| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: startgo123Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
20.09.2016, 13:31
| #16 |
 |  startgo123Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 18-09-2016
durchgeführt von HP (20-09-2016 14:22:09)
Gestartet von C:\Users\HP\Desktop
Windows 8.1 (Update) (X64) (2014-07-11 14:02:56)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3930845653-3837040866-4171826123-500 - Administrator - Disabled)
Gast (S-1-5-21-3930845653-3837040866-4171826123-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3930845653-3837040866-4171826123-1003 - Limited - Enabled)
HP (S-1-5-21-3930845653-3837040866-4171826123-1001 - Administrator - Enabled) => C:\Users\HP
UpdatusUser (S-1-5-21-3930845653-3837040866-4171826123-1004 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
«Âîéíà è Ìèð» (HKLM-x32\...\«Âîéíà è Ìèð») (Version: - )
7-Zip 16.02 (HKLM-x32\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Ãåðîè Ìå÷à è Ìàãèè® III (HKLM-x32\...\Heroes of Might and Magic® III) (Version: - )
Ableton Live 9 Lite (HKLM\...\{E807D51A-ED71-4353-AD60-4E9625BE7531}) (Version: 9.0.0.0 - Ableton)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Akai Elements of UK Dance (HKLM-x32\...\Akai UK Dance_is1) (Version: - )
Akamai NetSession Interface (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
Akamai NetSession Interface (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Akamai) (Version: - Akamai Technologies, Inc)
Anno Online (HKLM\...\Steam App 336510) (Version: - Blue Byte)
AnVir Task Manager Free (HKLM-x32\...\AnVir Task Manager Free) (Version: - AnVir Software)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArmA Demo Uninstall (HKLM-x32\...\ArmA Demo) (Version: - )
Blitzkrieg (HKLM-x32\...\Blitzkrieg) (Version: - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BrainBread 2 (HKLM\...\Steam App 346330) (Version: - Reperio Studios)
Chicago 1930 (HKLM-x32\...\Chicago 1930) (Version: - )
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
Cry of Fear (HKLM-x32\...\Steam App 223710) (Version: - Team Psykskallar)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.4319 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
ElectroLyrics-1 (HKLM-x32\...\ElectroLyrics-1) (Version: 1.28.153.3 - Lyrics) <==== ACHTUNG
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.8.5.1160 - Steinberg Media Technologies GmbH)
Fallout: New Vegas (HKLM\...\Steam App 22380) (Version: - Obsidian Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
Grand Theft Auto Vice City (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}) (Version: 1.00.000 - )
Grand Theft Auto Vice City (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}) (Version: 1.00.000 - )
GTA2 (HKLM-x32\...\GTA2) (Version: - )
GTAIII (HKLM-x32\...\{92B94569-6683-4617-8C54-EB27A1B51B30}) (Version: - )
Hammer & Sickle (HKLM-x32\...\Hammer & Sickle) (Version: - )
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version: - Reto-Moto)
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\HPConnectedMusic) (Version: 1.1 (build 96) hp - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\HPConnectedMusic) (Version: 1.1 (build 96) hp - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1206 - Hewlett-Packard)
HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{FF27F674-821E-4BA2-985B-DDF539C2CD03}) (Version: 7.0.33.6 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
ISScript (x32 Version: 3.00.185 - InstallShield Software Corp.) Hidden
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
LEGO Alpha Team (HKLM-x32\...\{C5C8DE40-1AB7-11D4-854E-00A0C99F6AF9}) (Version: - )
Lollipop (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\lollipop_11221407) (Version: - Lollipop Network, S.L.) <==== ACHTUNG
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
MPC Essentials 1.8.2 (HKLM\...\com.akaipro.mpc.essentials_is1) (Version: 1.8.2 - Akai Professional)
NVIDIA 3D Vision Treiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Pro Rally 2001 (HKLM-x32\...\Pro Rally 2001) (Version: - )
Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
SPL Crimson USB ASIO driver (HKLM\...\USB_AUDIO_DEusb-audio.deSPLCrimson) (Version: - )
Spotify (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Spotify) (Version: 1.0.38.171.g5e1cd7b2 - Spotify AB)
Spotify (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Spotify) (Version: 1.0.24.104.g92a22684 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Steinberg Cubase 5 (HKLM-x32\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.0 - Steinberg Media Technologies GmbH)
Steinberg Cubase LE AI Elements 8 (HKLM-x32\...\{C82690CF-7D52-4E6A-02BB-AB612D4D8D28}) (Version: 8.0.10 - Steinberg Media Technologies GmbH)
Steinberg Cubase LE AI Elements 8 64bit (HKLM\...\{C801D1E6-30E3-46BE-368D-0106B42CCE17}) (Version: 8.0.10 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE (HKLM-x32\...\{A6790D47-D653-4B88-BED4-96878DBE5191}) (Version: 4.1.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.1.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.2.1 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE (HKLM-x32\...\{EF7800A8-575E-4776-95A5-A9D904A85D5F}) (Version: 2.0.2 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 2.0.2 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content for Cubase LE AI Elements (HKLM-x32\...\{CF45002F-2205-4116-BB51-2D015F436CAC}) (Version: 2.0.1 - Steinberg Media Technologies GmbH)
Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH)
Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Tomb Raider III (HKLM-x32\...\Tomb Raider III) (Version: - )
Unchecky v0.3.7 (HKLM-x32\...\Unchecky) (Version: 0.3.7 - RaMMicHaeL)
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Warface (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Warface) (Version: 1.87 - Mail.Ru)
Warface (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Warface) (Version: 1.87 - Mail.Ru)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Игровой центр (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\GameCenterMailRu) (Version: 2.402 - ООО "Мэйл.Ру Геймз")
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2C56CCE9-6B4E-426A-9439-6EF1FDBA3C65} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company)
Task: {48BF7FE4-16B3-42BB-A43F-95350E7131D5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-13] (Adobe Systems Incorporated)
Task: {52B160ED-B394-4462-8927-43C6ACC8306C} - System32\Tasks\{AF089043-D6AA-41B7-A239-8F8B8E8FAA06} => pcalua.exe -a F:\autorun.exe -d F:\
Task: {6E87A472-CB8B-4D44-9413-166AB458F2D5} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_162_pepper.exe [2016-09-13] (Adobe Systems Incorporated)
Task: {710F6622-7749-4122-80E5-BC696171976F} - System32\Tasks\ExtFixer13197 => C:\windows\TEMP\41844_updater.exe <==== ACHTUNG
Task: {8507F8F4-7E2F-4651-9936-8905E375F9FF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {850AC5A8-2E1C-42C3-9965-931751078C0E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_backup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2012-07-13] (Hewlett-Packard)
Task: {8C600834-BD7F-48DE-9DF1-DC80FEEB40F9} - System32\Tasks\{820D1004-08F0-4C3F-8553-9B88F08D781B} => pcalua.exe -a F:\ProRally.exe -d F:\
Task: {9ABBC3D1-DB15-4BAB-9397-BAE1EE87DAF1} - System32\Tasks\ExtFixer2078 => C:\windows\TEMP\41844_updater.exe <==== ACHTUNG
Task: {B2530D95-ACF4-4DC4-82E8-9B2FD6594D84} - System32\Tasks\{42A7BE18-F334-47DC-892B-2C562E256871} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {C463C7B7-3AAB-4778-8630-C3D74C672124} - System32\Tasks\{731C0D96-12CF-47EF-B0BF-E54A152EB958} => pcalua.exe -a "C:\Program Files (x86)\Cinema-Plus-1.2\Uninstall.exe" -c /fcp=1
Task: {D0612721-6B70-4089-9E5E-936897C56ADF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {DE278E01-1E60-465E-A5CB-E857CDF8F5D2} - \Perotainghernerry System -> Keine Datei <==== ACHTUNG
Task: {E09F5153-E919-4910-B801-F1A052F640D8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_162_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\ExtFixer13197.job => C:\windows\TEMP\41844_updater.exeq/url='hxxp:/xml.localxpath.net/apps/cr/1060-4030_ElectroLyrics.exe <==== ACHTUNG
Task: C:\WINDOWS\Tasks\ExtFixer2078.job => C:\windows\TEMP\41844_updater.exep/url='hxxp:/xml.localxpath.net/apps/cr/1060-4030_ElectroLyrics.exe <==== ACHTUNG
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2012-10-05 21:59 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2013-12-06 14:06 - 2013-12-04 04:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 14:06 - 2013-12-04 04:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 14:06 - 2013-12-04 04:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 14:06 - 2013-12-04 04:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 14:06 - 2013-12-04 04:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\HP:Heroes & Generals [38]
AlternateDataStreams: C:\ProgramData\Temp:373E1720 [120]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_0refresh-2076883145 [2686]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_1write-1878237577 [2686]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_2adress_book2-609010338 [2686]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2016-09-16 18:53 - 00001993 ____A C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
0.0.0.0 media.opencandy.com
0.0.0.0 cdn.opencandy.com
0.0.0.0 tracking.opencandy.com
0.0.0.0 api.opencandy.com
0.0.0.0 installer.betterinstaller.com
0.0.0.0 installer.filebulldog.com
0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
0.0.0.0 inno.bisrv.com
0.0.0.0 nsis.bisrv.com
0.0.0.0 cdn.file2desktop.com
0.0.0.0 cdn.goateastcach.us
0.0.0.0 cdn.guttastatdk.us
0.0.0.0 cdn.inskinmedia.com
0.0.0.0 cdn.insta.oibundles2.com
0.0.0.0 cdn.insta.playbryte.com
0.0.0.0 cdn.llogetfastcach.us
0.0.0.0 cdn.montiera.com
0.0.0.0 cdn.msdwnld.com
0.0.0.0 cdn.mypcbackup.com
0.0.0.0 cdn.ppdownload.com
0.0.0.0 cdn.riceateastcach.us
0.0.0.0 cdn.shyapotato.us
0.0.0.0 cdn.solimba.com
0.0.0.0 cdn.tuto4pc.com
0.0.0.0 cdn.appround.biz
0.0.0.0 cdn.bigspeedpro.com
0.0.0.0 cdn.bispd.com
0.0.0.0 cdn.bisrv.com
Da befinden sich 3 zusätzliche Einträge.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\Web\Wallpaper\Theme2\img10.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run32: => "fst_de_19"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{1831D832-0085-412F-AD86-5D5B89F42A77}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FE33F88C-E0F4-4BB1-9C7D-10CF276F3BED}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{576CD0BF-2CA2-47A3-B325-6353000EF03E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DFB4C9B7-8D33-4392-9006-A5AE1CF3BCCC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DEF483F9-E3F4-4D8D-9413-56D219FD4E84}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E372ABB6-ECB4-4096-A3AB-FCE65CA87A5D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3DF00AA1-75E1-4EE9-AD6E-B9057966895D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D452AC97-DBF6-4D48-A3F7-6A8F658A7F74}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{005D2F35-F842-47AB-AFDF-CB2B1F93F775}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E529D38-E74E-43EE-86F9-0EB0F270B4BA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9435A3F0-0CA3-48F8-8659-DD5FE2C06D01}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2D0B747F-E4DD-4AD7-8843-8EC2BA447690}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DC75E642-E39C-4D17-997A-730CEC93BC47}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{27E3496D-0218-45A8-AE3E-4740FD3CD194}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F2CAA585-C5C7-486D-9C44-D863BAAAD505}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4DB0F702-F2C9-4DBE-BE25-0380369C7F88}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{191DDC5E-F3B1-467E-87B7-1DB5DA27C139}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3210EF94-760C-491A-925D-5F2ECB3E1FFD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0F53E743-082B-4C03-AB49-257ACB1A6F0D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{40FB1C47-6484-4FC6-8AE6-64EB79E678F1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{29738446-D9BE-497F-91AB-E3AA893440FD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A66597FB-0C5E-4FAB-B8CB-C6D5032C5BD3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C222B0E6-B5D6-4593-B563-9A584F8B0C16}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6EB0B2FE-F281-4DA6-AFA4-96B3F5A4495D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9CBF9631-4859-4E78-80ED-82367B79F805}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1A1B324F-9A5A-4564-9E30-5F5411A7FB78}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A580BFA5-C63A-4613-9E53-0CEE605CD7AC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8B7583EB-DCC3-48FF-9B3F-AA47A8130C5B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0DA647E8-BEC0-43CC-A928-9C7E670F57B0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F36970C1-D3CC-486A-9BA8-105533EC62E9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E8FFF43F-96FA-4970-9AD5-1568C6E94F5F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9BC6FD9D-2547-484D-82C5-74C002248D19}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FFDBD881-F24A-4FAA-9A0B-2B3D69281BFF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{486C20E5-4BEC-4672-90EB-7AD38E3EFD0B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4B1E150D-DD19-42B1-A0AF-1DA2B59EA750}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{56A5FCC7-361D-445C-A203-DFBE4D2E23F3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E938228E-C3C8-47F0-A642-8AB23B685C9E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DC307FCF-A262-45B8-835E-F322CCA2C7B0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9D35373C-2C88-4E7A-A736-BB61396CEF34}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DACDD348-3151-4FBD-871F-4240A5C6313A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4F972021-55F4-4A55-A127-82E51B4DBF26}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0590F1B7-E677-4009-9CD5-CB2CECFCA95C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8DB2BE7B-DD81-4729-866E-5FF3670E4E8F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AB269C0B-3E60-493B-BE9E-98D086323E70}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{240D29B0-90EE-40A2-AD89-774A853E5340}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C3CCAF6F-28EB-467A-97D5-FE03818A57A7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D2A553F1-7611-4A7F-A159-1BC2A2FF9CE4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F9B766F0-9B03-46DB-A606-88A8E911FAA8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6B97FFC2-265A-4D18-AA3A-548E59D885E0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{40D5D850-AC28-43A7-8455-95ED9444476C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E374F7F4-55C5-46F5-9C86-6EE161F7A7C9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A9256CFC-1C11-457F-9F8C-16B61A834305}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F970A3D0-30F3-406C-B51B-D6B65520D7C7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9D35A0A2-93AF-4EE6-8D9E-478757A78F5E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D06FC8D4-66E8-401A-BD65-8CF943C35DE5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [UDP Query User{434C97A3-AA31-40AE-B896-B74555F819F7}C:\users\hp\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\hp\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{F4A159A5-1196-449F-9842-6E3E8423FA81}C:\users\hp\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\hp\appdata\local\akamai\netsession_win.exe
FirewallRules: [{672C6317-FB94-43EB-B635-007DDA880CFE}] => (Allow) C:\Users\HP\Downloads\VideoPerformerSetup (1).exe
FirewallRules: [{23915B54-3A99-49D6-A0F7-1347D4A34C73}] => (Allow) C:\Users\HP\Downloads\VideoPerformerSetup (1).exe
FirewallRules: [{49E6529A-20EA-4F8E-966F-70A79BD61637}] => (Allow) C:\Users\HP\Downloads\VideoPerformerSetup.exe
FirewallRules: [{FAB33320-CE75-49B7-B30F-24FA26F42453}] => (Allow) C:\Users\HP\Downloads\VideoPerformerSetup.exe
FirewallRules: [{CFE45F69-0152-4E39-9985-4466EA1F34DB}] => (Allow) LPort=1900
FirewallRules: [{69760FC3-10F9-4A08-821E-089917CDE05C}] => (Allow) LPort=2869
FirewallRules: [{9990EC68-E558-4940-BF68-77F4AAE397AC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{55EF0FA1-8EE3-4EC4-A3B6-9F754A2E872B}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{D0307A22-5E62-4E12-8F79-3A6C3D3660B2}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{7647AE3D-187E-4713-9BF7-7EA40EAD7F0A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{26F32E2D-209C-4169-91C7-AD4F3921FEA5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{AE6EBFF2-C261-4958-A53F-27F490E80E27}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{76B0EE6E-F2AF-44F9-8C36-0D5B3FD53DCA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7D416815-F6FA-4288-BFA1-845D5CECF941}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BBA12AD4-14DB-4BAF-BDF4-179B7D57E9F0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{687944BF-DB4B-4CF7-8415-0DF239EF7065}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{67FC3F5D-D669-494C-BA07-319DAECA001E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D5F865B5-00C2-4C3A-B9D2-46F1A0F7ACE3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B58D4FC7-2099-4D01-A59E-BBD27E8C9C96}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{C8F8AAAD-C85F-4C58-BF89-5AB73D0B452E}C:\users\hp\appdata\local\mail.ru\gamecenter\gamecenter@mail.ru.exe] => (Block) C:\users\hp\appdata\local\mail.ru\gamecenter\gamecenter@mail.ru.exe
FirewallRules: [UDP Query User{3905AADC-36C1-4914-87A1-38B921917B8D}C:\users\hp\appdata\local\mail.ru\gamecenter\gamecenter@mail.ru.exe] => (Block) C:\users\hp\appdata\local\mail.ru\gamecenter\gamecenter@mail.ru.exe
FirewallRules: [{556CD6F7-89FD-4AE5-8742-F07B41EFE276}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{87BE7E7B-DED1-465E-B624-2F036C9F32C7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9668310A-69FD-4A59-8271-1E1EDC150D09}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BAA912D5-89F1-4AAB-A697-AA5EDA1F349B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D2868235-A202-467C-9173-2538567D8C36}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9E7BBFF7-16B9-4039-B0F4-02CFAC9520F7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BF0EF3BB-210F-4CBF-BF12-5A7E76E5E086}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{923CE724-90DC-442C-A82F-394D51545520}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C16FE4D2-A58C-443C-A458-835F236C3A6D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BD837EDC-B82C-4D41-B76A-FAA8B23AB8AF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{127EF742-91AF-498B-B9E0-AB2BBCCF265B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3E2CD19B-0CCE-4376-8498-C2AB10717A66}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E884976-9C69-42B3-BA16-AE0A3146CB5B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E3AE94F-1027-4B18-B06A-E2AAAC181658}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DA43461D-AF18-4798-A5CD-484DE8C0D4E4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F6CC1C6C-1057-44AC-8FFA-A4BA6F0748B5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{61D012B2-9F18-4F76-A53A-75E5D75EB033}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9C33B8D9-12FE-4161-834B-84B0201B786B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DBD6C599-46EA-48DE-BE74-B3BEB8DBFCCA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{BF725BC3-63F5-481C-A42C-F7B2A1494222}C:\users\hp\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\hp\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{72EBE10A-3FB4-450A-A5A4-228A54A39ADD}C:\users\hp\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\hp\appdata\local\akamai\netsession_win.exe
FirewallRules: [{C0B486BA-67DC-4C72-892F-3F41C530A530}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8B3D049A-860E-472B-AB5A-5A2CD5994067}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DA256FAE-9E71-434A-9CC3-6085E89C79C1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5BE97B07-F48A-4C7F-9EFA-8AB769CBD3B3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{51A3F8EF-1B17-4A14-AF01-4C4EF75B2942}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CC6669BF-BBF7-4929-8EA2-D4850B422403}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7BEA4A91-DF07-4E4D-B43C-DDE4A5EF32C2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D96E3EF6-E8EA-4B2C-891B-3E52CC9611A6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C1D880B8-5A61-42A1-87B5-833B2806CADB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E8EE6707-99DA-4B50-9953-AB6855A2BA13}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0D5A9B36-55D6-446C-A2AE-E12219D1F7A1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4D650A68-C739-440C-851E-F5F7FD38F18E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1A4F884F-12F0-449F-8EB5-DD871300332C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{884C9969-17FC-425B-933B-98721AAE5B5E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CCBCE541-9B10-4D30-9766-27E25DBF2D17}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D82FB43F-1883-4314-9592-F6A9537551AA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F82555C5-03EC-42FB-A148-44DF7BB37D9A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AEA789FF-39CC-4B3F-BE80-A4FCC343D10C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EA4BFE88-97B1-4C6E-8A49-9AA1E469CE9D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{37972B5A-B10F-41ED-832A-9F964FF6C88E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C28B5E82-E122-438A-B393-023F81584006}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{581112E1-696F-41E0-AB11-A9149AB73436}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{095460BF-7FCA-4F6C-92B0-A065C47B776C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B90E463D-2897-4644-A2C9-3E6F6EC8F0E1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{04BCF110-1434-4CA5-8A00-8DEFDAC39F8A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6499C949-E3C9-434C-8DE4-998474FBCBA1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2AE78E1A-859A-4217-9E5E-A171B0F450CA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{80351C0E-596B-4057-8F90-1BBDE99E34C4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4C5F3409-4A34-427D-AE55-906BFDB3BEA8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{119541EF-2D84-4D6C-A605-C62B9A9312CB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9D4AC32D-DC66-4F40-8BA1-F850E4F041C3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F32F3740-7B7B-4A19-87EB-D30D9E9F0911}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{330E6868-4AFD-4A53-9C54-1606A14917A2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D13CE3B4-D3F9-47CF-A179-24E841D5EAD6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A3DFAC17-58B2-414D-970C-A5E12B57371A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{277B5F4B-0882-43F2-9A95-2A159552F72D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2DB048F7-86C3-495D-9648-0A8C1208DABD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1E4E6816-611C-4569-895A-D1F389961EB8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BB3D18A4-AE0C-45E0-97DF-2F092DEFFB6E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DDC1635A-EFB6-4C18-A22F-5C6E62646292}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3352DBB0-0440-4A6D-BB9B-7AC2799D6999}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0D9ACE9C-B6EC-4C18-AC39-4F650D767BF5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{73606971-9468-412B-8B2D-549EFD3CE5FF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7F23168C-8574-4DEB-9E05-FE65F4EE9FA3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{9737E393-5759-4B92-8B74-5CB4AE18AADE}C:\users\hp\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\hp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{417C9F35-448C-40B2-89AF-1236CFE4FDAD}C:\users\hp\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\hp\appdata\roaming\spotify\spotify.exe
FirewallRules: [{152810D6-3EE7-4445-A453-93A51B5B2015}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{76EF961A-A5C0-49E0-A936-E517E5F8E9E3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FD1BBC6F-B08D-4947-84E8-DEB255E28B0E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{78DD4B75-CE4B-482E-9286-0CF7F10B91E5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0C4402D3-3E1E-432B-90D6-6B8DEEBA916B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1F0CE691-712B-4455-AA84-5464E4E3AFF4}] => (Allow) LPort=53000
FirewallRules: [{99B668BB-2A93-4E3F-93DF-D038F403B3CA}] => (Allow) LPort=52000
FirewallRules: [TCP Query User{5AE32623-ECB6-425B-9E5C-277D0FDAF89F}C:\program files\bohemia interactive\arma demo\armademo.exe] => (Allow) C:\program files\bohemia interactive\arma demo\armademo.exe
FirewallRules: [UDP Query User{BC011901-7A51-4AD3-8583-7A8C529646E3}C:\program files\bohemia interactive\arma demo\armademo.exe] => (Allow) C:\program files\bohemia interactive\arma demo\armademo.exe
FirewallRules: [{6CA06C4A-0447-4B57-943A-E2C1C90EB408}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{08CA7946-9C29-4FB8-ADA9-4830B2FB0829}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F3181C95-4C37-4BA3-8350-CC5F00DAF0FE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{10F18B87-7F3A-4747-99E7-9BA04EFB15F0}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C600BDA3-1DB9-4350-AC69-5BBC4FBB909D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{1E6C4E5D-39FF-433E-AB0B-1B648DE7725E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{C94EED85-FDCD-49A0-8D89-C9ABAF743893}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cry of Fear\CoFLaunchApp.exe
FirewallRules: [{EBCECBAB-D15C-48C3-AE6A-5903338AEC5D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cry of Fear\CoFLaunchApp.exe
FirewallRules: [{5A0CE2C0-382A-4A59-A099-554F406746B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{E4045A13-F24C-4C6D-A974-B46DF44560AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [TCP Query User{9EA36164-95AA-4373-9F64-1CA2E7C4F66A}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [UDP Query User{FC78917D-A1B3-448C-A6CB-2B31CA69BC37}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [{F743E7B3-B31C-4E1A-B8FD-300DB314E27F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{196AC14A-EE27-4A8A-8476-5761E98413BE}C:\users\hp\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\hp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5EE74F2D-BC1C-41EB-BFCE-37C916707AF1}C:\users\hp\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\hp\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{08C91461-1FEA-4D94-8623-2D46BD51F151}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [UDP Query User{15A17A4A-E1C0-40DC-B4F2-6D1655F7A7F1}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [{6FACB36C-E4C8-40DB-B900-3096AAFBC88A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\brainbread2\hl2.exe
FirewallRules: [{8D209586-73F4-41EB-946D-627FA1581959}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\brainbread2\hl2.exe
FirewallRules: [{A461D0CF-9F9E-4F69-ADDE-42DB66F7210E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno Online\nw.exe
FirewallRules: [{60C5CB51-0891-44A6-A9EB-711701E05717}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno Online\nw.exe
FirewallRules: [{3E926C57-708F-4F5D-843C-61B9C76F1140}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{7F6501C0-3AB2-4D61-9D05-93D7903B691B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [TCP Query User{C6F9BD41-52D1-460C-AA6B-A193561111FA}C:\programdata\ableton\live 9 lite\program\ableton live 9 lite.exe] => (Allow) C:\programdata\ableton\live 9 lite\program\ableton live 9 lite.exe
FirewallRules: [UDP Query User{8CB60933-7022-4957-A469-E0974B22D98E}C:\programdata\ableton\live 9 lite\program\ableton live 9 lite.exe] => (Allow) C:\programdata\ableton\live 9 lite\program\ableton live 9 lite.exe
FirewallRules: [{2807E630-6F67-4B2F-A442-E00378054676}] => (Allow) C:\Users\HP\AppData\Local\Temp\MPCOnline\MPCDownload.exe
FirewallRules: [{24AEEB3B-4053-4ECA-A9A1-6D4B67FC9DB4}] => (Allow) C:\Users\HP\AppData\Local\Temp\MPCOnline\MPCDownload.exe
==================== Wiederherstellungspunkte =========================
11-09-2016 11:04:07 Geplanter Prüfpunkt
16-09-2016 18:47:16 Malwarebytes Anti-Rootkit Restore Point
20-09-2016 14:13:44 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (09/20/2016 02:01:23 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3375
Error: (09/20/2016 02:01:23 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3375
Error: (09/20/2016 02:01:23 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/20/2016 02:01:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2250
Error: (09/20/2016 02:01:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2250
Error: (09/20/2016 02:01:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/20/2016 02:01:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1110
Error: (09/20/2016 02:01:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1110
Error: (09/20/2016 02:01:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/19/2016 09:48:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: SpotifyWebHelper.exe, Version: 1.0.37.150, Zeitstempel: 0x57c6f630
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6f736a2e
ID des fehlerhaften Prozesses: 0x176c
Startzeit der fehlerhaften Anwendung: 0x01d211af3307b214
Pfad der fehlerhaften Anwendung: C:\Users\HP\AppData\Roaming\Spotify\SpotifyWebHelper.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 0afdf0cb-7ea2-11e6-bf19-b4b52fd9f2dd
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Systemfehler:
=============
Error: (09/20/2016 02:14:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/20/2016 02:01:24 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (09/20/2016 01:52:53 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 413) (User: NT-AUTORITÄT)
Description: Beim Start des Aufgabenplanungsdiensts konnten Aufgaben nicht geladen werden. Zusätzliche Daten: Fehlerwert: 2147942402.
Error: (09/20/2016 01:11:51 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error: (09/20/2016 01:06:08 PM) (Source: DCOM) (EventID: 10010) (User: HP-HP)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (09/20/2016 01:06:08 PM) (Source: DCOM) (EventID: 10010) (User: HP-HP)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (09/20/2016 01:03:51 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.
Error: (09/20/2016 01:03:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/20/2016 01:03:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/20/2016 01:03:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
CodeIntegrity:
===================================
Date: 2016-09-20 14:13:44.129
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 14:13:43.884
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 13:04:26.088
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 13:04:25.850
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 13:03:53.123
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 13:03:52.906
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 12:54:52.155
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 12:54:51.911
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-18 00:49:15.615
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-18 00:49:15.386
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-3330 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 23%
Installierter physikalischer RAM: 8147.3 MB
Verfügbarer physikalischer RAM: 6234.61 MB
Summe virtueller Speicher: 8547.3 MB
Verfügbarer virtueller Speicher: 6587.2 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:918.38 GB) (Free:581.69 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Recovery Image) (Fixed) (Total:11.21 GB) (Free:1.36 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 076766A4)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
20.09.2016, 16:17
| #17 |
| /// TB-Ausbilder   | startgo123 Servus,
__________________sehr gut gemacht.  So geht es weiter: Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
SearchScopes: HKU\S-1-5-21-3930845653-3837040866-4171826123-1004 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
Toolbar: HKLM-x32 - Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei
FF Plugin HKU\S-1-5-21-3930845653-3837040866-4171826123-1001: @mail.ru/GameCenter -> C:\Users\HP\AppData\Local\Mail.Ru\GameCenter\NPDetector.dll [Keine Datei]
FF Extension: (Kein Name) - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha38\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta351\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha256\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2543\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4549\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home8521\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release1179\ff [nicht gefunden]
CHR HKLM-x32\...\Chrome\Extension: [ffffoobpkbfcfibdgopmebhlghaiiamk] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha38\ch\WebexpEnhancedV1alpha38.crx <nicht gefunden>
C:\Program Files (x86)\WebexpEnhancedV1
C:\Users\HP\AppData\Local\Kabeghtjerpoing
C:\Users\HP\Desktop\Die Installation von keygen - Free Download fortsetzen.lnk
C:\Program Files (x86)\Qotachcoerduk
C:\Users\HP\AppData\Local\clucadomqenayfehuent
C:\Users\HP\Downloads\*CHIP-Installer.exe
Unlock: C:\WINDOWS\system32\Drivers\etc\hosts
C:\WINDOWS\system32\Drivers\etc\hosts
Task: {710F6622-7749-4122-80E5-BC696171976F} - System32\Tasks\ExtFixer13197 => C:\windows\TEMP\41844_updater.exe <==== ACHTUNG
Task: {9ABBC3D1-DB15-4BAB-9397-BAE1EE87DAF1} - System32\Tasks\ExtFixer2078 => C:\windows\TEMP\41844_updater.exe <==== ACHTUNG
Task: {C463C7B7-3AAB-4778-8630-C3D74C672124} - System32\Tasks\{731C0D96-12CF-47EF-B0BF-E54A152EB958} => pcalua.exe -a "C:\Program Files (x86)\Cinema-Plus-1.2\Uninstall.exe" -c /fcp=1
Task: {DE278E01-1E60-465E-A5CB-E857CDF8F5D2} - \Perotainghernerry System -> Keine Datei <==== ACHTUNG
Task: C:\WINDOWS\Tasks\ExtFixer13197.job => C:\windows\TEMP\41844_updater.exeq/url='hxxp:/xml.localxpath.net/apps/cr/1060-4030_ElectroLyrics.exe <==== ACHTUNG
Task: C:\WINDOWS\Tasks\ExtFixer2078.job => C:\windows\TEMP\41844_updater.exep/url='hxxp:/xml.localxpath.net/apps/cr/1060-4030_ElectroLyrics.exe <==== ACHTUNG
AlternateDataStreams: C:\ProgramData\Temp:373E1720 [120]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_0refresh-2076883145 [2686]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_1write-1878237577 [2686]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_2adress_book2-609010338 [2686]
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32" /v fst_de_19 /f
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
Hosts:
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop: SystemLook (32 bit) | SystemLook (64 bit)
Schritt 3
Bitte poste mit deiner nächsten Antwort
|
|
20.09.2016, 21:32
| #18 |
| | startgo123 Ach, ist das herrlich, den Browser zu öffnen und nicht von Müll begrüßt zu werden
__________________ Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-09-2016
durchgeführt von HP (20-09-2016 21:48:26) Run:1
Gestartet von C:\Users\HP\Desktop
Geladene Profile: HP & UpdatusUser (Verfügbare Profile: HP & UpdatusUser)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
SearchScopes: HKU\S-1-5-21-3930845653-3837040866-4171826123-1004 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
Toolbar: HKLM-x32 - Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Keine Datei
FF Plugin HKU\S-1-5-21-3930845653-3837040866-4171826123-1001: @mail.ru/GameCenter -> C:\Users\HP\AppData\Local\Mail.Ru\GameCenter\NPDetector.dll [Keine Datei]
FF Extension: (Kein Name) - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha38\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta351\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha256\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2543\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4549\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home8521\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release1179\ff [nicht gefunden]
CHR HKLM-x32\...\Chrome\Extension: [ffffoobpkbfcfibdgopmebhlghaiiamk] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha38\ch\WebexpEnhancedV1alpha38.crx <nicht gefunden>
C:\Program Files (x86)\WebexpEnhancedV1
C:\Users\HP\AppData\Local\Kabeghtjerpoing
C:\Users\HP\Desktop\Die Installation von keygen - Free Download fortsetzen.lnk
C:\Program Files (x86)\Qotachcoerduk
C:\Users\HP\AppData\Local\clucadomqenayfehuent
C:\Users\HP\Downloads\*CHIP-Installer.exe
Unlock: C:\WINDOWS\system32\Drivers\etc\hosts
C:\WINDOWS\system32\Drivers\etc\hosts
Task: {710F6622-7749-4122-80E5-BC696171976F} - System32\Tasks\ExtFixer13197 => C:\windows\TEMP\41844_updater.exe <==== ACHTUNG
Task: {9ABBC3D1-DB15-4BAB-9397-BAE1EE87DAF1} - System32\Tasks\ExtFixer2078 => C:\windows\TEMP\41844_updater.exe <==== ACHTUNG
Task: {C463C7B7-3AAB-4778-8630-C3D74C672124} - System32\Tasks\{731C0D96-12CF-47EF-B0BF-E54A152EB958} => pcalua.exe -a "C:\Program Files (x86)\Cinema-Plus-1.2\Uninstall.exe" -c /fcp=1
Task: {DE278E01-1E60-465E-A5CB-E857CDF8F5D2} - \Perotainghernerry System -> Keine Datei <==== ACHTUNG
Task: C:\WINDOWS\Tasks\ExtFixer13197.job => C:\windows\TEMP\41844_updater.exeq/url='hxxp:/xml.localxpath.net/apps/cr/1060-4030_ElectroLyrics.exe <==== ACHTUNG
Task: C:\WINDOWS\Tasks\ExtFixer2078.job => C:\windows\TEMP\41844_updater.exep/url='hxxp:/xml.localxpath.net/apps/cr/1060-4030_ElectroLyrics.exe <==== ACHTUNG
AlternateDataStreams: C:\ProgramData\Temp:373E1720 [120]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_0refresh-2076883145 [2686]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_1write-1878237577 [2686]
AlternateDataStreams: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website:TASKICON_2adress_book2-609010338 [2686]
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32" /v fst_de_19 /f
CMD: dir "%ProgramFiles%"
CMD: dir "%ProgramFiles(x86)%"
CMD: dir "%ProgramData%"
CMD: dir "%Appdata%"
CMD: dir "%LocalAppdata%"
Hosts:
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************
Prozess erfolgreich geschlossen.
"HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D944BB61-2E34-4DBF-A683-47E505C587DC}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{D944BB61-2E34-4DBF-A683-47E505C587DC} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Wert erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Schlüssel nicht gefunden.
"HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\MozillaPlugins\@mail.ru/GameCenter" => Schlüssel erfolgreich entfernt
C:\Users\HP\AppData\Local\Mail.Ru\GameCenter\NPDetector.dll => nicht gefunden.
C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff => nicht gefunden.
FF Extension: (Kein Name) - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff [nicht gefunden] => nicht gefunden
C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha38\ff => nicht gefunden.
FF Extension: (Kein Name) - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha38\ff [nicht gefunden] => nicht gefunden
C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta351\ff => nicht gefunden.
FF Extension: (Kein Name) - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta351\ff [nicht gefunden] => nicht gefunden
C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha256\ff => nicht gefunden.
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha256\ff [nicht gefunden] => nicht gefunden
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2543\ff => nicht gefunden.
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2543\ff [nicht gefunden] => nicht gefunden
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4549\ff => nicht gefunden.
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4549\ff [nicht gefunden] => nicht gefunden
C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home8521\ff => nicht gefunden.
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home8521\ff [nicht gefunden] => nicht gefunden
C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release1179\ff => nicht gefunden.
FF Extension: (Kein Name) - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release1179\ff [nicht gefunden] => nicht gefunden
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ffffoobpkbfcfibdgopmebhlghaiiamk" => Schlüssel erfolgreich entfernt
"C:\Program Files (x86)\WebexpEnhancedV1" => nicht gefunden.
C:\Users\HP\AppData\Local\Kabeghtjerpoing => erfolgreich verschoben
C:\Users\HP\Desktop\Die Installation von keygen - Free Download fortsetzen.lnk => erfolgreich verschoben
C:\Program Files (x86)\Qotachcoerduk => erfolgreich verschoben
C:\Users\HP\AppData\Local\clucadomqenayfehuent => erfolgreich verschoben
=========== "C:\Users\HP\Downloads\*CHIP-Installer.exe" ==========
C:\Users\HP\Downloads\7 Zip 32 Bit - CHIP-Installer.exe => erfolgreich verschoben
C:\Users\HP\Downloads\OpenOffice - CHIP-Installer.exe => erfolgreich verschoben
========= Ende -> "C:\Users\HP\Downloads\*CHIP-Installer.exe" ========
"C:\WINDOWS\system32\Drivers\etc\hosts" => wurde entsperrt
C:\WINDOWS\system32\Drivers\etc\hosts => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{710F6622-7749-4122-80E5-BC696171976F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{710F6622-7749-4122-80E5-BC696171976F}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\ExtFixer13197 => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ExtFixer13197" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9ABBC3D1-DB15-4BAB-9397-BAE1EE87DAF1}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9ABBC3D1-DB15-4BAB-9397-BAE1EE87DAF1}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\ExtFixer2078 => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ExtFixer2078" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C463C7B7-3AAB-4778-8630-C3D74C672124}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C463C7B7-3AAB-4778-8630-C3D74C672124}" => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{731C0D96-12CF-47EF-B0BF-E54A152EB958} => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{731C0D96-12CF-47EF-B0BF-E54A152EB958}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE278E01-1E60-465E-A5CB-E857CDF8F5D2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE278E01-1E60-465E-A5CB-E857CDF8F5D2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Perotainghernerry System" => Schlüssel erfolgreich entfernt
C:\WINDOWS\Tasks\ExtFixer13197.job => erfolgreich verschoben
C:\WINDOWS\Tasks\ExtFixer2078.job => erfolgreich verschoben
C:\ProgramData\Temp => ":373E1720" ADS erfolgreich entfernt.
C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website => ":TASKICON_0refresh-2076883145" ADS erfolgreich entfernt.
C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website => ":TASKICON_1write-1878237577" ADS erfolgreich entfernt.
C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Mail.Ru.website => ":TASKICON_2adress_book2-609010338" ADS erfolgreich entfernt.
========= reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32" /v fst_de_19 /f =========
Der Vorgang wurde erfolgreich beendet.
========= Ende von CMD: =========
========= dir "%ProgramFiles%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: 6A36-7D25
Verzeichnis von C:\Program Files
14.09.2016 00:36 <DIR> .
14.09.2016 00:36 <DIR> ..
03.09.2016 16:47 <DIR> Akai Pro
15.01.2015 13:55 <DIR> Bohemia Interactive
05.10.2012 22:05 <DIR> Bonjour
03.09.2016 16:48 <DIR> Common Files
30.08.2016 23:43 <DIR> eLicenser
05.10.2012 21:57 <DIR> Hewlett-Packard
05.10.2012 21:58 <DIR> IDT
05.10.2012 21:59 <DIR> Intel
14.09.2016 10:08 <DIR> Internet Explorer
27.04.2015 00:07 <DIR> iPod
27.04.2015 00:08 <DIR> iTunes
11.07.2014 04:03 <DIR> MSBuild
11.07.2014 16:17 <DIR> NVIDIA Corporation
20.09.2013 11:17 <DIR> Online Services
11.07.2014 04:03 <DIR> Reference Assemblies
03.09.2016 16:48 <DIR> Steinberg
03.11.2015 13:02 <DIR> Windows Defender
17.04.2015 23:09 <DIR> Windows Mail
17.04.2015 23:09 <DIR> Windows Media Player
17.04.2015 23:09 <DIR> Windows Multimedia Platform
11.07.2014 03:34 <DIR> Windows NT
17.04.2015 23:09 <DIR> Windows Photo Viewer
17.04.2015 23:09 <DIR> Windows Portable Devices
17.04.2015 23:06 <DIR> WindowsPowerShell
04.09.2016 23:54 <DIR> WinRAR
0 Datei(en), 0 Bytes
27 Verzeichnis(se), 624.364.089.344 Bytes frei
========= Ende von CMD: =========
========= dir "%ProgramFiles(x86)%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: 6A36-7D25
Verzeichnis von C:\Program Files (x86)
20.09.2016 21:48 <DIR> .
20.09.2016 21:48 <DIR> ..
25.04.2016 12:05 <DIR> 1C
18.02.2014 23:59 <DIR> 3DO
30.08.2016 19:32 <DIR> 7-Zip
03.09.2016 16:47 <DIR> Akai Pro
07.01.2015 18:17 <DIR> AnVir Task Manager Free
27.04.2015 00:06 <DIR> Apple Software Update
15.01.2015 14:09 <DIR> Bing Bar Installer
05.10.2012 22:05 <DIR> Bonjour
12.01.2015 20:13 <DIR> Chicago1930
06.09.2016 18:42 <DIR> Common Files
05.10.2012 22:06 <DIR> Connected Music powered by Universal Music Group
18.04.2016 16:07 <DIR> Core Design
05.10.2012 22:11 <DIR> CyberLink
30.08.2016 23:44 <DIR> eLicenser
27.09.2013 19:50 <DIR> Google
28.04.2016 00:25 <DIR> GTA2
19.04.2016 15:26 <DIR> Hammer & Sichel
05.10.2012 22:15 <DIR> Hewlett-Packard
05.10.2012 22:05 <DIR> HPConnectedMusic
05.10.2012 21:59 <DIR> Intel
14.09.2016 10:08 <DIR> Internet Explorer
27.04.2015 00:07 <DIR> iTunes
19.04.2016 14:06 <DIR> LEGO Media
07.01.2015 19:01 <DIR> Malwarebytes Anti-Malware
05.10.2012 22:02 <DIR> Microsoft Office
05.10.2012 22:13 <DIR> Microsoft SQL Server Compact Edition
22.08.2013 17:36 <DIR> Microsoft.NET
11.07.2014 04:03 <DIR> MSBuild
29.04.2016 22:18 <DIR> Nival Interactive
11.07.2014 16:17 <DIR> NVIDIA Corporation
20.09.2013 11:17 <DIR> Online Services
15.01.2015 13:57 <DIR> OpenAL
17.11.2015 00:01 <DIR> OpenOffice 4
07.01.2015 18:27 <DIR> PDFaVVIewEr
11.07.2014 04:03 <DIR> Reference Assemblies
23.05.2016 13:55 <DIR> Rockstar Games
04.08.2014 12:40 <DIR> ShowWords
20.09.2016 17:10 <DIR> Steam
05.09.2016 00:29 <DIR> Steinberg
05.10.2012 22:15 <DIR> SymSilent
30.08.2016 23:44 <DIR> Syncrosoft
07.01.2015 21:54 <DIR> Unchecky
29.09.2013 17:32 <DIR> VideoLAN
03.11.2015 13:02 <DIR> Windows Defender
05.10.2012 22:13 <DIR> Windows Live
17.04.2015 23:06 <DIR> Windows Mail
17.04.2015 23:06 <DIR> Windows Media Player
17.04.2015 23:06 <DIR> Windows Multimedia Platform
22.08.2013 17:36 <DIR> Windows NT
17.04.2015 23:06 <DIR> Windows Photo Viewer
17.04.2015 23:06 <DIR> Windows Portable Devices
22.08.2013 17:36 <DIR> WindowsPowerShell
0 Datei(en), 0 Bytes
54 Verzeichnis(se), 624.364.089.344 Bytes frei
========= Ende von CMD: =========
========= dir "%ProgramData%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: 6A36-7D25
Verzeichnis von C:\ProgramData
03.09.2016 16:16 <DIR> Ableton
03.09.2016 16:48 <DIR> Akai
27.04.2015 00:06 <DIR> Apple
27.04.2015 00:07 <DIR> Apple Computer
06.09.2016 17:22 <DIR> AVAST Software
06.09.2016 17:22 <DIR> Avg
06.09.2016 17:22 <DIR> Avira
17.04.2016 22:05 <DIR> CyberLink
27.04.2015 00:08 <DIR> E1864A66-75E3-486a-BD95-D1B7D99A84A7
30.08.2016 23:45 <DIR> eLicenser
05.10.2012 22:21 <DIR> Hewlett-Packard
17.11.2013 22:29 <DIR> InstallMate
05.10.2012 22:06 <DIR> install_clap
05.10.2012 21:59 <DIR> Intel
27.05.2014 08:50 <DIR> Logs
07.01.2015 19:01 <DIR> Malwarebytes
20.09.2016 13:06 <DIR> Malwarebytes' Anti-Malware (portable)
20.09.2013 11:20 141 Microsoft.SqlServer.Compact.351.64.bc
19.07.2014 20:06 <DIR> Norton
05.10.2012 22:14 <DIR> NortonInstaller
20.09.2016 13:52 <DIR> NVIDIA
11.07.2014 03:16 <DIR> NVIDIA Corporation
11.07.2014 23:34 <DIR> Oracle
03.09.2016 16:48 <DIR> Package Cache
07.01.2015 18:52 <DIR> PDFaVVIewEr
11.07.2014 03:24 <DIR> PRICache
20.09.2013 20:50 <DIR> Recovery
17.04.2015 23:06 <DIR> regid.1991-06.com.microsoft
11.07.2014 03:29 <DIR> SoundResearch
30.08.2016 23:23 <DIR> Steinberg
11.07.2014 23:34 <DIR> Sun
30.08.2016 23:45 <DIR> Syncrosoft
19.07.2014 20:08 <DIR> Temp
25.10.2015 07:51 <DIR> TP-LINK
06.09.2016 17:19 <DIR> Unchecky
05.10.2012 22:00 <DIR> {AFF99647-6D64-46F2-934A-F12F468037F6}
1 Datei(en), 141 Bytes
35 Verzeichnis(se), 624.364.085.248 Bytes frei
========= Ende von CMD: =========
========= dir "%Appdata%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: 6A36-7D25
Verzeichnis von C:\Users\HP\AppData\Roaming
20.09.2016 13:03 <DIR> .
20.09.2016 13:03 <DIR> ..
03.09.2016 16:30 <DIR> Ableton
20.09.2013 11:17 <DIR> Adobe
27.04.2015 00:13 <DIR> Apple Computer
18.09.2016 16:04 <DIR> Audacity
17.04.2016 22:05 <DIR> CyberLink
05.09.2016 00:54 <DIR> Desktop
24.05.2016 00:35 <DIR> dvdcss
18.04.2015 11:58 <DIR> HeroesAndGeneralsDesktop
26.09.2013 15:02 <DIR> Hewlett-Packard
11.07.2014 16:03 <DIR> Identities
06.09.2014 14:10 <DIR> IDT
04.06.2016 15:34 <DIR> InstallShield Installation Information
26.09.2013 15:28 <DIR> Macromedia
18.04.2015 12:05 <DIR> NVIDIA
17.11.2015 00:02 <DIR> OpenOffice
06.09.2016 17:20 <DIR> Profiles
20.09.2016 16:38 <DIR> Spotify
05.09.2016 00:29 <DIR> Steinberg
30.08.2016 23:21 <DIR> Steinberg Installation Updater
17.09.2016 23:30 <DIR> vlc
28.03.2014 09:18 157 WB.CFG
17.04.2016 22:14 <DIR> WebApp
04.09.2016 23:54 <DIR> WinRAR
1 Datei(en), 157 Bytes
24 Verzeichnis(se), 624.364.081.152 Bytes frei
========= Ende von CMD: =========
========= dir "%LocalAppdata%" =========
Datentr„ger in Laufwerk C: ist OS
Volumeseriennummer: 6A36-7D25
Verzeichnis von C:\Users\HP\AppData\Local
20.09.2016 21:48 <DIR> .
20.09.2016 21:48 <DIR> ..
23.08.2016 20:43 <DIR> Adobe
30.10.2015 20:50 <DIR> Akamai
17.08.2016 22:54 <DIR> Anno Online
07.01.2015 18:18 <DIR> AnVir
27.04.2015 00:06 <DIR> Apple
27.04.2015 00:09 <DIR> Apple Computer
27.09.2013 19:48 <DIR> Apps
15.01.2015 20:16 <DIR> ArmA Demo
11.07.2014 16:03 <DIR> assembly
30.08.2016 20:39 <DIR> Audacity
31.10.2015 16:19 <DIR> CEF
04.05.2016 00:08 <DIR> Cyberlink
08.09.2016 01:15 <DIR> Diagnostics
27.08.2016 10:30 <DIR> ElevatedDiagnostics
25.08.2016 13:50 <DIR> FalloutNV
27.09.2013 19:50 <DIR> Google
20.09.2013 11:19 <DIR> Hewlett-Packard
11.02.2014 18:27 <DIR> HPConnectedMusic
08.09.2016 00:25 <DIR> Microsoft
31.10.2015 12:52 <DIR> Packages
20.09.2013 11:17 <DIR> Power2Go8
06.10.2013 21:38 <DIR> Programs
20.09.2016 21:48 <DIR> Spotify
17.04.2015 23:29 <DIR> Steam
30.08.2016 23:41 <DIR> Steinberg Installation Updater
20.09.2016 21:48 <DIR> Temp
18.02.2014 12:22 <DIR> VirtualStore
0 Datei(en), 0 Bytes
29 Verzeichnis(se), 624.364.064.768 Bytes frei
========= Ende von CMD: =========
Hosts erfolgreich wiederhergestellt.
========= RemoveProxy: =========
HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\ => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
========= Ende von RemoveProxy: =========
========= ipconfig /flushdns =========
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
========= Ende von CMD: =========
========= netsh winsock reset =========
Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.
========= Ende von CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 16777216 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 200380496 B
Java, Flash, Steam htmlcache => 375712184 B
Windows/system/drivers => 164678263 B
Edge => 0 B
Chrome => 1136745488 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 511126 B
systemprofile32 => 6727877 B
LocalService => 346274 B
NetworkService => 4308254 B
HP => 14161142023 B
UpdatusUser => 0 B
RecycleBin => 0 B
EmptyTemp: => 15 GB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 21:52:15 ====
Code:
ATTFilter SystemLook 30.07.11 by jpshortstuff
Log created at 22:11 on 20/09/2016 by HP
Administrator - Elevation successful
========== folderfind ==========
Searching for "lollipop"
C:\AdwCleaner\Quarantine\C\Users\HP\AppData\Local\lollipop d------ [16:50 07/01/2015]
Searching for "ElectroLyrics"
No folders found.
Searching for "HDWallPaper"
No folders found.
Searching for "Corner Sunshine"
No folders found.
Searching for "MPC AdCleaner"
No folders found.
Searching for "MPC Desktop"
No folders found.
Searching for "MPC Cleaner"
No folders found.
Searching for "pc speed up"
No folders found.
Searching for "APN-Stub"
No folders found.
========== regfind ==========
Searching for "lollipop"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\342a9b8b_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\Lollipop.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\6ca6205c_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\lollipop_11221407.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e747e742_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\lollipop_10260726.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Classes\Applications\lollipop_11221407.exe]
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\342a9b8b_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\Lollipop.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\6ca6205c_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\lollipop_11221407.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e747e742_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\lollipop_10260726.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Classes\Applications\lollipop_11221407.exe]
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001_Classes\Applications\lollipop_11221407.exe]
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\342a9b8b_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\Lollipop.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\6ca6205c_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\lollipop_11221407.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\e747e742_0]
@="{2}.\\?\hdaudio#func_01&ven_111d&dev_7676&subsys_103c2ada&rev_1001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\speakertopology/00010001|\Device\HarddiskVolume4\Users\HP\AppData\Local\Lollipop\lollipop_10260726.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_11221407]
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_11221407]
"DisplayName"="Lollipop"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_11221407]
"UninstallString"="C:\Users\UpdatusUser\appdata\local\lollipop\lollipop_11221407.bat"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_11221407]
"DisplayIcon"="C:\Users\UpdatusUser\appdata\local\lollipop\logo.ico"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_11221407]
"Publisher"="Lollipop Network, S.L."
Searching for "ElectroLyrics"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\ElectroLyrics-1]
[HKEY_CURRENT_USER\Software\AppDataLow\Software\ElectroLyrics-1\Manifest]
"Name"="ElectroLyrics-1"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\ElectroLyrics-1\Manifest]
"Description"="ElectroLyrics will allow you to display lyrics for your favorite songs alongside any Youtube music video"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ElectroLyrics-1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ElectroLyrics-1]
"DisplayName"="ElectroLyrics-1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ElectroLyrics-1]
"DisplayIcon"="C:\Program Files (x86)\ElectroLyrics-1\utils.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ElectroLyrics-1]
"UninstallString"="C:\Program Files (x86)\ElectroLyrics-1\Uninstall.exe /fromcontrolpanel=1"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\AppDataLow\Software\ElectroLyrics-1]
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\AppDataLow\Software\ElectroLyrics-1\Manifest]
"Name"="ElectroLyrics-1"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\AppDataLow\Software\ElectroLyrics-1\Manifest]
"Description"="ElectroLyrics will allow you to display lyrics for your favorite songs alongside any Youtube music video"
Searching for "HDWallPaper"
[HKEY_LOCAL_MACHINE\SOFTWARE\HDWallpaper]
Searching for "Corner Sunshine"
No data found.
Searching for "MPC AdCleaner"
No data found.
Searching for "MPC Desktop"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.FriendlyAppName"="MPC Desktop Application"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.FriendlyAppName"="MPC Desktop Application"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.FriendlyAppName"="MPC Desktop Application"
Searching for "MPC Cleaner"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.FriendlyAppName"="MPC Desktop Application"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.ApplicationCompany"="DotC United Inc"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.FriendlyAppName"="MPC Desktop Application"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.ApplicationCompany"="DotC United Inc"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.FriendlyAppName"="MPC Desktop Application"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\MPC Cleaner\MPCDesktop.exe.ApplicationCompany"="DotC United Inc"
Searching for "pc speed up"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2\Plugins\91]
"JavaScript"="(function(K){var y=[].slice;var x={};var a=function(ap){if(typeof ap=="string"&&typeof ap.trim=="function"){return ap.trim();}return ap==null?"":ap.toString().replace(/^\s+/,"").replace(/\s+$/,"");};function f(ap){var aq=x[ap]={},ar,at;ap=ap.split(/\s+/);for(ar=0,at=ap.length;ar<at;ar++){aq[ap[ar]]=true;}return aq;}var F=function(ap,aq){var at=[];for(var ar=0;ar<ap.length;ar++){if(ar in ap){var au=aq(ap[ar],ar,ap);if(au!=null){at.push(au);}}}return at;};var ab=function(at,aw,ar){var aq,au=0,av=at.length,ap=av===undefined||appAPI.utils.isFunction(at);if(ar){if(ap){for(aq in at){if(aw.apply(at[aq],ar)===false){break;}}}else{for(;au<av;){if(aw.apply(at[au++],ar)===false){break;}}}}else{if(ap){for(aq in at){if(aw.call(at[aq],aq,at[aq])===false){break;}}}else{for(;au<av;){if(aw.call(at[au],au,at[au++])===false){break;}}}}return at;};
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2\Plugins\91]
"JavaScript"="(function(K){var y=[].slice;var x={};var a=function(ap){if(typeof ap=="string"&&typeof ap.trim=="function"){return ap.trim();}return ap==null?"":ap.toString().replace(/^\s+/,"").replace(/\s+$/,"");};function f(ap){var aq=x[ap]={},ar,at;ap=ap.split(/\s+/);for(ar=0,at=ap.length;ar<at;ar++){aq[ap[ar]]=true;}return aq;}var F=function(ap,aq){var at=[];for(var ar=0;ar<ap.length;ar++){if(ar in ap){var au=aq(ap[ar],ar,ap);if(au!=null){at.push(au);}}}return at;};var ab=function(at,aw,ar){var aq,au=0,av=at.length,ap=av===undefined||appAPI.utils.isFunction(at);if(ar){if(ap){for(aq in at){if(aw.apply(at[aq],ar)===false){break;}}}else{for(;au<av;){if(aw.apply(at[au++],ar)===false){break;}}}}else{if(ap){for(aq in at){if(aw.call(at[aq],aq,at[aq])===false){break;}}}else{for(;au<av;){if(aw.call(at[au],au,a
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2\Plugins\91]
"JavaScript"="(function(K){var y=[].slice;var x={};var a=function(ap){if(typeof ap=="string"&&typeof ap.trim=="function"){return ap.trim();}return ap==null?"":ap.toString().replace(/^\s+/,"").replace(/\s+$/,"");};function f(ap){var aq=x[ap]={},ar,at;ap=ap.split(/\s+/);for(ar=0,at=ap.length;ar<at;ar++){aq[ap[ar]]=true;}return aq;}var F=function(ap,aq){var at=[];for(var ar=0;ar<ap.length;ar++){if(ar in ap){var au=aq(ap[ar],ar,ap);if(au!=null){at.push(au);}}}return at;};var ab=function(at,aw,ar){var aq,au=0,av=at.length,ap=av===undefined||appAPI.utils.isFunction(at);if(ar){if(ap){for(aq in at){if(aw.apply(at[aq],ar)===false){break;}}}else{for(;au<av;){if(aw.apply(at[au++],ar)===false){break;}}}}else{if(ap){for(aq in at){if(aw.call(at[aq],aq,at[aq])===false){break;}}}else{for(;au<av;){if(aw.call(at[au],au,at[au++])=
Searching for "APN-Stub"
No data found.
Searching for " "
[HKEY_CURRENT_USER\Software\AppDataLow\Software\ElectroLyrics-1\Plugins\104]
"JavaScript"="if (typeof appAPI.internal.monetization === "undefined") {
appAPI.internal.monetization = {};
}
if (typeof appAPI.internal.monetization.plugins === "undefined") {
appAPI.internal.monetization.plugins = {};
}
appAPI.internal.monetization.plugins[104] = function() {
if (typeof appAPI.internal.monetization.verticals !== "undefined") {
if (!appAPI.internal.monetization.verticals.shopping){
return;
}
}
var permanentData = {gui:[],actions:[]};
var permanentCache = ["c822c1b63853ed273b89687ac505f9fa","738aa8d3bc02eb8712acd0eb2cf6dfd5","2351f600bf62102c56b3941c39225683","16524241cd11b1b1c6b3ab30874047d6","241fe8af1e038118cd817048a65f803e","5ed33f7008771c9d49e3716aeaeca581","e50173d2983f028042965a37357931fc","8e1b7a68ae2f404bfafaafd53d293cde","dc29a383b9b0932dbd9f75e4af9b51f5","f4c4b31d11e30ca1511d807c10cd68f3","8862aa846eeafd1f61c5ad22580d0148","b53e20c91b81ec25a6d06d4cf351d0b2","1f89d526fc52417e16d99b9f069
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ConnectedSearch]
"StyleSetCache"="{"Condition":{}, "PropertySets":[
{"ConditionArgs":[], "PropertyValueMap":{}}
]}"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2\Plugins\119]
"JavaScript"="appAPI.internal.monetization = appAPI.internal.monetization || {};
if (typeof appAPI.internal.monetization.plugins === "undefined") { appAPI.internal.monetization.plugins = {}; }
appAPI.internal.monetization.plugins[119] = function() {
(function($,e,b){var c="hashchange",h=document,f,g=$.event.special,i=h.documentMode,d="on"+c in e&&(i===b||i>7);function a(j){j=j||location.href;return"#"+j.replace(/^[^#]*#?(.*)$/,"$1")}$.fn[c]=function(j){return j?this.bind(c,j):this.trigger(c)};$.fn[c].delay=50;g[c]=$.extend(g[c],{setup:function(){if(d){return false}$(f.start)},teardown:function(){if(d){return false}$(f.stop)}});f=(function(){var j={},p,m=a(),k=function(q){return q},l=k,o=k;j.start=function(){p||n()};j.stop=function(){p&&clearTimeout(p);p=b};function n(){var r=a(),q=o(m);if(r!==m){l(m=r,q);$(e).trigger(c)}else{if(q!==m){loc
[HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 0\Target Id 0\Logical Unit Id 0]
"SerialNumber"="9VPGCJGQ "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\GameUX\Games\{B74BFC31-7F27-4529-8F74-E0C37793F097}]
"RatingsInfo"="<Ratings xmlns="urn:schemas-microsoft-com:GameDescription.v1">
<Rating ratingSystemID="{768BD93D-63BE-46A9-8994-0B53C4B5248F}" ratingID="{78D8CC82-372F-44e4-B70C-8944DB7BCC24}">
<Descriptor descriptorID="{ABE23B46-7F9F-495b-B4A9-87F41743727F}"/>
<Descriptor descriptorID="{4BDB9E0D-53CF-4a28-865F-B315818E7627}"/>
<Descriptor descriptorID="{27202CE3-EB93-49bc-A570-23AEBCC2A742}"/>
<Descriptor descriptorID="{D49A8F0C-B183-4a34-8D86-33F2DC0E2D6C}"/>
<Descriptor descriptorID="{E8930D9B-3E94-407c-B890-FDB5025DBCA3}"/>
</Rating>
<Rating ratingSystemID="{36798944-B235-48ac-BF21-E25671F597EE}" ratingID="{E2681CD6-318A-4935-8275-AF657045C333}">
<Descriptor descriptorID="{F110F831-9412-40c9-860A-B489407ED374}"/>
<Descriptor descriptorID
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"=" <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Enabled="true" > <InitializationParameters> <Param Name="PSVersion" Value="4.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/> <Capability Type="Shell"/> </Reso
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell.Workflow]
"ConfigXML"=" <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell.workflow" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" UseSharedProcess="true" ProcessIdleTimeoutSec="1209600" RunAsUser="" RunAsPassword="" AutoRestart="false" Enabled="true" > <InitializationParameters> <Param Name="PSVersion" Value="4.0"/> <Param Name="AssemblyName" Value="Microsoft.PowerShell.Workflow.ServiceCore, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL"/> <Param Name="PSSessionConfigurationTypeName" Value="Microsoft.PowerShell.Workflow.PSWorkflowSessionConfiguration"/> <Param Name="SessionConfigurationData" Value="
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="2" XmlRenderingType="text" Architecture="32" Enabled="true" > <InitializationParameters> <Param Name="PSVersion" Value="4.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;RM)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\AppDataLow\Software\ElectroLyrics-1\Plugins\104]
"JavaScript"="if (typeof appAPI.internal.monetization === "undefined") {
appAPI.internal.monetization = {};
}
if (typeof appAPI.internal.monetization.plugins === "undefined") {
appAPI.internal.monetization.plugins = {};
}
appAPI.internal.monetization.plugins[104] = function() {
if (typeof appAPI.internal.monetization.verticals !== "undefined") {
if (!appAPI.internal.monetization.verticals.shopping){
return;
}
}
var permanentData = {gui:[],actions:[]};
var permanentCache = ["c822c1b63853ed273b89687ac505f9fa","738aa8d3bc02eb8712acd0eb2cf6dfd5","2351f600bf62102c56b3941c39225683","16524241cd11b1b1c6b3ab30874047d6","241fe8af1e038118cd817048a65f803e","5ed33f7008771c9d49e3716aeaeca581","e50173d2983f028042965a37357931fc","8e1b7a68ae2f404bfafaafd53d293cde","dc29a383b9b0932dbd9f75e4af9b51f5","f4c4b31d11e30ca1511d807c10cd68f3","8862aa846eeafd1f61c5ad22580d0148","b53e20c91b81ec25a6d06d
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Microsoft\Windows\CurrentVersion\ConnectedSearch]
"StyleSetCache"="{"Condition":{}, "PropertySets":[
{"ConditionArgs":[], "PropertyValueMap":{}}
]}"
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2\Plugins\119]
"JavaScript"="appAPI.internal.monetization = appAPI.internal.monetization || {};
if (typeof appAPI.internal.monetization.plugins === "undefined") { appAPI.internal.monetization.plugins = {}; }
appAPI.internal.monetization.plugins[119] = function() {
(function($,e,b){var c="hashchange",h=document,f,g=$.event.special,i=h.documentMode,d="on"+c in e&&(i===b||i>7);function a(j){j=j||location.href;return"#"+j.replace(/^[^#]*#?(.*)$/,"$1")}$.fn[c]=function(j){return j?this.bind(c,j):this.trigger(c)};$.fn[c].delay=50;g[c]=$.extend(g[c],{setup:function(){if(d){return false}$(f.start)},teardown:function(){if(d){return false}$(f.stop)}});f=(function(){var j={},p,m=a(),k=function(q){return q},l=k,o=k;j.start=function(){p||n()};j.stop=function(){p&&clearTimeout(p);p=b};function n(){var r=a(),q=o(m);if(r!==m){l(m
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2\Plugins\119]
"JavaScript"="appAPI.internal.monetization = appAPI.internal.monetization || {};
if (typeof appAPI.internal.monetization.plugins === "undefined") { appAPI.internal.monetization.plugins = {}; }
appAPI.internal.monetization.plugins[119] = function() {
(function($,e,b){var c="hashchange",h=document,f,g=$.event.special,i=h.documentMode,d="on"+c in e&&(i===b||i>7);function a(j){j=j||location.href;return"#"+j.replace(/^[^#]*#?(.*)$/,"$1")}$.fn[c]=function(j){return j?this.bind(c,j):this.trigger(c)};$.fn[c].delay=50;g[c]=$.extend(g[c],{setup:function(){if(d){return false}$(f.start)},teardown:function(){if(d){return false}$(f.stop)}});f=(function(){var j={},p,m=a(),k=function(q){return q},l=k,o=k;j.start=function(){p||n()};j.stop=function(){p&&clearTimeout(p);p=b};function n(){var r=a(),q=o(m);if(r!==m){l(m=r,q);$(e
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Wajam]
"supported_sites.youtubesearch.wajam_se_js"="try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';window['WAJAM_PATH'] = 'hxxp://www.wajam.com/'; window['WAJAM_PATH_HTTPS'] = 'https://www.wajam.com/'; window['WAJAM_PATH_ADS'] = 'hxxp://ads.wajam.com/'; window['WAJAM_PATH_HTTPS_ADS'] = 'https://ads.wajam.com/'; window['WAJAM_PATH_NEW_ADS'] = 'hxxp://social-ads.wajam.com'; window['WAJAM_PATH_HTTPS_NEW_ADS'] = 'https://social-ads.wajam.com'; window['WAJAM_CONTAINER_HEIGHT'] = '225px'; window['WAJAM_BROWSER'] = 'b'; window['WAJAM_BROWSER_VERSION'] = '1.22'; window['WAJAM_AFFILIATE'] = '7006';window['WAJAM_ENV'] = '0'; window['WAJAM_PLATFORM'] = navigator.platform;window['WAJAM_SEARCH_ENGINE'] = 'youtubesearch'; window['WAJAM_SERVER_VERSION'] = '1.00276.
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Wajam]
"supported_sites.encryptedgoogle.wajam_google_js"="try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';window['WAJAM_PATH'] = 'hxxp://www.wajam.com/'; window['WAJAM_PATH_HTTPS'] = 'https://www.wajam.com/'; window['WAJAM_PATH_ADS'] = 'hxxp://ads.wajam.com/'; window['WAJAM_PATH_HTTPS_ADS'] = 'https://ads.wajam.com/'; window['WAJAM_PATH_NEW_ADS'] = 'hxxp://social-ads.wajam.com'; window['WAJAM_PATH_HTTPS_NEW_ADS'] = 'https://social-ads.wajam.com'; window['WAJAM_CONTAINER_HEIGHT'] = '225px'; window['WAJAM_BROWSER'] = 'b'; window['WAJAM_BROWSER_VERSION'] = '1.22'; window['WAJAM_AFFILIATE'] = '7006';window['WAJAM_ENV'] = '0'; window['WAJAM_PLATFORM'] = navigator.platform;window['WAJAM_SEARCH_ENGINE'] = 'google'; window['WAJAM_SERVER_VERSION'] = '1.00276.0
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Wajam]
"supported_sites.amazonproduct.priam_se_js"="try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';window['WAJAM_PATH'] = 'hxxp://www.wajam.com/'; window['WAJAM_PATH_HTTPS'] = 'https://www.wajam.com/'; window['WAJAM_PATH_ADS'] = 'hxxp://ads.wajam.com/'; window['WAJAM_PATH_HTTPS_ADS'] = 'https://ads.wajam.com/'; window['WAJAM_PATH_NEW_ADS'] = 'hxxp://social-ads.wajam.com'; window['WAJAM_PATH_HTTPS_NEW_ADS'] = 'https://social-ads.wajam.com'; window['WAJAM_CONTAINER_HEIGHT'] = '225px'; window['WAJAM_BROWSER'] = 'b'; window['WAJAM_BROWSER_VERSION'] = '1.22'; window['WAJAM_AFFILIATE'] = '7006';window['WAJAM_ENV'] = '0'; window['WAJAM_PLATFORM'] = navigator.platform;window['WAJAM_SEARCH_ENGINE'] = 'amazon'; window['WAJAM_SERVER_VERSION'] = '1.00276.0'; win
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Wajam]
"supported_sites.amazon.wajam_se_js"="try {window['APP_LABEL_NAME'] = 'wajam';window['APP_LABEL_NAME_FULL_UC'] = 'WAJAM';window['WAJAM_APP_LABEL_NAME_UC'] = 'Wajam';window['WAJAM_PATH'] = 'hxxp://www.wajam.com/'; window['WAJAM_PATH_HTTPS'] = 'https://www.wajam.com/'; window['WAJAM_PATH_ADS'] = 'hxxp://ads.wajam.com/'; window['WAJAM_PATH_HTTPS_ADS'] = 'https://ads.wajam.com/'; window['WAJAM_PATH_NEW_ADS'] = 'hxxp://social-ads.wajam.com'; window['WAJAM_PATH_HTTPS_NEW_ADS'] = 'https://social-ads.wajam.com'; window['WAJAM_CONTAINER_HEIGHT'] = '225px'; window['WAJAM_BROWSER'] = 'b'; window['WAJAM_BROWSER_VERSION'] = '1.23'; window['WAJAM_AFFILIATE'] = '7006';window['WAJAM_ENV'] = '0'; window['WAJAM_PLATFORM'] = navigator.platform;window['WAJAM_SEARCH_ENGINE'] = 'amazon'; window['WAJAM_SERVER_VERSION'] = '1.00277.0'; window['WA
[HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Windows\CurrentVersion\ConnectedSearch]
"StyleSetCache"="{"Condition":{}, "PropertySets":[
{"ConditionArgs":[], "PropertyValueMap":{}}
]}"
-= EOF =-
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-09-2016
durchgeführt von HP (Administrator) auf HP-HP (20-09-2016 22:20:49)
Gestartet von C:\Users\HP\Desktop
Geladene Profile: HP & UpdatusUser (Verfügbare Profile: HP & UpdatusUser)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Akamai Technologies, Inc.) C:\Users\HP\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\HP\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\HP\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-08-10] (IDT, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [169768 2015-04-07] (Apple Inc.)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Run: [Akamai NetSession Interface] => C:\Users\HP\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Run: [Spotify Web Helper] => C:\Users\HP\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1529456 2016-09-20] (Spotify Ltd)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Run: [Spotify] => C:\Users\HP\AppData\Roaming\Spotify\Spotify.exe [6795376 2016-09-20] (Spotify Ltd)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\MountPoints2: {47a0191f-03ec-11e6-bf03-c4e984de72eb} - "F:\SETUP.EXE"
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\MountPoints2: {54070070-21d4-11e3-be6c-806e6f6e6963} - "F:\_AUTORUN\AUTORUN.EXE"
HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Run: [Akamai NetSession Interface] => C:\Users\HP\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Run: [Spotify Web Helper] => C:\Users\HP\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1529456 2016-09-20] (Spotify Ltd)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Run: [Spotify] => C:\Users\HP\AppData\Roaming\Spotify\Spotify.exe [6795376 2016-09-20] (Spotify Ltd)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\MountPoints2: {54070070-21d4-11e3-be6c-806e6f6e6963} - "F:\_AUTORUN\AUTORUN.EXE"
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{4AFCAB27-7A13-443C-8C69-7BF2A32C56D7}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{B4A4A94D-A997-4FEA-A47D-7711FD344146}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131177605464241732&GUID=FA19AD0E-A3EC-4E21-A91E-293449ADE22F
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131177605464241732&GUID=FA19AD0E-A3EC-4E21-A91E-293449ADE22F
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131177605464241732&GUID=FA19AD0E-A3EC-4E21-A91E-293449ADE22F
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131177605464241732&GUID=FA19AD0E-A3EC-4E21-A91E-293449ADE22F
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131177605464241732&GUID=FA19AD0E-A3EC-4E21-A91E-293449ADE22F
HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131177605464257586&GUID=FA19AD0E-A3EC-4E21-A91E-293449ADE22F
SearchScopes: HKLM -> {BE46FA0C-8976-4C23-92BB-89F9976D0672} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-154345-12128-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2012-07-09] (Hewlett-Packard)
FireFox:
========
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-07-18] (Intel Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-08-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2013-11-25] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll [2013-11-25] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-06-07] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-06-07] (VideoLAN)
FF Extension: (Kein Name) - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha38\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta351\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha256\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2543\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha4549\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home8521\ff [nicht gefunden]
FF Extension: (Kein Name) - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release1179\ff [nicht gefunden]
Chrome:
=======
CHR dev: Chrome dev build erkannt! <======= ACHTUNG
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
S3 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [85504 2012-08-15] (Hewlett-Packard Company) [Datei ist nicht signiert]
S3 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-07-18] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [321536 2012-08-10] (IDT, Inc.) [Datei ist nicht signiert]
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [161744 2015-03-11] (RaMMicHaeL) [Datei ist nicht signiert]
S3 vmicvss; C:\Windows\System32\ICSvc.dll [524800 2014-10-29] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S3 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
S3 EraserUtilDrv11311; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11311.sys [140376 2013-09-26] (Symantec Corporation)
S3 EraserUtilDrv11312; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11312.sys [137648 2013-11-21] (Symantec Corporation) [Datei ist nicht signiert]
R3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1975000 2013-07-31] (Realtek Semiconductor Corporation )
R3 SPL_CRIMSON_MIDI; C:\Windows\system32\drivers\spl_crimson_m.sys [41592 2016-02-19] (Ploytec GmbH)
R3 SPL_CRIMSON_USB; C:\Windows\System32\Drivers\spl_crimson_u.sys [555128 2016-02-19] (Ploytec GmbH)
R3 SPL_CRIMSON_WDM; C:\Windows\system32\drivers\spl_crimson_a.sys [62584 2016-02-19] (Ploytec GmbH)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-09-20 22:20 - 2016-09-20 22:21 - 00015002 _____ C:\Users\HP\Desktop\FRST.txt
2016-09-20 22:11 - 2016-09-20 22:16 - 00052914 _____ C:\Users\HP\Desktop\SystemLook.txt
2016-09-20 22:10 - 2016-09-20 22:10 - 00165376 _____ C:\Users\HP\Desktop\SystemLook_x64.exe
2016-09-20 21:48 - 2016-09-20 21:52 - 00021848 _____ C:\Users\HP\Desktop\Fixlog.txt
2016-09-20 21:48 - 2016-09-20 21:48 - 00000000 ____D C:\Users\HP\Desktop\FRST-OlderVersion
2016-09-20 14:32 - 2016-09-20 21:48 - 00000000 ____D C:\Users\HP\Desktop\Bereinigung
2016-09-18 00:50 - 2016-09-18 00:50 - 00053219 _____ C:\Users\HP\Downloads\lebenslauf lakhwinder.pdf
2016-09-18 00:46 - 2016-09-18 00:50 - 00015031 _____ C:\Users\HP\Desktop\lebenslauf lakhwinder.odt
2016-09-16 22:38 - 2016-09-16 23:12 - 00216180 _____ C:\TDSSKiller.3.1.0.11_16.09.2016_22.38.09_log.txt
2016-09-16 22:37 - 2016-09-16 22:37 - 04747704 _____ (AO Kaspersky Lab) C:\Users\HP\Downloads\tdsskiller.exe
2016-09-16 22:28 - 2016-09-16 23:17 - 00057512 _____ C:\Users\HP\Downloads\Addition.txt
2016-09-16 22:27 - 2016-09-20 22:20 - 00000000 ____D C:\FRST
2016-09-16 22:27 - 2016-09-16 22:29 - 00074098 _____ C:\Users\HP\Downloads\FRST.txt
2016-09-16 22:26 - 2016-09-20 21:48 - 02402816 _____ (Farbar) C:\Users\HP\Desktop\FRST64.exe
2016-09-16 22:25 - 2016-09-16 22:25 - 01749504 _____ (Farbar) C:\Users\HP\Downloads\FRST.exe
2016-09-16 22:25 - 2016-09-16 22:25 - 01749504 _____ (Farbar) C:\Users\HP\Downloads\FRST (1).exe
2016-09-16 10:41 - 2016-09-20 13:06 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-09-16 10:39 - 2016-09-16 10:39 - 16563352 _____ (Malwarebytes Corp.) C:\Users\HP\Downloads\mbar-1.09.3.1001.exe
2016-09-16 10:14 - 2016-09-16 10:14 - 00023837 _____ C:\Users\HP\Downloads\returnLabel-4340515.pdf
2016-09-13 23:36 - 2016-08-21 01:45 - 07076864 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2016-09-13 23:36 - 2016-08-21 01:27 - 01445376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-09-13 23:36 - 2016-08-21 01:22 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-09-13 23:36 - 2016-08-21 01:05 - 05273600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2016-09-13 23:36 - 2016-08-21 00:50 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-09-13 23:36 - 2016-08-21 00:42 - 07795712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-09-13 23:36 - 2016-08-21 00:27 - 05268480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-09-13 23:36 - 2016-08-10 00:47 - 00803176 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2016-09-13 23:36 - 2016-08-10 00:47 - 00611576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2016-09-13 23:36 - 2016-08-04 16:17 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-09-13 23:36 - 2016-08-03 20:06 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-09-13 23:36 - 2016-08-03 20:05 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-09-13 23:35 - 2016-09-08 23:51 - 00443224 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-09-13 23:35 - 2016-09-08 23:51 - 00332632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-09-13 23:35 - 2016-09-01 05:08 - 20312064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-09-13 23:35 - 2016-09-01 04:46 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-09-13 23:35 - 2016-09-01 04:24 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-09-13 23:35 - 2016-09-01 03:39 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-09-13 23:35 - 2016-09-01 03:30 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-09-13 23:35 - 2016-09-01 03:27 - 13808128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-09-13 23:35 - 2016-09-01 03:24 - 04607488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-09-13 23:35 - 2016-09-01 02:45 - 25770496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-09-13 23:35 - 2016-09-01 02:43 - 02445824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-09-13 23:35 - 2016-09-01 02:42 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-09-13 23:35 - 2016-09-01 02:38 - 01316352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-09-13 23:35 - 2016-09-01 02:24 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-09-13 23:35 - 2016-09-01 02:10 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-09-13 23:35 - 2016-09-01 02:06 - 06047232 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-09-13 23:35 - 2016-09-01 01:38 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-09-13 23:35 - 2016-09-01 01:28 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-09-13 23:35 - 2016-09-01 01:15 - 15411712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-09-13 23:35 - 2016-09-01 01:10 - 02921472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-09-13 23:35 - 2016-09-01 00:58 - 01550848 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-09-13 23:35 - 2016-09-01 00:47 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-09-13 23:35 - 2016-08-26 07:51 - 02894336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-09-13 23:35 - 2016-08-26 06:44 - 02286592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-09-13 23:35 - 2016-08-26 06:41 - 02881536 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2016-09-13 23:35 - 2016-08-26 06:00 - 01049600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-09-13 23:35 - 2016-08-22 18:06 - 00179248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2016-09-13 23:35 - 2016-08-22 18:06 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2016-09-13 23:35 - 2016-08-21 03:03 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-09-13 23:35 - 2016-08-21 03:01 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-09-13 23:35 - 2016-08-21 03:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-09-13 23:35 - 2016-08-21 02:17 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2016-09-13 23:35 - 2016-08-21 01:26 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2016-09-13 23:35 - 2016-08-21 00:55 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2016-09-13 23:35 - 2016-08-14 21:34 - 01541248 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2016-09-13 23:35 - 2016-08-14 20:25 - 04171264 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-09-13 23:35 - 2016-08-14 18:14 - 01376768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-09-13 23:35 - 2016-08-13 09:41 - 07445848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-09-13 23:35 - 2016-08-13 09:40 - 01737080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2016-09-13 23:35 - 2016-08-13 09:40 - 01663184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-09-13 23:35 - 2016-08-13 09:40 - 01523208 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-09-13 23:35 - 2016-08-13 09:40 - 01490120 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2016-09-13 23:35 - 2016-08-13 09:40 - 01358952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2016-09-13 23:35 - 2016-08-13 02:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\csrsrv.dll
2016-09-13 23:35 - 2016-08-11 18:26 - 01156608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2016-09-13 23:35 - 2016-08-11 18:17 - 00627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2016-09-13 23:35 - 2016-08-11 18:16 - 00455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2016-09-13 23:35 - 2016-07-09 18:10 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2016-09-13 23:35 - 2016-07-09 00:35 - 00101208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2016-09-13 23:35 - 2016-07-08 16:17 - 00377344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2016-09-13 23:35 - 2016-07-08 16:17 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2016-09-13 23:35 - 2016-07-08 00:32 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2016-09-13 23:35 - 2016-07-08 00:18 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2016-09-13 23:35 - 2016-07-08 00:10 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2016-09-13 23:35 - 2016-07-08 00:01 - 00272896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll
2016-09-13 23:35 - 2016-07-07 23:04 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2016-09-13 23:35 - 2016-07-07 22:59 - 01080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2016-09-13 23:35 - 2016-07-07 22:44 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2016-09-13 23:35 - 2016-07-07 22:41 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2016-09-13 23:35 - 2016-07-07 22:34 - 00542720 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2016-09-13 23:35 - 2016-07-07 22:29 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2016-09-13 23:35 - 2016-07-07 22:29 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2016-09-13 23:35 - 2016-07-07 22:23 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2016-09-13 23:35 - 2016-07-07 22:18 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2016-09-13 23:35 - 2016-07-07 22:11 - 01661064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-09-13 23:35 - 2016-07-07 22:11 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-09-13 23:35 - 2016-07-07 22:11 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll
2016-09-13 23:35 - 2016-07-07 21:35 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2016-09-13 23:35 - 2016-07-07 21:14 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-09-13 23:35 - 2016-07-04 07:09 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2016-09-13 23:35 - 2016-07-04 05:45 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2016-09-13 23:35 - 2016-07-04 05:37 - 02897920 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2016-09-13 23:35 - 2016-07-04 05:33 - 00657920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2016-09-13 23:35 - 2016-07-04 05:04 - 02539008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2016-09-13 23:35 - 2016-07-04 05:02 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-09-13 23:35 - 2016-07-04 04:19 - 03547136 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2016-09-13 23:35 - 2016-07-01 22:39 - 00197352 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssenh.dll
2016-09-13 23:35 - 2016-07-01 22:39 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssenh.dll
2016-09-13 23:35 - 2016-01-10 19:08 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2016-09-13 11:05 - 2016-09-13 11:05 - 00222838 _____ C:\Users\HP\Desktop\ticket 14.09.16.pdf
2016-09-08 00:51 - 2016-09-08 00:51 - 01328304 _____ C:\Users\HP\Downloads\video-1473288302.mp4
2016-09-08 00:24 - 2016-09-08 00:24 - 03079986 _____ C:\Users\HP\Downloads\video-1473282758.mp4
2016-09-06 17:22 - 2016-09-06 17:22 - 00000000 ____D C:\ProgramData\Avira
2016-09-06 17:22 - 2016-09-06 17:22 - 00000000 ____D C:\ProgramData\Avg
2016-09-06 17:22 - 2016-09-06 17:22 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-05 00:47 - 2016-09-05 00:48 - 23461607 _____ C:\Users\HP\Downloads\SteinbergCubasev5.1.part25.rar.crdownload
2016-09-05 00:47 - 2016-09-05 00:47 - 02310048 _____ C:\Users\HP\Downloads\winrar-x64-540d (1).exe
2016-09-05 00:46 - 2016-09-05 00:48 - 36749031 _____ C:\Users\HP\Downloads\SteinbergCubasev5.1.part26.rar.crdownload
2016-09-05 00:46 - 2016-09-05 00:48 - 30818023 _____ C:\Users\HP\Downloads\SteinbergCubasev5.1.part53.rar.crdownload
2016-09-05 00:46 - 2016-09-05 00:46 - 00000000 ____D C:\WINDOWS\system32\sstmp
2016-09-05 00:39 - 2016-09-05 00:38 - 01611944 _____ (Secure Download Ltd. ) C:\Users\HP\Downloads\keygen
2016-09-05 00:37 - 2016-09-05 00:37 - 00000000 ____D C:\Users\HP\Downloads\Cubase.5.0.keygen.by.cat (1)
2016-09-05 00:36 - 2016-09-05 00:36 - 00370166 _____ C:\Users\HP\Downloads\Cubase.5.0.keygen.by.cat (1).zip
2016-09-05 00:34 - 2016-09-05 00:34 - 00000000 ____D C:\Users\HP\Downloads\Cubase.5.0.keygen.by.cat
2016-09-05 00:33 - 2016-09-05 00:33 - 05172648 _____ C:\Users\HP\Downloads\Cubase.5.0.keygen.by.cat.zip
2016-09-05 00:30 - 2016-09-05 00:30 - 00002070 _____ C:\Users\HP\Desktop\Cubase 5.lnk
2016-09-05 00:29 - 2016-09-05 00:48 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 5
2016-09-04 23:54 - 2016-09-04 23:54 - 00000000 ____D C:\Users\HP\AppData\Roaming\WinRAR
2016-09-04 23:54 - 2016-09-04 23:54 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-09-04 23:54 - 2016-09-04 23:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-09-04 23:54 - 2016-09-04 23:54 - 00000000 ____D C:\Program Files\WinRAR
2016-09-04 23:53 - 2016-09-04 23:53 - 02310048 _____ C:\Users\HP\Downloads\winrar-x64-540d.exe
2016-09-04 22:24 - 2016-09-04 23:20 - 3690898231 _____ C:\Users\HP\Desktop\cubase.zip
2016-09-04 21:56 - 2016-09-04 22:08 - 2661829209 _____ C:\Users\HP\Desktop\cubase.7z
2016-09-04 21:52 - 2016-09-04 21:52 - 00000000 ____D C:\Users\HP\Downloads\cubase 5
2016-09-04 18:59 - 2016-09-04 20:23 - 00000000 ____D C:\Users\HP\Downloads\SteinbergCubasev5
2016-09-04 18:44 - 2016-09-04 18:44 - 00001652 _____ C:\Users\HP\Desktop\JDownloader 2.lnk
2016-09-04 18:44 - 2016-09-04 18:44 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2016-09-04 18:42 - 2016-09-04 20:23 - 00000000 ____D C:\Users\HP\Desktop\JDownloader
2016-09-04 18:39 - 2016-09-04 18:39 - 00076504 _____ (AppWork GmbH) C:\Users\HP\Downloads\WebInstaller_adfree_2016_1.exe
2016-09-04 18:39 - 2016-09-04 18:39 - 00076504 _____ (AppWork GmbH) C:\Users\HP\Downloads\WebInstaller_adfree_2016_1 (1).exe
2016-09-04 18:07 - 2016-09-05 00:08 - 00000000 ____D C:\Users\HP\Desktop\cubase
2016-09-04 16:48 - 2016-09-04 16:48 - 00609217 ____T C:\Users\HP\Downloads\Don't Leave - Free Boom Bap Hip Hop Instrumental Beat (Prod By Outspoken & Yung Castello) (320 kbps).mp3.asd
2016-09-04 08:48 - 2016-09-04 08:48 - 00127537 _____ C:\Users\HP\Downloads\uebersicht-vorkurs-2014-100.pdf
2016-09-04 00:07 - 2016-09-04 00:07 - 00782252 ____T C:\Users\HP\Downloads\Afro_cuban_jazz_suite_for_ellington_[mp3take].mp3.asd
2016-09-03 23:30 - 2016-09-08 00:14 - 00000000 ___RD C:\Users\HP\Desktop\first drumpack Project
2016-09-03 17:06 - 2016-09-03 17:06 - 00000000 ____D C:\Users\HP\Downloads\Elements-Of-UK-Dance
2016-09-03 16:48 - 2016-09-03 17:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Akai
2016-09-03 16:48 - 2016-09-03 16:48 - 00001045 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC Essentials.lnk
2016-09-03 16:48 - 2016-09-03 16:48 - 00000000 ____D C:\ProgramData\Akai
2016-09-03 16:48 - 2016-09-03 16:48 - 00000000 ____D C:\Program Files\Common Files\Avid
2016-09-03 16:47 - 2016-09-03 16:47 - 00000000 ____D C:\Program Files\Akai Pro
2016-09-03 16:47 - 2016-09-03 16:47 - 00000000 ____D C:\Program Files (x86)\Akai Pro
2016-09-03 16:45 - 2016-09-03 16:45 - 00000000 ____D C:\Users\HP\Downloads\Update-MPC-Essentials-1.8.2-WIN
2016-09-03 16:38 - 2016-09-03 17:00 - 443053927 _____ C:\Users\HP\Downloads\Elements-Of-UK-Dance.zip
2016-09-03 16:37 - 2016-09-03 19:40 - 2919535507 _____ C:\Users\HP\Downloads\BigBangDrums2.zip
2016-09-03 16:37 - 2016-09-03 19:23 - 1490752945 _____ C:\Users\HP\Downloads\BigBang2.5.zip
2016-09-03 16:37 - 2016-09-03 16:45 - 136513144 _____ C:\Users\HP\Downloads\Update-MPC-Essentials-1.8.2-WIN.zip
2016-09-03 16:30 - 2016-09-03 17:07 - 975151220 _____ C:\Users\HP\Downloads\ableton_live_lite_9.6.2_64 (1).zip
2016-09-03 16:25 - 2016-09-03 17:00 - 00000000 ____D C:\Users\HP\Documents\Ableton
2016-09-03 16:22 - 2016-09-03 16:48 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-03 16:21 - 2016-09-03 16:30 - 00000000 ____D C:\Users\HP\AppData\Roaming\Ableton
2016-09-03 16:16 - 2016-09-03 16:16 - 00000887 _____ C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ableton Live 9 Lite.lnk
2016-09-03 16:16 - 2016-09-03 16:16 - 00000000 ____D C:\ProgramData\Ableton
2016-09-03 16:13 - 2016-09-03 16:13 - 00000000 ____D C:\Users\HP\Downloads\ableton_live_lite_9.6.2_64
2016-09-03 16:01 - 2016-09-03 16:13 - 975151220 _____ C:\Users\HP\Downloads\ableton_live_lite_9.6.2_64.zip
2016-09-03 13:44 - 2016-09-03 13:44 - 00274725 _____ C:\Users\HP\Desktop\Ying And Yang by P_Beats.htm
2016-09-03 13:44 - 2016-09-03 13:44 - 00000000 ____D C:\Users\HP\Desktop\Ying And Yang by P_Beats_files
2016-08-30 23:51 - 2016-09-18 23:37 - 00000000 ____D C:\Users\HP\Documents\Cubase LE AI Elements Projects
2016-08-30 23:50 - 2016-08-30 23:50 - 00000000 ____D C:\Users\HP\Documents\VST3 Presets
2016-08-30 23:50 - 2016-08-30 23:50 - 00000000 ____D C:\Users\HP\Documents\Steinberg
2016-08-30 23:45 - 2016-09-05 00:29 - 00000000 ____D C:\Program Files (x86)\Steinberg
2016-08-30 23:45 - 2016-08-30 23:45 - 00002892 _____ () C:\WINDOWS\SysWOW64\audcon.sys
2016-08-30 23:45 - 2016-08-30 23:45 - 00002333 _____ C:\Users\HP\Desktop\Cubase LE AI Elements 8.lnk
2016-08-30 23:45 - 2016-08-30 23:45 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase LE AI Elements 8 32bit
2016-08-30 23:45 - 2016-08-30 23:45 - 00000000 ____D C:\ProgramData\Syncrosoft
2016-08-30 23:44 - 2016-08-30 23:44 - 00000049 _____ C:\WINDOWS\SysWOW64\SYNSOPOS.exe.cfg
2016-08-30 23:44 - 2016-08-30 23:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eLicenser
2016-08-30 23:44 - 2016-08-30 23:44 - 00000000 ____D C:\Program Files (x86)\Syncrosoft
2016-08-30 23:44 - 2011-12-14 21:21 - 00086016 _____ C:\WINDOWS\SysWOW64\SYNSOPOS.exe
2016-08-30 23:43 - 2016-08-30 23:45 - 00000000 ____D C:\ProgramData\eLicenser
2016-08-30 23:43 - 2016-08-30 23:44 - 00000000 ____D C:\Program Files (x86)\eLicenser
2016-08-30 23:43 - 2016-08-30 23:43 - 00000000 ____D C:\Program Files\eLicenser
2016-08-30 23:43 - 2012-12-07 17:48 - 01714176 _____ (Steinberg Media Technologies GmbH) C:\WINDOWS\system32\SYNSOACC.dll
2016-08-30 23:43 - 2012-12-07 17:48 - 01277952 _____ (Steinberg Media Technologies GmbH) C:\WINDOWS\SysWOW64\SYNSOACC.dll
2016-08-30 23:23 - 2016-08-30 23:23 - 00000000 ____D C:\ProgramData\Steinberg
2016-08-30 23:23 - 2016-08-30 23:23 - 00000000 ____D C:\Program Files\Common Files\Steinberg
2016-08-30 23:21 - 2016-08-30 23:41 - 00000000 ____D C:\Users\HP\AppData\Local\Steinberg Installation Updater
2016-08-30 23:21 - 2016-08-30 23:21 - 00000000 ____D C:\Users\HP\AppData\Roaming\Steinberg Installation Updater
2016-08-30 23:11 - 2016-08-30 23:11 - 00000000 ____D C:\Users\HP\Downloads\Cubase_Elements_8_Trial_Installer_windows
2016-08-30 23:07 - 2016-09-05 00:29 - 00000000 ____D C:\Users\HP\AppData\Roaming\Steinberg
2016-08-30 23:07 - 2016-09-03 16:48 - 00000000 ____D C:\Program Files\Steinberg
2016-08-30 23:07 - 2016-09-03 16:21 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-08-30 23:07 - 2016-08-30 23:07 - 00002215 _____ C:\Users\HP\Desktop\Cubase LE AI Elements 8 64bit.lnk
2016-08-30 23:07 - 2016-08-30 23:07 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase LE AI Elements 8 64bit
2016-08-30 22:25 - 2016-08-30 23:05 - 2772390032 _____ C:\Users\HP\Downloads\Cubase_Elements_8_Trial_Installer_windows.zip
2016-08-30 20:39 - 2016-09-18 16:04 - 00000000 ____D C:\Users\HP\AppData\Roaming\Audacity
2016-08-30 20:39 - 2016-08-30 20:39 - 00000000 ____D C:\Users\HP\Downloads\audacity-win-2.1.2
2016-08-30 20:39 - 2016-08-30 20:39 - 00000000 ____D C:\Users\HP\AppData\Local\Audacity
2016-08-30 20:38 - 2016-08-30 20:38 - 10921409 _____ C:\Users\HP\Downloads\audacity-win-2.1.2.zip
2016-08-30 19:36 - 2016-08-30 20:03 - 00000000 ____D C:\WINDOWS\usb-audio.deSPLCrimson
2016-08-30 19:36 - 2016-02-19 20:56 - 00555128 _____ (Ploytec GmbH) C:\WINDOWS\system32\Drivers\spl_crimson_u.sys
2016-08-30 19:36 - 2016-02-19 20:56 - 00062584 _____ (Ploytec GmbH) C:\WINDOWS\system32\Drivers\spl_crimson_a.sys
2016-08-30 19:36 - 2016-02-19 20:56 - 00041592 _____ (Ploytec GmbH) C:\WINDOWS\system32\Drivers\spl_crimson_m.sys
2016-08-30 19:35 - 2016-02-23 10:52 - 02175274 _____ C:\Users\HP\Downloads\SPL_Crimson_2.9.86.25.zip
2016-08-30 19:32 - 2016-08-30 19:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-08-30 19:32 - 2016-08-30 19:32 - 00000000 ____D C:\Program Files (x86)\7-Zip
2016-08-30 19:25 - 2016-08-30 19:25 - 02220493 _____ C:\Users\HP\Downloads\SPL_Crimson2.9.86.25_web.zip
2016-08-30 18:59 - 2016-08-30 19:00 - 00000000 ____D C:\Users\HP\Desktop\games
2016-08-30 18:56 - 2016-09-03 14:32 - 00000000 ____D C:\Users\HP\Desktop\bilder
2016-08-25 13:50 - 2016-08-25 13:50 - 00000000 ____D C:\Users\HP\Documents\My Games
2016-08-25 13:50 - 2016-08-25 13:50 - 00000000 ____D C:\Users\HP\AppData\Local\FalloutNV
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-09-20 22:17 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-09-20 22:10 - 2014-07-14 18:15 - 11175936 ___SH C:\Users\HP\Downloads\Thumbs.db
2016-09-20 22:07 - 2015-04-17 22:33 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-20 22:07 - 2014-10-20 19:15 - 00000000 ____D C:\Users\HP\AppData\Local\Spotify
2016-09-20 22:07 - 2014-10-20 19:13 - 00000000 ____D C:\Users\HP\AppData\Roaming\Spotify
2016-09-20 22:07 - 2014-07-19 20:11 - 00000000 ___RD C:\Users\HP\OneDrive
2016-09-20 22:07 - 2014-07-14 15:04 - 00987648 ___SH C:\Users\HP\Desktop\Thumbs.db
2016-09-20 21:59 - 2014-03-18 12:03 - 01980998 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-09-20 21:59 - 2014-03-18 11:25 - 00841326 _____ C:\WINDOWS\system32\perfh007.dat
2016-09-20 21:59 - 2014-03-18 11:25 - 00191558 _____ C:\WINDOWS\system32\perfc007.dat
2016-09-20 21:59 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\Inf
2016-09-20 21:53 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-09-20 21:53 - 2012-10-05 21:55 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-20 21:50 - 2014-05-21 13:07 - 00000000 ____D C:\Users\HP\AppData\LocalLow\Temp
2016-09-20 13:52 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-09-20 13:52 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2016-09-20 13:51 - 2016-08-20 04:34 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-09-20 13:39 - 2013-09-20 11:33 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3930845653-3837040866-4171826123-1001
2016-09-20 13:19 - 2015-01-07 19:02 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-09-20 13:18 - 2015-01-07 19:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-09-20 13:05 - 2015-01-07 18:46 - 00000000 ____D C:\AdwCleaner
2016-09-20 13:04 - 2013-09-27 19:50 - 00001304 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-09-18 02:27 - 2016-08-20 04:34 - 00000946 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-09-17 23:30 - 2013-09-30 15:54 - 00000000 ____D C:\Users\HP\AppData\Roaming\vlc
2016-09-16 18:52 - 2012-10-05 22:13 - 00000000 ____D C:\WINDOWS\en
2016-09-14 10:38 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\rescache
2016-09-14 10:24 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-14 10:24 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-09-14 10:13 - 2013-08-22 16:44 - 00377408 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-09-14 10:08 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\setup
2016-09-14 10:08 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\setup
2016-09-14 00:47 - 2013-09-27 16:00 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-09-14 00:37 - 2013-09-27 16:00 - 144199024 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-09-13 17:51 - 2016-08-20 04:34 - 00003898 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-09-13 17:51 - 2016-08-20 04:34 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-09-13 17:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-09-13 17:51 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-09-12 08:49 - 2014-07-11 16:17 - 00000000 ____D C:\Users\UpdatusUser
2016-09-12 08:47 - 2014-07-11 03:21 - 00000000 ____D C:\Users\HP
2016-09-08 01:15 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-09-07 03:11 - 2016-07-27 11:13 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-09-07 03:11 - 2016-07-27 11:13 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-09-06 17:19 - 2015-01-07 21:54 - 00000000 ____D C:\ProgramData\Unchecky
2016-09-02 12:33 - 2016-04-01 12:31 - 00000000 ____D C:\Users\HP\Desktop\mzzk
2016-08-27 10:30 - 2013-10-06 14:56 - 00000000 ____D C:\Users\HP\AppData\Local\ElevatedDiagnostics
2016-08-25 13:21 - 2015-04-17 23:33 - 00000000 ____D C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-08-23 20:43 - 2016-08-20 04:34 - 00000000 ____D C:\Users\HP\AppData\Local\Adobe
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-12-19 22:57 - 2014-03-28 09:18 - 0000157 _____ () C:\Users\HP\AppData\Roaming\WB.CFG
2013-09-20 11:20 - 2013-09-20 11:20 - 0000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-09-20 22:17
==================== Ende von FRST.txt ============================
|
|
20.09.2016, 21:36
| #19 |
| | startgo123Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-09-2016
durchgeführt von HP (20-09-2016 22:21:32)
Gestartet von C:\Users\HP\Desktop
Windows 8.1 (Update) (X64) (2014-07-11 14:02:56)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3930845653-3837040866-4171826123-500 - Administrator - Disabled)
Gast (S-1-5-21-3930845653-3837040866-4171826123-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3930845653-3837040866-4171826123-1003 - Limited - Enabled)
HP (S-1-5-21-3930845653-3837040866-4171826123-1001 - Administrator - Enabled) => C:\Users\HP
UpdatusUser (S-1-5-21-3930845653-3837040866-4171826123-1004 - Limited - Enabled) => C:\Users\UpdatusUser
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
«Âîéíà è Ìèð» (HKLM-x32\...\«Âîéíà è Ìèð») (Version: - )
7-Zip 16.02 (HKLM-x32\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Ãåðîè Ìå÷à è Ìàãèè® III (HKLM-x32\...\Heroes of Might and Magic® III) (Version: - )
Ableton Live 9 Lite (HKLM\...\{E807D51A-ED71-4353-AD60-4E9625BE7531}) (Version: 9.0.0.0 - Ableton)
Adobe Flash Player 23 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Akai Elements of UK Dance (HKLM-x32\...\Akai UK Dance_is1) (Version: - )
Akamai NetSession Interface (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Akamai) (Version: - Akamai Technologies, Inc)
Akamai NetSession Interface (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Akamai) (Version: - Akamai Technologies, Inc)
Anno Online (HKLM\...\Steam App 336510) (Version: - Blue Byte)
AnVir Task Manager Free (HKLM-x32\...\AnVir Task Manager Free) (Version: - AnVir Software)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArmA Demo Uninstall (HKLM-x32\...\ArmA Demo) (Version: - )
Blitzkrieg (HKLM-x32\...\Blitzkrieg) (Version: - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BrainBread 2 (HKLM\...\Steam App 346330) (Version: - Reperio Studios)
Chicago 1930 (HKLM-x32\...\Chicago 1930) (Version: - )
Connected Music powered by Universal Music Group version 1.0 (HKLM-x32\...\{46037DC7-F927-46DF-935F-D6F122BDD34B}_is1) (Version: 1.0 - Snowite)
Cry of Fear (HKLM-x32\...\Steam App 223710) (Version: - Team Psykskallar)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1.5510 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.1.1916 - CyberLink Corp.)
CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}) (Version: 2.0.1.3109 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.1.1902 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.1.1925 - CyberLink Corp.)
CyberLink PowerDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1.4319 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
ElectroLyrics-1 (HKLM-x32\...\ElectroLyrics-1) (Version: 1.28.153.3 - Lyrics) <==== ACHTUNG
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: 6.8.5.1160 - Steinberg Media Technologies GmbH)
Fallout: New Vegas (HKLM\...\Steam App 22380) (Version: - Obsidian Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 31.0.1650.63 - Google Inc.)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
Grand Theft Auto Vice City (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}) (Version: 1.00.000 - )
Grand Theft Auto Vice City (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}) (Version: 1.00.000 - )
GTA2 (HKLM-x32\...\GTA2) (Version: - )
GTAIII (HKLM-x32\...\{92B94569-6683-4617-8C54-EB27A1B51B30}) (Version: - )
Hammer & Sickle (HKLM-x32\...\Hammer & Sickle) (Version: - )
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version: - Reto-Moto)
Hewlett-Packard ACLM.NET v1.2.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: v1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\HPConnectedMusic) (Version: 1.1 (build 96) hp - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\HPConnectedMusic) (Version: 1.1 (build 96) hp - Meridian Audio Ltd)
HP Connected Remote (HKLM-x32\...\{F243A34B-AB7F-4065-B770-B85B767C247C}) (Version: 1.0.1206 - Hewlett-Packard)
HP Registration Service (HKLM\...\{E4D6CCF2-0AAF-4B9C-9DE5-893EDC9B4BAA}) (Version: 1.0.5976.4186 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{FF27F674-821E-4BA2-985B-DDF539C2CD03}) (Version: 7.0.33.6 - Hewlett-Packard Company)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6418.0 - IDT)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
ISScript (x32 Version: 3.00.185 - InstallShield Software Corp.) Hidden
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
LEGO Alpha Team (HKLM-x32\...\{C5C8DE40-1AB7-11D4-854E-00A0C99F6AF9}) (Version: - )
Lollipop (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\lollipop_11221407) (Version: - Lollipop Network, S.L.) <==== ACHTUNG
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Office (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.6120.5004 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
MPC Essentials 1.8.2 (HKLM\...\com.akaipro.mpc.essentials_is1) (Version: 1.8.2 - Akai Professional)
NVIDIA 3D Vision Treiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA HD Audio Driver 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Pro Rally 2001 (HKLM-x32\...\Pro Rally 2001) (Version: - )
Recovery Manager (x32 Version: 5.5.0.5530 - CyberLink Corp.) Hidden
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version: - Valve)
SPL Crimson USB ASIO driver (HKLM\...\USB_AUDIO_DEusb-audio.deSPLCrimson) (Version: - )
Spotify (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Spotify) (Version: 1.0.38.171.g5e1cd7b2 - Spotify AB)
Spotify (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Spotify) (Version: 1.0.24.104.g92a22684 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Steinberg Cubase 5 (HKLM-x32\...\{4A19D6AC-ADE0-4A07-80FF-9C9812C45557}) (Version: 5.1.0 - Steinberg Media Technologies GmbH)
Steinberg Cubase LE AI Elements 8 (HKLM-x32\...\{C82690CF-7D52-4E6A-02BB-AB612D4D8D28}) (Version: 8.0.10 - Steinberg Media Technologies GmbH)
Steinberg Cubase LE AI Elements 8 64bit (HKLM\...\{C801D1E6-30E3-46BE-368D-0106B42CCE17}) (Version: 8.0.10 - Steinberg Media Technologies GmbH)
Steinberg Drum Loop Expansion 01 (HKLM-x32\...\{490BF87E-1F75-4453-BF55-9F540543A3CA}) (Version: 2.0.0.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE (HKLM-x32\...\{A6790D47-D653-4B88-BED4-96878DBE5191}) (Version: 4.1.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE 64bit (HKLM\...\{A5AB0D21-21BD-4DB8-F097-02E8FC8C486A}) (Version: 4.1.0 - Steinberg Media Technologies GmbH)
Steinberg Groove Agent SE Content (HKLM-x32\...\{AFC9D1CE-F050-437C-35A5-62DEDB262DC7}) (Version: 1.2.1 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE (HKLM-x32\...\{EF7800A8-575E-4776-95A5-A9D904A85D5F}) (Version: 2.0.2 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE 64bit (HKLM\...\{B99C316B-C135-43B5-8E77-2BC5E241F964}) (Version: 2.0.2 - Steinberg Media Technologies GmbH)
Steinberg HALion Sonic SE Content for Cubase LE AI Elements (HKLM-x32\...\{CF45002F-2205-4116-BB51-2D015F436CAC}) (Version: 2.0.1 - Steinberg Media Technologies GmbH)
Steinberg Midi Loop Library (HKLM-x32\...\{89DE2651-6DD9-4C15-AC94-8348362D456C}) (Version: 1.0.0 - Steinberg Media Technologies GmbH)
Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH)
Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.1 - Steinberg Media Technologies GmbH)
Tomb Raider III (HKLM-x32\...\Tomb Raider III) (Version: - )
Unchecky v0.3.7 (HKLM-x32\...\Unchecky) (Version: 0.3.7 - RaMMicHaeL)
VLC media player 2.0.5 (HKLM-x32\...\VLC media player) (Version: 2.0.5 - VideoLAN)
Warface (HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\...\Warface) (Version: 1.87 - Mail.Ru)
Warface (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\Warface) (Version: 1.87 - Mail.Ru)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
WinRAR 5.40 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Игровой центр (HKU\S-1-5-21-3930845653-3837040866-4171826123-1004\...\GameCenterMailRu) (Version: 2.402 - ООО "Мэйл.Ру Геймз")
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {2C56CCE9-6B4E-426A-9439-6EF1FDBA3C65} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2012-08-07] (Hewlett-Packard Company)
Task: {48BF7FE4-16B3-42BB-A43F-95350E7131D5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-13] (Adobe Systems Incorporated)
Task: {52B160ED-B394-4462-8927-43C6ACC8306C} - System32\Tasks\{AF089043-D6AA-41B7-A239-8F8B8E8FAA06} => pcalua.exe -a F:\autorun.exe -d F:\
Task: {6E87A472-CB8B-4D44-9413-166AB458F2D5} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_162_pepper.exe [2016-09-13] (Adobe Systems Incorporated)
Task: {8507F8F4-7E2F-4651-9936-8905E375F9FF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {850AC5A8-2E1C-42C3-9965-931751078C0E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_backup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2012-07-13] (Hewlett-Packard)
Task: {8C600834-BD7F-48DE-9DF1-DC80FEEB40F9} - System32\Tasks\{820D1004-08F0-4C3F-8553-9B88F08D781B} => pcalua.exe -a F:\ProRally.exe -d F:\
Task: {B2530D95-ACF4-4DC4-82E8-9B2FD6594D84} - System32\Tasks\{42A7BE18-F334-47DC-892B-2C562E256871} => pcalua.exe -a F:\Setup.exe -d F:\
Task: {D0612721-6B70-4089-9E5E-936897C56ADF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2012-08-15] (Hewlett-Packard Company)
Task: {E09F5153-E919-4910-B801-F1A052F640D8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_23_0_0_162_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2012-10-05 21:59 - 2012-07-18 10:50 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-04-17 23:28 - 2016-08-09 01:27 - 00785920 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-04-17 23:28 - 2015-07-02 00:06 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-04-17 23:28 - 2016-08-23 21:33 - 02321184 _____ () C:\Program Files (x86)\Steam\video.dll
2015-04-17 23:28 - 2015-07-02 00:06 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-04-17 23:28 - 2015-07-02 00:06 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-04-17 23:28 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-04-17 23:28 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-04-17 23:28 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-04-17 23:28 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-04-17 23:28 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-04-17 23:28 - 2016-08-23 21:33 - 00835360 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-07-27 17:55 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2015-04-17 23:28 - 2016-08-04 22:56 - 49825056 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2013-12-06 14:06 - 2013-12-04 04:47 - 00702416 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libglesv2.dll
2013-12-06 14:06 - 2013-12-04 04:47 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\libegl.dll
2013-12-06 14:06 - 2013-12-04 04:48 - 04055504 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll
2013-12-06 14:06 - 2013-12-04 04:48 - 00399312 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll
2013-12-06 14:06 - 2013-12-04 04:47 - 01619408 _____ () C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ffmpegsumo.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\HP:Heroes & Generals [38]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 15:25 - 2016-09-20 21:53 - 00001204 ____A C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
0.0.0.0 media.opencandy.com
0.0.0.0 cdn.opencandy.com
0.0.0.0 tracking.opencandy.com
0.0.0.0 api.opencandy.com
0.0.0.0 installer.betterinstaller.com
0.0.0.0 installer.filebulldog.com
0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
0.0.0.0 inno.bisrv.com
0.0.0.0 nsis.bisrv.com
0.0.0.0 cdn.file2desktop.com
0.0.0.0 cdn.goateastcach.us
0.0.0.0 cdn.guttastatdk.us
0.0.0.0 cdn.inskinmedia.com
0.0.0.0 cdn.insta.oibundles2.com
0.0.0.0 cdn.insta.playbryte.com
0.0.0.0 cdn.llogetfastcach.us
0.0.0.0 cdn.montiera.com
0.0.0.0 cdn.msdwnld.com
0.0.0.0 cdn.mypcbackup.com
0.0.0.0 cdn.ppdownload.com
0.0.0.0 cdn.riceateastcach.us
0.0.0.0 cdn.shyapotato.us
0.0.0.0 cdn.solimba.com
0.0.0.0 cdn.tuto4pc.com
0.0.0.0 cdn.appround.biz
0.0.0.0 cdn.bigspeedpro.com
0.0.0.0 cdn.bispd.com
0.0.0.0 cdn.bisrv.com
Da befinden sich 3 zusätzliche Einträge.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3930845653-3837040866-4171826123-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\Web\Wallpaper\Theme2\img10.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{1831D832-0085-412F-AD86-5D5B89F42A77}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FE33F88C-E0F4-4BB1-9C7D-10CF276F3BED}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{576CD0BF-2CA2-47A3-B325-6353000EF03E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DFB4C9B7-8D33-4392-9006-A5AE1CF3BCCC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DEF483F9-E3F4-4D8D-9413-56D219FD4E84}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E372ABB6-ECB4-4096-A3AB-FCE65CA87A5D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3DF00AA1-75E1-4EE9-AD6E-B9057966895D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D452AC97-DBF6-4D48-A3F7-6A8F658A7F74}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{005D2F35-F842-47AB-AFDF-CB2B1F93F775}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E529D38-E74E-43EE-86F9-0EB0F270B4BA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9435A3F0-0CA3-48F8-8659-DD5FE2C06D01}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2D0B747F-E4DD-4AD7-8843-8EC2BA447690}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DC75E642-E39C-4D17-997A-730CEC93BC47}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{27E3496D-0218-45A8-AE3E-4740FD3CD194}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F2CAA585-C5C7-486D-9C44-D863BAAAD505}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4DB0F702-F2C9-4DBE-BE25-0380369C7F88}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{191DDC5E-F3B1-467E-87B7-1DB5DA27C139}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3210EF94-760C-491A-925D-5F2ECB3E1FFD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0F53E743-082B-4C03-AB49-257ACB1A6F0D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{40FB1C47-6484-4FC6-8AE6-64EB79E678F1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{29738446-D9BE-497F-91AB-E3AA893440FD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A66597FB-0C5E-4FAB-B8CB-C6D5032C5BD3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C222B0E6-B5D6-4593-B563-9A584F8B0C16}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6EB0B2FE-F281-4DA6-AFA4-96B3F5A4495D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9CBF9631-4859-4E78-80ED-82367B79F805}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1A1B324F-9A5A-4564-9E30-5F5411A7FB78}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A580BFA5-C63A-4613-9E53-0CEE605CD7AC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8B7583EB-DCC3-48FF-9B3F-AA47A8130C5B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0DA647E8-BEC0-43CC-A928-9C7E670F57B0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F36970C1-D3CC-486A-9BA8-105533EC62E9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E8FFF43F-96FA-4970-9AD5-1568C6E94F5F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9BC6FD9D-2547-484D-82C5-74C002248D19}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FFDBD881-F24A-4FAA-9A0B-2B3D69281BFF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{486C20E5-4BEC-4672-90EB-7AD38E3EFD0B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4B1E150D-DD19-42B1-A0AF-1DA2B59EA750}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{56A5FCC7-361D-445C-A203-DFBE4D2E23F3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E938228E-C3C8-47F0-A642-8AB23B685C9E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DC307FCF-A262-45B8-835E-F322CCA2C7B0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9D35373C-2C88-4E7A-A736-BB61396CEF34}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DACDD348-3151-4FBD-871F-4240A5C6313A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4F972021-55F4-4A55-A127-82E51B4DBF26}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0590F1B7-E677-4009-9CD5-CB2CECFCA95C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8DB2BE7B-DD81-4729-866E-5FF3670E4E8F}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AB269C0B-3E60-493B-BE9E-98D086323E70}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{240D29B0-90EE-40A2-AD89-774A853E5340}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C3CCAF6F-28EB-467A-97D5-FE03818A57A7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D2A553F1-7611-4A7F-A159-1BC2A2FF9CE4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F9B766F0-9B03-46DB-A606-88A8E911FAA8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6B97FFC2-265A-4D18-AA3A-548E59D885E0}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{40D5D850-AC28-43A7-8455-95ED9444476C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E374F7F4-55C5-46F5-9C86-6EE161F7A7C9}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A9256CFC-1C11-457F-9F8C-16B61A834305}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F970A3D0-30F3-406C-B51B-D6B65520D7C7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9D35A0A2-93AF-4EE6-8D9E-478757A78F5E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D06FC8D4-66E8-401A-BD65-8CF943C35DE5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [UDP Query User{434C97A3-AA31-40AE-B896-B74555F819F7}C:\users\hp\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\hp\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{F4A159A5-1196-449F-9842-6E3E8423FA81}C:\users\hp\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\hp\appdata\local\akamai\netsession_win.exe
FirewallRules: [{672C6317-FB94-43EB-B635-007DDA880CFE}] => (Allow) C:\Users\HP\Downloads\VideoPerformerSetup (1).exe
FirewallRules: [{23915B54-3A99-49D6-A0F7-1347D4A34C73}] => (Allow) C:\Users\HP\Downloads\VideoPerformerSetup (1).exe
FirewallRules: [{49E6529A-20EA-4F8E-966F-70A79BD61637}] => (Allow) C:\Users\HP\Downloads\VideoPerformerSetup.exe
FirewallRules: [{FAB33320-CE75-49B7-B30F-24FA26F42453}] => (Allow) C:\Users\HP\Downloads\VideoPerformerSetup.exe
FirewallRules: [{CFE45F69-0152-4E39-9985-4466EA1F34DB}] => (Allow) LPort=1900
FirewallRules: [{69760FC3-10F9-4A08-821E-089917CDE05C}] => (Allow) LPort=2869
FirewallRules: [{9990EC68-E558-4940-BF68-77F4AAE397AC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{55EF0FA1-8EE3-4EC4-A3B6-9F754A2E872B}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{D0307A22-5E62-4E12-8F79-3A6C3D3660B2}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{7647AE3D-187E-4713-9BF7-7EA40EAD7F0A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{26F32E2D-209C-4169-91C7-AD4F3921FEA5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{AE6EBFF2-C261-4958-A53F-27F490E80E27}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{76B0EE6E-F2AF-44F9-8C36-0D5B3FD53DCA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7D416815-F6FA-4288-BFA1-845D5CECF941}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BBA12AD4-14DB-4BAF-BDF4-179B7D57E9F0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{687944BF-DB4B-4CF7-8415-0DF239EF7065}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{67FC3F5D-D669-494C-BA07-319DAECA001E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D5F865B5-00C2-4C3A-B9D2-46F1A0F7ACE3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B58D4FC7-2099-4D01-A59E-BBD27E8C9C96}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{C8F8AAAD-C85F-4C58-BF89-5AB73D0B452E}C:\users\hp\appdata\local\mail.ru\gamecenter\gamecenter@mail.ru.exe] => (Block) C:\users\hp\appdata\local\mail.ru\gamecenter\gamecenter@mail.ru.exe
FirewallRules: [UDP Query User{3905AADC-36C1-4914-87A1-38B921917B8D}C:\users\hp\appdata\local\mail.ru\gamecenter\gamecenter@mail.ru.exe] => (Block) C:\users\hp\appdata\local\mail.ru\gamecenter\gamecenter@mail.ru.exe
FirewallRules: [{556CD6F7-89FD-4AE5-8742-F07B41EFE276}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{87BE7E7B-DED1-465E-B624-2F036C9F32C7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9668310A-69FD-4A59-8271-1E1EDC150D09}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BAA912D5-89F1-4AAB-A697-AA5EDA1F349B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D2868235-A202-467C-9173-2538567D8C36}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9E7BBFF7-16B9-4039-B0F4-02CFAC9520F7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BF0EF3BB-210F-4CBF-BF12-5A7E76E5E086}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{923CE724-90DC-442C-A82F-394D51545520}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C16FE4D2-A58C-443C-A458-835F236C3A6D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BD837EDC-B82C-4D41-B76A-FAA8B23AB8AF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{127EF742-91AF-498B-B9E0-AB2BBCCF265B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3E2CD19B-0CCE-4376-8498-C2AB10717A66}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E884976-9C69-42B3-BA16-AE0A3146CB5B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2E3AE94F-1027-4B18-B06A-E2AAAC181658}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DA43461D-AF18-4798-A5CD-484DE8C0D4E4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F6CC1C6C-1057-44AC-8FFA-A4BA6F0748B5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{61D012B2-9F18-4F76-A53A-75E5D75EB033}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9C33B8D9-12FE-4161-834B-84B0201B786B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DBD6C599-46EA-48DE-BE74-B3BEB8DBFCCA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{BF725BC3-63F5-481C-A42C-F7B2A1494222}C:\users\hp\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\hp\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{72EBE10A-3FB4-450A-A5A4-228A54A39ADD}C:\users\hp\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\hp\appdata\local\akamai\netsession_win.exe
FirewallRules: [{C0B486BA-67DC-4C72-892F-3F41C530A530}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{8B3D049A-860E-472B-AB5A-5A2CD5994067}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DA256FAE-9E71-434A-9CC3-6085E89C79C1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{5BE97B07-F48A-4C7F-9EFA-8AB769CBD3B3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{51A3F8EF-1B17-4A14-AF01-4C4EF75B2942}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CC6669BF-BBF7-4929-8EA2-D4850B422403}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7BEA4A91-DF07-4E4D-B43C-DDE4A5EF32C2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D96E3EF6-E8EA-4B2C-891B-3E52CC9611A6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C1D880B8-5A61-42A1-87B5-833B2806CADB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E8EE6707-99DA-4B50-9953-AB6855A2BA13}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0D5A9B36-55D6-446C-A2AE-E12219D1F7A1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4D650A68-C739-440C-851E-F5F7FD38F18E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1A4F884F-12F0-449F-8EB5-DD871300332C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{884C9969-17FC-425B-933B-98721AAE5B5E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{CCBCE541-9B10-4D30-9766-27E25DBF2D17}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D82FB43F-1883-4314-9592-F6A9537551AA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F82555C5-03EC-42FB-A148-44DF7BB37D9A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{AEA789FF-39CC-4B3F-BE80-A4FCC343D10C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{EA4BFE88-97B1-4C6E-8A49-9AA1E469CE9D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{37972B5A-B10F-41ED-832A-9F964FF6C88E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{C28B5E82-E122-438A-B393-023F81584006}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{581112E1-696F-41E0-AB11-A9149AB73436}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{095460BF-7FCA-4F6C-92B0-A065C47B776C}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{B90E463D-2897-4644-A2C9-3E6F6EC8F0E1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{04BCF110-1434-4CA5-8A00-8DEFDAC39F8A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{6499C949-E3C9-434C-8DE4-998474FBCBA1}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2AE78E1A-859A-4217-9E5E-A171B0F450CA}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{80351C0E-596B-4057-8F90-1BBDE99E34C4}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{4C5F3409-4A34-427D-AE55-906BFDB3BEA8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{119541EF-2D84-4D6C-A605-C62B9A9312CB}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{9D4AC32D-DC66-4F40-8BA1-F850E4F041C3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{F32F3740-7B7B-4A19-87EB-D30D9E9F0911}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{330E6868-4AFD-4A53-9C54-1606A14917A2}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{D13CE3B4-D3F9-47CF-A179-24E841D5EAD6}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{A3DFAC17-58B2-414D-970C-A5E12B57371A}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{277B5F4B-0882-43F2-9A95-2A159552F72D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{2DB048F7-86C3-495D-9648-0A8C1208DABD}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1E4E6816-611C-4569-895A-D1F389961EB8}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{BB3D18A4-AE0C-45E0-97DF-2F092DEFFB6E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{DDC1635A-EFB6-4C18-A22F-5C6E62646292}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{3352DBB0-0440-4A6D-BB9B-7AC2799D6999}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0D9ACE9C-B6EC-4C18-AC39-4F650D767BF5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{73606971-9468-412B-8B2D-549EFD3CE5FF}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{7F23168C-8574-4DEB-9E05-FE65F4EE9FA3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [TCP Query User{9737E393-5759-4B92-8B74-5CB4AE18AADE}C:\users\hp\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\hp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{417C9F35-448C-40B2-89AF-1236CFE4FDAD}C:\users\hp\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\hp\appdata\roaming\spotify\spotify.exe
FirewallRules: [{152810D6-3EE7-4445-A453-93A51B5B2015}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{76EF961A-A5C0-49E0-A936-E517E5F8E9E3}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{FD1BBC6F-B08D-4947-84E8-DEB255E28B0E}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{78DD4B75-CE4B-482E-9286-0CF7F10B91E5}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{0C4402D3-3E1E-432B-90D6-6B8DEEBA916B}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{1F0CE691-712B-4455-AA84-5464E4E3AFF4}] => (Allow) LPort=53000
FirewallRules: [{99B668BB-2A93-4E3F-93DF-D038F403B3CA}] => (Allow) LPort=52000
FirewallRules: [TCP Query User{5AE32623-ECB6-425B-9E5C-277D0FDAF89F}C:\program files\bohemia interactive\arma demo\armademo.exe] => (Allow) C:\program files\bohemia interactive\arma demo\armademo.exe
FirewallRules: [UDP Query User{BC011901-7A51-4AD3-8583-7A8C529646E3}C:\program files\bohemia interactive\arma demo\armademo.exe] => (Allow) C:\program files\bohemia interactive\arma demo\armademo.exe
FirewallRules: [{6CA06C4A-0447-4B57-943A-E2C1C90EB408}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{08CA7946-9C29-4FB8-ADA9-4830B2FB0829}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F3181C95-4C37-4BA3-8350-CC5F00DAF0FE}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{10F18B87-7F3A-4747-99E7-9BA04EFB15F0}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{C600BDA3-1DB9-4350-AC69-5BBC4FBB909D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{1E6C4E5D-39FF-433E-AB0B-1B648DE7725E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{C94EED85-FDCD-49A0-8D89-C9ABAF743893}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cry of Fear\CoFLaunchApp.exe
FirewallRules: [{EBCECBAB-D15C-48C3-AE6A-5903338AEC5D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cry of Fear\CoFLaunchApp.exe
FirewallRules: [{5A0CE2C0-382A-4A59-A099-554F406746B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{E4045A13-F24C-4C6D-A974-B46DF44560AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [TCP Query User{9EA36164-95AA-4373-9F64-1CA2E7C4F66A}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [UDP Query User{FC78917D-A1B3-448C-A6CB-2B31CA69BC37}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [{F743E7B3-B31C-4E1A-B8FD-300DB314E27F}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{196AC14A-EE27-4A8A-8476-5761E98413BE}C:\users\hp\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\hp\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{5EE74F2D-BC1C-41EB-BFCE-37C916707AF1}C:\users\hp\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\hp\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{08C91461-1FEA-4D94-8623-2D46BD51F151}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [UDP Query User{15A17A4A-E1C0-40DC-B4F2-6D1655F7A7F1}C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cry of fear\cof.exe
FirewallRules: [{6FACB36C-E4C8-40DB-B900-3096AAFBC88A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\brainbread2\hl2.exe
FirewallRules: [{8D209586-73F4-41EB-946D-627FA1581959}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\brainbread2\hl2.exe
FirewallRules: [{A461D0CF-9F9E-4F69-ADDE-42DB66F7210E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno Online\nw.exe
FirewallRules: [{60C5CB51-0891-44A6-A9EB-711701E05717}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Anno Online\nw.exe
FirewallRules: [{3E926C57-708F-4F5D-843C-61B9C76F1140}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{7F6501C0-3AB2-4D61-9D05-93D7903B691B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [TCP Query User{C6F9BD41-52D1-460C-AA6B-A193561111FA}C:\programdata\ableton\live 9 lite\program\ableton live 9 lite.exe] => (Allow) C:\programdata\ableton\live 9 lite\program\ableton live 9 lite.exe
FirewallRules: [UDP Query User{8CB60933-7022-4957-A469-E0974B22D98E}C:\programdata\ableton\live 9 lite\program\ableton live 9 lite.exe] => (Allow) C:\programdata\ableton\live 9 lite\program\ableton live 9 lite.exe
FirewallRules: [{2807E630-6F67-4B2F-A442-E00378054676}] => (Allow) C:\Users\HP\AppData\Local\Temp\MPCOnline\MPCDownload.exe
FirewallRules: [{24AEEB3B-4053-4ECA-A9A1-6D4B67FC9DB4}] => (Allow) C:\Users\HP\AppData\Local\Temp\MPCOnline\MPCDownload.exe
==================== Wiederherstellungspunkte =========================
11-09-2016 11:04:07 Geplanter Prüfpunkt
16-09-2016 18:47:16 Malwarebytes Anti-Rootkit Restore Point
20-09-2016 14:13:44 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (09/20/2016 04:37:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4402625
Error: (09/20/2016 04:37:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4402625
Error: (09/20/2016 04:37:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/20/2016 04:37:11 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4401562
Error: (09/20/2016 04:37:11 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4401562
Error: (09/20/2016 04:37:11 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/20/2016 03:23:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7906
Error: (09/20/2016 03:23:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7906
Error: (09/20/2016 03:23:58 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (09/20/2016 03:23:56 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6797
Systemfehler:
=============
Error: (09/20/2016 09:49:00 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler:
Es wird bereits eine Instanz des Dienstes ausgeführt.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Intel(R) Management and Security Application Local Management Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) ME Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Update Service Daemon" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Apple Mobile Device Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (09/20/2016 09:48:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Unchecky" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
CodeIntegrity:
===================================
Date: 2016-09-20 22:11:43.307
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 22:11:43.074
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 21:50:17.198
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 21:50:16.970
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 14:13:44.129
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 14:13:43.884
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 13:04:26.088
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 13:04:25.850
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 13:03:53.123
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-09-20 13:03:52.906
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-3330 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 27%
Installierter physikalischer RAM: 8147.3 MB
Verfügbarer physikalischer RAM: 5908.92 MB
Summe virtueller Speicher: 8547.3 MB
Verfügbarer virtueller Speicher: 6439.7 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:918.38 GB) (Free:595.37 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Recovery Image) (Fixed) (Total:11.21 GB) (Free:1.36 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 076766A4)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
21.09.2016, 13:37
| #20 |
| /// TB-Ausbilder | startgo123 Servus, du machst das wirklich alles vorbildlich! Jetzt kommt die dritte und letzte Bereinigungswelle.   Wir entfernen die letzten Reste und kontrollieren nochmal alles.  Hinweis: Der Suchlauf mit ESET kann länger dauern. Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter start
CloseProcesses:
DeleteKey: HKEY_CURRENT_USER\Software\Classes\Applications\lollipop_11221407.exe
DeleteKey: HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1004\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_11221407
DeleteKey: HKEY_CURRENT_USER\Software\AppDataLow\Software\ElectroLyrics-1
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ElectroLyrics-1
DeleteKey: HKEY_USERS\S-1-5-21-3930845653-3837040866-4171826123-1001\Software\AppDataLow\Software\ElectroLyrics-1
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\HDWallpaper
DeleteKey: HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2
ShortcutWithArgument: C:\Users\HP\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
Reboot:
end
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 setze bitte Firefox wie folgt zurück: Firefox zurücksetzen CHR::: Setze Google Chrome nach dieser Anleitung zurück. Schritt 3 ESET Online Scanner
Schritt 4 Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
Schritt 5
 Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?Bitte poste mit deiner nächsten Antwort
|
|
22.09.2016, 12:47
| #21 |
| | startgo123 hm, ich finde in Schritt 2 kein "Einstellungen zurücksetzen" unter "Erweiterte Einstellungen"  |
|
22.09.2016, 16:04
| #22 | |
| /// TB-Ausbilder | startgo123Zitat:
Doch, ist vorhanden, ganz unten. |
|
22.09.2016, 16:32
| #23 |
| | startgo123 Nein, eben nicht, find das auch seltsam, aber nach "System" kommt nichts mehr |
|
23.09.2016, 20:10
| #24 | |
| /// TB-Ausbilder | startgo123Zitat:
 Die Adware hat Google Chrome in den Entwickler-Modus gesetzt. Am Besten machst du jetzt folgendes: Deinstalliere Google Chrome über die Systemsteuerung und setze einen Haken bei "Alle Browserdaten löschen" (oder so ähnlich). Dann Google Chrome neu installieren. Dann weiter mit den anderen Schritten. |
|
25.09.2016, 15:25
| #25 |
| | startgo123 Ok, gut. Bin noch da, war nur das Wochenende über fernab des PC's beschäftigt. ESET läuft gerade, lässt sich aber viiel Zeit... Oh,und noch etwas: Spotify, welches von meinem Freund fleißig genutzt wird, funktioniert plötzlich nicht mehr. Es erscheint die Meldung "Das Programm reagiert nicht", woran kann das liegen? Wurde nichts neu installiert bzw. deinstalliert. Geändert von caloda (25.09.2016 um 15:40 Uhr) |
|
26.09.2016, 15:50
| #26 |
| /// TB-Ausbilder | startgo123 Spotify kannst du nach der Bereinigung ggf. auch neu installieren. Ich warte dann mal auf die Logdateien. |
|
26.09.2016, 16:39
| #27 |
| | startgo123 ESET gibt keine Logdatei her, unter "C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt)" wird nichts gefunden |
|
27.09.2016, 15:29
| #28 | |
| /// TB-Ausbilder | startgo123Zitat:
|
|
30.09.2016, 21:09
| #29 |
| /// TB-Ausbilder | startgo123 Fehlende Rückmeldung Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten. PM an mich falls Du denoch weiter machen willst. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und einen eigenen Thread erstellen! |
|
| Themen zu startgo123 |
| .com, abend, angezeigt, bedenklich, bereich, deinstalliere, deinstallieren, download, einfach, guten, interne, internetverbindung, loswerden, natürlich, pop-ups, programme, schweigen, suchmaschine, systems, systemsteuerung, verbindung, versucht, werbung, woche, wochen |
und 
und speichere die Logdatei auf Deinem Desktop.
Linear-Darstellung
