| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder einWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
05.12.2016, 16:38
| #1 |
| |  Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Hallo! Also, ich habe folgendes Problem: Mein Laptop ist seit einer gewissen Zeit um einiges langsam geworden bzw. er friert immer ab und zu ein. Beim Boot es alles noch normal, jedoch, wenn ich auf den Desktop zugreifen will, friert der Laptop ein, ist dann plötzlich beim Desktop, alles ist fertig, also Verknüpfungen werden angezeigt, die Taskleiste wird angezeigt und so weiter. Ich starte danach immer meinen Chrome-Browser, und alles ist normal. Wenn ich z.B ein YouTube Video starte, und währenddessen eine andere Seite öffnen möchte, lädt die Seite erstmal ein wenig, und dann hängt sich der Browser und auch manchmal der Laptop auf. Nach 1-2 Minuten läuft alles wieder. Die Spiele, welche ich spiele, hängen auch. Das alles ist passiert, nachdem ich ein bestimmtes Programm deinstalliert hatte. Es hatte während der Deinstallation gefragt, ob ich die & die Dateien löschen soll, diese wären jedoch für meinen Laptop wichtig. Ich dachte mir, dass diese Dateien sowieso nur vom Programm gemacht wurden, und habe sie mit gelöscht. Seitdem läuft mein Laptop schlecht. Übrigens: Hier sind meine Logs. Diese sind von folgenden Programmen: Farbar's Recovery Scan Tool und Malwarebytes Anti-Malware. FRST.txt: Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 04-12-2016 durchgeführt von Alex (Administrator) auf ASUSX751L (05-12-2016 16:11:32) Gestartet von C:\Users\Alex\Downloads Geladene Profile: Alex (Verfügbare Profile: Alex) Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe (Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe () C:\Windows\System32\igfxTray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Agent.exe (Mega Limited) C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSPanel.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation) HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-05-05] (Adobe Systems Incorporated) HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ASUSWSLoader.exe [63272 2014-12-04] () HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software) HKLM-x32\...\Run: [Adobe Creative Cloud] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-11-11] (LogMeIn Inc.) HKLM-x32\...\RunOnce: [20161125] => "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" "C:\Program Files\AVAST Software\Avast\61ba6b52-4adf-49e4-aaf3-54fc7445d4de\dba3b038-af7f-43c2-a9c2-dbe2af7a2e17.dll",_stage2@16 HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd) HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation) HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd) HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.) HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [IEHelper] => "javaw -jar C:\Users\Alex\Downloads\boot.jar" HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\MountPoints2: {4cdea4e1-a988-11e5-8252-806e6f6e6963} - "E:\start.exe" ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] () ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] () ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] () ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-12] (AVAST Software) ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] () Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-05-11] ShortcutTarget: MEGAsync.lnk -> C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited) GroupPolicy: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\..\Interfaces\{33046791-40E4-440D-8253-ACF61356C78B}: [NameServer] 10.0.0.1 Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [NameServer] 10.0.0.1 Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [DhcpNameServer] 192.168.112.254 Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 10.0.0.1 Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [DhcpNameServer] 192.168.2.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540276230&GUID=26D1A6A5-25F9-4376-8440-41555517F554 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540591989&GUID=26D1A6A5-25F9-4376-8440-41555517F554 HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\S-1-5-21-65538100-1531695327-3227344209-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-20] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-20] (Oracle Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-10-30] (Microsoft Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software) BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-01-29] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-30] (Microsoft Corporation) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.) StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-23] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-12-05] FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-12-05] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-20] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-20] (Oracle Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] () FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy.dll [2012-12-31] ( ROBLOX Corporation) FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher64 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy64.dll [2012-12-31] ( ROBLOX Corporation) Chrome: ======= CHR DefaultProfile: tazoygroulychabch CHR HomePage: tazoygroulychabch -> hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU.. CHR StartupUrls: tazoygroulychabch -> "hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..","hxxp://www.trotux.com/?z=9ebbd55a21dd395f401bd15g9zcqbt0e4z5o4gdb9g&from=isr&uid=HGSTXHTS545050A7E680_TMA51DTFGAYNTRGAYNTRX&type=hp" CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default [2016-12-03] CHR Extension: (Google Präsentationen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-31] CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-31] CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31] CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\binlebahppinoanabipmieceeaakflee [2016-04-01] CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-31] CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-10] CHR Extension: (Google-Suche) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31] CHR Extension: (SlitherPlus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-05-09] CHR Extension: (Google Tabellen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-31] CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16] CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-10] CHR Extension: (Pushcontrol) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlimcdoaokfndjofnhhlhbnhkjjfkpob [2016-05-15] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03] CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-31] CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch [2016-12-05] <==== ACHTUNG CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-03] CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\binlebahppinoanabipmieceeaakflee [2016-06-19] CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26] CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod, Bots) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-10-01] CHR Extension: (Floating for YouTube™ Extension) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2016-09-02] CHR Extension: (Avast SafePrice) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-14] CHR Extension: (EditThisCookie) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-10-22] CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-03] CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-10-26] CHR Extension: (Floating for YouTube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2016-09-02] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15] CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-27] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden> ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [737984 2016-06-03] (Adobe Systems Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated) R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe [71168 2014-12-04] (ASUS Cloud Corporation) [Datei ist nicht signiert] S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-12] (AVAST Software) S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.) S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2016-10-30] (Microsoft Corporation) S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd) R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation) R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation) R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation) R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation) R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2627080 2016-11-11] (LogMeIn Inc.) S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-11-19] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert] R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-11-11] (LogMeIn, Inc.) S3 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [157928 2015-12-02] (McAfee, Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation) S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [438272 2015-08-06] (PowerUp Software, LLC) [Datei ist nicht signiert] R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-12-03] (AVAST Software) R3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-12] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-12] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-12] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-12] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-15] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-12] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-16] (AVAST Software) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4226560 2014-10-17] (Qualcomm Atheros Communications, Inc.) R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2014-09-19] (ASUS Corporation) S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems) S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. ) S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation) R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation) R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation) R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-01-27] (Disc Soft Ltd) R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-01-27] (Disc Soft Ltd) R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2016-11-11] (LogMeIn Inc.) R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( ) S3 Larmkanal; C:\Windows\system32\DRIVERS\Larmkanal.sys [33144 2015-04-23] (Adoriasoft LLC) S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-12-04] (Malwarebytes) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation) S3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-12-02] (McAfee, Inc.) S3 mt7612US; C:\Windows\system32\DRIVERS\mt7612US.sys [376200 2015-12-08] (MediaTek Inc.) S3 Phosgene; C:\Windows\system32\DRIVERS\Phosgene.sys [32120 2015-06-08] () S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation) R1 VBoxUSBMon; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) S3 xb1usb; C:\Windows\System32\drivers\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation) R1 XQHDrv; C:\Windows\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation) R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation) S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X] U0 msahci; system32\drivers\msahci.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-12-05 16:11 - 2016-12-05 16:12 - 00033193 _____ C:\Users\Alex\Downloads\FRST.txt 2016-12-05 16:11 - 2016-12-05 16:11 - 00000000 ____D C:\FRST 2016-12-05 16:10 - 2016-12-05 16:10 - 02419200 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe 2016-12-05 16:07 - 2016-10-16 21:08 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\asw415F.tmp 2016-12-05 16:07 - 2016-09-22 13:09 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\asw412F.tmp 2016-12-05 16:07 - 2016-09-15 16:37 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3FD2.tmp 2016-12-05 16:07 - 2016-09-12 09:08 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2016-12-05 16:07 - 2016-09-12 09:08 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\asw417F.tmp 2016-12-05 16:07 - 2016-09-12 09:08 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\asw40CF.tmp 2016-12-05 16:07 - 2016-09-12 09:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\asw4031.tmp 2016-12-05 16:07 - 2016-09-12 09:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\asw40FF.tmp 2016-12-05 16:07 - 2016-09-12 09:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\asw40BF.tmp 2016-12-04 20:53 - 2016-12-04 20:53 - 00001217 _____ C:\is wichtig und so.txt 2016-12-04 17:07 - 2016-12-04 19:35 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-12-04 17:06 - 2016-12-04 17:06 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2016-12-04 17:06 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-12-04 17:06 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-12-04 17:06 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-12-04 17:05 - 2016-12-04 17:06 - 22851472 _____ (Malwarebytes ) C:\Users\Alex\Downloads\mbam-setup-2.2.1.1043.exe 2016-12-03 16:40 - 2016-12-03 16:40 - 444596224 _____ C:\Users\Alex\Downloads\Nicht bestätigt 169885.crdownload 2016-12-03 15:54 - 2016-12-03 15:54 - 00272124 _____ C:\unp30559605717924792.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00270611 _____ C:\unp30559605729800083.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00269666 _____ C:\unp30559605730424954.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00269591 _____ C:\unp30559605736363221.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00269060 _____ C:\unp30559605737612769.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00268582 _____ C:\unp30559605729175048.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00268139 _____ C:\unp30559605736831665.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00267808 _____ C:\unp30559605727768539.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00267711 _____ C:\unp30559605728706276.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00267546 _____ C:\unp30559605728237747.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00267008 _____ C:\unp30559605720893214.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00266473 _____ C:\unp30559605719955665.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00266333 _____ C:\unp30559605727143706.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00265623 _____ C:\unp30559605723081011.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00265521 _____ C:\unp30559605722612551.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00265485 _____ C:\unp30559605720424630.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00265375 _____ C:\unp30559605719330832.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00264885 _____ C:\unp30559605718862051.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00263909 _____ C:\unp30559605718393090.mdmp 2016-12-03 15:54 - 2016-12-03 15:54 - 00260151 _____ C:\unp30559605707611521.mdmp 2016-12-03 11:27 - 2016-12-05 15:48 - 00001539 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk 2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi 2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi 2016-11-27 19:45 - 2016-11-27 20:06 - 1284899903 _____ C:\Users\Alex\Downloads\Ms0ef1UE.part3.rar 2016-11-27 18:33 - 2016-11-27 19:31 - 00000003 _____ C:\Users\Alex\Downloads\Ms0ef1UE.part2.rar 2016-11-23 12:06 - 2016-11-23 12:06 - 00000000 ____D C:\Program Files\Common Files\DESIGNER 2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2 2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2 2016-11-22 13:06 - 2016-11-22 13:06 - 00002074 _____ C:\Users\Alex\Desktop\FL Studio 12 (64bit).lnk 2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\VST2 2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software 2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files (x86)\VstPlugins 2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\Documents\Image-Line 2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line 2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Image-Line 2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line 2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Program Files\Image-Line 2016-11-21 20:44 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\Image-Line 2016-11-21 19:46 - 2016-11-21 19:46 - 00000000 _____ C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A} 2016-11-18 13:59 - 2016-11-18 13:59 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Doborog 2016-11-15 18:28 - 2016-11-15 18:28 - 00000000 ____D C:\Users\Alex\Documents\OhSir 2016-11-15 14:45 - 2016-11-25 12:45 - 00000159 _____ C:\Users\Alex\AppData\Roaming\WB.CFG 2016-11-14 13:07 - 2016-12-03 11:42 - 00082936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys 2016-11-11 13:43 - 2016-11-11 13:43 - 00045680 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys 2016-11-09 19:51 - 2016-10-28 22:04 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-11-09 19:51 - 2016-10-28 22:04 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-11-09 13:07 - 2016-10-27 19:28 - 25763328 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-11-09 13:07 - 2016-10-27 19:19 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-11-09 13:07 - 2016-10-27 18:17 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-11-09 13:07 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-11-09 13:07 - 2016-10-25 15:11 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-11-09 13:07 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-11-09 13:07 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-11-09 13:07 - 2016-08-22 14:34 - 01628672 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2016-11-09 13:06 - 2016-11-02 21:48 - 00372568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2016-11-09 13:06 - 2016-11-02 21:48 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll 2016-11-09 13:06 - 2016-11-02 15:03 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2016-11-09 13:06 - 2016-11-02 15:00 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll 2016-11-09 13:06 - 2016-10-27 19:53 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-11-09 13:06 - 2016-10-27 19:51 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-11-09 13:06 - 2016-10-27 19:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-11-09 13:06 - 2016-10-27 19:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-11-09 13:06 - 2016-10-27 19:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2016-11-09 13:06 - 2016-10-27 19:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-11-09 13:06 - 2016-10-27 18:57 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2016-11-09 13:06 - 2016-10-27 18:49 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-11-09 13:06 - 2016-10-27 18:47 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-11-09 13:06 - 2016-10-27 18:46 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-11-09 13:06 - 2016-10-27 18:46 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-11-09 13:06 - 2016-10-27 18:44 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-11-09 13:06 - 2016-10-27 18:16 - 02920448 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-11-09 13:06 - 2016-10-27 18:03 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-11-09 13:06 - 2016-10-27 17:54 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-11-09 13:06 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-11-09 13:06 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-11-09 13:06 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-11-09 13:06 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-11-09 13:06 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-11-09 13:06 - 2016-10-22 17:57 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2016-11-09 13:06 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-11-09 13:06 - 2016-10-22 17:51 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2016-11-09 13:06 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-11-09 13:06 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-11-09 13:06 - 2016-10-22 17:45 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-11-09 13:06 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-11-09 13:06 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-11-09 13:06 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-11-09 13:06 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-11-09 13:06 - 2016-10-13 20:06 - 01385280 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2016-11-09 13:06 - 2016-10-13 20:06 - 01124376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll 2016-11-09 13:06 - 2016-10-12 09:01 - 00377176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2016-11-09 13:06 - 2016-10-11 21:21 - 00497448 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll 2016-11-09 13:06 - 2016-10-11 21:21 - 00399776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll 2016-11-09 13:06 - 2016-10-11 19:34 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2016-11-09 13:06 - 2016-10-11 18:47 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\input.dll 2016-11-09 13:06 - 2016-10-11 17:55 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll 2016-11-09 13:06 - 2016-10-10 22:17 - 00444248 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-11-09 13:06 - 2016-10-10 22:17 - 00333656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-11-09 13:06 - 2016-10-09 23:59 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys 2016-11-09 13:06 - 2016-10-09 00:12 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-11-09 13:06 - 2016-10-08 23:53 - 03754496 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll 2016-11-09 13:06 - 2016-10-08 23:21 - 01445376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-11-09 13:06 - 2016-10-08 23:18 - 00840704 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2016-11-09 13:06 - 2016-10-08 23:07 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll 2016-11-09 13:06 - 2016-10-08 23:02 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-11-09 13:06 - 2016-10-08 22:49 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll 2016-11-09 13:06 - 2016-10-08 22:21 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll 2016-11-09 13:06 - 2016-10-08 02:34 - 01660040 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2016-11-09 13:06 - 2016-10-08 02:34 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2016-11-09 13:06 - 2016-10-04 21:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys 2016-11-09 13:06 - 2016-10-04 21:23 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll 2016-11-09 13:06 - 2016-10-04 21:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll 2016-11-09 13:06 - 2016-10-04 21:08 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll 2016-11-09 13:06 - 2016-09-09 23:52 - 00921944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys 2016-11-09 13:06 - 2016-09-09 23:14 - 00275800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2016-11-09 13:06 - 2016-09-09 15:15 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll 2016-11-09 13:06 - 2016-09-09 15:09 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll 2016-11-09 13:06 - 2016-09-09 15:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2016-11-09 13:06 - 2016-09-09 15:03 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll 2016-11-09 13:06 - 2016-09-09 15:02 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll 2016-11-09 13:06 - 2016-09-09 14:38 - 00446124 _____ C:\Windows\system32\ApnDatabase.xml 2016-11-09 13:06 - 2016-09-03 19:20 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\iscsidsc.dll 2016-11-09 13:06 - 2016-09-03 19:06 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\iscsiexe.dll 2016-11-09 13:06 - 2016-09-03 18:21 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsidsc.dll 2016-11-09 13:06 - 2016-09-03 17:12 - 00512512 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2016-11-09 13:06 - 2016-09-03 17:05 - 01094656 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2016-11-09 13:06 - 2016-09-03 16:58 - 00397824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2016-11-09 13:06 - 2016-09-02 15:05 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll 2016-11-09 13:06 - 2016-09-02 15:05 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll 2016-11-09 13:06 - 2016-09-01 15:33 - 00377856 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll 2016-11-09 13:06 - 2016-09-01 15:33 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll 2016-11-09 13:06 - 2016-09-01 15:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll 2016-11-09 13:06 - 2016-08-30 15:11 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll 2016-11-09 13:06 - 2016-08-30 03:45 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll 2016-11-09 13:06 - 2016-08-30 03:18 - 00871936 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll 2016-11-09 13:06 - 2016-08-30 03:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll 2016-11-09 13:06 - 2016-08-30 03:03 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-12-05 16:09 - 2016-05-10 06:00 - 00001940 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2016-12-05 16:07 - 2016-01-06 19:47 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2016-12-05 16:05 - 2016-10-25 18:01 - 00000000 _____ C:\Windows\SysWOW64\last.dump 2016-12-05 15:54 - 2016-10-07 13:12 - 00000000 ____D C:\Users\Public\Documents\AdobeGC 2016-12-05 15:53 - 2015-12-29 16:50 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-65538100-1531695327-3227344209-1001 2016-12-05 15:48 - 2015-12-29 16:48 - 00000093 _____ C:\Users\Alex\AppData\Roaming\sp_data.sys 2016-12-05 15:47 - 2016-06-27 09:39 - 00000000 ____D C:\Users\Alex\AppData\Local\LogMeIn Hamachi 2016-12-05 15:43 - 2016-05-21 07:20 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-12-05 15:41 - 2016-05-21 07:20 - 00001138 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-12-05 15:27 - 2015-12-29 16:50 - 00000000 __RDO C:\Users\Alex\OneDrive 2016-12-05 15:27 - 2015-12-29 16:41 - 00000000 ____D C:\Users\Alex 2016-12-05 15:25 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-12-05 14:06 - 2005-04-26 02:05 - 00053248 _____ C:\Windows\SysWOW64\zlib.dll 2016-12-04 21:09 - 2016-07-20 20:16 - 00000000 ____D C:\Users\Alex\AppData\Local\uhitghojotypcsp 2016-12-04 21:08 - 2016-08-09 11:22 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71} 2016-12-04 21:08 - 2016-05-15 09:37 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CentralPicture 2016-12-04 16:30 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf 2016-12-03 20:21 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI 2016-12-03 19:11 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness 2016-12-03 16:23 - 2015-04-11 13:00 - 00773008 _____ C:\Windows\system32\perfh007.dat 2016-12-03 16:23 - 2015-04-11 13:00 - 00162310 _____ C:\Windows\system32\perfc007.dat 2016-12-03 16:23 - 2014-11-22 02:01 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI 2016-12-03 15:46 - 2016-08-09 11:23 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99} 2016-12-03 11:31 - 2016-01-02 13:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TS3Client 2016-12-03 11:30 - 2016-10-20 17:32 - 00000000 _____ C:\Windows\SysWOW64\nativelog.txt 2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi 2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi 2016-12-03 10:53 - 2016-09-15 16:25 - 00000940 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk 2016-11-26 19:07 - 2015-12-29 17:03 - 00000000 ____D C:\Users\Alex\AppData\Roaming\.minecraft 2016-11-26 17:25 - 2016-09-28 18:12 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Landfall 2016-11-26 17:13 - 2016-01-11 13:56 - 00000000 ____D C:\Games 2016-11-24 20:56 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\WhatsApp 2016-11-24 20:54 - 2016-08-05 12:47 - 00000000 ____D C:\Users\Alex\Desktop\Fusion364 2016-11-24 20:32 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Local\WhatsApp 2016-11-24 20:31 - 2016-06-26 15:42 - 00002211 _____ C:\Users\Alex\Desktop\WhatsApp.lnk 2016-11-24 20:31 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp 2016-11-24 20:30 - 2016-06-26 15:41 - 00000000 ____D C:\Users\Alex\AppData\Local\SquirrelTemp 2016-11-24 19:48 - 2015-12-29 16:51 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype 2016-11-24 19:21 - 2015-04-11 05:37 - 00000000 ____D C:\ProgramData\Skype 2016-11-24 19:20 - 2016-02-17 16:06 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-11-23 15:58 - 2015-12-23 16:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-11-23 12:07 - 2013-08-22 16:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2016-11-23 12:06 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-11-23 12:05 - 2016-04-28 15:33 - 00000000 ____D C:\Program Files\Microsoft Office 2016-11-16 17:46 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache 2016-11-15 18:56 - 2016-01-11 13:45 - 00000000 ____D C:\Windows\system32\MRT 2016-11-15 18:51 - 2016-01-11 13:45 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-11-14 13:38 - 2016-05-21 07:21 - 00002227 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-11-14 13:38 - 2015-12-31 19:27 - 00002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-11-14 13:13 - 2016-05-11 15:37 - 00000000 ____D C:\Users\Alex\AppData\Local\MEGAsync 2016-11-10 18:53 - 2016-01-02 18:53 - 00388608 ___SH C:\Users\Alex\Desktop\Thumbs.db 2016-11-10 12:30 - 2016-01-07 14:32 - 00189952 ___SH C:\Users\Alex\Documents\Thumbs.db 2016-11-09 19:48 - 2013-08-22 15:44 - 05146336 _____ C:\Windows\system32\FNTCACHE.DAT 2016-11-09 19:41 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData 2016-11-09 13:23 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2016-06-25 07:49 - 2016-06-25 07:49 - 0000000 _____ () C:\Users\Alex\AppData\Roaming\dc.ogt 2015-12-29 16:48 - 2016-12-05 15:48 - 0000093 _____ () C:\Users\Alex\AppData\Roaming\sp_data.sys 2016-11-15 14:45 - 2016-11-25 12:45 - 0000159 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG 2016-02-04 18:29 - 2016-02-04 18:29 - 0000003 _____ () C:\Users\Alex\AppData\Local\updater.log 2016-02-04 18:29 - 2016-02-05 12:16 - 0000059 _____ () C:\Users\Alex\AppData\Local\UserProducts.xml 2016-07-27 14:21 - 2016-07-27 14:21 - 0000000 _____ () C:\Users\Alex\AppData\Local\{127B88D2-2B72-44AB-825B-326071D547F3} 2016-11-21 19:46 - 2016-11-21 19:46 - 0000000 _____ () C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A} 2015-12-30 13:30 - 2015-12-30 13:30 - 0000057 _____ () C:\ProgramData\Ament.ini 2015-12-23 16:46 - 2015-12-23 16:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-04-11 05:36 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-11-16 14:08 ==================== Ende von FRST.txt ============================ Addition.txt: Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 04-12-2016 durchgeführt von Alex (05-12-2016 16:14:10) Gestartet von C:\Users\Alex\Downloads Windows 8.1 (Update) (X64) (2015-12-29 15:43:21) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-65538100-1531695327-3227344209-500 - Administrator - Disabled) Alex (S-1-5-21-65538100-1531695327-3227344209-1001 - Administrator - Enabled) => C:\Users\Alex Gast (S-1-5-21-65538100-1531695327-3227344209-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-65538100-1531695327-3227344209-1003 - Limited - Enabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) µTorrent (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\uTorrent) (Version: 3.4.9.42606 - BitTorrent Inc.) Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.29.0 - Mirillis) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.7.0.272 - Adobe Systems Incorporated) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach) Assassin's Creed IV Black Flag Version 1.07 (HKLM-x32\...\{0616F772-5099-41A0-A20F-339C74FDAE95}_is1) (Version: 1.07 - Ubisoft) Assassin's Creed Liberation HD (HKLM-x32\...\Assassin's Creed Liberation HD_is1) (Version: - ) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.2 - ASUS) ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.8 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.0.8 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.01.0003 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0034 - ASUS) Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version: - Audacity Team) Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software) BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform) Clustertruck (HKLM-x32\...\1661530902_is1) (Version: 2.0.0.2 - GOG.com) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd) Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.20 - ASUSTek Computer Inc.) DkZ Studio (HKLM-x32\...\DkZ Studio0.9.0) (Version: - ) Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team) Evernote v. 5.8.3 (HKLM-x32\...\{404B3FB8-A820-11E4-83FC-00163E98E7D6}) (Version: 5.8.3.6507 - Evernote Corp.) FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line) FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line) Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Foxit PhantomPDF (HKLM-x32\...\{045A0488-55C1-45B1-9992-4B4134904D61}) (Version: 7.0.59.127 - Foxit Software Inc.) GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.) Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden Gunman Clive (HKLM-x32\...\R3VubWFuQ2xpdmU=_is1) (Version: 1 - ) HashCheck Shell Extension (x86-32) (HKLM-x32\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu) HashCheck Shell Extension (x86-64) (HKLM\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu) HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{FD79E5D2-5CFE-49C2-9461-D011D1355696}) (Version: 32.2.188.47710 - Hewlett-Packard Co.) HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.37 - Hewlett-Packard Company) IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line) Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4013 - Intel Corporation) Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version: - ) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.541 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.541 - LogMeIn, Inc.) Hidden LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.) Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Maxx Audio Installer (x64) (Version: 1.6.4882.94 - Waves Audio Ltd.) Hidden McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.207 - McAfee, Inc.) MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) Microsoft Office Professional 2016 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 16.0.7466.2038 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\OneDriveSetup.exe) (Version: 17.3.6517.0809 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.1 - Notepad++ Team) NVIDIA Graphics Driver 333.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 333.02 - NVIDIA Corporation) NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden One Piece Pirate Warriors 3 (HKLM-x32\...\One Piece Pirate Warriors 3_is1) (Version: - ) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version: - ) PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC) Pinnacle Game Profiler (HKLM-x32\...\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}) (Version: 8.2.8 - PowerUp Software) Project64 version 2.1.0.1 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.1.0.1 - ) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7409 - Realtek Semiconductor Corp.) ROBLOX Player for Alex (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation) Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version: - ) Shovel Knight (HKLM-x32\...\1207664823_is1) (Version: 2.11.0.18 - GOG.com) Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamSpeak 3 Client (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) Turbo Dismount (HKLM-x32\...\Turbo Dismount 1.0.0) (Version: 1.0.0 - Predator101) Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.) UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony) VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN) WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.15.458 - ASUS Cloud Corporation) WhatsApp (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\WhatsApp) (Version: 0.2.2478 - WhatsApp) WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent) Windows Driver Package - ASUS (ATP) Mouse (07/02/2014 1.0.0.228) (HKLM\...\7504488B89E0121B0737D63957491C9CD2633065) (Version: 07/02/2014 1.0.0.228 - ASUS) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS) WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileCoAuthLib64.dll () CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\RobloxProxy64.dll (ROBLOX Corporation) CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {08C5E6FF-0744-43FB-ACBD-6ED57CB97FF0} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2014-11-03] () Task: {138BFF39-3FF9-40A2-942F-21694D15D97B} - \Vwpystzach Debuger -> Keine Datei <==== ACHTUNG Task: {17696075-8254-4000-8B5B-63068DCE559A} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-12-19] (Realtek Semiconductor) Task: {3F373655-506A-4E58-8378-9CC1BF266EBE} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-12] (AVAST Software) Task: {4571B958-254C-4EE4-92C9-6A648ACA1108} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-04] (AVAST Software) Task: {472673E9-9F76-49A4-B669-BD65F4FF2A6E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation) Task: {7EBF6CE4-7D81-4023-9E40-37F631A03283} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.) Task: {8880B942-3D1F-4025-966A-93C0B8FB4029} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.) Task: {892C9053-7FAA-49D4-9C2D-44DE9367CC26} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd) Task: {9498B1B7-7650-45D3-8F5B-DFE3600CC88E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-11-15] (Microsoft Corporation) Task: {9EE072A7-9208-48CB-9415-2A708510A52B} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-03-03] (ASUSTek Computer Inc.) Task: {9F4E33A6-7BA5-45A6-97CF-19938518AB70} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-12-19] (Realtek Semiconductor) Task: {A507A68E-6030-454E-B007-2DC8D03BD35F} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.) Task: {AF5E162A-B56A-4D05-8C34-31F11559CAB5} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-04-02] (ASUS) Task: {BBB403B1-8F83-43C3-A303-2E026B32295A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation) Task: {BCE0555C-1697-4960-BBBF-E309345F9A90} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.) Task: {CF463C07-116E-41A4-8E32-9098C771F735} - System32\Tasks\{B44B185C-A133-48DB-A9BF-DFC8FC7F4A2A} => pcalua.exe -a C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71}\uninst.exe -c -FN="C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99}\updater.exe"-P=/Uninstall /s /noun /DelSelfDir Task: {D677EB6A-2AEA-4458-BA8E-43CBA342E7E0} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.) Task: {DE91AF5B-E72D-4B0C-B0FA-62E3A561D74A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard) Task: {E27BB922-3130-40D9-93FB-EBB3DB37C5D9} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-09-19] (AsusTek) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --app-id=jjphmlaoffndcnecccgemfdaaoighkel ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2ef8a18a9f0d801f\user0 - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --disable-quic ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-12-23 16:43 - 2014-04-08 22:06 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-05-01 15:13 - 2016-11-14 13:13 - 00592384 _____ () C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll 2014-12-19 11:51 - 2014-11-19 08:26 - 00457616 _____ () C:\Windows\system32\igfxTray.exe 2012-03-08 03:27 - 2012-03-08 03:27 - 00016384 _____ () C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ACVsWin.dll 2014-04-02 15:46 - 2014-04-02 15:46 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll 2014-04-02 15:46 - 2014-04-02 15:46 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll 2014-04-02 15:46 - 2014-04-02 15:46 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll 2014-04-02 15:46 - 2014-04-02 15:46 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll 2015-12-23 16:38 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2016-09-15 12:38 - 2016-03-09 07:28 - 03306496 _____ () C:\Program Files (x86)\Bluestacks\libGLESv2.dll 2016-07-21 06:05 - 2016-07-21 06:05 - 00482304 _____ () C:\Users\Alex\AppData\Local\MEGAsync\libsodium.dll 2016-07-01 11:26 - 2016-07-01 11:26 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2016-09-12 09:07 - 2016-09-12 09:07 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-09-12 09:07 - 2016-09-12 09:07 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2016-11-14 13:38 - 2016-11-08 21:29 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libglesv2.dll 2016-11-14 13:38 - 2016-11-08 21:29 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libegl.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\ProgramData:NT [40] AlternateDataStreams: C:\ProgramData:NT2 [346] AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:DocumentSummaryInformation [63] AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:SummaryInformation [63] AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\All Users:NT [40] AlternateDataStreams: C:\Users\All Users:NT2 [346] AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT [40] AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT2 [346] AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT [40] AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT2 [346] AlternateDataStreams: C:\ProgramData\Application Data:NT [40] AlternateDataStreams: C:\ProgramData\Application Data:NT2 [346] AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40] AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2013-08-22 14:25 - 2016-05-15 09:38 - 00001331 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg DNS Servers: 8.8.8.8 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "Skype" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [TCP Query User{10FC833E-F9E2-4FEE-9DAC-AF89EBA0BCBF}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe FirewallRules: [UDP Query User{4E95F239-9A72-4C40-9C08-51B99134B707}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe FirewallRules: [TCP Query User{ECB50DC9-C441-4532-A58A-FD387BDA158A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{4C7FF8A7-2D16-4306-9ED6-3913802FF09A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{492AF373-065B-4568-A0BA-CF9EB78095FA}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{C73240A8-9B78-4F52-9468-A1E5D0072F8A}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{93586F52-7596-4530-91AC-F1659962FAEF}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{51183177-4B7B-49C9-9F65-E8C52D3DC189}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe FirewallRules: [TCP Query User{708ABD37-971E-47FB-851C-8A7FA665F7A8}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe FirewallRules: [UDP Query User{957FA785-64C5-45FF-8740-D0C4B2FB3743}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe FirewallRules: [{44097252-FF8C-4B5B-9435-41076632DB8C}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{8F7E90A6-E953-4CF5-A6A0-DBE7677FE715}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe FirewallRules: [{38A8E932-7339-43FC-9BC7-62CADDD2273C}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{8336F72D-E587-44F2-99CF-C912AAAD38E4}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{123B1990-6A5B-4C2F-9263-97D28ADF029B}] => C:\Program Files\Microsoft Office\root\Office16\outlook.exe FirewallRules: [TCP Query User{EE80C755-D545-4ED6-BC4C-7B42029C7E46}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe FirewallRules: [UDP Query User{44E30B9F-5110-436F-B5A6-FE86E85FD5CC}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe FirewallRules: [TCP Query User{348FA613-40D1-4BB9-8938-6C0D61F013F5}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe FirewallRules: [UDP Query User{92DDF0AF-6971-43F5-901A-FC5B5FF3AE0D}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe FirewallRules: [TCP Query User{06AB6670-7C78-487A-9778-D1B264DC1564}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe FirewallRules: [UDP Query User{5DD73249-CBCF-483E-9D5E-466567462FD5}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe FirewallRules: [{AF281303-EF8A-42D3-988D-20A720653E07}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{8C22FCE4-FA04-47DD-9A0C-A2C7338EA604}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{4E8F4B42-E7FB-4008-ADDA-DA8E1E1AC516}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{FDC807DB-6969-4D61-80C6-D75B4A6A9330}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [TCP Query User{46B04A58-C9CE-4CD5-A4B4-C21106760EB3}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe FirewallRules: [UDP Query User{FC98FC04-44C9-4F6B-89CE-5520FFC4A9C5}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe FirewallRules: [{A3637EF4-BA68-4B46-8A46-84A34E9E509E}] => C:\games\assassins creed revelations\acrsp.exe FirewallRules: [{EAAB586C-26F3-4EBD-94F3-619E7A56BFCA}] => C:\games\assassins creed revelations\acrsp.exe FirewallRules: [TCP Query User{562D5B8F-C1E3-45D7-ACD4-FD4847CEC60B}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe FirewallRules: [UDP Query User{9F51ED2F-3210-4DBB-92BC-40EACEC24B23}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe FirewallRules: [{09A128FE-1EDB-4CF9-AC9E-2EFFF2FF4BA4}] => C:\games\assassins creed revelations\acrpr.exe FirewallRules: [{9A9D565D-EB97-4EC5-A7AB-704F40B14396}] => C:\games\assassins creed revelations\acrpr.exe FirewallRules: [TCP Query User{E90A6FEC-AA2D-4318-BD9B-C53F8445909A}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe FirewallRules: [UDP Query User{14B552A8-3800-4317-95ED-E7BEFFE1E9F8}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe FirewallRules: [{6B48CA46-5BA9-4A6F-BDA5-BD49402F373F}] => C:\games\assassin's creed iii\ac3sp.exe FirewallRules: [{C4ED96A8-AC9A-403E-BA28-EB470B19C710}] => C:\games\assassin's creed iii\ac3sp.exe FirewallRules: [TCP Query User{38EEAEEE-F0D5-41D0-8A3F-64A023AB7140}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe FirewallRules: [UDP Query User{3DD759D5-DBEA-422B-8448-E96864834E66}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe FirewallRules: [{8C1BFAF2-FC3B-41B1-861C-5A9C730B4D5B}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe FirewallRules: [{8ED35984-2E2D-44EC-BFC0-50565EC306BF}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe FirewallRules: [TCP Query User{6CF85764-FFCC-40E4-98FA-01F7DE67BE9F}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe FirewallRules: [UDP Query User{9CAE8DBC-7A57-4607-BD69-ABCEA29F4623}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe FirewallRules: [{D09E4530-3635-47D0-AA76-F0AC06FF9BB3}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe FirewallRules: [{E2FE6283-80DA-4CA0-9D6B-5D0AF06C5C4D}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe FirewallRules: [{E4260829-F65D-46E8-BD46-EB5A18637349}] => C:\Users\Alex\AppData\Roaming\Nox\bin\Nox.exe FirewallRules: [{1E2E4FB0-4182-4CA7-9C99-A000BA9130D0}] => C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe FirewallRules: [TCP Query User{5E9EE161-F7CD-4CB9-A81A-A091FB558042}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe FirewallRules: [UDP Query User{CA95F2C1-3664-42C1-ABD8-799C7897002D}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe FirewallRules: [TCP Query User{511C5FB3-5A2C-402E-BDC9-1989EED92863}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{E26A0133-AD60-49D8-9B16-896246D0B02B}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe FirewallRules: [TCP Query User{2DA21112-708B-4C66-94B3-72FC838FC360}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{F92C3270-7638-485B-9C9A-00EBDAE0AA0C}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{68B32EC2-969B-4FC6-967E-DC18878481B4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{879C8EA9-14CA-4759-A86E-68CC0DAA2086}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [{9F6CABDD-24C8-42E9-AF25-4E11FB34AB8D}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [{3AF1C123-E7D0-4EE5-BDB9-1A75BB178688}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{235EAAC9-2DB5-478F-A2FA-A24CFB3CF803}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe FirewallRules: [UDP Query User{AD535FD8-0C56-4B8D-A3FE-A044ADD5D361}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe FirewallRules: [{7E85E748-E50E-4C6B-88C4-BD4D3977433B}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe FirewallRules: [{B82DAB3D-C9F8-4B7B-B998-3711AFECEAB7}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe FirewallRules: [TCP Query User{6895FE96-7D04-4F24-B9AB-780D0D34DACA}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe FirewallRules: [UDP Query User{A76252D1-07B5-4531-B3F3-6C1CF6986284}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe FirewallRules: [{08C356DF-1F2B-4FEA-B065-B471F29FE441}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe FirewallRules: [{EB1BD660-F2F8-4C8A-BB76-8131224014C1}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe FirewallRules: [TCP Query User{D075E647-5DE2-4C24-A105-CECEBAAFB7DC}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe FirewallRules: [UDP Query User{E2FB1262-C4AD-405F-B277-0AB109678383}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe FirewallRules: [{6C8D0102-0373-469B-923B-757C3C8322D0}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe FirewallRules: [{CBB8D6AE-F29B-40E1-9914-3E7FE8B4C049}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe FirewallRules: [TCP Query User{202F6B8E-560A-4AFB-BC1C-E8832762581D}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe FirewallRules: [UDP Query User{B9E91BC9-CA3A-4C7D-B27C-B755161F68D6}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe FirewallRules: [{88CB5F26-EE0C-4927-907E-0C1F71A70CE4}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe FirewallRules: [{B1A64F2D-BD6B-473E-A828-DB70DDDA667B}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe FirewallRules: [{83A6B535-D986-42EB-87C2-5F29E07DD75C}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 15-11-2016 18:50:24 Windows Update 24-11-2016 19:19:06 ASU_MSI_TRAN ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (12/05/2016 04:06:06 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 2934 Startzeit: 01d24f07cc0953c9 Endzeit: 4294967295 Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe Berichts-ID: 541bec44-bafc-11e6-8335-b1dc7ff8f968 Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1 Error: (12/05/2016 03:47:52 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode. Error: (12/05/2016 03:47:51 PM) (Source: Perflib) (EventID: 1023) (User: ) Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode. Error: (12/05/2016 03:47:51 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode. Error: (12/05/2016 03:47:50 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\Windows\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode. Error: (12/05/2016 03:47:47 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode. Error: (12/05/2016 03:47:47 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Die Open-Prozedur für den Dienst "ESENT" in der DLL "C:\Windows\system32\esentprf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode. Error: (12/05/2016 03:47:47 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode. Error: (12/05/2016 03:43:08 PM) (Source: Application Error) (EventID: 1005) (User: ) Description: Aus einem der folgenden Gründe kann nicht auf die Datei "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updatercore.dll" zugegriffen werden: Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten Speichertreibern, oder der Datenträger fehlt. Das Programm AAM Updates Notifier Application wurde wegen dieses Fehlers geschlossen. Programm: AAM Updates Notifier Application Datei: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updatercore.dll Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet. Benutzeraktion 1. Öffnen Sie die Datei erneut. Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird. 2. Wenn Sie weiterhin nicht auf die Datei zugreifen können und - diese sich im Netzwerk befindet, dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann. - diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist. 3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE. 4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht. 5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt. Zusätzliche Daten Fehlerwert: C000009C Datenträgertyp: 3 Error: (12/05/2016 03:43:08 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: AAM Updates Notifier.exe, Version: 10.0.0.26, Zeitstempel: 0x573eba17 Name des fehlerhaften Moduls: UpdaterCore.dll, Version: 9.0.0.29, Zeitstempel: 0x572a07d8 Ausnahmecode: 0xc0000006 Fehleroffset: 0x00069c10 ID des fehlerhaften Prozesses: 0x1128 Startzeit der fehlerhaften Anwendung: 0x01d24f03ccf1f8bd Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterCore.dll Berichtskennung: 22b9a214-baf9-11e6-8335-b1dc7ff8f968 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Systemfehler: ============= Error: (12/05/2016 04:06:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Avast Antivirus" wurde unerwartet beendet. Dies ist bereits 3 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Aufführung des konfigurierten Wiederherstellungsp. Error: (12/05/2016 04:04:59 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/05/2016 04:03:55 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/05/2016 04:02:51 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/05/2016 04:01:49 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/05/2016 04:01:45 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/05/2016 04:01:42 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/05/2016 04:01:38 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/05/2016 04:01:34 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. Error: (12/05/2016 04:01:31 PM) (Source: disk) (EventID: 7) (User: ) Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0. CodeIntegrity: =================================== Date: 2016-11-27 20:14:51.521 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-11-16 14:17:00.091 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-10-28 22:43:42.354 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-10-27 19:08:55.719 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-06 18:41:03.241 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-06 18:41:03.149 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-06 18:41:02.970 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-06 18:41:02.846 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-06 18:41:02.642 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-06 18:41:02.546 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz Prozentuale Nutzung des RAM: 65% Installierter physikalischer RAM: 3979.25 MB Verfügbarer physikalischer RAM: 1358.26 MB Summe virtueller Speicher: 5259.25 MB Verfügbarer virtueller Speicher: 2436.5 MB ==================== Laufwerke ================================ Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:50.72 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive d: (Data) (Fixed) (Total:263.35 GB) (Free:234.49 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: 560A1A50) Partition: GPT. ==================== Ende von Addition.txt ============================ Und letztendlich der Log von Malwarebytes Anti-Malware: Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 04.12.2016 Suchlaufzeit: 19:35 Protokolldatei: Log für Trojaner-Board.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.12.04.08 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 8.1 CPU: x64 Dateisystem: NTFS Benutzer: Alex Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 298041 Abgelaufene Zeit: 1 Std., 10 Min., 27 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswerte: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Dateien: 0 (keine bösartigen Elemente erkannt) Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Ich hoffe, das mir geholfen werden kann. - DonDon92 |
|
05.12.2016, 16:44
| #2 |
| /// TB-Ausbilder /// Anleitungs-Guru  | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das... 
 Hinweis:Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden. Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert. Adware & Co. können wir sehr gut entfernen. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Du mein clean  bekommst.Los geht's: Jetzt bitte Suchscan durchführen: Schritt 1 ESET Online Scanner
__________________ |
|
07.12.2016, 18:31
| #3 |
| | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder einCode:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7f80c4d5ad22b2418578ee6a2e68b224
# end=init
# utc_time=2016-12-05 03:52:16
# local_time=2016-12-05 04:52:16 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 31633
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7f80c4d5ad22b2418578ee6a2e68b224
# end=updated
# utc_time=2016-12-05 03:57:53
# local_time=2016-12-05 04:57:53 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7f80c4d5ad22b2418578ee6a2e68b224
# end=init
# utc_time=2016-12-06 01:07:05
# local_time=2016-12-06 02:07:05 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update timeout and progress <3, Retry update
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=36865
Update Finalize
Updated modules version: 31633
Update Init
Update Download
Update Finalize
Updated modules version: 31644
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7f80c4d5ad22b2418578ee6a2e68b224
# end=updated
# utc_time=2016-12-06 01:35:27
# local_time=2016-12-06 02:35:27 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7f80c4d5ad22b2418578ee6a2e68b224
# end=init
# utc_time=2016-12-07 12:29:00
# local_time=2016-12-07 01:29:00 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 31654
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=7f80c4d5ad22b2418578ee6a2e68b224
# end=updated
# utc_time=2016-12-07 12:29:48
# local_time=2016-12-07 01:29:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=7f80c4d5ad22b2418578ee6a2e68b224
# engine=31654
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-12-07 05:24:31
# local_time=2016-12-07 06:24:31 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 19875 44921041 0 0
# scanned=311382
# found=4
# cleaned=0
# scan_time=17682
sh=07727807821A49B3A15A2C0F61C08F86B5CB4F12 ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files\ContentProtector\ContentProtector.zip.vir"
sh=C917D29FEA3F07A0A0AD857DDE9744403558959E ft=1 fh=6b3e180303d55cb7 vn="Win32/Adware.ConvertAd.AEY Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\9435773A-1463301702-544B-8EA3-382C4AEB1A56\Uninstall.exe.vir"
sh=7AEE80A48889570C3E7933449782C833757AEAC5 ft=1 fh=78dcb6de4bb4e303 vn="Win32/Adware.ConvertAd.AEY Anwendung" ac=I fn="C:\Program Files (x86)\AdwCleaner\FileQuarantine\C\Program Files (x86)\9435773A-1457285698-544B-8EA3-382C4AEB1A56\Uninstall.exe.vir"
sh=77045B04CCB3E2396131B6EE36E399F9F10E2B61 ft=0 fh=0000000000000000 vn="VBS/Runner.NEC Trojaner" ac=I fn="C:\Program Files (x86)\AdwCleaner\FileQuarantine\C\Program Files (x86)\CleanBrowser\Temp\_1.zip.vir"
 Hat doch geklappt mit dem Scan  |
|
08.12.2016, 17:05
| #4 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein OK, wie läuft der PC aktuell? Schritt 1   Bitte starte FRST erneut, markiere auch die checkbox  und drücke auf Untersuchen. Bitte poste mir den Inhalt der beiden Logs die erstellt werden.
__________________ Gruß deeprybka  Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
08.12.2016, 17:59
| #5 |
| | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Er läuft momentan wieder etwas besser. Wenn ich den PC starte, hängt er noch, friert ein, aber nach einiger Zeit ist vieles besser und er friert dann kaum noch bis gar nicht mehr ein. Hier die beiden Logs: FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 04-12-2016
durchgeführt von Alex (Administrator) auf ASUSX751L (08-12-2016 17:14:49)
Gestartet von C:\Users\Alex\Downloads
Geladene Profile: Alex (Verfügbare Profile: Alex)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Agent.exe
(Mega Limited) C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSPanel.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTLite.exe
(Bioware ) F:\setup.exe
() C:\Users\Alex\AppData\Local\Temp\is-QP71O.tmp\setup.tmp
(Bioware ) F:\setup.exe
() C:\Users\Alex\AppData\Local\Temp\is-MDAP9.tmp\setup.tmp
() C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-05-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ASUSWSLoader.exe [63272 2014-12-04] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-11-11] (LogMeIn Inc.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [IEHelper] => "javaw -jar C:\Users\Alex\Downloads\boot.jar"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\MountPoints2: {119a86e3-e472-11e5-8288-c1e973720107} - "F:\setup.exe"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\MountPoints2: {4cdea4e1-a988-11e5-8252-806e6f6e6963} - "E:\start.exe"
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-12] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-05-11]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
GroupPolicy: Beschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{33046791-40E4-440D-8253-ACF61356C78B}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [DhcpNameServer] 192.168.112.254
Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540276230&GUID=26D1A6A5-25F9-4376-8440-41555517F554
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540591989&GUID=26D1A6A5-25F9-4376-8440-41555517F554
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-65538100-1531695327-3227344209-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-20] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-10-30] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-01-29] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-30] (Microsoft Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-12-08]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-12-08]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-20] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] ()
FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy.dll [2012-12-31] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher64 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy64.dll [2012-12-31] ( ROBLOX Corporation)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..
CHR StartupUrls: Default -> "hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..","hxxp://www.trotux.com/?z=9ebbd55a21dd395f401bd15g9zcqbt0e4z5o4gdb9g&from=isr&uid=HGSTXHTS545050A7E680_TMA51DTFGAYNTRGAYNTRX&type=hp"
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default [2016-12-08]
CHR Extension: (Google Präsentationen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-31]
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-31]
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\binlebahppinoanabipmieceeaakflee [2016-04-01]
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-31]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-08]
CHR Extension: (Google-Suche) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod, Bots) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-12-08]
CHR Extension: (Floating for YouTube™ Extension) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2016-12-08]
CHR Extension: (Google Tabellen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-31]
CHR Extension: (EditThisCookie) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-12-08]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-10]
CHR Extension: (Floating for YouTube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2016-12-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-31]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-08]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\System Profile [2016-12-08]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch [2016-12-08] <==== ACHTUNG
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-03]
CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\binlebahppinoanabipmieceeaakflee [2016-06-19]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod, Bots) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-10-01]
CHR Extension: (Floating for YouTube™ Extension) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2016-09-02]
CHR Extension: (Avast SafePrice) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-14]
CHR Extension: (EditThisCookie) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-10-22]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-03]
CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-10-26]
CHR Extension: (Floating for YouTube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2016-09-02]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-27]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden>
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [737984 2016-06-03] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe [71168 2014-12-04] (ASUS Cloud Corporation) [Datei ist nicht signiert]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-12] (AVAST Software)
S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2016-10-30] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2627080 2016-11-11] (LogMeIn Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-11-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-11-11] (LogMeIn, Inc.)
S3 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [157928 2015-12-02] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [438272 2015-08-06] (PowerUp Software, LLC) [Datei ist nicht signiert]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-12-08] (AVAST Software)
R3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-12] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-12] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-16] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4226560 2014-10-17] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2014-09-19] (ASUS Corporation)
S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. )
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-01-27] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-01-27] (Disc Soft Ltd)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2016-11-11] (LogMeIn Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
S3 Larmkanal; C:\Windows\system32\DRIVERS\Larmkanal.sys [33144 2015-04-23] (Adoriasoft LLC)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-12-04] (Malwarebytes)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
S3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-12-02] (McAfee, Inc.)
S3 mt7612US; C:\Windows\system32\DRIVERS\mt7612US.sys [376200 2015-12-08] (MediaTek Inc.)
S3 Phosgene; C:\Windows\system32\DRIVERS\Phosgene.sys [32120 2015-06-08] ()
S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
R1 VBoxUSBMon; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 xb1usb; C:\Windows\System32\drivers\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation)
R1 XQHDrv; C:\Windows\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-08 17:18 - 2016-12-08 17:18 - 00000920 _____ C:\Users\Public\Desktop\Mass Effect Ultimate Edition.lnk
2016-12-08 17:14 - 2016-12-08 17:17 - 00034022 _____ C:\Users\Alex\Downloads\FRST.txt
2016-12-08 16:38 - 2015-01-06 09:00 - 00000000 ____D C:\Users\Alex\Downloads\ME1UltimateEdition
2016-12-08 15:27 - 2016-10-16 21:08 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\asw19A8.tmp
2016-12-08 15:27 - 2016-09-22 13:09 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\asw191A.tmp
2016-12-08 15:27 - 2016-09-15 16:37 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\asw14EF.tmp
2016-12-08 15:27 - 2016-09-12 09:08 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-12-08 15:27 - 2016-09-12 09:08 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\asw1A45.tmp
2016-12-08 15:27 - 2016-09-12 09:08 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\asw1669.tmp
2016-12-08 15:27 - 2016-09-12 09:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\asw156D.tmp
2016-12-08 15:27 - 2016-09-12 09:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\asw16B8.tmp
2016-12-08 15:27 - 2016-09-12 09:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\asw15CC.tmp
2016-12-08 14:59 - 2016-12-08 14:59 - 00001539 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk
2016-12-07 12:39 - 2016-12-07 12:39 - 00001228 _____ C:\Users\Alex\Desktop\Google Chrome.lnk
2016-12-05 16:52 - 2016-12-05 16:52 - 00000000 ____D C:\Program Files (x86)\ESET
2016-12-05 16:51 - 2016-12-05 16:51 - 02870984 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe
2016-12-05 16:11 - 2016-12-08 17:14 - 00000000 ____D C:\FRST
2016-12-05 16:10 - 2016-12-05 16:10 - 02419200 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2016-12-04 20:53 - 2016-12-04 20:53 - 00001217 _____ C:\is wichtig und so.txt
2016-12-04 17:07 - 2016-12-04 19:35 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-04 17:06 - 2016-12-04 17:06 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-12-04 17:06 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-12-04 17:06 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-12-04 17:06 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-04 17:05 - 2016-12-04 17:06 - 22851472 _____ (Malwarebytes ) C:\Users\Alex\Downloads\mbam-setup-2.2.1.1043.exe
2016-12-03 16:40 - 2016-12-03 16:40 - 444596224 _____ C:\Users\Alex\Downloads\Nicht bestätigt 169885.crdownload
2016-12-03 15:54 - 2016-12-03 15:54 - 00272124 _____ C:\unp30559605717924792.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00270611 _____ C:\unp30559605729800083.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269666 _____ C:\unp30559605730424954.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269591 _____ C:\unp30559605736363221.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269060 _____ C:\unp30559605737612769.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00268582 _____ C:\unp30559605729175048.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00268139 _____ C:\unp30559605736831665.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267808 _____ C:\unp30559605727768539.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267711 _____ C:\unp30559605728706276.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267546 _____ C:\unp30559605728237747.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267008 _____ C:\unp30559605720893214.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00266473 _____ C:\unp30559605719955665.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00266333 _____ C:\unp30559605727143706.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265623 _____ C:\unp30559605723081011.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265521 _____ C:\unp30559605722612551.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265485 _____ C:\unp30559605720424630.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265375 _____ C:\unp30559605719330832.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00264885 _____ C:\unp30559605718862051.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00263909 _____ C:\unp30559605718393090.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00260151 _____ C:\unp30559605707611521.mdmp
2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2016-11-23 12:06 - 2016-11-23 12:06 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2016-11-22 13:06 - 2016-11-22 13:06 - 00002074 _____ C:\Users\Alex\Desktop\FL Studio 12 (64bit).lnk
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\VST2
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\Documents\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Program Files\Image-Line
2016-11-21 20:44 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-11-21 19:46 - 2016-11-21 19:46 - 00000000 _____ C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A}
2016-11-18 13:59 - 2016-11-18 13:59 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Doborog
2016-11-15 18:28 - 2016-11-15 18:28 - 00000000 ____D C:\Users\Alex\Documents\OhSir
2016-11-15 14:45 - 2016-11-25 12:45 - 00000159 _____ C:\Users\Alex\AppData\Roaming\WB.CFG
2016-11-14 13:07 - 2016-12-08 12:19 - 00082936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2016-11-11 13:43 - 2016-11-11 13:43 - 00045680 ____H (LogMeIn Inc.) C:\Windows\system32\Drivers\Hamdrv.sys
2016-11-09 19:51 - 2016-10-28 22:04 - 00828408 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-09 19:51 - 2016-10-28 22:04 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-09 13:07 - 2016-10-27 19:28 - 25763328 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-11-09 13:07 - 2016-10-27 19:19 - 06047744 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-11-09 13:07 - 2016-10-27 18:17 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-11-09 13:07 - 2016-10-27 16:05 - 20304896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-11-09 13:07 - 2016-10-25 15:11 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-11-09 13:07 - 2016-10-22 17:44 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-11-09 13:07 - 2016-10-22 17:30 - 13654016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-11-09 13:07 - 2016-08-22 14:34 - 01628672 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2016-11-09 13:06 - 2016-11-02 21:48 - 00372568 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-11-09 13:06 - 2016-11-02 21:48 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-11-09 13:06 - 2016-11-02 15:03 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-11-09 13:06 - 2016-11-02 15:00 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-11-09 13:06 - 2016-10-27 19:53 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-11-09 13:06 - 2016-10-27 19:51 - 02896384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-11-09 13:06 - 2016-10-27 19:37 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-11-09 13:06 - 2016-10-27 19:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-11-09 13:06 - 2016-10-27 19:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2016-11-09 13:06 - 2016-10-27 19:05 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-11-09 13:06 - 2016-10-27 18:57 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-11-09 13:06 - 2016-10-27 18:49 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-11-09 13:06 - 2016-10-27 18:47 - 00378880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-11-09 13:06 - 2016-10-27 18:46 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-11-09 13:06 - 2016-10-27 18:46 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-11-09 13:06 - 2016-10-27 18:44 - 02131456 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-11-09 13:06 - 2016-10-27 18:16 - 02920448 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-11-09 13:06 - 2016-10-27 18:03 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-11-09 13:06 - 2016-10-27 17:54 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-11-09 13:06 - 2016-10-22 18:35 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-11-09 13:06 - 2016-10-22 18:34 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-11-09 13:06 - 2016-10-22 18:27 - 02287616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-11-09 13:06 - 2016-10-22 18:21 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-11-09 13:06 - 2016-10-22 17:58 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-11-09 13:06 - 2016-10-22 17:57 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2016-11-09 13:06 - 2016-10-22 17:56 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-11-09 13:06 - 2016-10-22 17:51 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-11-09 13:06 - 2016-10-22 17:46 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-11-09 13:06 - 2016-10-22 17:45 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-11-09 13:06 - 2016-10-22 17:45 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-11-09 13:06 - 2016-10-22 17:43 - 02055680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-11-09 13:06 - 2016-10-22 17:12 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-11-09 13:06 - 2016-10-22 17:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-11-09 13:06 - 2016-10-22 17:09 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-11-09 13:06 - 2016-10-13 20:06 - 01385280 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-11-09 13:06 - 2016-10-13 20:06 - 01124376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-11-09 13:06 - 2016-10-12 09:01 - 00377176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-11-09 13:06 - 2016-10-11 21:21 - 00497448 _____ (Microsoft Corporation) C:\Windows\system32\mfsvr.dll
2016-11-09 13:06 - 2016-10-11 21:21 - 00399776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsvr.dll
2016-11-09 13:06 - 2016-10-11 19:34 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-11-09 13:06 - 2016-10-11 18:47 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\input.dll
2016-11-09 13:06 - 2016-10-11 17:55 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\input.dll
2016-11-09 13:06 - 2016-10-10 22:17 - 00444248 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-11-09 13:06 - 2016-10-10 22:17 - 00333656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-11-09 13:06 - 2016-10-09 23:59 - 00551256 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2016-11-09 13:06 - 2016-10-09 00:12 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-11-09 13:06 - 2016-10-08 23:53 - 03754496 _____ (Microsoft Corporation) C:\Windows\system32\MSVidCtl.dll
2016-11-09 13:06 - 2016-10-08 23:21 - 01445376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-11-09 13:06 - 2016-10-08 23:18 - 00840704 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-11-09 13:06 - 2016-10-08 23:07 - 00332288 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2016-11-09 13:06 - 2016-10-08 23:02 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-11-09 13:06 - 2016-10-08 22:49 - 02410496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVidCtl.dll
2016-11-09 13:06 - 2016-10-08 22:21 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2016-11-09 13:06 - 2016-10-08 02:34 - 01660040 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-11-09 13:06 - 2016-10-08 02:34 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-11-09 13:06 - 2016-10-04 21:39 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bowser.sys
2016-11-09 13:06 - 2016-10-04 21:23 - 00091648 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-11-09 13:06 - 2016-10-04 21:08 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-11-09 13:06 - 2016-10-04 21:08 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-11-09 13:06 - 2016-09-09 23:52 - 00921944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2016-11-09 13:06 - 2016-09-09 23:14 - 00275800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2016-11-09 13:06 - 2016-09-09 15:15 - 00269824 _____ (Microsoft Corporation) C:\Windows\system32\DafPrintProvider.dll
2016-11-09 13:06 - 2016-09-09 15:09 - 00203776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DafPrintProvider.dll
2016-11-09 13:06 - 2016-09-09 15:04 - 00864256 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-11-09 13:06 - 2016-09-09 15:03 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\iscsiwmi.dll
2016-11-09 13:06 - 2016-09-09 15:02 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsiwmi.dll
2016-11-09 13:06 - 2016-09-09 14:38 - 00446124 _____ C:\Windows\system32\ApnDatabase.xml
2016-11-09 13:06 - 2016-09-03 19:20 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\iscsidsc.dll
2016-11-09 13:06 - 2016-09-03 19:06 - 00151040 _____ (Microsoft Corporation) C:\Windows\system32\iscsiexe.dll
2016-11-09 13:06 - 2016-09-03 18:21 - 00055296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsidsc.dll
2016-11-09 13:06 - 2016-09-03 17:12 - 00512512 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2016-11-09 13:06 - 2016-09-03 17:05 - 01094656 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-11-09 13:06 - 2016-09-03 16:58 - 00397824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2016-11-09 13:06 - 2016-09-02 15:05 - 00306176 _____ (Microsoft Corporation) C:\Windows\system32\pdh.dll
2016-11-09 13:06 - 2016-09-02 15:05 - 00262144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pdh.dll
2016-11-09 13:06 - 2016-09-01 15:33 - 00377856 _____ (Microsoft Corporation) C:\Windows\system32\vmrdvcore.dll
2016-11-09 13:06 - 2016-09-01 15:33 - 00342528 _____ (Microsoft Corporation) C:\Windows\system32\SessEnv.dll
2016-11-09 13:06 - 2016-09-01 15:31 - 00296960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SessEnv.dll
2016-11-09 13:06 - 2016-08-30 15:11 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2016-11-09 13:06 - 2016-08-30 03:45 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\xolehlp.dll
2016-11-09 13:06 - 2016-08-30 03:18 - 00871936 _____ (Microsoft Corporation) C:\Windows\system32\msdtcprx.dll
2016-11-09 13:06 - 2016-08-30 03:18 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xolehlp.dll
2016-11-09 13:06 - 2016-08-30 03:03 - 00721920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdtcprx.dll
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-08 16:37 - 2016-05-21 07:20 - 00001138 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-08 15:36 - 2015-12-29 16:50 - 00003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-65538100-1531695327-3227344209-1001
2016-12-08 15:30 - 2016-05-10 06:00 - 00001940 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-12-08 15:28 - 2016-01-06 19:47 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-12-08 15:24 - 2016-09-02 21:01 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-12-08 15:21 - 2016-10-25 18:01 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2016-12-08 15:08 - 2015-12-29 16:50 - 00000000 __RDO C:\Users\Alex\OneDrive
2016-12-08 15:00 - 2016-10-07 13:12 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-12-08 14:59 - 2015-12-29 16:48 - 00000093 _____ C:\Users\Alex\AppData\Roaming\sp_data.sys
2016-12-08 14:51 - 2016-06-27 09:39 - 00000000 ____D C:\Users\Alex\AppData\Local\LogMeIn Hamachi
2016-12-08 14:51 - 2016-05-21 07:20 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-08 14:46 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-08 14:22 - 2016-01-02 13:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TS3Client
2016-12-08 12:16 - 2005-04-26 02:05 - 00053248 _____ C:\Windows\SysWOW64\zlib.dll
2016-12-07 20:10 - 2016-01-11 13:56 - 00000000 ____D C:\Games
2016-12-07 12:39 - 2015-12-29 16:44 - 00001056 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-05 15:27 - 2015-12-29 16:41 - 00000000 ____D C:\Users\Alex
2016-12-04 21:09 - 2016-07-20 20:16 - 00000000 ____D C:\Users\Alex\AppData\Local\uhitghojotypcsp
2016-12-04 21:08 - 2016-08-09 11:22 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71}
2016-12-04 21:08 - 2016-05-15 09:37 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CentralPicture
2016-12-04 16:30 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-12-03 20:21 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-12-03 19:11 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2016-12-03 16:23 - 2015-04-11 13:00 - 00773008 _____ C:\Windows\system32\perfh007.dat
2016-12-03 16:23 - 2015-04-11 13:00 - 00162310 _____ C:\Windows\system32\perfc007.dat
2016-12-03 16:23 - 2014-11-22 02:01 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-03 15:46 - 2016-08-09 11:23 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99}
2016-12-03 11:30 - 2016-10-20 17:32 - 00000000 _____ C:\Windows\SysWOW64\nativelog.txt
2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2016-12-03 10:53 - 2016-09-15 16:25 - 00000940 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2016-11-26 19:07 - 2015-12-29 17:03 - 00000000 ____D C:\Users\Alex\AppData\Roaming\.minecraft
2016-11-26 17:25 - 2016-09-28 18:12 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Landfall
2016-11-24 20:56 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\WhatsApp
2016-11-24 20:54 - 2016-08-05 12:47 - 00000000 ____D C:\Users\Alex\Desktop\Fusion364
2016-11-24 20:32 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Local\WhatsApp
2016-11-24 20:31 - 2016-06-26 15:42 - 00002211 _____ C:\Users\Alex\Desktop\WhatsApp.lnk
2016-11-24 20:31 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2016-11-24 20:30 - 2016-06-26 15:41 - 00000000 ____D C:\Users\Alex\AppData\Local\SquirrelTemp
2016-11-24 19:48 - 2015-12-29 16:51 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2016-11-24 19:21 - 2015-04-11 05:37 - 00000000 ____D C:\ProgramData\Skype
2016-11-24 19:20 - 2016-02-17 16:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-11-23 15:58 - 2015-12-23 16:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-11-23 12:07 - 2013-08-22 16:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-11-23 12:06 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-11-23 12:05 - 2016-04-28 15:33 - 00000000 ____D C:\Program Files\Microsoft Office
2016-11-16 17:46 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2016-11-15 18:56 - 2016-01-11 13:45 - 00000000 ____D C:\Windows\system32\MRT
2016-11-15 18:51 - 2016-01-11 13:45 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-14 13:38 - 2016-05-21 07:21 - 00002227 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-14 13:38 - 2015-12-31 19:27 - 00002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-14 13:13 - 2016-05-11 15:37 - 00000000 ____D C:\Users\Alex\AppData\Local\MEGAsync
2016-11-10 18:53 - 2016-01-02 18:53 - 00388608 ___SH C:\Users\Alex\Desktop\Thumbs.db
2016-11-10 12:30 - 2016-01-07 14:32 - 00189952 ___SH C:\Users\Alex\Documents\Thumbs.db
2016-11-09 19:48 - 2013-08-22 15:44 - 05146336 _____ C:\Windows\system32\FNTCACHE.DAT
2016-11-09 19:41 - 2013-08-22 16:36 - 00000000 ___RD C:\Windows\ToastData
2016-11-09 13:23 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-06-25 07:49 - 2016-06-25 07:49 - 0000000 _____ () C:\Users\Alex\AppData\Roaming\dc.ogt
2015-12-29 16:48 - 2016-12-08 14:59 - 0000093 _____ () C:\Users\Alex\AppData\Roaming\sp_data.sys
2016-11-15 14:45 - 2016-11-25 12:45 - 0000159 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG
2016-02-04 18:29 - 2016-02-04 18:29 - 0000003 _____ () C:\Users\Alex\AppData\Local\updater.log
2016-02-04 18:29 - 2016-02-05 12:16 - 0000059 _____ () C:\Users\Alex\AppData\Local\UserProducts.xml
2016-07-27 14:21 - 2016-07-27 14:21 - 0000000 _____ () C:\Users\Alex\AppData\Local\{127B88D2-2B72-44AB-825B-326071D547F3}
2016-11-21 19:46 - 2016-11-21 19:46 - 0000000 _____ () C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A}
2015-12-30 13:30 - 2015-12-30 13:30 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-23 16:46 - 2015-12-23 16:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-11 05:36 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-12-06 16:48
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 04-12-2016
durchgeführt von Alex (08-12-2016 17:22:48)
Gestartet von C:\Users\Alex\Downloads
Windows 8.1 (Update) (X64) (2015-12-29 15:43:21)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-65538100-1531695327-3227344209-500 - Administrator - Disabled)
Alex (S-1-5-21-65538100-1531695327-3227344209-1001 - Administrator - Enabled) => C:\Users\Alex
Gast (S-1-5-21-65538100-1531695327-3227344209-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-65538100-1531695327-3227344209-1003 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
µTorrent (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\uTorrent) (Version: 3.4.9.42606 - BitTorrent Inc.)
Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.29.0 - Mirillis)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.7.0.272 - Adobe Systems Incorporated)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Assassin's Creed IV Black Flag Version 1.07 (HKLM-x32\...\{0616F772-5099-41A0-A20F-339C74FDAE95}_is1) (Version: 1.07 - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Assassin's Creed Liberation HD_is1) (Version: - )
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.2 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.8 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.0.8 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.01.0003 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0034 - ASUS)
Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version: - Audacity Team)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Clustertruck (HKLM-x32\...\1661530902_is1) (Version: 2.0.0.2 - GOG.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.20 - ASUSTek Computer Inc.)
DkZ Studio (HKLM-x32\...\DkZ Studio0.9.0) (Version: - )
Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evernote v. 5.8.3 (HKLM-x32\...\{404B3FB8-A820-11E4-83FC-00163E98E7D6}) (Version: 5.8.3.6507 - Evernote Corp.)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit PhantomPDF (HKLM-x32\...\{045A0488-55C1-45B1-9992-4B4134904D61}) (Version: 7.0.59.127 - Foxit Software Inc.)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gunman Clive (HKLM-x32\...\R3VubWFuQ2xpdmU=_is1) (Version: 1 - )
HashCheck Shell Extension (x86-32) (HKLM-x32\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HashCheck Shell Extension (x86-64) (HKLM\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{FD79E5D2-5CFE-49C2-9461-D011D1355696}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.37 - Hewlett-Packard Company)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4013 - Intel Corporation)
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version: - )
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.541 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.541 - LogMeIn, Inc.) Hidden
LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mass Effect Ultimate Edition Version 1.02 (HKLM-x32\...\Mass Effect Ultimate Edition_is1) (Version: 1.02 - Bioware)
Maxx Audio Installer (x64) (Version: 1.6.4882.94 - Waves Audio Ltd.) Hidden
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.207 - McAfee, Inc.)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft Office Professional 2016 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 16.0.7466.2038 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\OneDriveSetup.exe) (Version: 17.3.6517.0809 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.1 - Notepad++ Team)
NVIDIA Graphics Driver 333.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 333.02 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
One Piece Pirate Warriors 3 (HKLM-x32\...\One Piece Pirate Warriors 3_is1) (Version: - )
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version: - )
PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)
Pinnacle Game Profiler (HKLM-x32\...\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}) (Version: 8.2.8 - PowerUp Software)
Project64 version 2.1.0.1 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.1.0.1 - )
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7409 - Realtek Semiconductor Corp.)
ROBLOX Player for Alex (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version: - )
Shovel Knight (HKLM-x32\...\1207664823_is1) (Version: 2.11.0.18 - GOG.com)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Turbo Dismount (HKLM-x32\...\Turbo Dismount 1.0.0) (Version: 1.0.0 - Predator101)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.15.458 - ASUS Cloud Corporation)
WhatsApp (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\WhatsApp) (Version: 0.2.2478 - WhatsApp)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse (07/02/2014 1.0.0.228) (HKLM\...\7504488B89E0121B0737D63957491C9CD2633065) (Version: 07/02/2014 1.0.0.228 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\RobloxProxy64.dll (ROBLOX Corporation)
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {08C5E6FF-0744-43FB-ACBD-6ED57CB97FF0} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2014-11-03] ()
Task: {138BFF39-3FF9-40A2-942F-21694D15D97B} - \Vwpystzach Debuger -> Keine Datei <==== ACHTUNG
Task: {17696075-8254-4000-8B5B-63068DCE559A} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-12-19] (Realtek Semiconductor)
Task: {35473123-D6D4-40E4-86C0-E83550420E64} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-12] (AVAST Software)
Task: {4571B958-254C-4EE4-92C9-6A648ACA1108} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-04] (AVAST Software)
Task: {472673E9-9F76-49A4-B669-BD65F4FF2A6E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {7EBF6CE4-7D81-4023-9E40-37F631A03283} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.)
Task: {8880B942-3D1F-4025-966A-93C0B8FB4029} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.)
Task: {892C9053-7FAA-49D4-9C2D-44DE9367CC26} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {9498B1B7-7650-45D3-8F5B-DFE3600CC88E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-11-15] (Microsoft Corporation)
Task: {9EE072A7-9208-48CB-9415-2A708510A52B} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-03-03] (ASUSTek Computer Inc.)
Task: {9F4E33A6-7BA5-45A6-97CF-19938518AB70} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-12-19] (Realtek Semiconductor)
Task: {A507A68E-6030-454E-B007-2DC8D03BD35F} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {AF5E162A-B56A-4D05-8C34-31F11559CAB5} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-04-02] (ASUS)
Task: {BBB403B1-8F83-43C3-A303-2E026B32295A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {BCE0555C-1697-4960-BBBF-E309345F9A90} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {CF463C07-116E-41A4-8E32-9098C771F735} - System32\Tasks\{B44B185C-A133-48DB-A9BF-DFC8FC7F4A2A} => pcalua.exe -a C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71}\uninst.exe -c -FN="C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99}\updater.exe"-P=/Uninstall /s /noun /DelSelfDir
Task: {D677EB6A-2AEA-4458-BA8E-43CBA342E7E0} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)
Task: {DE91AF5B-E72D-4B0C-B0FA-62E3A561D74A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {E27BB922-3130-40D9-93FB-EBB3DB37C5D9} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-09-19] (AsusTek)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™ (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2ef8a18a9f0d801f\user0 - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-12-23 16:43 - 2014-04-08 22:06 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-01 15:13 - 2016-11-14 13:13 - 00592384 _____ () C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll
2015-04-15 21:13 - 2015-04-15 21:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-08-26 12:00 - 2016-08-26 12:00 - 01864384 _____ () C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2014-12-19 11:51 - 2014-11-19 08:26 - 00457616 _____ () C:\Windows\system32\igfxTray.exe
2012-03-08 03:27 - 2012-03-08 03:27 - 00016384 _____ () C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ACVsWin.dll
2014-11-03 18:37 - 2014-11-03 18:37 - 00012288 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe
2014-04-02 15:46 - 2014-04-02 15:46 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2016-09-15 12:38 - 2016-03-09 07:28 - 03306496 _____ () C:\Program Files (x86)\Bluestacks\libGLESv2.dll
2016-07-21 06:05 - 2016-07-21 06:05 - 00482304 _____ () C:\Users\Alex\AppData\Local\MEGAsync\libsodium.dll
2016-07-01 11:26 - 2016-07-01 11:26 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-09-12 09:07 - 2016-09-12 09:07 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-12 09:07 - 2016-09-12 09:07 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-12-23 16:38 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-11-14 13:38 - 2016-11-08 21:29 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libglesv2.dll
2016-11-14 13:38 - 2016-11-08 21:29 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [346]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:DocumentSummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:SummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [346]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT [40]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT2 [346]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT2 [346]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [346]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2016-05-15 09:38 - 00001331 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "Skype"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [TCP Query User{10FC833E-F9E2-4FEE-9DAC-AF89EBA0BCBF}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [UDP Query User{4E95F239-9A72-4C40-9C08-51B99134B707}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [TCP Query User{ECB50DC9-C441-4532-A58A-FD387BDA158A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4C7FF8A7-2D16-4306-9ED6-3913802FF09A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{492AF373-065B-4568-A0BA-CF9EB78095FA}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C73240A8-9B78-4F52-9468-A1E5D0072F8A}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{93586F52-7596-4530-91AC-F1659962FAEF}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{51183177-4B7B-49C9-9F65-E8C52D3DC189}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{708ABD37-971E-47FB-851C-8A7FA665F7A8}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [UDP Query User{957FA785-64C5-45FF-8740-D0C4B2FB3743}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [{44097252-FF8C-4B5B-9435-41076632DB8C}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{8F7E90A6-E953-4CF5-A6A0-DBE7677FE715}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{38A8E932-7339-43FC-9BC7-62CADDD2273C}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8336F72D-E587-44F2-99CF-C912AAAD38E4}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{123B1990-6A5B-4C2F-9263-97D28ADF029B}] => C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{EE80C755-D545-4ED6-BC4C-7B42029C7E46}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{44E30B9F-5110-436F-B5A6-FE86E85FD5CC}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{348FA613-40D1-4BB9-8938-6C0D61F013F5}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe
FirewallRules: [UDP Query User{92DDF0AF-6971-43F5-901A-FC5B5FF3AE0D}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe
FirewallRules: [TCP Query User{06AB6670-7C78-487A-9778-D1B264DC1564}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe
FirewallRules: [UDP Query User{5DD73249-CBCF-483E-9D5E-466567462FD5}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe
FirewallRules: [{AF281303-EF8A-42D3-988D-20A720653E07}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8C22FCE4-FA04-47DD-9A0C-A2C7338EA604}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4E8F4B42-E7FB-4008-ADDA-DA8E1E1AC516}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{FDC807DB-6969-4D61-80C6-D75B4A6A9330}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{46B04A58-C9CE-4CD5-A4B4-C21106760EB3}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [UDP Query User{FC98FC04-44C9-4F6B-89CE-5520FFC4A9C5}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [{A3637EF4-BA68-4B46-8A46-84A34E9E509E}] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [{EAAB586C-26F3-4EBD-94F3-619E7A56BFCA}] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [TCP Query User{562D5B8F-C1E3-45D7-ACD4-FD4847CEC60B}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [UDP Query User{9F51ED2F-3210-4DBB-92BC-40EACEC24B23}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [{09A128FE-1EDB-4CF9-AC9E-2EFFF2FF4BA4}] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [{9A9D565D-EB97-4EC5-A7AB-704F40B14396}] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [TCP Query User{E90A6FEC-AA2D-4318-BD9B-C53F8445909A}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [UDP Query User{14B552A8-3800-4317-95ED-E7BEFFE1E9F8}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{6B48CA46-5BA9-4A6F-BDA5-BD49402F373F}] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{C4ED96A8-AC9A-403E-BA28-EB470B19C710}] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [TCP Query User{38EEAEEE-F0D5-41D0-8A3F-64A023AB7140}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [UDP Query User{3DD759D5-DBEA-422B-8448-E96864834E66}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{8C1BFAF2-FC3B-41B1-861C-5A9C730B4D5B}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{8ED35984-2E2D-44EC-BFC0-50565EC306BF}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [TCP Query User{6CF85764-FFCC-40E4-98FA-01F7DE67BE9F}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [UDP Query User{9CAE8DBC-7A57-4607-BD69-ABCEA29F4623}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{D09E4530-3635-47D0-AA76-F0AC06FF9BB3}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{E2FE6283-80DA-4CA0-9D6B-5D0AF06C5C4D}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{E4260829-F65D-46E8-BD46-EB5A18637349}] => C:\Users\Alex\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [{1E2E4FB0-4182-4CA7-9C99-A000BA9130D0}] => C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [TCP Query User{5E9EE161-F7CD-4CB9-A81A-A091FB558042}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [UDP Query User{CA95F2C1-3664-42C1-ABD8-799C7897002D}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [TCP Query User{511C5FB3-5A2C-402E-BDC9-1989EED92863}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{E26A0133-AD60-49D8-9B16-896246D0B02B}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{2DA21112-708B-4C66-94B3-72FC838FC360}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{F92C3270-7638-485B-9C9A-00EBDAE0AA0C}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{68B32EC2-969B-4FC6-967E-DC18878481B4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{879C8EA9-14CA-4759-A86E-68CC0DAA2086}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{9F6CABDD-24C8-42E9-AF25-4E11FB34AB8D}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3AF1C123-E7D0-4EE5-BDB9-1A75BB178688}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{235EAAC9-2DB5-478F-A2FA-A24CFB3CF803}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [UDP Query User{AD535FD8-0C56-4B8D-A3FE-A044ADD5D361}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [{7E85E748-E50E-4C6B-88C4-BD4D3977433B}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [{B82DAB3D-C9F8-4B7B-B998-3711AFECEAB7}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [TCP Query User{6895FE96-7D04-4F24-B9AB-780D0D34DACA}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [UDP Query User{A76252D1-07B5-4531-B3F3-6C1CF6986284}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [{08C356DF-1F2B-4FEA-B065-B471F29FE441}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [{EB1BD660-F2F8-4C8A-BB76-8131224014C1}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [TCP Query User{D075E647-5DE2-4C24-A105-CECEBAAFB7DC}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [UDP Query User{E2FB1262-C4AD-405F-B277-0AB109678383}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [{6C8D0102-0373-469B-923B-757C3C8322D0}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [{CBB8D6AE-F29B-40E1-9914-3E7FE8B4C049}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [TCP Query User{202F6B8E-560A-4AFB-BC1C-E8832762581D}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [UDP Query User{B9E91BC9-CA3A-4C7D-B27C-B755161F68D6}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{88CB5F26-EE0C-4927-907E-0C1F71A70CE4}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{B1A64F2D-BD6B-473E-A828-DB70DDDA667B}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{83A6B535-D986-42EB-87C2-5F29E07DD75C}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
24-11-2016 19:19:06 ASU_MSI_TRAN
07-12-2016 13:01:35 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/08/2016 05:24:33 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.
Error: (12/08/2016 04:31:39 PM) (Source: Microsoft Office 16) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x305; CorrelationId: {A28C705B-E3E0-4527-B118-71272F5EE50E}
Error: (12/08/2016 03:18:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ASUSX751L)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/08/2016 03:18:39 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ASUSX751L)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (12/08/2016 02:59:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: UpdateChecker.exe, Version: 0.0.0.0, Zeitstempel: 0x54574cc8
Name des fehlerhaften Moduls: OLEAUT32.dll, Version: 6.3.9600.18434, Zeitstempel: 0x57a61147
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00005310
ID des fehlerhaften Prozesses: 0xa44
Startzeit der fehlerhaften Anwendung: 0x01d2515a4f3a32f8
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe
Pfad des fehlerhaften Moduls: C:\Windows\SYSTEM32\OLEAUT32.dll
Berichtskennung: 821761e1-bd4e-11e6-833b-8bfbbddf2c70
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (12/08/2016 02:54:09 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm LiveComm.exe, Version 17.5.9600.20911 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: e70
Startzeit: 01d25159a3928ec9
Endzeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
Berichts-ID: 983bf4ac-bd4d-11e6-833b-8bfbbddf2c70
Vollständiger Name des fehlerhaften Pakets: microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ppleae38af2e007f4358a809ac99a64a67c1
Error: (12/08/2016 02:52:41 PM) (Source: Microsoft-Windows-LocationProvider) (EventID: 2006) (User: NT-AUTORITÄT)
Description: There was an error with the Windows Location Provider database
Error: (12/08/2016 02:52:36 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/08/2016 02:52:34 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
Error: (12/08/2016 02:52:34 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.
Systemfehler:
=============
Error: (12/08/2016 05:26:17 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/08/2016 05:25:18 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/08/2016 05:25:15 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/08/2016 05:21:09 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/08/2016 03:30:05 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/08/2016 03:29:03 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/08/2016 03:28:59 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/08/2016 03:28:55 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/08/2016 03:24:37 PM) (Source: DCOM) (EventID: 10010) (User: ASUSX751L)
Description: Der Server "Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (12/08/2016 03:23:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avast Antivirus" wurde unerwartet beendet. Dies ist bereits 3 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Aufführung des konfigurierten Wiederherstellungsp.
CodeIntegrity:
===================================
Date: 2016-12-08 15:21:47.862
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-07 13:13:58.605
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-06 16:52:22.444
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-11-27 20:14:51.521
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-11-16 14:17:00.091
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-28 22:43:42.354
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-27 19:08:55.719
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-03-06 18:41:03.241
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-06 18:41:03.149
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-06 18:41:02.970
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 3979.25 MB
Verfügbarer physikalischer RAM: 1459.5 MB
Summe virtueller Speicher: 5579.25 MB
Verfügbarer virtueller Speicher: 2292.86 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:48.09 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:263.35 GB) (Free:211.78 GB) NTFS
Drive f: (Mass Effect) (CDROM) (Total:9.2 GB) (Free:0 GB) UDF
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 560A1A50)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
09.12.2016, 19:03
| #6 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Hast Du keine Probleme mit Chrome? Fremde Seiten etc.? Und was ist/war das für eine Datei: C:\Users\Alex\Downloads\boot.jar ?
__________________ --> Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein |
|
09.12.2016, 21:34
| #7 |
| | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Zur boot.jar Datei: Ich nehme mal stark an, dass diese für Minecraft brauchbar gewesen ist. Und nein, ich habe keine wirklichen Probleme mit Chrome. Manchmal bekomme ich aber auch die Meldung, dass Windows Defender meine kompletten Einstellungen zurücksetzen will, was ich aber immer ablehne. |
|
10.12.2016, 16:45
| #8 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Mach trotzdem noch mal einen Scan mit Adwcleaner genau wie vorgeschrieben. Ich sehe da nämlich schon was: Schritt 1 Downloade Dir bitte  AdwCleaner auf Deinen Desktop.
Das Minecraft-Zeug kann aber weg?
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
10.12.2016, 18:15
| #9 |
| | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Ich hoffe mal, dass dieses ''Ich sehe da nämlich schon was'' positiv gemeint ist, also beim Lösen des Falls weiterhelfen kann Hier der Log Code:
ATTFilter # AdwCleaner v6.040 - Bericht erstellt am 10/12/2016 um 17:46:39
# Aktualisiert am 02/12/2016 von Malwarebytes
# Datenbank : 2016-12-09.3 [Server]
# Betriebssystem : Windows 8.1 (X64)
# Benutzername : Alex - ASUSX751L
# Gestartet von : C:\Users\Alex\Downloads\AdwCleaner_6.040.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support
***** [ Dienste ] *****
***** [ Ordner ] *****
***** [ Dateien ] *****
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
***** [ Registrierungsdatenbank ] *****
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\{3E0DB45B-9FCC-4064-B48C-080BD03A99A4}
[-] Schlüssel gelöscht: HKLM\SOFTWARE\Classes\AppID\{C81BED3B-31BD-491F-813D-78EFC2638CE1}
[-] Schlüssel gelöscht: HKU\.DEFAULT\Software\jhtrsq
[#] Schlüssel mit Neustart gelöscht: HKU\S-1-5-18\Software\jhtrsq
[-] Schlüssel gelöscht: HKLM\SOFTWARE\jhtrsq
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\jhtrsq
***** [ Browser ] *****
[-] [C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Gelöscht: hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..
[-] [C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Gelöscht: hxxp://www.trotux.com/?z=9ebbd55a21dd395f401bd15g9zcqbt0e4z5o4gdb9g&from=isr&uid=HGSTXHTS545050A7E680_TMA51DTFGAYNTRGAYNTRX&type=hp
[-] [C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default] [homepage] Gelöscht: hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..
*************************
:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht
*************************
C:\AdwCleaner\AdwCleaner[C1].txt - [3096 Bytes] - [15/05/2016 10:39:35]
C:\AdwCleaner\AdwCleaner[C2].txt - [2150 Bytes] - [20/05/2016 12:10:42]
C:\AdwCleaner\AdwCleaner[C3].txt - [1551 Bytes] - [20/05/2016 13:37:04]
C:\AdwCleaner\AdwCleaner[C4].txt - [1697 Bytes] - [21/05/2016 07:11:43]
C:\AdwCleaner\AdwCleaner[C5].txt - [3838 Bytes] - [20/07/2016 20:31:24]
C:\AdwCleaner\AdwCleaner[C6].txt - [2461 Bytes] - [10/12/2016 17:46:39]
C:\AdwCleaner\AdwCleaner[S1].txt - [3173 Bytes] - [15/05/2016 10:31:45]
C:\AdwCleaner\AdwCleaner[S2].txt - [1968 Bytes] - [20/05/2016 12:05:47]
C:\AdwCleaner\AdwCleaner[S3].txt - [1439 Bytes] - [20/05/2016 13:35:39]
C:\AdwCleaner\AdwCleaner[S4].txt - [1585 Bytes] - [21/05/2016 07:10:29]
C:\AdwCleaner\AdwCleaner[S5].txt - [3857 Bytes] - [20/07/2016 20:29:31]
C:\AdwCleaner\AdwCleaner[S6].txt - [3059 Bytes] - [10/12/2016 17:45:35]
########## EOF - C:\AdwCleaner\AdwCleaner[C6].txt - [2972 Bytes] ##########
|
|
11.12.2016, 17:40
| #10 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Ob der PC danach schneller ist oder nicht - hier geht's um eine Bereinigung. Und das was ich gesehen habe, hat mit der Schnelligkeit nichts zu tun. Es gibt noch Starteinträge dieser Datei. Die Frage war ob das gelöscht werden kann? Schritt 1 Bitte starte FRST erneut, und drücke auf Untersuchen. Bitte poste mir den Inhalt des Logs.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
14.12.2016, 17:28
| #11 |
| | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Zu diesem Minecraft-Zeug: Ja, kannst du machen. Hier die Logs: FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
durchgeführt von Alex (Administrator) auf ASUSX751L (14-12-2016 17:19:35)
Gestartet von C:\Users\Alex\Downloads
Geladene Profile: Alex (Verfügbare Profile: Alex)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Agent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Mega Limited) C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSPanel.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-05-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ASUSWSLoader.exe [63272 2014-12-04] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-11-11] (LogMeIn Inc.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [IEHelper] => "javaw -jar C:\Users\Alex\Downloads\boot.jar"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\MountPoints2: {4cdea4e1-a988-11e5-8252-806e6f6e6963} - "E:\start.exe"
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-12] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-05-11]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{33046791-40E4-440D-8253-ACF61356C78B}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [DhcpNameServer] 192.168.112.254
Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540276230&GUID=26D1A6A5-25F9-4376-8440-41555517F554
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540591989&GUID=26D1A6A5-25F9-4376-8440-41555517F554
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-65538100-1531695327-3227344209-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-20] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-10-30] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-01-29] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-30] (Microsoft Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-12-13]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-12-13]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-20] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] ()
FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy.dll [2012-12-31] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher64 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy64.dll [2012-12-31] ( ROBLOX Corporation)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..
CHR StartupUrls: Default -> "hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..","hxxp://www.trotux.com/?z=9ebbd55a21dd395f401bd15g9zcqbt0e4z5o4gdb9g&from=isr&uid=HGSTXHTS545050A7E680_TMA51DTFGAYNTRGAYNTRX&type=hp"
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default [2016-12-14]
CHR Extension: (Google Präsentationen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-31]
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-31]
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\binlebahppinoanabipmieceeaakflee [2016-04-01]
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-31]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-08]
CHR Extension: (Google-Suche) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod, Bots) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-12-08]
CHR Extension: (Floating for YouTube™ Extension) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2016-12-08]
CHR Extension: (Google Tabellen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-31]
CHR Extension: (EditThisCookie) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-12-08]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-10]
CHR Extension: (Floating for YouTube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2016-12-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-31]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-08]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\System Profile [2016-12-08]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch [2016-12-08] <==== ACHTUNG
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-10-03]
CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\binlebahppinoanabipmieceeaakflee [2016-06-19]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod, Bots) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-10-01]
CHR Extension: (Floating for YouTube™ Extension) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2016-09-02]
CHR Extension: (Avast SafePrice) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-11-14]
CHR Extension: (EditThisCookie) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-10-22]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-03]
CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-10-26]
CHR Extension: (Floating for YouTube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2016-09-02]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-27]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden>
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [737984 2016-06-03] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe [71168 2014-12-04] (ASUS Cloud Corporation) [Datei ist nicht signiert]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-12] (AVAST Software)
S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2016-10-30] (Microsoft Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
S2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2627080 2016-11-11] (LogMeIn Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-11-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-11-11] (LogMeIn, Inc.)
S3 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [157928 2015-12-02] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [438272 2015-08-06] (PowerUp Software, LLC) [Datei ist nicht signiert]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-12-12] (AVAST Software)
R3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-12] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-12] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-16] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4226560 2014-10-17] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2014-09-19] (ASUS Corporation)
S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. )
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-01-27] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-01-27] (Disc Soft Ltd)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2016-11-11] (LogMeIn Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
S3 Larmkanal; C:\Windows\system32\DRIVERS\Larmkanal.sys [33144 2015-04-23] (Adoriasoft LLC)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-12-04] (Malwarebytes)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
S3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-12-02] (McAfee, Inc.)
R3 mt7612US; C:\Windows\system32\DRIVERS\mt7612US.sys [376200 2015-12-08] (MediaTek Inc.)
S3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [22600 2014-01-14] ()
S3 Phosgene; C:\Windows\system32\DRIVERS\Phosgene.sys [32120 2015-06-08] ()
S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
R1 VBoxUSBMon; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 xb1usb; C:\Windows\System32\drivers\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation)
R1 XQHDrv; C:\Windows\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-14 17:18 - 2016-12-14 17:18 - 00000000 ____D C:\Users\Alex\Downloads\FRST-OlderVersion
2016-12-13 16:03 - 2016-10-16 21:08 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AC8.tmp
2016-12-13 16:03 - 2016-09-22 13:09 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AC7.tmp
2016-12-13 16:03 - 2016-09-15 16:37 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AB2.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-12-13 16:03 - 2016-09-12 09:08 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AD8.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AC5.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AB3.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AC6.tmp
2016-12-13 16:03 - 2016-09-12 09:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\asw3AB4.tmp
2016-12-13 12:59 - 2016-12-12 18:40 - 00082936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2016-12-13 12:34 - 2016-12-13 12:34 - 00000000 _____ C:\Users\Alex\AppData\Local\{4D578369-82B8-442F-815C-D854DB09072C}
2016-12-12 13:45 - 2016-12-14 12:18 - 00001539 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk
2016-12-10 17:36 - 2016-12-10 17:36 - 03968464 _____ C:\Users\Alex\Downloads\AdwCleaner_6.040.exe
2016-12-10 16:20 - 2016-12-10 16:20 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\uTorrent
2016-12-10 16:04 - 2016-12-10 16:36 - 00000000 ____D C:\Users\Alex\AppData\Local\Undertale_Yellow
2016-12-08 18:40 - 2016-12-10 19:27 - 00000000 ____D C:\Users\Alex\Documents\BioWare
2016-12-08 17:22 - 2016-12-08 17:26 - 00049164 _____ C:\Users\Alex\Downloads\Addition.txt
2016-12-08 17:14 - 2016-12-14 17:19 - 00033412 _____ C:\Users\Alex\Downloads\FRST.txt
2016-12-07 12:39 - 2016-12-07 12:39 - 00001228 _____ C:\Users\Alex\Desktop\Google Chrome.lnk
2016-12-05 16:52 - 2016-12-05 16:52 - 00000000 ____D C:\Program Files (x86)\ESET
2016-12-05 16:51 - 2016-12-05 16:51 - 02870984 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe
2016-12-05 16:11 - 2016-12-14 17:19 - 00000000 ____D C:\FRST
2016-12-05 16:10 - 2016-12-14 17:18 - 02420224 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2016-12-04 20:53 - 2016-12-04 20:53 - 00001217 _____ C:\is wichtig und so.txt
2016-12-04 17:07 - 2016-12-04 19:35 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-04 17:06 - 2016-12-04 17:06 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-12-04 17:06 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-12-04 17:06 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-12-04 17:06 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-03 16:40 - 2016-12-03 16:40 - 444596224 _____ C:\Users\Alex\Downloads\Nicht bestätigt 169885.crdownload
2016-12-03 15:54 - 2016-12-03 15:54 - 00272124 _____ C:\unp30559605717924792.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00270611 _____ C:\unp30559605729800083.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269666 _____ C:\unp30559605730424954.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269591 _____ C:\unp30559605736363221.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269060 _____ C:\unp30559605737612769.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00268582 _____ C:\unp30559605729175048.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00268139 _____ C:\unp30559605736831665.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267808 _____ C:\unp30559605727768539.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267711 _____ C:\unp30559605728706276.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267546 _____ C:\unp30559605728237747.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267008 _____ C:\unp30559605720893214.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00266473 _____ C:\unp30559605719955665.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00266333 _____ C:\unp30559605727143706.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265623 _____ C:\unp30559605723081011.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265521 _____ C:\unp30559605722612551.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265485 _____ C:\unp30559605720424630.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265375 _____ C:\unp30559605719330832.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00264885 _____ C:\unp30559605718862051.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00263909 _____ C:\unp30559605718393090.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00260151 _____ C:\unp30559605707611521.mdmp
2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2016-11-23 12:06 - 2016-11-23 12:06 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2016-11-22 13:06 - 2016-11-22 13:06 - 00002074 _____ C:\Users\Alex\Desktop\FL Studio 12 (64bit).lnk
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\VST2
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\Documents\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Program Files\Image-Line
2016-11-21 20:44 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-11-21 19:46 - 2016-11-21 19:46 - 00000000 _____ C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A}
2016-11-18 13:59 - 2016-11-18 13:59 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Doborog
2016-11-15 18:28 - 2016-11-15 18:28 - 00000000 ____D C:\Users\Alex\Documents\OhSir
2016-11-15 14:45 - 2016-11-25 12:45 - 00000159 _____ C:\Users\Alex\AppData\Roaming\WB.CFG
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-14 16:37 - 2016-05-21 07:20 - 00001138 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-14 14:15 - 2015-12-29 16:48 - 00000093 _____ C:\Users\Alex\AppData\Roaming\sp_data.sys
2016-12-14 12:52 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2016-12-14 12:28 - 2015-12-29 16:50 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-65538100-1531695327-3227344209-1001
2016-12-14 12:26 - 2016-10-07 13:12 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-12-14 12:21 - 2016-06-27 09:39 - 00000000 ____D C:\Users\Alex\AppData\Local\LogMeIn Hamachi
2016-12-14 12:18 - 2016-05-21 07:20 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-14 12:17 - 2015-12-29 16:50 - 00000000 __RDO C:\Users\Alex\OneDrive
2016-12-13 21:17 - 2015-12-29 16:41 - 00000000 ____D C:\Users\Alex
2016-12-13 16:05 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\WhatsApp
2016-12-13 16:03 - 2016-05-10 06:00 - 00001940 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-12-13 16:03 - 2016-01-06 19:47 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-12-13 16:02 - 2016-10-25 18:01 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2016-12-13 15:21 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-13 12:31 - 2005-04-26 02:05 - 00053248 _____ C:\Windows\SysWOW64\zlib.dll
2016-12-12 16:51 - 2016-06-26 15:42 - 00002211 _____ C:\Users\Alex\Desktop\WhatsApp.lnk
2016-12-12 16:51 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2016-12-12 16:51 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Local\WhatsApp
2016-12-12 16:49 - 2016-06-26 15:41 - 00000000 ____D C:\Users\Alex\AppData\Local\SquirrelTemp
2016-12-11 19:50 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-12-10 20:19 - 2016-01-07 14:32 - 00189952 ___SH C:\Users\Alex\Documents\Thumbs.db
2016-12-10 17:47 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-12-10 17:46 - 2016-08-09 11:22 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-12-10 17:46 - 2016-05-15 10:31 - 00000000 ____D C:\AdwCleaner
2016-12-10 17:45 - 2016-03-04 13:31 - 00000000 ____D C:\Users\Alex\AppData\Roaming\uTorrent
2016-12-10 16:01 - 2016-01-11 13:56 - 00000000 ____D C:\Games
2016-12-10 14:59 - 2016-04-09 17:01 - 00000000 ____D C:\Program Files\PeerBlock
2016-12-10 14:58 - 2016-01-02 13:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TS3Client
2016-12-08 15:24 - 2016-09-02 21:01 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-12-07 12:39 - 2015-12-29 16:44 - 00001056 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-04 21:09 - 2016-07-20 20:16 - 00000000 ____D C:\Users\Alex\AppData\Local\uhitghojotypcsp
2016-12-04 21:08 - 2016-08-09 11:22 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71}
2016-12-04 21:08 - 2016-05-15 09:37 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CentralPicture
2016-12-03 19:11 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2016-12-03 16:23 - 2015-04-11 13:00 - 00773008 _____ C:\Windows\system32\perfh007.dat
2016-12-03 16:23 - 2015-04-11 13:00 - 00162310 _____ C:\Windows\system32\perfc007.dat
2016-12-03 16:23 - 2014-11-22 02:01 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-03 15:46 - 2016-08-09 11:23 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99}
2016-12-03 11:30 - 2016-10-20 17:32 - 00000000 _____ C:\Windows\SysWOW64\nativelog.txt
2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2016-12-03 10:53 - 2016-09-15 16:25 - 00000940 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2016-11-26 19:07 - 2015-12-29 17:03 - 00000000 ____D C:\Users\Alex\AppData\Roaming\.minecraft
2016-11-26 17:25 - 2016-09-28 18:12 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Landfall
2016-11-24 20:54 - 2016-08-05 12:47 - 00000000 ____D C:\Users\Alex\Desktop\Fusion364
2016-11-24 19:48 - 2015-12-29 16:51 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2016-11-24 19:21 - 2015-04-11 05:37 - 00000000 ____D C:\ProgramData\Skype
2016-11-24 19:20 - 2016-02-17 16:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-11-23 15:58 - 2015-12-23 16:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-11-23 12:07 - 2013-08-22 16:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-11-23 12:06 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-11-23 12:05 - 2016-04-28 15:33 - 00000000 ____D C:\Program Files\Microsoft Office
2016-11-16 17:46 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2016-11-15 18:56 - 2016-01-11 13:45 - 00000000 ____D C:\Windows\system32\MRT
2016-11-15 18:51 - 2016-01-11 13:45 - 141011376 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-11-14 13:38 - 2016-05-21 07:21 - 00002227 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-14 13:38 - 2015-12-31 19:27 - 00002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-14 13:13 - 2016-05-11 15:37 - 00000000 ____D C:\Users\Alex\AppData\Local\MEGAsync
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-06-25 07:49 - 2016-06-25 07:49 - 0000000 _____ () C:\Users\Alex\AppData\Roaming\dc.ogt
2015-12-29 16:48 - 2016-12-14 14:15 - 0000093 _____ () C:\Users\Alex\AppData\Roaming\sp_data.sys
2016-11-15 14:45 - 2016-11-25 12:45 - 0000159 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG
2016-02-04 18:29 - 2016-02-04 18:29 - 0000003 _____ () C:\Users\Alex\AppData\Local\updater.log
2016-02-04 18:29 - 2016-02-05 12:16 - 0000059 _____ () C:\Users\Alex\AppData\Local\UserProducts.xml
2016-07-27 14:21 - 2016-07-27 14:21 - 0000000 _____ () C:\Users\Alex\AppData\Local\{127B88D2-2B72-44AB-825B-326071D547F3}
2016-12-13 12:34 - 2016-12-13 12:34 - 0000000 _____ () C:\Users\Alex\AppData\Local\{4D578369-82B8-442F-815C-D854DB09072C}
2016-11-21 19:46 - 2016-11-21 19:46 - 0000000 _____ () C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A}
2015-12-30 13:30 - 2015-12-30 13:30 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-23 16:46 - 2015-12-23 16:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-11 05:36 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
Einige Dateien in TEMP:
====================
C:\Users\Alex\AppData\Local\Temp\libeay32.dll
C:\Users\Alex\AppData\Local\Temp\msvcr120.dll
C:\Users\Alex\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-12-06 16:48
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Alex (14-12-2016 17:22:34)
Gestartet von C:\Users\Alex\Downloads
Windows 8.1 (Update) (X64) (2015-12-29 15:43:21)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-65538100-1531695327-3227344209-500 - Administrator - Disabled)
Alex (S-1-5-21-65538100-1531695327-3227344209-1001 - Administrator - Enabled) => C:\Users\Alex
Gast (S-1-5-21-65538100-1531695327-3227344209-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-65538100-1531695327-3227344209-1003 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
µTorrent (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\uTorrent) (Version: 3.4.9.42973 - BitTorrent Inc.)
Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.29.0 - Mirillis)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.7.0.272 - Adobe Systems Incorporated)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Assassin's Creed IV Black Flag Version 1.07 (HKLM-x32\...\{0616F772-5099-41A0-A20F-339C74FDAE95}_is1) (Version: 1.07 - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Assassin's Creed Liberation HD_is1) (Version: - )
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.2 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.8 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.0.8 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.01.0003 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0034 - ASUS)
Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version: - Audacity Team)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Clustertruck (HKLM-x32\...\1661530902_is1) (Version: 2.0.0.2 - GOG.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.20 - ASUSTek Computer Inc.)
DkZ Studio (HKLM-x32\...\DkZ Studio0.9.0) (Version: - )
Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evernote v. 5.8.3 (HKLM-x32\...\{404B3FB8-A820-11E4-83FC-00163E98E7D6}) (Version: 5.8.3.6507 - Evernote Corp.)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit PhantomPDF (HKLM-x32\...\{045A0488-55C1-45B1-9992-4B4134904D61}) (Version: 7.0.59.127 - Foxit Software Inc.)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gunman Clive (HKLM-x32\...\R3VubWFuQ2xpdmU=_is1) (Version: 1 - )
HashCheck Shell Extension (x86-32) (HKLM-x32\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HashCheck Shell Extension (x86-64) (HKLM\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{FD79E5D2-5CFE-49C2-9461-D011D1355696}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.37 - Hewlett-Packard Company)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4013 - Intel Corporation)
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version: - )
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.541 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.541 - LogMeIn, Inc.) Hidden
LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mass Effect 2 Ultimate Edition Version 1.02 (HKLM-x32\...\Mass Effect 2 Ultimate Edition_is1) (Version: 1.02 - Bioware)
Mass Effect Ultimate Edition Version 1.02 (HKLM-x32\...\Mass Effect Ultimate Edition_is1) (Version: 1.02 - Bioware)
Maxx Audio Installer (x64) (Version: 1.6.4882.94 - Waves Audio Ltd.) Hidden
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.207 - McAfee, Inc.)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft Office Professional 2016 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 16.0.7466.2038 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\OneDriveSetup.exe) (Version: 17.3.6517.0809 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.1 - Notepad++ Team)
NVIDIA Graphics Driver 333.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 333.02 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
One Piece Pirate Warriors 3 (HKLM-x32\...\One Piece Pirate Warriors 3_is1) (Version: - )
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version: - )
PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)
Pinnacle Game Profiler (HKLM-x32\...\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}) (Version: 8.2.8 - PowerUp Software)
Project64 version 2.1.0.1 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.1.0.1 - )
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7409 - Realtek Semiconductor Corp.)
ROBLOX Player for Alex (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version: - )
Shovel Knight (HKLM-x32\...\1207664823_is1) (Version: 2.11.0.18 - GOG.com)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Turbo Dismount (HKLM-x32\...\Turbo Dismount 1.0.0) (Version: 1.0.0 - Predator101)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.15.458 - ASUS Cloud Corporation)
WhatsApp (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\WhatsApp) (Version: 0.2.2732 - WhatsApp)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse (07/02/2014 1.0.0.228) (HKLM\...\7504488B89E0121B0737D63957491C9CD2633065) (Version: 07/02/2014 1.0.0.228 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\RobloxProxy64.dll (ROBLOX Corporation)
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {08C5E6FF-0744-43FB-ACBD-6ED57CB97FF0} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2014-11-03] ()
Task: {138BFF39-3FF9-40A2-942F-21694D15D97B} - \Vwpystzach Debuger -> Keine Datei <==== ACHTUNG
Task: {17696075-8254-4000-8B5B-63068DCE559A} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-12-19] (Realtek Semiconductor)
Task: {4571B958-254C-4EE4-92C9-6A648ACA1108} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-04] (AVAST Software)
Task: {472673E9-9F76-49A4-B669-BD65F4FF2A6E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {591BDDA3-A3A5-497F-91C1-45DCC644321A} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-12] (AVAST Software)
Task: {7EBF6CE4-7D81-4023-9E40-37F631A03283} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.)
Task: {8880B942-3D1F-4025-966A-93C0B8FB4029} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.)
Task: {892C9053-7FAA-49D4-9C2D-44DE9367CC26} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {9498B1B7-7650-45D3-8F5B-DFE3600CC88E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-11-15] (Microsoft Corporation)
Task: {9EE072A7-9208-48CB-9415-2A708510A52B} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-03-03] (ASUSTek Computer Inc.)
Task: {9F4E33A6-7BA5-45A6-97CF-19938518AB70} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-12-19] (Realtek Semiconductor)
Task: {A507A68E-6030-454E-B007-2DC8D03BD35F} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {AF5E162A-B56A-4D05-8C34-31F11559CAB5} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-04-02] (ASUS)
Task: {BBB403B1-8F83-43C3-A303-2E026B32295A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {BCE0555C-1697-4960-BBBF-E309345F9A90} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {CF463C07-116E-41A4-8E32-9098C771F735} - System32\Tasks\{B44B185C-A133-48DB-A9BF-DFC8FC7F4A2A} => pcalua.exe -a C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71}\uninst.exe -c -FN="C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99}\updater.exe"-P=/Uninstall /s /noun /DelSelfDir
Task: {D677EB6A-2AEA-4458-BA8E-43CBA342E7E0} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)
Task: {DE91AF5B-E72D-4B0C-B0FA-62E3A561D74A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {E27BB922-3130-40D9-93FB-EBB3DB37C5D9} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-09-19] (AsusTek)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™ (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2ef8a18a9f0d801f\user0 - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-12-23 16:43 - 2014-04-08 22:06 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-01 15:13 - 2016-11-14 13:13 - 00592384 _____ () C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll
2015-04-15 21:13 - 2015-04-15 21:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-08-26 12:00 - 2016-08-26 12:00 - 01864384 _____ () C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2014-12-19 11:51 - 2014-11-19 08:26 - 00457616 _____ () C:\Windows\system32\igfxTray.exe
2012-03-08 03:27 - 2012-03-08 03:27 - 00016384 _____ () C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ACVsWin.dll
2015-12-23 16:38 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2016-09-15 12:38 - 2016-03-09 07:28 - 03306496 _____ () C:\Program Files (x86)\Bluestacks\libGLESv2.dll
2016-07-21 06:05 - 2016-07-21 06:05 - 00482304 _____ () C:\Users\Alex\AppData\Local\MEGAsync\libsodium.dll
2016-07-01 11:26 - 2016-07-01 11:26 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-09-12 09:07 - 2016-09-12 09:07 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-12 09:07 - 2016-09-12 09:07 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-11-14 13:38 - 2016-11-08 21:29 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libglesv2.dll
2016-11-14 13:38 - 2016-11-08 21:29 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libegl.dll
2014-11-03 18:37 - 2014-11-03 18:37 - 00012288 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [346]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:DocumentSummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:SummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [346]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT [40]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT2 [346]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT2 [346]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [346]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2016-05-15 09:38 - 00001331 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "Skype"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [TCP Query User{10FC833E-F9E2-4FEE-9DAC-AF89EBA0BCBF}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [UDP Query User{4E95F239-9A72-4C40-9C08-51B99134B707}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [TCP Query User{ECB50DC9-C441-4532-A58A-FD387BDA158A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4C7FF8A7-2D16-4306-9ED6-3913802FF09A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{492AF373-065B-4568-A0BA-CF9EB78095FA}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C73240A8-9B78-4F52-9468-A1E5D0072F8A}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{93586F52-7596-4530-91AC-F1659962FAEF}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{51183177-4B7B-49C9-9F65-E8C52D3DC189}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{708ABD37-971E-47FB-851C-8A7FA665F7A8}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [UDP Query User{957FA785-64C5-45FF-8740-D0C4B2FB3743}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [{44097252-FF8C-4B5B-9435-41076632DB8C}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{8F7E90A6-E953-4CF5-A6A0-DBE7677FE715}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{38A8E932-7339-43FC-9BC7-62CADDD2273C}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8336F72D-E587-44F2-99CF-C912AAAD38E4}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{123B1990-6A5B-4C2F-9263-97D28ADF029B}] => C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{EE80C755-D545-4ED6-BC4C-7B42029C7E46}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{44E30B9F-5110-436F-B5A6-FE86E85FD5CC}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{348FA613-40D1-4BB9-8938-6C0D61F013F5}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe
FirewallRules: [UDP Query User{92DDF0AF-6971-43F5-901A-FC5B5FF3AE0D}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe
FirewallRules: [TCP Query User{06AB6670-7C78-487A-9778-D1B264DC1564}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe
FirewallRules: [UDP Query User{5DD73249-CBCF-483E-9D5E-466567462FD5}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe
FirewallRules: [{AF281303-EF8A-42D3-988D-20A720653E07}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8C22FCE4-FA04-47DD-9A0C-A2C7338EA604}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4E8F4B42-E7FB-4008-ADDA-DA8E1E1AC516}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{FDC807DB-6969-4D61-80C6-D75B4A6A9330}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{46B04A58-C9CE-4CD5-A4B4-C21106760EB3}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [UDP Query User{FC98FC04-44C9-4F6B-89CE-5520FFC4A9C5}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [{A3637EF4-BA68-4B46-8A46-84A34E9E509E}] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [{EAAB586C-26F3-4EBD-94F3-619E7A56BFCA}] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [TCP Query User{562D5B8F-C1E3-45D7-ACD4-FD4847CEC60B}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [UDP Query User{9F51ED2F-3210-4DBB-92BC-40EACEC24B23}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [{09A128FE-1EDB-4CF9-AC9E-2EFFF2FF4BA4}] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [{9A9D565D-EB97-4EC5-A7AB-704F40B14396}] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [TCP Query User{E90A6FEC-AA2D-4318-BD9B-C53F8445909A}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [UDP Query User{14B552A8-3800-4317-95ED-E7BEFFE1E9F8}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{6B48CA46-5BA9-4A6F-BDA5-BD49402F373F}] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{C4ED96A8-AC9A-403E-BA28-EB470B19C710}] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [TCP Query User{38EEAEEE-F0D5-41D0-8A3F-64A023AB7140}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [UDP Query User{3DD759D5-DBEA-422B-8448-E96864834E66}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{8C1BFAF2-FC3B-41B1-861C-5A9C730B4D5B}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{8ED35984-2E2D-44EC-BFC0-50565EC306BF}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [TCP Query User{6CF85764-FFCC-40E4-98FA-01F7DE67BE9F}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [UDP Query User{9CAE8DBC-7A57-4607-BD69-ABCEA29F4623}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{D09E4530-3635-47D0-AA76-F0AC06FF9BB3}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{E2FE6283-80DA-4CA0-9D6B-5D0AF06C5C4D}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{E4260829-F65D-46E8-BD46-EB5A18637349}] => C:\Users\Alex\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [{1E2E4FB0-4182-4CA7-9C99-A000BA9130D0}] => C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [TCP Query User{5E9EE161-F7CD-4CB9-A81A-A091FB558042}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [UDP Query User{CA95F2C1-3664-42C1-ABD8-799C7897002D}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [TCP Query User{511C5FB3-5A2C-402E-BDC9-1989EED92863}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{E26A0133-AD60-49D8-9B16-896246D0B02B}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{2DA21112-708B-4C66-94B3-72FC838FC360}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{F92C3270-7638-485B-9C9A-00EBDAE0AA0C}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{68B32EC2-969B-4FC6-967E-DC18878481B4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{879C8EA9-14CA-4759-A86E-68CC0DAA2086}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{9F6CABDD-24C8-42E9-AF25-4E11FB34AB8D}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3AF1C123-E7D0-4EE5-BDB9-1A75BB178688}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{235EAAC9-2DB5-478F-A2FA-A24CFB3CF803}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [UDP Query User{AD535FD8-0C56-4B8D-A3FE-A044ADD5D361}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [{7E85E748-E50E-4C6B-88C4-BD4D3977433B}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [{B82DAB3D-C9F8-4B7B-B998-3711AFECEAB7}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [TCP Query User{6895FE96-7D04-4F24-B9AB-780D0D34DACA}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [UDP Query User{A76252D1-07B5-4531-B3F3-6C1CF6986284}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [{08C356DF-1F2B-4FEA-B065-B471F29FE441}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [{EB1BD660-F2F8-4C8A-BB76-8131224014C1}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [TCP Query User{D075E647-5DE2-4C24-A105-CECEBAAFB7DC}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [UDP Query User{E2FB1262-C4AD-405F-B277-0AB109678383}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [{6C8D0102-0373-469B-923B-757C3C8322D0}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [{CBB8D6AE-F29B-40E1-9914-3E7FE8B4C049}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [TCP Query User{202F6B8E-560A-4AFB-BC1C-E8832762581D}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [UDP Query User{B9E91BC9-CA3A-4C7D-B27C-B755161F68D6}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{88CB5F26-EE0C-4927-907E-0C1F71A70CE4}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{B1A64F2D-BD6B-473E-A828-DB70DDDA667B}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{83A6B535-D986-42EB-87C2-5F29E07DD75C}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{517A5D30-3101-4522-BACA-6EBA31A0F9BA}D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [UDP Query User{24968FF8-F546-44F7-B79C-32C877E09383}D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [{A30C7F9C-9523-4A82-A4DA-09DA8ED62831}] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [{12964674-CBD6-4054-AD0D-8F7713C335B8}] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
==================== Wiederherstellungspunkte =========================
24-11-2016 19:19:06 ASU_MSI_TRAN
07-12-2016 13:01:35 Geplanter Prüfpunkt
10-12-2016 19:27:58 Microsoft Visual C++ 2005 Redistributable wird installiert
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/14/2016 01:43:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: MassEffect2.exe, Version: 1.2.1604.0, Zeitstempel: 0x4bd60ba2
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x1fd8
Startzeit der fehlerhaften Anwendung: 0x01d25607b40d0563
Pfad der fehlerhaften Anwendung: D:\Games\Mass Effect 2 Ultimate Edition\Binaries\MassEffect2.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: f7ea1e54-c1fa-11e6-8346-af3847b06635
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (12/14/2016 12:18:19 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 12:18:17 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
Error: (12/14/2016 12:18:16 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.
Error: (12/14/2016 12:18:16 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\Windows\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 12:18:14 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 12:18:14 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ESENT" in der DLL "C:\Windows\system32\esentprf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 12:18:13 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 12:18:05 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updatercore.dll" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm AAM Updates Notifier Application wurde wegen dieses Fehlers geschlossen.
Programm: AAM Updates Notifier Application
Datei: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updatercore.dll
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: C000009C
Datenträgertyp: 3
Error: (12/14/2016 12:18:05 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AAM Updates Notifier.exe, Version: 10.0.0.26, Zeitstempel: 0x573eba17
Name des fehlerhaften Moduls: UpdaterCore.dll, Version: 9.0.0.29, Zeitstempel: 0x572a07d8
Ausnahmecode: 0xc0000006
Fehleroffset: 0x00069c10
ID des fehlerhaften Prozesses: 0x2c40
Startzeit der fehlerhaften Anwendung: 0x01d255fbab0bba6d
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterCore.dll
Berichtskennung: fba18198-c1ee-11e6-8346-af3847b06635
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Systemfehler:
=============
Error: (12/14/2016 01:00:07 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 01:00:03 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 12:59:03 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 12:58:59 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 12:45:39 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 12:45:35 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 12:45:32 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 12:18:03 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 12:18:00 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 12:17:56 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
CodeIntegrity:
===================================
Date: 2016-12-08 15:21:47.862
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-07 13:13:58.605
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-06 16:52:22.444
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-11-27 20:14:51.521
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-11-16 14:17:00.091
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-28 22:43:42.354
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-27 19:08:55.719
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-03-06 18:41:03.241
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-06 18:41:03.149
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-06 18:41:02.970
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 3979.25 MB
Verfügbarer physikalischer RAM: 1567.31 MB
Summe virtueller Speicher: 5643.25 MB
Verfügbarer virtueller Speicher: 3072.48 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:55.75 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:263.35 GB) (Free:183.74 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 560A1A50)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
14.12.2016, 18:13
| #12 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Schritt 1  Drücke bitte die  + R Taste und schreibe notepad in das Ausführen Fenster.Klicke auf OK und kopiere nun den Text aus der Codebox in das leere Textdokument: Code:
ATTFilter CloseProcesses:
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [IEHelper] => "javaw -jar C:\Users\Alex\Downloads\boot.jar"
CHR HomePage: Default ->
CHR StartupUrls: Default ->
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch [2016-12-08]
Task: {138BFF39-3FF9-40A2-942F-21694D15D97B} - \Vwpystzach Debuger ->
Task: {CF463C07-116E-41A4-8E32-9098C771F735} - System32\Tasks\{B44B185C-A133-48DB-A9BF-DFC8FC7F4A2A} =>
AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [346]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:DocumentSummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:SummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [346]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT [40]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT2 [346]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT2 [346]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [346]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346]
Hosts:
EmptyTemp:
Schritt 2 Bitte starte FRST erneut, und drücke auf Untersuchen. Bitte poste mir den Inhalt des Logs.
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
14.12.2016, 20:15
| #13 |
| | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Ich habe jetzt den Fixlog, ist es aber auch normal, dass jetzt meine Fixlist.txt-Datei weg ist? Trotzdem, hier die Logs: Fixlog.txt: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Alex (14-12-2016 19:01:04) Run:1
Gestartet von C:\Users\Alex\Downloads
Geladene Profile: Alex (Verfügbare Profile: Alex)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
CloseProcesses:
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [IEHelper] => "javaw -jar C:\Users\Alex\Downloads\boot.jar"
CHR HomePage: Default ->
CHR StartupUrls: Default ->
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch [2016-12-08]
Task: {138BFF39-3FF9-40A2-942F-21694D15D97B} - \Vwpystzach Debuger ->
Task: {CF463C07-116E-41A4-8E32-9098C771F735} - System32\Tasks\{B44B185C-A133-48DB-A9BF-DFC8FC7F4A2A} =>
AlternateDataStreams: C:\ProgramData:NT [40]
AlternateDataStreams: C:\ProgramData:NT2 [346]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:DocumentSummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:SummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\All Users:NT [40]
AlternateDataStreams: C:\Users\All Users:NT2 [346]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT [40]
AlternateDataStreams: C:\Users\Alex\Anwendungsdaten:NT2 [346]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT [40]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming:NT2 [346]
AlternateDataStreams: C:\ProgramData\Application Data:NT [40]
AlternateDataStreams: C:\ProgramData\Application Data:NT2 [346]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT [40]
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 [346]
Hosts:
EmptyTemp:
*****************
Prozess erfolgreich geschlossen.
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Software\Microsoft\Windows\CurrentVersion\Run\\IEHelper => Wert erfolgreich entfernt
Chrome HomePage => erfolgreich entfernt
Chrome StartupUrls => erfolgreich entfernt
C:\Users\Alex\AppData\Local\Google\Chrome\User Data\tazoygroulychabch => erfolgreich verschoben
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{138BFF39-3FF9-40A2-942F-21694D15D97B}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{138BFF39-3FF9-40A2-942F-21694D15D97B}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CF463C07-116E-41A4-8E32-9098C771F735}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CF463C07-116E-41A4-8E32-9098C771F735}" => Schlüssel erfolgreich entfernt
C:\Windows\System32\Tasks\{B44B185C-A133-48DB-A9BF-DFC8FC7F4A2A} => => nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B44B185C-A133-48DB-A9BF-DFC8FC7F4A2A} => => Schlüssel nicht gefunden.
C:\ProgramData => ":NT" ADS erfolgreich entfernt.
C:\ProgramData => ":NT2" ADS erfolgreich entfernt.
C:\Windows\SysWOW64\zlib.dll => ":DocumentSummaryInformation" ADS erfolgreich entfernt.
C:\Windows\SysWOW64\zlib.dll => ":SummaryInformation" ADS erfolgreich entfernt.
C:\Windows\SysWOW64\zlib.dll => ":{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}" ADS erfolgreich entfernt.
"C:\Users\All Users" => ":NT" ADS nicht gefunden.
"C:\Users\All Users" => ":NT2" ADS nicht gefunden.
C:\Users\Alex\Anwendungsdaten => ":NT" ADS erfolgreich entfernt.
C:\Users\Alex\Anwendungsdaten => ":NT2" ADS erfolgreich entfernt.
"C:\Users\Alex\AppData\Roaming" => ":NT" ADS nicht gefunden.
"C:\Users\Alex\AppData\Roaming" => ":NT2" ADS nicht gefunden.
"C:\ProgramData\Application Data" => ":NT" ADS nicht gefunden.
"C:\ProgramData\Application Data" => ":NT2" ADS nicht gefunden.
C:\ProgramData\MTA San Andreas All => ":NT" ADS erfolgreich entfernt.
C:\ProgramData\MTA San Andreas All => ":NT2" ADS erfolgreich entfernt.
C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben
Hosts erfolgreich wiederhergestellt.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 6433462 B
Java, Flash, Steam htmlcache => 43545482 B
Windows/system/drivers => 59612313 B
Edge => 0 B
Chrome => 381195702 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 369225 B
systemprofile32 => 4679 B
LocalService => 71098 B
NetworkService => 6972894 B
Alex => 199455915 B
RecycleBin => 0 B
EmptyTemp: => 673.3 MB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 19:02:40 ====
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
durchgeführt von Alex (Administrator) auf ASUSX751L (14-12-2016 20:03:15)
Gestartet von C:\Users\Alex\Downloads
Geladene Profile: Alex (Verfügbare Profile: Alex)
Platform: Windows 8.1 (Update) (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-Agent.exe
(Mega Limited) C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSPanel.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-05-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\ASUSWSLoader.exe [63272 2014-12-04] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-15] (AVAST Software)
HKLM-x32\...\Run: [Adobe Creative Cloud] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-11-11] (LogMeIn Inc.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8591272 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2917456 2016-06-15] (Valve Corporation)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4290240 2016-03-01] (Disc Soft Ltd)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe [978456 2016-08-03] (BlueStack Systems, Inc.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\MountPoints2: {4cdea4e1-a988-11e5-8252-806e6f6e6963} - "E:\start.exe"
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.15.458\ASUSWSShellExt64.dll [2014-11-18] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll [2016-11-14] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-09-12] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX32.dll [2016-11-14] ()
Startup: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2016-05-11]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Alex\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\..\Interfaces\{33046791-40E4-440D-8253-ACF61356C78B}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{55277386-8783-4F26-814E-80B6D1AF2719}: [DhcpNameServer] 192.168.112.254
Tcpip\..\Interfaces\{8718928D-CBEB-45EA-A621-800A9249001D}: [NameServer] 10.0.0.1
Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{E2840B21-907B-4117-969D-DAA9ACFA7CC3}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540276230&GUID=26D1A6A5-25F9-4376-8440-41555517F554
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131217916540591989&GUID=26D1A6A5-25F9-4376-8440-41555517F554
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-65538100-1531695327-3227344209-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-20] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-24] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-20] (Oracle Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-10-30] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-24] (AVAST Software)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-01-29] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-30] (Microsoft Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-10-30] (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mcieplg.dll [2015-12-02] (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - C:\Program Files (x86)\McAfee\SiteAdvisor\mcieplg.dll [2015-12-02] (McAfee, Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF Extension: (McAfee WebAdvisor) - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi [2015-11-23]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-12-14]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-12-14]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-20] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-10-30] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] ()
FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy.dll [2012-12-31] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-65538100-1531695327-3227344209-1001: @nsroblox.roblox.com/launcher64 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\\NPRobloxProxy64.dll [2012-12-31] ( ROBLOX Corporation)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..
CHR StartupUrls: Default -> "hxxp://www.yessearches.com/?mode=nnnb&ptid=wak&uid=F4CCEBFEB386620D24502D6A89310F66&v=20160301&ts=AHEpBn8sBHIrBU..","hxxp://www.trotux.com/?z=9ebbd55a21dd395f401bd15g9zcqbt0e4z5o4gdb9g&from=isr&uid=HGSTXHTS545050A7E680_TMA51DTFGAYNTRGAYNTRX&type=hp"
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default [2016-12-14]
CHR Extension: (Google Präsentationen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-31]
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-31]
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (One Punch Man - Saitama) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\binlebahppinoanabipmieceeaakflee [2016-04-01]
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-31]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-08]
CHR Extension: (Google-Suche) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (SlitherPlus - Zoom, Skin Creator, Mod, Bots) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cpbghpalffgmgocmnigfhalghmaemffo [2016-12-08]
CHR Extension: (Floating for YouTube™ Extension) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\egncdnniomonjgpjbapalkckojhkfddk [2016-12-08]
CHR Extension: (Google Tabellen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-31]
CHR Extension: (EditThisCookie) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2016-12-08]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Avast Online Security) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-10]
CHR Extension: (Floating for YouTube™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjphmlaoffndcnecccgemfdaaoighkel [2016-12-08]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-31]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-08]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\System Profile [2016-12-14]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-12-30]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <nicht gefunden>
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [737984 2016-06-03] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.15.458\AsusWSWinService.exe [71168 2014-12-04] (ASUS Cloud Corporation) [Datei ist nicht signiert]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-09-12] (AVAST Software)
S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [445976 2016-08-03] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [425496 2016-08-03] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [462360 2016-08-03] (BlueStack Systems, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3294912 2016-10-30] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1444544 2016-03-01] (Disc Soft Ltd)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2627080 2016-11-11] (LogMeIn Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [329104 2014-11-19] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Datei ist nicht signiert]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-11-11] (LogMeIn, Inc.)
S3 McAfee SiteAdvisor Service; c:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [157928 2015-12-02] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [438272 2015-08-06] (PowerUp Software, LLC) [Datei ist nicht signiert]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [82936 2016-12-14] (AVAST Software)
R3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-09-12] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-09-12] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-09-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-09-12] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-09-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-16] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4226560 2014-10-17] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2014-09-19] (ASUS Corporation)
S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-08-03] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [307768 2016-07-28] (Bluestack System Inc. )
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2016-01-27] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47672 2016-01-27] (Disc Soft Ltd)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2016-11-11] (LogMeIn Inc.)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
S3 Larmkanal; C:\Windows\system32\DRIVERS\Larmkanal.sys [33144 2015-04-23] (Adoriasoft LLC)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-12-04] (Malwarebytes)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-10-23] (Intel Corporation)
S3 mfesapsn; C:\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys [37960 2015-12-02] (McAfee, Inc.)
R3 mt7612US; C:\Windows\system32\DRIVERS\mt7612US.sys [376200 2015-12-08] (MediaTek Inc.)
S3 pbfilter; C:\Program Files\PeerBlock\pbfilter.sys [22600 2014-01-14] ()
S3 Phosgene; C:\Windows\system32\DRIVERS\Phosgene.sys [32120 2015-06-08] ()
S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [423128 2013-07-24] (Realsil Semiconductor Corporation)
R1 VBoxUSBMon; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S3 xb1usb; C:\Windows\System32\drivers\xb1usb.sys [34016 2014-05-27] (Microsoft Corporation)
R1 XQHDrv; C:\Windows\system32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-14 20:00 - 2016-10-16 21:08 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\asw1345.tmp
2016-12-14 20:00 - 2016-09-22 13:09 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\asw1334.tmp
2016-12-14 20:00 - 2016-09-15 16:37 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\asw12B2.tmp
2016-12-14 20:00 - 2016-09-12 09:08 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-12-14 20:00 - 2016-09-12 09:08 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\asw1346.tmp
2016-12-14 20:00 - 2016-09-12 09:08 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\asw1313.tmp
2016-12-14 20:00 - 2016-09-12 09:08 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\asw12F2.tmp
2016-12-14 20:00 - 2016-09-12 09:08 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\asw1314.tmp
2016-12-14 20:00 - 2016-09-12 09:08 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\asw1302.tmp
2016-12-14 19:11 - 2016-12-12 00:00 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-12-14 19:11 - 2016-12-12 00:00 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-12-14 19:01 - 2016-12-14 19:02 - 00004839 _____ C:\Users\Alex\Downloads\Fixlog.txt
2016-12-14 18:07 - 2016-12-01 15:13 - 00869576 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-12-14 18:07 - 2016-12-01 15:13 - 00678592 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2016-12-14 18:07 - 2016-12-01 15:11 - 00875720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-12-14 18:07 - 2016-12-01 15:11 - 00536768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2016-12-14 18:07 - 2016-10-20 14:14 - 00029888 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2016-12-14 18:07 - 2016-10-20 14:10 - 00028352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2016-12-14 17:18 - 2016-12-14 17:18 - 00000000 ____D C:\Users\Alex\Downloads\FRST-OlderVersion
2016-12-14 13:07 - 2016-11-19 22:24 - 00567152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-12-14 13:07 - 2016-11-19 22:24 - 00152856 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2016-12-14 13:07 - 2016-11-19 20:29 - 00401408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-12-14 13:07 - 2016-11-19 19:44 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-12-14 13:07 - 2016-11-19 18:53 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-12-14 13:07 - 2016-11-19 18:22 - 00111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2016-12-14 13:07 - 2016-11-16 22:49 - 00377176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2016-12-14 13:07 - 2016-11-12 22:06 - 00738104 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-12-14 13:07 - 2016-11-12 20:38 - 00613632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-12-14 13:07 - 2016-11-12 20:25 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-12-14 13:07 - 2016-11-12 20:08 - 25759744 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-12-14 13:07 - 2016-11-12 20:07 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-12-14 13:07 - 2016-11-12 19:53 - 06049280 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-12-14 13:07 - 2016-11-12 19:23 - 01033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-12-14 13:07 - 2016-11-12 19:17 - 20302848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-12-14 13:07 - 2016-11-12 19:10 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-12-14 13:07 - 2016-11-12 18:41 - 15257088 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-12-14 13:07 - 2016-11-12 18:37 - 04608000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-12-14 13:07 - 2016-11-12 18:35 - 02920960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-12-14 13:07 - 2016-11-12 18:21 - 13653504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-12-14 13:07 - 2016-11-12 18:20 - 01543680 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-12-14 13:07 - 2016-11-12 18:05 - 02444800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-12-14 13:07 - 2016-11-12 18:02 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-12-14 13:07 - 2016-11-11 03:33 - 01541240 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2016-12-14 13:07 - 2016-11-09 18:25 - 01376768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2016-12-14 13:07 - 2016-11-05 21:46 - 00422744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-12-14 13:07 - 2016-11-05 19:35 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-14 13:07 - 2016-11-05 18:57 - 03320320 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-12-14 13:07 - 2016-11-05 18:11 - 03606528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2016-12-14 13:07 - 2016-11-05 16:56 - 02778624 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-12-14 13:07 - 2016-11-05 16:46 - 02463744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2016-12-14 13:07 - 2016-10-28 03:56 - 01380048 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-12-14 13:07 - 2016-10-27 15:28 - 01097728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-12-14 13:07 - 2016-10-12 22:49 - 00379224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-12-14 13:07 - 2016-10-12 22:11 - 00922968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2016-12-14 13:07 - 2016-10-11 17:45 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-12-14 13:07 - 2016-10-11 00:31 - 00990040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2016-12-14 13:07 - 2016-10-10 19:18 - 00069976 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-12-14 13:07 - 2016-10-10 19:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cmimcext.sys
2016-12-14 13:07 - 2016-10-09 15:17 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\ActionQueue.dll
2016-12-14 13:07 - 2016-10-09 15:08 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\shsetup.dll
2016-12-14 13:07 - 2016-10-09 15:08 - 00095232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsetup.dll
2016-12-14 13:07 - 2016-10-08 23:24 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2016-12-14 13:07 - 2016-10-08 22:31 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2016-12-14 13:07 - 2016-10-08 22:10 - 03547648 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-12-14 13:07 - 2016-10-05 15:01 - 01200128 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Globalization.dll
2016-12-14 13:07 - 2016-10-05 15:00 - 00868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Globalization.dll
2016-12-14 13:07 - 2016-10-05 15:00 - 00323072 _____ (Microsoft Corporation) C:\Windows\system32\GlobCollationHost.dll
2016-12-14 13:07 - 2016-10-05 14:52 - 00513456 _____ C:\Windows\SysWOW64\locale.nls
2016-12-14 13:07 - 2016-10-05 14:52 - 00513456 _____ C:\Windows\system32\locale.nls
2016-12-14 13:07 - 2016-10-05 05:15 - 01969944 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2016-12-14 13:07 - 2016-10-05 05:15 - 01613528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2016-12-14 13:07 - 2016-10-05 05:15 - 00324896 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2016-12-14 13:07 - 2016-10-05 05:15 - 00245320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2016-12-14 13:07 - 2016-09-20 23:30 - 02462040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2016-12-14 13:07 - 2015-10-22 16:58 - 00200704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GlobCollationHost.dll
2016-12-14 13:06 - 2016-11-12 19:29 - 00498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-12-14 13:06 - 2016-11-12 19:14 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-12-14 13:06 - 2016-11-12 18:45 - 00880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-12-14 13:06 - 2016-11-12 18:38 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-12-14 13:06 - 2016-11-12 18:11 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-12-14 13:06 - 2016-11-12 18:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-12-14 13:06 - 2016-09-27 21:16 - 00445873 _____ C:\Windows\system32\ApnDatabase.xml
2016-12-13 12:59 - 2016-12-14 19:11 - 00082936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2016-12-13 12:34 - 2016-12-13 12:34 - 00000000 _____ C:\Users\Alex\AppData\Local\{4D578369-82B8-442F-815C-D854DB09072C}
2016-12-12 13:45 - 2016-12-14 19:14 - 00001539 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk
2016-12-10 17:36 - 2016-12-10 17:36 - 03968464 _____ C:\Users\Alex\Downloads\AdwCleaner_6.040.exe
2016-12-10 16:20 - 2016-12-10 16:20 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\uTorrent
2016-12-10 16:04 - 2016-12-10 16:36 - 00000000 ____D C:\Users\Alex\AppData\Local\Undertale_Yellow
2016-12-08 18:40 - 2016-12-10 19:27 - 00000000 ____D C:\Users\Alex\Documents\BioWare
2016-12-08 17:22 - 2016-12-14 17:24 - 00051141 _____ C:\Users\Alex\Downloads\Addition.txt
2016-12-08 17:14 - 2016-12-14 20:04 - 00031080 _____ C:\Users\Alex\Downloads\FRST.txt
2016-12-07 12:39 - 2016-12-07 12:39 - 00001228 _____ C:\Users\Alex\Desktop\Google Chrome.lnk
2016-12-05 16:52 - 2016-12-05 16:52 - 00000000 ____D C:\Program Files (x86)\ESET
2016-12-05 16:51 - 2016-12-05 16:51 - 02870984 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe
2016-12-05 16:11 - 2016-12-14 20:03 - 00000000 ____D C:\FRST
2016-12-05 16:10 - 2016-12-14 17:18 - 02420224 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2016-12-04 20:53 - 2016-12-04 20:53 - 00001217 _____ C:\is wichtig und so.txt
2016-12-04 17:07 - 2016-12-04 19:35 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-12-04 17:06 - 2016-12-04 17:06 - 00001116 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-04 17:06 - 2016-12-04 17:06 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-12-04 17:06 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-12-04 17:06 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-12-04 17:06 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-12-03 16:40 - 2016-12-03 16:40 - 444596224 _____ C:\Users\Alex\Downloads\Nicht bestätigt 169885.crdownload
2016-12-03 15:54 - 2016-12-03 15:54 - 00272124 _____ C:\unp30559605717924792.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00270611 _____ C:\unp30559605729800083.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269666 _____ C:\unp30559605730424954.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269591 _____ C:\unp30559605736363221.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00269060 _____ C:\unp30559605737612769.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00268582 _____ C:\unp30559605729175048.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00268139 _____ C:\unp30559605736831665.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267808 _____ C:\unp30559605727768539.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267711 _____ C:\unp30559605728706276.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267546 _____ C:\unp30559605728237747.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00267008 _____ C:\unp30559605720893214.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00266473 _____ C:\unp30559605719955665.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00266333 _____ C:\unp30559605727143706.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265623 _____ C:\unp30559605723081011.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265521 _____ C:\unp30559605722612551.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265485 _____ C:\unp30559605720424630.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00265375 _____ C:\unp30559605719330832.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00264885 _____ C:\unp30559605718862051.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00263909 _____ C:\unp30559605718393090.mdmp
2016-12-03 15:54 - 2016-12-03 15:54 - 00260151 _____ C:\unp30559605707611521.mdmp
2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2016-12-03 10:53 - 2016-12-03 10:53 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2016-11-23 12:06 - 2016-11-23 12:06 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2016-11-22 13:08 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2016-11-22 13:06 - 2016-11-22 13:06 - 00002074 _____ C:\Users\Alex\Desktop\FL Studio 12 (64bit).lnk
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\VST2
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2016-11-22 13:06 - 2016-11-22 13:06 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\Documents\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-11-22 13:04 - 2016-11-22 13:04 - 00000000 ____D C:\Program Files\Image-Line
2016-11-21 20:44 - 2016-11-22 13:08 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-11-21 19:46 - 2016-11-21 19:46 - 00000000 _____ C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A}
2016-11-18 13:59 - 2016-11-18 13:59 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Doborog
2016-11-15 18:28 - 2016-11-15 18:28 - 00000000 ____D C:\Users\Alex\Documents\OhSir
2016-11-15 14:45 - 2016-11-25 12:45 - 00000159 _____ C:\Users\Alex\AppData\Roaming\WB.CFG
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-12-14 20:02 - 2016-05-10 06:00 - 00001940 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-12-14 20:02 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\rescache
2016-12-14 20:01 - 2016-01-06 19:47 - 00003922 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-12-14 19:58 - 2016-10-25 18:01 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2016-12-14 19:49 - 2015-12-29 16:50 - 00003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-65538100-1531695327-3227344209-1001
2016-12-14 19:40 - 2015-12-29 16:48 - 00000093 _____ C:\Users\Alex\AppData\Roaming\sp_data.sys
2016-12-14 19:39 - 2016-10-07 13:12 - 00000000 ____D C:\Users\Public\Documents\AdobeGC
2016-12-14 19:39 - 2016-06-27 09:39 - 00000000 ____D C:\Users\Alex\AppData\Local\LogMeIn Hamachi
2016-12-14 19:37 - 2016-05-21 07:20 - 00001138 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-12-14 19:37 - 2016-05-21 07:20 - 00001134 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-12-14 19:14 - 2015-12-29 16:50 - 00000000 __RDO C:\Users\Alex\OneDrive
2016-12-14 19:09 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-14 19:09 - 2005-04-26 02:05 - 00053248 _____ C:\Windows\SysWOW64\zlib.dll
2016-12-14 19:08 - 2013-08-22 15:44 - 05146336 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-14 19:08 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-12-14 19:06 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-12-14 19:03 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\oobe
2016-12-14 18:23 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2016-12-14 18:21 - 2016-01-11 13:45 - 00000000 ____D C:\Windows\system32\MRT
2016-12-14 18:10 - 2016-01-11 13:45 - 135632432 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-12-13 21:17 - 2015-12-29 16:41 - 00000000 ____D C:\Users\Alex
2016-12-13 16:05 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\WhatsApp
2016-12-12 16:51 - 2016-06-26 15:42 - 00002211 _____ C:\Users\Alex\Desktop\WhatsApp.lnk
2016-12-12 16:51 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2016-12-12 16:51 - 2016-06-26 15:42 - 00000000 ____D C:\Users\Alex\AppData\Local\WhatsApp
2016-12-12 16:49 - 2016-06-26 15:41 - 00000000 ____D C:\Users\Alex\AppData\Local\SquirrelTemp
2016-12-10 20:19 - 2016-01-07 14:32 - 00189952 ___SH C:\Users\Alex\Documents\Thumbs.db
2016-12-10 17:46 - 2016-08-09 11:22 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-12-10 17:46 - 2016-05-15 10:31 - 00000000 ____D C:\AdwCleaner
2016-12-10 17:45 - 2016-03-04 13:31 - 00000000 ____D C:\Users\Alex\AppData\Roaming\uTorrent
2016-12-10 16:01 - 2016-01-11 13:56 - 00000000 ____D C:\Games
2016-12-10 14:59 - 2016-04-09 17:01 - 00000000 ____D C:\Program Files\PeerBlock
2016-12-10 14:58 - 2016-01-02 13:29 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TS3Client
2016-12-08 15:24 - 2016-09-02 21:01 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-12-07 12:39 - 2015-12-29 16:44 - 00001056 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-12-04 21:09 - 2016-07-20 20:16 - 00000000 ____D C:\Users\Alex\AppData\Local\uhitghojotypcsp
2016-12-04 21:08 - 2016-08-09 11:22 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DE56BB9-794D-0701-14D5-22E930BDDE71}
2016-12-04 21:08 - 2016-05-15 09:37 - 00000000 ____D C:\Users\Alex\AppData\Roaming\CentralPicture
2016-12-03 19:11 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2016-12-03 16:23 - 2015-04-11 13:00 - 00773008 _____ C:\Windows\system32\perfh007.dat
2016-12-03 16:23 - 2015-04-11 13:00 - 00162310 _____ C:\Windows\system32\perfc007.dat
2016-12-03 16:23 - 2014-11-22 02:01 - 01776918 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-03 15:46 - 2016-08-09 11:23 - 00000000 ____D C:\Users\Alex\AppData\Local\{5DB86B03-78EA-0675-13DC-21A7CF0EDC99}
2016-12-03 11:30 - 2016-10-20 17:32 - 00000000 _____ C:\Windows\SysWOW64\nativelog.txt
2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2016-12-03 10:56 - 2016-07-20 20:42 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2016-12-03 10:53 - 2016-09-15 16:25 - 00000940 _____ C:\Users\Public\Desktop\LogMeIn Hamachi.lnk
2016-11-26 19:07 - 2015-12-29 17:03 - 00000000 ____D C:\Users\Alex\AppData\Roaming\.minecraft
2016-11-26 17:25 - 2016-09-28 18:12 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\Landfall
2016-11-24 20:54 - 2016-08-05 12:47 - 00000000 ____D C:\Users\Alex\Desktop\Fusion364
2016-11-24 19:48 - 2015-12-29 16:51 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Skype
2016-11-24 19:21 - 2015-04-11 05:37 - 00000000 ____D C:\ProgramData\Skype
2016-11-24 19:20 - 2016-02-17 16:06 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-11-23 15:58 - 2015-12-23 16:32 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-11-23 12:07 - 2013-08-22 16:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-11-23 12:06 - 2013-08-22 16:36 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2016-11-23 12:05 - 2016-04-28 15:33 - 00000000 ____D C:\Program Files\Microsoft Office
2016-11-14 13:38 - 2016-05-21 07:21 - 00002227 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-14 13:38 - 2015-12-31 19:27 - 00002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-14 13:13 - 2016-05-11 15:37 - 00000000 ____D C:\Users\Alex\AppData\Local\MEGAsync
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2016-06-25 07:49 - 2016-06-25 07:49 - 0000000 _____ () C:\Users\Alex\AppData\Roaming\dc.ogt
2015-12-29 16:48 - 2016-12-14 19:40 - 0000093 _____ () C:\Users\Alex\AppData\Roaming\sp_data.sys
2016-11-15 14:45 - 2016-11-25 12:45 - 0000159 _____ () C:\Users\Alex\AppData\Roaming\WB.CFG
2016-02-04 18:29 - 2016-02-04 18:29 - 0000003 _____ () C:\Users\Alex\AppData\Local\updater.log
2016-02-04 18:29 - 2016-02-05 12:16 - 0000059 _____ () C:\Users\Alex\AppData\Local\UserProducts.xml
2016-07-27 14:21 - 2016-07-27 14:21 - 0000000 _____ () C:\Users\Alex\AppData\Local\{127B88D2-2B72-44AB-825B-326071D547F3}
2016-12-13 12:34 - 2016-12-13 12:34 - 0000000 _____ () C:\Users\Alex\AppData\Local\{4D578369-82B8-442F-815C-D854DB09072C}
2016-11-21 19:46 - 2016-11-21 19:46 - 0000000 _____ () C:\Users\Alex\AppData\Local\{D4D96F00-A525-4604-BEC2-28046B9F6C7A}
2015-12-30 13:30 - 2015-12-30 13:30 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-23 16:46 - 2015-12-23 16:46 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-04-11 05:36 - 2012-09-07 12:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-12-06 16:48
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 07-12-2016
durchgeführt von Alex (14-12-2016 20:05:26)
Gestartet von C:\Users\Alex\Downloads
Windows 8.1 (Update) (X64) (2015-12-29 15:43:21)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-65538100-1531695327-3227344209-500 - Administrator - Disabled)
Alex (S-1-5-21-65538100-1531695327-3227344209-1001 - Administrator - Enabled) => C:\Users\Alex
Gast (S-1-5-21-65538100-1531695327-3227344209-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-65538100-1531695327-3227344209-1003 - Limited - Enabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
µTorrent (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\uTorrent) (Version: 3.4.9.42973 - BitTorrent Inc.)
Action! (HKLM-x32\...\Mirillis Action!) (Version: 1.29.0 - Mirillis)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.7.0.272 - Adobe Systems Incorporated)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Assassin's Creed IV Black Flag Version 1.07 (HKLM-x32\...\{0616F772-5099-41A0-A20F-339C74FDAE95}_is1) (Version: 1.07 - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Assassin's Creed Liberation HD_is1) (Version: - )
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.3.2 - ASUS)
ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 2.0.8 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 3.0.8 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.01.0003 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.0.2 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0034 - ASUS)
Audacity 2.0 (HKLM-x32\...\Audacity_is1) (Version: - Audacity Team)
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.4.43.6254 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Clustertruck (HKLM-x32\...\1661530902_is1) (Version: 2.0.0.2 - GOG.com)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.3.0.0152 - Disc Soft Ltd)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.20 - ASUSTek Computer Inc.)
DkZ Studio (HKLM-x32\...\DkZ Studio0.9.0) (Version: - )
Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evernote v. 5.8.3 (HKLM-x32\...\{404B3FB8-A820-11E4-83FC-00163E98E7D6}) (Version: 5.8.3.6507 - Evernote Corp.)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Foxit PhantomPDF (HKLM-x32\...\{045A0488-55C1-45B1-9992-4B4134904D61}) (Version: 7.0.59.127 - Foxit Software Inc.)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.99 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Gunman Clive (HKLM-x32\...\R3VubWFuQ2xpdmU=_is1) (Version: 1 - )
HashCheck Shell Extension (x86-32) (HKLM-x32\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HashCheck Shell Extension (x86-64) (HKLM\...\HashCheck Shell Extension) (Version: 2.1.11.1 - Kai Liu)
HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{FD79E5D2-5CFE-49C2-9461-D011D1355696}) (Version: 32.2.188.47710 - Hewlett-Packard Co.)
HP Support Solutions Framework (HKLM-x32\...\{B1AD4FFB-DD17-43EC-8C30-B9E71EAD9132}) (Version: 12.5.32.37 - Hewlett-Packard Company)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4013 - Intel Corporation)
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version: - )
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.541 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.541 - LogMeIn, Inc.) Hidden
LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Mass Effect 2 Ultimate Edition Version 1.02 (HKLM-x32\...\Mass Effect 2 Ultimate Edition_is1) (Version: 1.02 - Bioware)
Mass Effect Ultimate Edition Version 1.02 (HKLM-x32\...\Mass Effect Ultimate Edition_is1) (Version: 1.02 - Bioware)
Maxx Audio Installer (x64) (Version: 1.6.4882.94 - Waves Audio Ltd.) Hidden
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.207 - McAfee, Inc.)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft Office Professional 2016 - de-de (HKLM\...\ProfessionalRetail - de-de) (Version: 16.0.7466.2038 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\OneDriveSetup.exe) (Version: 17.3.6517.0809 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.1 - Notepad++ Team)
NVIDIA Graphics Driver 333.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 333.02 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.13.1220 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.1220 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
One Piece Pirate Warriors 3 (HKLM-x32\...\One Piece Pirate Warriors 3_is1) (Version: - )
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - )
PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2) (Version: - )
PeerBlock 1.2 (r693) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.2.0.693 - PeerBlock, LLC)
Pinnacle Game Profiler (HKLM-x32\...\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}) (Version: 8.2.8 - PowerUp Software)
Project64 version 2.1.0.1 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.1.0.1 - )
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7409 - Realtek Semiconductor Corp.)
ROBLOX Player for Alex (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version: - )
Shovel Knight (HKLM-x32\...\1207664823_is1) (Version: 2.11.0.18 - GOG.com)
Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Turbo Dismount (HKLM-x32\...\Turbo Dismount 1.0.0) (Version: 1.0.0 - Predator101)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
Vegas Pro 13.0 (64-bit) (HKLM\...\{D2FD5391-6A9B-11E4-BBC6-F04DA23A5C58}) (Version: 13.0.428 - Sony)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.15.458 - ASUS Cloud Corporation)
WhatsApp (HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\WhatsApp) (Version: 0.2.2732 - WhatsApp)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.14 - WildTangent)
Windows Driver Package - ASUS (ATP) Mouse (07/02/2014 1.0.0.228) (HKLM\...\7504488B89E0121B0737D63957491C9CD2633065) (Version: 07/02/2014 1.0.0.228 - ASUS)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.31 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\Alex\AppData\Local\Roblox\Versions\version-979dfe10de694129\RobloxProxy64.dll (ROBLOX Corporation)
CustomCLSID: HKU\S-1-5-21-65538100-1531695327-3227344209-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll => Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {08C5E6FF-0744-43FB-ACBD-6ED57CB97FF0} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2014-11-03] ()
Task: {17696075-8254-4000-8B5B-63068DCE559A} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-12-19] (Realtek Semiconductor)
Task: {4571B958-254C-4EE4-92C9-6A648ACA1108} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-06-04] (AVAST Software)
Task: {472673E9-9F76-49A4-B669-BD65F4FF2A6E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {7BB81583-5F93-452F-996E-C290D0FD51F1} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-09-12] (AVAST Software)
Task: {7EBF6CE4-7D81-4023-9E40-37F631A03283} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.)
Task: {8880B942-3D1F-4025-966A-93C0B8FB4029} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-05-21] (Google Inc.)
Task: {892C9053-7FAA-49D4-9C2D-44DE9367CC26} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {9498B1B7-7650-45D3-8F5B-DFE3600CC88E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2016-12-14] (Microsoft Corporation)
Task: {9EE072A7-9208-48CB-9415-2A708510A52B} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-03-03] (ASUSTek Computer Inc.)
Task: {9F4E33A6-7BA5-45A6-97CF-19938518AB70} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-12-19] (Realtek Semiconductor)
Task: {A507A68E-6030-454E-B007-2DC8D03BD35F} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-09-11] (ASUSTek Computer Inc.)
Task: {AF5E162A-B56A-4D05-8C34-31F11559CAB5} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-04-02] (ASUS)
Task: {BBB403B1-8F83-43C3-A303-2E026B32295A} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {BCE0555C-1697-4960-BBBF-E309345F9A90} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {D677EB6A-2AEA-4458-BA8E-43CBA342E7E0} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)
Task: {DE91AF5B-E72D-4B0C-B0FA-62E3A561D74A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {E27BB922-3130-40D9-93FB-EBB3DB37C5D9} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2014-09-19] (AsusTek)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™ (1).lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Floating for YouTube™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --app-id=jjphmlaoffndcnecccgemfdaaoighkel
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Alex\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\2ef8a18a9f0d801f\user0 - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=tazoygroulychabch --disable-quic
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --disable-quic
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-12-23 16:43 - 2014-04-08 22:06 - 00117536 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-01 15:13 - 2016-11-14 13:13 - 00592384 _____ () C:\Users\Alex\AppData\Local\MEGAsync\ShellExtX64.dll
2016-08-26 12:00 - 2016-08-26 12:00 - 01864384 _____ () C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2014-12-19 11:51 - 2014-11-19 08:26 - 00457616 _____ () C:\Windows\system32\igfxTray.exe
2015-12-23 16:38 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-04-02 15:46 - 2014-04-02 15:46 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2016-09-15 12:38 - 2016-03-09 07:28 - 03306496 _____ () C:\Program Files (x86)\Bluestacks\libGLESv2.dll
2016-07-21 06:05 - 2016-07-21 06:05 - 00482304 _____ () C:\Users\Alex\AppData\Local\MEGAsync\libsodium.dll
2016-07-01 11:26 - 2016-07-01 11:26 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2016-09-12 09:07 - 2016-09-12 09:07 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-09-12 09:07 - 2016-09-12 09:07 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-11-14 13:38 - 2016-11-08 21:29 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libglesv2.dll
2016-11-14 13:38 - 2016-11-08 21:29 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.99\libegl.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:DocumentSummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:SummaryInformation [63]
AlternateDataStreams: C:\Windows\SysWOW64\zlib.dll:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2013-08-22 14:25 - 2016-12-14 19:01 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\asus\wallpapers\asus.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-65538100-1531695327-3227344209-1001\...\StartupApproved\Run: => "Skype"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [TCP Query User{10FC833E-F9E2-4FEE-9DAC-AF89EBA0BCBF}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [UDP Query User{4E95F239-9A72-4C40-9C08-51B99134B707}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [TCP Query User{ECB50DC9-C441-4532-A58A-FD387BDA158A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{4C7FF8A7-2D16-4306-9ED6-3913802FF09A}C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\users\alex\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{492AF373-065B-4568-A0BA-CF9EB78095FA}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C73240A8-9B78-4F52-9468-A1E5D0072F8A}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{93586F52-7596-4530-91AC-F1659962FAEF}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{51183177-4B7B-49C9-9F65-E8C52D3DC189}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{708ABD37-971E-47FB-851C-8A7FA665F7A8}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [UDP Query User{957FA785-64C5-45FF-8740-D0C4B2FB3743}C:\games\assassin's creed ii\assassinscreediigame.exe] => C:\games\assassin's creed ii\assassinscreediigame.exe
FirewallRules: [{44097252-FF8C-4B5B-9435-41076632DB8C}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{8F7E90A6-E953-4CF5-A6A0-DBE7677FE715}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{38A8E932-7339-43FC-9BC7-62CADDD2273C}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{8336F72D-E587-44F2-99CF-C912AAAD38E4}] => %ProgramFiles% (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{123B1990-6A5B-4C2F-9263-97D28ADF029B}] => C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{EE80C755-D545-4ED6-BC4C-7B42029C7E46}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{44E30B9F-5110-436F-B5A6-FE86E85FD5CC}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{348FA613-40D1-4BB9-8938-6C0D61F013F5}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe
FirewallRules: [UDP Query User{92DDF0AF-6971-43F5-901A-FC5B5FF3AE0D}C:\games\assassin's creed brotherhood\acbsp.exe] => C:\games\assassin's creed brotherhood\acbsp.exe
FirewallRules: [TCP Query User{06AB6670-7C78-487A-9778-D1B264DC1564}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe
FirewallRules: [UDP Query User{5DD73249-CBCF-483E-9D5E-466567462FD5}C:\program files\strogino cs portal\garrys mod\hl2.exe] => C:\program files\strogino cs portal\garrys mod\hl2.exe
FirewallRules: [{AF281303-EF8A-42D3-988D-20A720653E07}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8C22FCE4-FA04-47DD-9A0C-A2C7338EA604}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4E8F4B42-E7FB-4008-ADDA-DA8E1E1AC516}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{FDC807DB-6969-4D61-80C6-D75B4A6A9330}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{46B04A58-C9CE-4CD5-A4B4-C21106760EB3}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [UDP Query User{FC98FC04-44C9-4F6B-89CE-5520FFC4A9C5}C:\games\assassins creed revelations\acrsp.exe] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [{A3637EF4-BA68-4B46-8A46-84A34E9E509E}] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [{EAAB586C-26F3-4EBD-94F3-619E7A56BFCA}] => C:\games\assassins creed revelations\acrsp.exe
FirewallRules: [TCP Query User{562D5B8F-C1E3-45D7-ACD4-FD4847CEC60B}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [UDP Query User{9F51ED2F-3210-4DBB-92BC-40EACEC24B23}C:\games\assassins creed revelations\acrpr.exe] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [{09A128FE-1EDB-4CF9-AC9E-2EFFF2FF4BA4}] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [{9A9D565D-EB97-4EC5-A7AB-704F40B14396}] => C:\games\assassins creed revelations\acrpr.exe
FirewallRules: [TCP Query User{E90A6FEC-AA2D-4318-BD9B-C53F8445909A}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [UDP Query User{14B552A8-3800-4317-95ED-E7BEFFE1E9F8}C:\games\assassin's creed iii\ac3sp.exe] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{6B48CA46-5BA9-4A6F-BDA5-BD49402F373F}] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [{C4ED96A8-AC9A-403E-BA28-EB470B19C710}] => C:\games\assassin's creed iii\ac3sp.exe
FirewallRules: [TCP Query User{38EEAEEE-F0D5-41D0-8A3F-64A023AB7140}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [UDP Query User{3DD759D5-DBEA-422B-8448-E96864834E66}C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{8C1BFAF2-FC3B-41B1-861C-5A9C730B4D5B}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{8ED35984-2E2D-44EC-BFC0-50565EC306BF}] => C:\games\ac3 liberation test\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [TCP Query User{6CF85764-FFCC-40E4-98FA-01F7DE67BE9F}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [UDP Query User{9CAE8DBC-7A57-4607-BD69-ABCEA29F4623}C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{D09E4530-3635-47D0-AA76-F0AC06FF9BB3}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{E2FE6283-80DA-4CA0-9D6B-5D0AF06C5C4D}] => C:\games\assassins creed__liberation hd - digital edition\ac3lhd_32.exe
FirewallRules: [{E4260829-F65D-46E8-BD46-EB5A18637349}] => C:\Users\Alex\AppData\Roaming\Nox\bin\Nox.exe
FirewallRules: [{1E2E4FB0-4182-4CA7-9C99-A000BA9130D0}] => C:\Program Files\Bignox\BigNoxVM\RTNoxVMHandle.exe
FirewallRules: [TCP Query User{5E9EE161-F7CD-4CB9-A81A-A091FB558042}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [UDP Query User{CA95F2C1-3664-42C1-ABD8-799C7897002D}C:\games\paint the town red\paintthetownred.exe] => C:\games\paint the town red\paintthetownred.exe
FirewallRules: [TCP Query User{511C5FB3-5A2C-402E-BDC9-1989EED92863}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{E26A0133-AD60-49D8-9B16-896246D0B02B}C:\users\alex\appdata\roaming\utorrent\utorrent.exe] => C:\users\alex\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [TCP Query User{2DA21112-708B-4C66-94B3-72FC838FC360}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{F92C3270-7638-485B-9C9A-00EBDAE0AA0C}C:\program files (x86)\skype\phone\skype.exe] => C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{68B32EC2-969B-4FC6-967E-DC18878481B4}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{879C8EA9-14CA-4759-A86E-68CC0DAA2086}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{9F6CABDD-24C8-42E9-AF25-4E11FB34AB8D}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3AF1C123-E7D0-4EE5-BDB9-1A75BB178688}] => C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{235EAAC9-2DB5-478F-A2FA-A24CFB3CF803}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [UDP Query User{AD535FD8-0C56-4B8D-A3FE-A044ADD5D361}C:\games\assassin's creed liberation hd\ac3lhd_32.exe] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [{7E85E748-E50E-4C6B-88C4-BD4D3977433B}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [{B82DAB3D-C9F8-4B7B-B998-3711AFECEAB7}] => C:\games\assassin's creed liberation hd\ac3lhd_32.exe
FirewallRules: [TCP Query User{6895FE96-7D04-4F24-B9AB-780D0D34DACA}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [UDP Query User{A76252D1-07B5-4531-B3F3-6C1CF6986284}C:\users\alex\desktop\dolphin-x64\dolphin.exe] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [{08C356DF-1F2B-4FEA-B065-B471F29FE441}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [{EB1BD660-F2F8-4C8A-BB76-8131224014C1}] => C:\users\alex\desktop\dolphin-x64\dolphin.exe
FirewallRules: [TCP Query User{D075E647-5DE2-4C24-A105-CECEBAAFB7DC}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [UDP Query User{E2FB1262-C4AD-405F-B277-0AB109678383}C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [{6C8D0102-0373-469B-923B-757C3C8322D0}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [{CBB8D6AE-F29B-40E1-9914-3E7FE8B4C049}] => C:\games\hello.neighbor.alpha.1\helloneighbor\helloneighborreborn\binaries\win64\helloneighborreborn-win64-shipping.exe
FirewallRules: [TCP Query User{202F6B8E-560A-4AFB-BC1C-E8832762581D}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [UDP Query User{B9E91BC9-CA3A-4C7D-B27C-B755161F68D6}C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{88CB5F26-EE0C-4927-907E-0C1F71A70CE4}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{B1A64F2D-BD6B-473E-A828-DB70DDDA667B}] => C:\games\paint.the.town.red.v0.6.4\paintthetownred.exe
FirewallRules: [{83A6B535-D986-42EB-87C2-5F29E07DD75C}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{517A5D30-3101-4522-BACA-6EBA31A0F9BA}D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [UDP Query User{24968FF8-F546-44F7-B79C-32C877E09383}D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [{A30C7F9C-9523-4A82-A4DA-09DA8ED62831}] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
FirewallRules: [{12964674-CBD6-4054-AD0D-8F7713C335B8}] => D:\games\mass effect 2 ultimate edition\binaries\masseffect2.exe
==================== Wiederherstellungspunkte =========================
24-11-2016 19:19:06 ASU_MSI_TRAN
07-12-2016 13:01:35 Geplanter Prüfpunkt
10-12-2016 19:27:58 Microsoft Visual C++ 2005 Redistributable wird installiert
14-12-2016 17:57:54 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (12/14/2016 07:39:14 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "WmiApRpl" in der DLL "C:\Windows\system32\wbem\wmiaprpl.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 07:39:14 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL rdyboost kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
Error: (12/14/2016 07:39:13 PM) (Source: PerfNet) (EventID: 2004) (User: )
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.
Error: (12/14/2016 07:38:20 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "MSDTC" in der DLL "C:\Windows\system32\msdtcuiu.DLL" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 07:38:18 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "Lsa" in der DLL "C:\Windows\System32\Secur32.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 07:38:17 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ESENT" in der DLL "C:\Windows\system32\esentprf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 07:38:16 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (12/14/2016 07:35:00 PM) (Source: Application Error) (EventID: 1005) (User: )
Description: Aus einem der folgenden Gründe kann nicht auf die Datei "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updatercore.dll" zugegriffen werden:
Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten
Speichertreibern, oder der Datenträger fehlt.
Das Programm AAM Updates Notifier Application wurde wegen dieses Fehlers geschlossen.
Programm: AAM Updates Notifier Application
Datei: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updatercore.dll
Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.
Benutzeraktion
1. Öffnen Sie die Datei erneut.
Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.
2.
Wenn Sie weiterhin nicht auf die Datei zugreifen können und
- diese sich im Netzwerk befindet,
dann sollte der Netzwerkadministrator überprüfen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.
- diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.
3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Menü "Start" auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.
4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.
5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt.
Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
Zusätzliche Daten
Fehlerwert: C000009C
Datenträgertyp: 3
Error: (12/14/2016 07:35:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AAM Updates Notifier.exe, Version: 10.0.0.26, Zeitstempel: 0x573eba17
Name des fehlerhaften Moduls: UpdaterCore.dll, Version: 9.0.0.29, Zeitstempel: 0x572a07d8
Ausnahmecode: 0xc0000006
Fehleroffset: 0x00069c10
ID des fehlerhaften Prozesses: 0x11dc
Startzeit der fehlerhaften Anwendung: 0x01d25635fd6fee64
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterCore.dll
Berichtskennung: 048c5c59-c22c-11e6-8347-ce9edb8198d3
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (12/14/2016 07:34:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ASUSX751L)
Description: Bei der Aktivierung der App „microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Systemfehler:
=============
Error: (12/14/2016 07:58:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avast Antivirus" wurde unerwartet beendet. Dies ist bereits 3 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Aufführung des konfigurierten Wiederherstellungsp.
Error: (12/14/2016 07:54:27 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 07:54:23 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 07:54:20 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 07:54:16 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 07:54:13 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 07:54:09 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 07:54:04 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 07:54:01 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error: (12/14/2016 07:48:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avast Antivirus" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2016-12-08 15:21:47.862
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-07 13:13:58.605
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-12-06 16:52:22.444
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-11-27 20:14:51.521
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-11-16 14:17:00.091
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-28 22:43:42.354
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-10-27 19:08:55.719
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-03-06 18:41:03.241
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-06 18:41:03.149
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-03-06 18:41:02.970
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Sound+\SoundP.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 3979.25 MB
Verfügbarer physikalischer RAM: 1445 MB
Summe virtueller Speicher: 5643.25 MB
Verfügbarer virtueller Speicher: 2930.45 MB
==================== Laufwerke ================================
Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:55.68 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (Data) (Fixed) (Total:263.35 GB) (Free:183.74 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 560A1A50)
Partition: GPT.
==================== Ende von Addition.txt ============================
|
|
15.12.2016, 14:18
| #14 |
| /// TB-Ausbilder /// Anleitungs-Guru | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Wenn Du chrome startest, werde da keine störenden Seiten geöffnet wie yessearches.com?
__________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer |
|
15.12.2016, 15:53
| #15 |
| | Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein Nein, da öffnet sich wie es normalerweise ist, ein neuer Tab. Das hatte ich früher mal, aber das hatte ich dann mit AdwCleaner bereinigt. Das ist jedoch einige Monate her. |
|
| Themen zu Windows 8.1: Laptop ist extrem langsam geworden/friert hin und wieder ein |
| antivirus, askbar, computer, cpu, desktop, festplatte, google, homepage, hängen, hängt, iexplore.exe, langsam, problem, programm, prozesse, realtek, registry, scan, security, services.exe, siteadvisor, software, svchost.exe, system, udp, webadvisor, windows, windowsapps |
