exe
2015-09-14 17:11 . 2015-09-14 17:11	111016	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2015-09-14 17:09 . 2015-09-14 17:09	--------	d-----w-	c:\program files (x86)\Common Files\Skype
2015-09-14 16:56 . 2015-09-14 16:56	--------	d-sh--w-	c:\users\EnneBua\AppData\Roaming\AnyProtectEx
2015-09-14 13:13 . 2015-09-15 22:59	--------	d-----w-	c:\users\EnneBua\AppData\Local\CC3CA460-1442243583-11B2-8000-EC391B6A5670
2015-09-14 13:10 . 2015-09-20 19:26	--------	d-----w-	c:\program files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670
2015-09-14 13:10 . 2015-09-14 13:11	--------	d-----w-	c:\users\EnneBua\AppData\Roaming\ASPackage
2015-09-14 13:09 . 2015-09-14 16:55	--------	d-----w-	c:\users\EnneBua\AppData\Local\Opera Software
2015-09-14 13:09 . 2015-09-14 16:55	--------	d-----w-	c:\users\EnneBua\AppData\Roaming\Opera Software
2015-09-14 13:07 . 2015-09-14 16:55	--------	d-----w-	c:\program files (x86)\Opera
2015-09-12 16:07 . 2015-08-18 01:42	296024	----a-w-	c:\program files\Internet Explorer\sqmapi.dll
2015-09-12 16:07 . 2015-08-15 06:49	950784	----a-w-	c:\program files\Internet Explorer\iedvtool.dll
2015-09-12 16:07 . 2015-08-15 06:17	417792	----a-w-	c:\windows\system32\html.iec
2015-09-12 16:07 . 2015-08-15 06:17	88064	----a-w-	c:\windows\system32\MshtmlDac.dll
2015-09-12 16:07 . 2015-08-15 05:42	199680	----a-w-	c:\windows\system32\msrating.dll
2015-09-12 16:07 . 2015-08-15 05:41	1018368	----a-w-	c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2015-09-12 16:07 . 2015-08-15 04:49	382976	----a-w-	c:\program files\Internet Explorer\IEShims.dll
2015-09-12 16:07 . 2015-08-15 06:48	25190400	----a-w-	c:\windows\system32\mshtml.dll
2015-09-12 16:04 . 2015-08-27 18:13	2048	----a-w-	c:\windows\system32\msxml6r.dll
2015-09-02 17:56 . 2015-09-02 17:57	--------	d-----w-	c:\users\Enne\AppData\Local\Citrix
2015-09-01 17:51 . 2015-09-14 16:57	--------	d-----w-	c:\users\EnneBua\AppData\Local\Citrix
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-08-31 22:45 . 2015-09-18 09:54	11062400	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{E98B0279-A119-4716-8568-DBDFC374ACD3}\mpengine.dll
2015-08-26 16:37 . 2012-01-13 12:13	134753440	----a-w-	c:\windows\system32\MRT.exe
2015-08-12 13:11 . 2012-07-10 22:04	778440	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2015-08-12 13:11 . 2011-09-14 20:15	142536	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2015-08-03 10:12 . 2014-07-22 11:19	33856	---ha-w-	c:\windows\system32\hamachi.sys
2015-07-30 18:06 . 2015-08-12 11:39	1180160	----a-w-	c:\windows\system32\FntCache.dll
2015-07-30 18:06 . 2015-08-12 11:39	1648128	----a-w-	c:\windows\system32\DWrite.dll
2015-07-30 18:06 . 2015-08-12 11:38	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2015-07-30 17:57 . 2015-08-12 11:39	1251328	----a-w-	c:\windows\SysWow64\DWrite.dll
2015-07-30 17:57 . 2015-08-12 11:38	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2015-07-30 13:13 . 2015-08-12 23:28	103120	----a-w-	c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 13:13 . 2015-08-12 23:28	124624	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-07-28 20:09 . 2015-08-12 11:42	17344	----a-w-	c:\windows\system32\CompatTelRunner.exe
2015-07-28 20:05 . 2015-08-12 11:42	774656	----a-w-	c:\windows\system32\invagent.dll
2015-07-28 20:05 . 2015-08-12 11:42	743424	----a-w-	c:\windows\system32\generaltel.dll
2015-07-28 20:05 . 2015-08-12 11:42	437760	----a-w-	c:\windows\system32\devinv.dll
2015-07-28 20:05 . 2015-08-12 11:42	1116672	----a-w-	c:\windows\system32\appraiser.dll
2015-07-28 20:05 . 2015-08-12 11:42	69120	----a-w-	c:\windows\system32\acmigration.dll
2015-07-28 20:05 . 2015-08-12 11:42	227328	----a-w-	c:\windows\system32\aepdu.dll
2015-07-28 19:55 . 2015-08-12 11:42	1148416	----a-w-	c:\windows\system32\aeinv.dll
2015-07-22 17:53 . 2015-09-12 16:05	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-07-16 19:12 . 2015-08-12 11:42	37376	----a-w-	c:\windows\SysWow64\tsgqec.dll
2015-07-16 19:12 . 2015-08-12 11:42	4922368	----a-w-	c:\windows\SysWow64\mstscax.dll
2015-07-16 19:12 . 2015-08-12 11:42	269824	----a-w-	c:\windows\SysWow64\aaclient.dll
2015-07-16 19:11 . 2015-08-12 11:42	44032	----a-w-	c:\windows\system32\tsgqec.dll
2015-07-16 19:11 . 2015-08-12 11:42	5779456	----a-w-	c:\windows\system32\mstscax.dll
2015-07-16 19:11 . 2015-08-12 11:42	322560	----a-w-	c:\windows\system32\aaclient.dll
2015-07-15 18:15 . 2015-08-12 11:42	94656	----a-w-	c:\windows\system32\drivers\mountmgr.sys
2015-07-15 18:10 . 2015-08-12 11:42	1743360	----a-w-	c:\windows\system32\sysmain.dll
2015-07-15 18:10 . 2015-08-12 11:42	11264	----a-w-	c:\windows\system32\msmmsp.dll
2015-07-15 03:19 . 2015-08-12 11:41	52736	----a-w-	c:\windows\system32\basesrv.dll
2015-07-10 17:51 . 2015-08-12 11:38	14177280	----a-w-	c:\windows\system32\shell32.dll
2015-07-09 17:57 . 2015-08-12 11:38	193536	----a-w-	c:\windows\system32\notepad.exe
2015-07-09 17:57 . 2015-08-12 11:38	193536	----a-w-	c:\windows\notepad.exe
2015-07-09 17:42 . 2015-08-12 11:38	179712	----a-w-	c:\windows\SysWow64\notepad.exe
2015-07-04 18:07 . 2015-07-15 09:07	2087424	----a-w-	c:\windows\system32\ole32.dll
2015-07-04 17:48 . 2015-07-15 09:07	1414656	----a-w-	c:\windows\SysWow64\ole32.dll
2015-07-01 20:49 . 2015-08-12 11:39	260096	----a-w-	c:\windows\system32\WebClnt.dll
2015-07-01 20:48 . 2015-08-12 11:39	102912	----a-w-	c:\windows\system32\davclnt.dll
2015-07-01 20:30 . 2015-08-12 11:39	206848	----a-w-	c:\windows\SysWow64\WebClnt.dll
2015-07-01 20:30 . 2015-08-12 11:39	82432	----a-w-	c:\windows\SysWow64\davclnt.dll
2015-06-27 07:29 . 2015-04-02 20:45	442264	----a-w-	c:\windows\system32\drivers\aswsp.sys
2015-06-23 11:30 . 2011-09-14 17:11	300704	------w-	c:\windows\system32\MpSigStub.exe
2013-03-18 14:46 . 2013-03-18 14:46	503296	----a-w-	c:\program files (x86)\freac.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\EnneBua\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-07-29 2017848]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"RemoteControl10"="c:\program files (x86)\CyberLink\Media+Player10\Media+Player10Serv.exe" [2010-09-20 87336]
"BlueStacks Agent"="c:\program files (x86)\BlueStacks\HD-Agent.exe" [2014-10-07 843480]
"CanonQuickMenu"="c:\program files (x86)\Canon\Quick Menu\CNQMMAIN.EXE" [2012-04-03 1273448]
"IJNetworkScannerSelectorEX"="c:\program files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" [2012-03-26 449168]
"RoccatKonePure"="c:\program files (x86)\ROCCAT\Kone Pure Mouse\KonePureMonitor.EXE" [2014-01-20 561152]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-05-13 5515496]
"RoccatIsku"="c:\program files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE" [2013-10-30 536576]
.
c:\users\EnneBua\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk - c:\program files\Intel\TurboBoost\SignalIslandUi.exe [2010-10-8 198656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0aswBoot.exe /M:20b1bdcc /wow /dir:"c:\program files\AVAST Software\Avast"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 globalUpdatem;globalUpdate Update Service (globalUpdatem);c:\program files (x86)\globalUpdate\Update\globalupdate.exe;c:\program files (x86)\globalUpdate\Update\globalupdate.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R4 ClickToRunSvc;Microsoft Office-Klick-und-Los-Dienst;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe;c:\program files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S2 BstHdAndroidSvc;BlueStacks Android Service;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android;c:\program files (x86)\BlueStacks\HD-Service.exe BstHdAndroidSvc Android [x]
S2 BstHdDrv;BlueStacks Hypervisor;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys;c:\program files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [x]
S2 BstHdLogRotatorSvc;BlueStacks Log Rotator Service;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe;c:\program files (x86)\BlueStacks\HD-LogRotatorService.exe [x]
S2 BstHdUpdaterSvc;BlueStacks Updater Service;c:\program files (x86)\BlueStacks\HD-UpdaterService.exe;c:\program files (x86)\BlueStacks\HD-UpdaterService.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x]
S2 gyvixodu;CD Feature;c:\program files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\hnszDC20.tmp;c:\program files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\hnszDC20.tmp [x]
S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys;c:\windows\SYSNATIVE\DRIVERS\btwampfl.sys [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys;c:\windows\SYSNATIVE\DRIVERS\ETD.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2015-09-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-10 13:11]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-1-6.exe [2015-09-16 13:03]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-1-7.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-1-7.exe [2015-09-16 13:03]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-10_user.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-10.exe [2015-09-16 13:02]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-3.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-3.exe [2015-09-16 13:02]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-4.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-4.exe [2015-09-16 13:03]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-5.exe [2015-09-16 13:03]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-5_user.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-5.exe [2015-09-16 13:03]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-6.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-6.exe [2015-09-16 13:02]
.
2015-09-20 c:\windows\Tasks\bfe024ee-bb90-4a5a-be19-e48905a33135-7.job
- c:\program files (x86)\MyBrowser 1.0.2V16.09\bfe024ee-bb90-4a5a-be19-e48905a33135-7.exe [2015-09-16 13:02]
.
2015-09-20 c:\windows\Tasks\globalUpdateUpdateTaskMachineCore.job
- c:\program files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-16 13:02]
.
2015-09-20 c:\windows\Tasks\globalUpdateUpdateTaskMachineUA.job
- c:\program files (x86)\globalUpdate\Update\globalupdate.exe [2015-09-16 13:02]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro1 (ErrorConflict)]
@="{8BA85C75-763B-4103-94EB-9470F12FE0F7}"
[HKEY_CLASSES_ROOT\CLSID\{8BA85C75-763B-4103-94EB-9470F12FE0F7}]
2014-11-12 08:07	2334928	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro2 (SyncInProgress)]
@="{CD55129A-B1A1-438E-A425-CEBC7DC684EE}"
[HKEY_CLASSES_ROOT\CLSID\{CD55129A-B1A1-438E-A425-CEBC7DC684EE}]
2014-11-12 08:07	2334928	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrivePro3 (InSync)]
@="{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}"
[HKEY_CLASSES_ROOT\CLSID\{E768CD3B-BDDC-436D-9C13-E1B39CA257B1}]
2014-11-12 08:07	2334928	----a-w-	c:\program files\Microsoft Office 15\root\vfs\ProgramFilesX64\Microsoft Office\Office15\grooveex.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2015-04-26 13:00	722400	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-02-27 11780712]
"IntelTBRunOnce"="wscript.exe" [2013-10-12 168960]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-03-28 2673296]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-03-28 1570672]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://at.search.yahoo.com/?fr=hp-avast&type=avastbcl
mStart Page = https://at.search.yahoo.com/?fr=hp-avast&type=avastbcl
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = https://at.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
mSearch Bar = https://at.search.yahoo.com/?fr=hp-avast&type=avastbcl
uSearchAssistant = hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRa8ldwnKG51HJOT1XRoA82gVkpDLIiC3wcwpHk-U5DpeJDLCABhq3q-4C46rogALm_OgwuSHcb35zouzijPINKcbWl6Dzc0ehVudc_MyLGxCavoUvMU4eKXRXNYC0fnvKml7z49XIzC7FkLadxC_RramjvAWi8A7Dk6J6ulssmo0vj17jHORS0N4qAQ,&q={searchTerms}
mSearchAssistant = hxxp://start.facemoods.com/?a=wbst&s={searchTerms}&f=4
IE: E&xport to Microsoft Excel - c:\program files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\program files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
TCP: DhcpNameServer = 10.0.0.138
FF - ProfilePath - c:\users\EnneBua\AppData\Roaming\Mozilla\Firefox\Profiles\7e0rd251.default\
FF - prefs.js: browser.search.selectedEngine - mystartsearch
FF - prefs.js: browser.startup.homepage - hxxps://www.google.at/?gws_rd=ssl
FF - prefs.js: keyword.URL - hxxp://www.sm.de/?q=
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Toolbar-{9E131A93-EED7-4BEB-B015-A0ADB30B5646} - (no file)
Toolbar-{377e5d4d-77e5-476a-8716-7e70a9272da0} - (no file)
Toolbar-10 - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
Wow6432Node-HKU-Default-Run-SearchProtect - \SearchProtect\bin\cltmng.exe
HKLM_Wow6432Node-ActiveSetup-installed components - c:\program files (x86)\Crossbrowse\Crossbrowse\Application\39.6.2171.95\Installer\chrmstp.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-Locked - (no file)
Toolbar-10 - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
AddRemove-Adobe Acrobat 4.0 - c:\windows\ISUN0407.EXE
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\gyvixodu]
"ImagePath"="c:\program files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\hnszDC20.tmp"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\lyryzido]
"ImagePath"="c:\program files (x86)\CC3CA460-1442236254-11B2-8000-EC391B6A5670\knss2523.tmp"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\BlueStacks]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_18_0_0_232_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.18"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_18_0_0_232.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}]
@Denied: (A 2) (Everyone)
@="IFlashBroker6"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Samsung\Easy Display Manager\WifiManager.exe
c:\program files (x86)\CyberLink\YouCam\YCMMirage.exe
c:\program files (x86)\Canon\IJPLM\IJPLMSVC.EXE
c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
c:\program files (x86)\CyberLink\Shared files\RichVideo.exe
c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
c:\program files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
c:\program files (x86)\BlueStacks\HD-Service.exe
c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe
c:\program files (x86)\BlueStacks\HD-Network.exe
c:\program files (x86)\BlueStacks\HD-BlockDevice.exe
c:\program files (x86)\BlueStacks\HD-SharedFolder.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-09-20  21:37:51 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-09-20 19:37
.
Vor Suchlauf: 11 Verzeichnis(se), 174.473.953.280 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 174.996.750.336 Bytes frei
.
- - End Of File - - 4C35DF2314C7C40D329BB52D2B7AADEC

schrauber · 21.09.2015, 18:43

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

EnneBua · 21.09.2015, 18:45

Hallo, da ich kaum wichtiges an Laptop habe werde ich ihn aufsetzen und Windows 10 installieren. Ich danke dir aber vielmals für deine Hilfe und deine Bemühungen. Lg

schrauber · 22.09.2015, 15:52

ok

19.09.2015, 16:28	#6
schrauber /// the machine /// TB-Ausbilder	Nach Bluestacksroot Download installieren sich dauernd Programme Du musst die Logs öffnen, den Inhalt markieren, dann hier einfügen __________________ --> Nach Bluestacksroot Download installieren sich dauernd Programme

22.09.2015, 15:52	#13
schrauber /// the machine /// TB-Ausbilder	Nach Bluestacksroot Download installieren sich dauernd Programme ok __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Nach Bluestacksroot Download installieren sich dauernd Programme

Plagegeister aller Art und deren Bekämpfung: Nach Bluestacksroot Download installieren sich dauernd Programme