Textlinks mit Overlay im Firefox

Andre62 · 13.05.2015, 18:13

Hallo,

ich habe folgendes Problem:
Seit ca. 2 Tagen habe ich Probleme mit meinem Firefox (Version 37.0.2), das Laden von Seiten dauert immer länger und darauf folgt dann immer wieder Werbung von mehreren Seiten (Über Popups etc). Am meisten stört mich aber, dass haufenweise Textlinks, also das in einem Text der mir auf der Seite angezeigt wird, Code Wörter markiert werden und als Link dargestellt werden, wenn ich mit der Maus drüber gehe wird mir dann noch davon ein Overlay angezeigt. Des Weiteren verwende ich Adblock Plus 2.6.9. Mein Betriebsystem ist Windows 7 32-Bit.

Unter anderem habe ich schon das Programm „AdwCleaner“ Scannen lassen. Das Log hänge ich unten an.

Code:

ATTFilter

# AdwCleaner v4.204 - Bericht erstellt 13/05/2015 um 18:34:24
# Aktualisiert 12/05/2015 von Xplode
# Datenbank : 2015-05-12.2 [Server]
# Betriebssystem : Windows 7 Enterprise Service Pack 1 (x86)
# Benutzername : Andre - ANDRE62
# Gestarted von : C:\Users\Andre\Downloads\adwcleaner_4.204.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : vToolbarUpdater18.4.0

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\ProgramData\AVG Security Toolbar
Ordner Gelöscht : C:\Program Files\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Users\Andre\AppData\Local\Doctor_PC
Ordner Gelöscht : C:\Users\Andre\AppData\Roaming\RHEng
Ordner Gelöscht : C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\veggy@veggyAddon.com
Datei Gelöscht : C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\searchplugins\avg-secure-search.xml
Datei Gelöscht : C:\Program Files\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml

***** [ Geplante Tasks ] *****

Task Gelöscht : DoctorPC_Popup
Task Gelöscht : DoctorPC_Start

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKLM\SOFTWARE\SiteSee

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17728


-\\ Mozilla Firefox v37.0.2 (x86 de)

[wxjpvk9t.default\prefs.js] - Zeile Gelöscht : user_pref("browser.search.selectedEngine", "AVG Secure Search");

-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [3019 Bytes] - [14/10/2014 18:57:52]
AdwCleaner[R1].txt - [4606 Bytes] - [13/05/2015 18:32:04]
AdwCleaner[S0].txt - [3627 Bytes] - [14/10/2014 19:15:41]
AdwCleaner[S1].txt - [4539 Bytes] - [13/05/2015 18:34:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4598  Bytes] ##########

Ich hoffe ihr könnt mir helfen.

Mit freundlichen Grüßen

cosinus · 13.05.2015, 18:21

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Andre62 · 13.05.2015, 19:01

Hallo,

nein andere Logs habe ich nicht.

Hier die Main.txt

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-05-2015
Ran by Andre (administrator) on ANDRE62 on 13-05-2015 19:48:37
Running from C:\Users\Andre\Downloads
Loaded Profiles: Andre (Available profiles: Andre)
Platform: Microsoft Windows 7 Enterprise  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
() C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
() C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Desktop.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
() C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\adbhelper@mozilla.org\win32\adb.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [868352 2006-12-18] (Analog Devices, Inc.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3745232 2015-04-15] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\Run: [TeamSpeak 3 Client] => C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe [9238472 2014-08-04] (TeamSpeak Systems GmbH)
HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4811032 2014-09-26] (Piriform Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2014-10-05]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Andre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 1510 series.lnk [2014-10-10]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 1510 series.lnk -> C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-166339250-2700308587-1543000564-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-gb/?ocid=iehp
HKU\S-1-5-21-166339250-2700308587-1543000564-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://mysearch.avg.com/?cid={D7349E83-1C71-42F2-9C17-68AFB3038C04}&mid=c7caec46443b47d29affd151b58d4af3-be8244bb2fe4967898a6cde1ae2fd8fb1ec041e5&lang=de&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-11-06 16:01:49&v=4.1.0.411&pid=wtu&sg=&sap=hp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-166339250-2700308587-1543000564-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={D7349E83-1C71-42F2-9C17-68AFB3038C04}&mid=c7caec46443b47d29affd151b58d4af3-be8244bb2fe4967898a6cde1ae2fd8fb1ec041e5&lang=de&ds=AVG&coid=avgtbavg&cmpid=0215tb&pr=fr&d=2014-11-06 16:01:49&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
Tcpip\Parameters: [DhcpNameServer] 192.168.3.1

FireFox:
========
FF ProfilePath: C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin HKU\S-1-5-21-166339250-2700308587-1543000564-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Andre\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: ADB Helper - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\adbhelper@mozilla.org [2015-02-27]
FF Extension: Mozilla Firefox Hotfixer - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\veggy@veggyAddon.com [2015-05-13]
FF Extension: Zoom It - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215} [2015-05-13]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-12-13]
FF Extension: YouTube mp3 - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\info@youtube-mp3.org.xpi [2014-10-17]
FF Extension: Adblock Plus - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-08]
FF HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2014-12-13]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgfws; C:\Program Files\AVG\AVG2015\avgfws.exe [1517480 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3438032 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [311792 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [918160 2015-03-28] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [20696720 2015-03-28] (NVIDIA Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-02-27] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [132576 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [57824 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [226784 2015-04-09] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [166880 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [29664 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [206816 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [269792 2015-03-11] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [110048 2015-04-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35808 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [213984 2015-04-07] (AVG Technologies CZ, s.r.o.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [32912 2015-02-05] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2013-03-12] (Realtek Semiconductor Corporation                           )
S3 athr; system32\DRIVERS\athr.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 19:48 - 2015-05-13 19:49 - 00012431 _____ () C:\Users\Andre\Downloads\Main.txt
2015-05-13 19:46 - 2015-05-13 19:48 - 00000000 ____D () C:\FRST
2015-05-13 19:45 - 2015-05-13 19:45 - 01143808 _____ (Farbar) C:\Users\Andre\Downloads\FRST.exe
2015-05-13 18:40 - 2015-05-13 18:40 - 00004678 _____ () C:\Users\Andre\Desktop\AdwCleaner[S1].txt
2015-05-13 18:30 - 2015-05-13 18:31 - 02209792 _____ () C:\Users\Andre\Downloads\adwcleaner_4.204.exe
2015-05-13 18:07 - 2015-05-13 18:07 - 00000929 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-05-13 18:07 - 2015-05-13 18:07 - 00000917 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-04-23 19:42 - 2015-04-23 19:42 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-21 03:33 - 2015-05-13 18:36 - 00004704 _____ () C:\Windows\setupact.log
2015-04-21 03:33 - 2015-04-21 03:33 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-16 17:35 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-16 17:35 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-16 17:35 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-16 17:35 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 17:35 - 2015-03-17 06:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 17:35 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-16 17:35 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-16 17:34 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-16 17:34 - 2015-03-17 07:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-16 17:34 - 2015-03-17 07:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-16 17:34 - 2015-03-17 06:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-16 17:34 - 2015-03-17 06:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-16 17:34 - 2015-03-17 06:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-16 17:34 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-16 17:34 - 2015-03-17 06:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-16 17:34 - 2015-03-17 06:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-16 17:34 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-16 17:34 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-16 17:34 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-16 17:34 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-16 17:34 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-16 17:34 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 17:34 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-16 17:34 - 2015-03-13 05:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-16 17:34 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 17:34 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-16 17:34 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-16 17:34 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-16 17:34 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-16 17:34 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 17:34 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-16 17:34 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-16 17:34 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-16 17:34 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-16 17:34 - 2015-03-13 05:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-16 17:34 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-16 17:34 - 2015-03-13 05:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-16 17:34 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-16 17:34 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-16 17:34 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-16 17:34 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-16 17:34 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-16 17:34 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 17:34 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 17:34 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-16 17:34 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 17:34 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-16 17:34 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 17:34 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 17:34 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 17:34 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 17:34 - 2015-03-05 06:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-16 17:33 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-16 17:33 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-16 17:33 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-16 17:33 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-16 17:33 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 13:05 - 2015-04-15 13:05 - 00206816 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 19:38 - 2014-10-06 15:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-13 19:28 - 2014-10-12 17:58 - 00000000 ____D () C:\ProgramData\MFAData
2015-05-13 19:09 - 2009-07-14 06:34 - 00023824 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-13 19:09 - 2009-07-14 06:34 - 00023824 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-13 19:04 - 2014-10-09 17:19 - 00064024 _____ () C:\Users\Andre\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-13 18:48 - 2015-04-11 16:39 - 01187716 _____ () C:\Windows\WindowsUpdate.log
2015-05-13 18:38 - 2014-10-05 19:47 - 00000000 ____D () C:\Users\Andre\AppData\Roaming\TS3Client
2015-05-13 18:36 - 2015-01-17 12:57 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-13 18:36 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-13 18:36 - 2009-07-14 06:33 - 00287344 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-13 18:34 - 2014-11-06 17:02 - 00029864 _____ () C:\Windows\system32\debug.log
2015-05-13 18:34 - 2014-10-14 18:57 - 00000000 ____D () C:\AdwCleaner
2015-05-13 18:34 - 2014-10-12 17:50 - 00000000 ____D () C:\Program Files\TeamViewer
2015-04-25 07:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-04-24 20:15 - 2014-10-12 19:55 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-04-23 19:29 - 2014-10-07 17:02 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-23 19:24 - 2012-06-23 21:52 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-18 09:41 - 2014-10-12 18:13 - 00000951 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-04-18 09:41 - 2014-10-12 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-04-17 20:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-17 13:56 - 2014-12-10 11:39 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-17 13:56 - 2014-10-07 16:28 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-17 13:56 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-16 21:31 - 2010-11-20 23:01 - 01591896 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-14 18:38 - 2014-10-06 15:56 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-14 18:38 - 2014-10-06 15:56 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2014-10-10 16:21 - 2014-10-10 16:21 - 0000057 _____ () C:\ProgramData\Ament.ini

Some content of TEMP:
====================
C:\Users\Andre\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Andre\AppData\Local\Temp\nvStInst.exe
C:\Users\Andre\AppData\Local\Temp\Quarantine.exe
C:\Users\Andre\AppData\Local\Temp\sqlite3.dll
C:\Users\Andre\AppData\Local\Temp\Uninstaller-5376.exe
C:\Users\Andre\AppData\Local\Temp\Uninstaller-6496.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 14:36

==================== End Of Log ============================

--- --- ---

und die Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-05-2015
Ran by Andre at 2015-05-13 19:50:05
Running from C:\Users\Andre\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-166339250-2700308587-1543000564-500 - Administrator - Disabled)
Andre (S-1-5-21-166339250-2700308587-1543000564-1000 - Administrator - Enabled) => C:\Users\Andre
Gast (S-1-5-21-166339250-2700308587-1543000564-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG Internet Security 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG Internet Security 2015 (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5941 - AVG Technologies)
AVG 2015 (Version: 15.0.4342 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5941 - AVG Technologies) Hidden
AVG Web TuneUp (HKLM\...\AVG Web TuneUp) (Version: 4.1.0.411 - AVG Technologies)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
Free YouTube to MP3 Converter version 3.12.50.1122 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1122 - DVDVideoSoft Ltd.)
HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{0C7ED99F-AF77-4AF5-BA4E-7B9BB32DF285}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
HP Deskjet 1510 series Hilfe (HKLM\...\{23972F22-BA23-4C61-9F91-B9470E1563EB}) (Version: 30.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0001 - Microsoft) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 32.0.3 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OCCT 4.4.1 (HKLM\...\OCCT) (Version: 4.4.1 - Ocbase.com)
OpenOffice 4.1.1 (HKLM\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PlanetSide 2 (HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\SOE-PlanetSide 2) (Version:  - Sony Online Entertainment)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.1.6140 - Analog Devices)
Studie zur Verbesserung von HP Deskjet 1510 series (HKLM\...\{498BD73A-022A-408D-A50E-B9C615286E95}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
TP-LINK TL-WN821N(C)_TL-WN822N_TL-WN823N Driver (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Unity Web Player (HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Windows Phone app for desktop (HKLM\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-166339250-2700308587-1543000564-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Andre\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-166339250-2700308587-1543000564-1000_Classes\CLSID\{49BBAA3C-C574-419E-8378-783C362E9C15}\InprocServer32 -> C:\Program Files\HP\Common\FWUpdateEDO2.dll (Hewlett-Packard Co.)

==================== Restore Points  =========================

25-03-2015 22:24:47 Windows Update
16-04-2015 21:28:10 Windows Update
23-04-2015 19:24:07 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1B83276C-0148-4AC2-8497-B02F5890AA82} - System32\Tasks\HP AR Program Upload - 346c60a8e33f47b998737513d9a9a6ff5af018adc7e14589b185500b9e9f071b => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-08-13] (TODO: <Company name>)
Task: {3D68181B-FFA0-4DE4-B9D7-EDF03EF1D358} - System32\Tasks\HPCustParticipation HP Deskjet 1510 series => C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2013-08-13] (Hewlett-Packard Co.)
Task: {7CC0F03B-4E6A-4AB0-B7CA-6BC67830B187} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)
Task: {94AAF310-5C29-481A-AE1A-19EA35067AD6} - System32\Tasks\{1A0BB0EF-D024-4365-9011-C65B2BF14FA6} => pcalua.exe -a "C:\Program Files\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {98B60530-0EB8-4FE0-AFCC-326CBA7081F7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {999AA635-61FD-480D-9414-3B02340BFCE1} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2014-10-05] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2015-02-27 09:01 - 2015-02-27 09:00 - 00620056 ____N () C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe
2015-01-17 12:56 - 2015-03-13 17:57 - 00107664 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2014-11-06 17:01 - 2014-11-06 17:01 - 01685528 ____N () C:\Program Files\AVG Web TuneUp\TBAPI.dll
2015-03-30 20:47 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files\NVIDIA Corporation\Update Core\detoured.dll
2014-02-28 15:33 - 2014-02-28 15:33 - 00148480 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00864768 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-02-27 15:45 - 2014-02-27 15:45 - 00677376 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2014-08-04 15:43 - 2014-08-04 15:43 - 00092104 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2014-08-04 15:43 - 2014-08-04 15:43 - 00105416 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00025600 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00242688 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-08-04 15:45 - 2014-08-04 15:45 - 00477128 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 15:45 - 2014-08-04 15:45 - 00484808 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00123904 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-09-25 20:44 - 2014-09-25 20:44 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-10-05 19:26 - 2013-04-08 15:29 - 00846848 _____ () C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
2014-10-05 19:26 - 2013-03-12 20:48 - 01411072 _____ () C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll
2014-10-05 19:26 - 2013-04-02 11:34 - 00193024 _____ () C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll
2014-10-05 19:26 - 2013-04-02 11:34 - 00297472 _____ () C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\WJRtl.dll
2015-02-27 19:55 - 2015-02-27 19:55 - 00818176 _____ () C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\adbhelper@mozilla.org\win32\adb.exe
2015-04-14 18:38 - 2015-04-14 18:38 - 16863920 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-166339250-2700308587-1543000564-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Andre\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.3.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{211485CA-34F6-46AD-B5E4-2ADC7C13B571}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{A1CEF72E-95A9-41EE-A261-44C7AE8EED18}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\USBSetup.exe
FirewallRules: [{F9A40D6E-D5B7-40F1-BA21-00097B13D55C}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{D2AEF533-C6C7-4776-BF7B-4E9C4A905466}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{D9C56E5B-1796-4DAF-9E39-5B8C75CADD2C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{AD66D746-B10A-4F5B-9099-441A5F29C63C}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0C568F66-D64F-4358-B9C8-6B031FFAC1EE}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{620D6E61-ED1C-4926-AEB5-068ECDDA8AF3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3D47C888-99A9-463A-917B-33B668B875B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{03A9B5F4-3A97-44B3-9B94-404B0EF1E927}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{18BEC9EB-EBB6-4A37-A4F9-064CA06CC2A4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{73693901-DE76-4665-AAAB-8C21F98FB1E0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{06BBE351-93DB-403F-B27D-3F4379D5590F}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{1C736664-CBF6-4D81-8792-1640889F1A50}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{9225E456-85C1-4CFC-BD97-5C03ED8F1D9F}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{5F05FC4A-9F0C-4EE6-A948-9D822A4DE191}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{36033BBF-C4B8-40D9-A4B8-C9488C48BF4A}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{86403328-9A27-442E-80B1-E633BA51B74D}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{6F7D4703-69F9-4749-8A53-CA847C7612B1}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{1B7E2287-759F-4609-B8B0-16D71E2E2408}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe
FirewallRules: [{BDF7601F-4C25-4260-9397-0E391EA39B26}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe
FirewallRules: [{DE8773F8-60C9-479C-98DC-945B3A829AC5}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{8E071D80-5690-4D7D-9A10-999F3892CC48}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{2DC2FFE3-DAFE-4F8A-98C6-46B01C89F6EC}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6A82DD02-23BF-4938-B588-516A98E82C1B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/13/2015 06:37:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0040f257
ID des fehlerhaften Prozesses: 0xae8
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (05/13/2015 06:36:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 06:00:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1744
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/13/2015 05:15:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0040f257
ID des fehlerhaften Prozesses: 0xbb4
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (05/13/2015 05:15:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 09:32:11 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (05/12/2015 05:04:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0040f257
ID des fehlerhaften Prozesses: 0xc64
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (05/12/2015 05:04:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/11/2015 05:15:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0040f257
ID des fehlerhaften Prozesses: 0xd84
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (05/11/2015 05:15:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/13/2015 06:36:34 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (05/13/2015 06:35:00 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (05/13/2015 06:34:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/13/2015 06:34:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/13/2015 06:34:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/13/2015 06:34:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "vToolbarUpdater18.4.0" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/13/2015 06:34:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/13/2015 06:34:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/13/2015 06:34:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA GeForce Experience Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/13/2015 06:34:22 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.


Microsoft Office Sessions:
=========================
Error: (05/13/2015 06:37:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.62025513995dNvStreamNetworkService.exe4.1.1943.62025513995dc00000050040f257ae801d08d9b0189552bC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe4b76ba6a-f98e-11e4-b661-0018f369a300

Error: (05/13/2015 06:36:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 06:00:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa1174401d08d933ead61ccC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dll3d6fcb9e-f989-11e4-b596-0018f369a300

Error: (05/13/2015 05:15:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.62025513995dNvStreamNetworkService.exe4.1.1943.62025513995dc00000050040f257bb401d08d8f9b392361C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeee3f06da-f982-11e4-b596-0018f369a300

Error: (05/13/2015 05:15:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 09:32:11 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (05/12/2015 05:04:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.62025513995dNvStreamNetworkService.exe4.1.1943.62025513995dc00000050040f257c6401d08cc4df62ebf2C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe2efb95e1-f8b8-11e4-b231-0018f369a300

Error: (05/12/2015 05:04:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/11/2015 05:15:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.62025513995dNvStreamNetworkService.exe4.1.1943.62025513995dc00000050040f257d8401d08bfd50ed616aC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe9ee703e9-f7f0-11e4-b65a-0018f369a300

Error: (05/11/2015 05:15:39 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz
Percentage of memory in use: 76%
Total physical RAM: 3071.18 MB
Available physical RAM: 711.46 MB
Total Pagefile: 6138.6 MB
Available Pagefile: 3683.48 MB
Total Virtual: 2047.88 MB
Available Virtual: 1924.15 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:116.35 GB) (Free:85.09 GB) NTFS
Drive d: () (Fixed) (Total:116.43 GB) (Free:113.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: B4B746C3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=116.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=116.4 GB) - (Type=OF Extended)

==================== End Of Log ============================

cosinus · 13.05.2015, 19:03

Adware/Junkware/Toolbars entfernen

1. Schritt: Malwarebytes

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!)

2. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

3. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

4. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Andre62 · 13.05.2015, 20:14

Hallo,

wie scheint, scheint es weg zu sein. Auf beiden Seiten wo es bisher war und ich gesehen habe ist es nun weg. Kannst du das Bitte erklären?

Hier die Logs:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 13.05.2015
Suchlauf-Zeit: 20:17:39
Logdatei: mbam.txt
Administrator: Ja

Version: 2.01.6.1022
Malware Datenbank: v2015.05.13.04
Rootkit Datenbank: v2015.04.21.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: Andre

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 301384
Verstrichene Zeit: 24 Min, 43 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(Keine schädliche Elemente gefunden)

Module: 0
(Keine schädliche Elemente gefunden)

Registrierungsschlüssel: 1
PUP.Optional.Crossrider.C, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\_CrossriderRegNamePlaceHolder_, In Quarantäne, [ec3c9201068437ff5ae5bfaab154f808], 

Registrierungswerte: 0
(Keine schädliche Elemente gefunden)

Registrierungsdaten: 0
(Keine schädliche Elemente gefunden)

Ordner: 11
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\chrome, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\chrome\content, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\chrome\skin, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\modules, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\skin, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\tools, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 

Dateien: 42
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\chrome.manifest, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\install.rdf, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\chrome\content\main.js, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\chrome\content\main.xul, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\chrome\skin\icon.png, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.VeggyAddon.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\veggy@veggyAddon.com\modules\XCipher.js, In Quarantäne, [0a1e058ea2e8f244ff06e4ece122aa56], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome.manifest, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\install.rdf, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\content.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\html5slider.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\jquery-1.8.3.min.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\li.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\main.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\main.xul, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\options.html, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\options.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\test.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\tools.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\tr.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\upcpier.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\content\zoom.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\skin\button.png, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\skin\icon32x32-disabled.png, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\skin\icon32x32.png, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\skin\options.css, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\skin\options_bg.png, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\skin\otaznik.png, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\chrome\skin\slider.png, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\addon_d.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\addon_info.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\file_cacher.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\guid.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\observer.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\pref_man.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\pu_upd.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\timer.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\time_passed.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\xcipher.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\tools\days_passed.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\tools\ff_info.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\tools\firstrun.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 
PUP.Optional.ZoomIt.A, C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\{a68c8eeb-81c1-7f0d-10de-aa94abea0215}\modules\tools\os.js, In Quarantäne, [29ff3063aedc3cfa95ae84d3eb1b3fc1], 

Physische Sektoren: 0
(Keine schädliche Elemente gefunden)


(end)

Was soll ich mit den Daten in der Quarantäne machen?

Code:

ATTFilter

# AdwCleaner v4.204 - Bericht erstellt 13/05/2015 um 20:49:31
# Aktualisiert 12/05/2015 von Xplode
# Datenbank : 2015-05-12.2 [Server]
# Betriebssystem : Windows 7 Enterprise Service Pack 1 (x86)
# Benutzername : Andre - ANDRE62
# Gestarted von : C:\Users\Andre\Desktop\AdwCleaner_4.204.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17728


-\\ Mozilla Firefox v37.0.2 (x86 de)


-\\ Opera v0.0.0.0


*************************

AdwCleaner[R0].txt - [3019 Bytes] - [14/10/2014 18:57:52]
AdwCleaner[R1].txt - [4606 Bytes] - [13/05/2015 18:32:04]
AdwCleaner[R2].txt - [1049 Bytes] - [13/05/2015 20:45:09]
AdwCleaner[R3].txt - [1109 Bytes] - [13/05/2015 20:47:19]
AdwCleaner[S0].txt - [3627 Bytes] - [14/10/2014 19:15:41]
AdwCleaner[S1].txt - [4678 Bytes] - [13/05/2015 18:34:24]
AdwCleaner[S2].txt - [1030 Bytes] - [13/05/2015 20:49:31]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1089  Bytes] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.7.0 (05.09.2015:1)
OS: Windows 7 Enterprise x86
Ran by Andre on 13.05.2015 at 20:57:19,48
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-166339250-2700308587-1543000564-1000\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}



~~~ Files



~~~ Folders



~~~ FireFox

Emptied folder: C:\Users\Andre\AppData\Roaming\mozilla\firefox\profiles\wxjpvk9t.default\minidumps [37 files]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 13.05.2015 at 21:01:47,46
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-05-2015
Ran by Andre (administrator) on ANDRE62 on 13-05-2015 21:10:09
Running from C:\Users\Andre\Downloads
Loaded Profiles: Andre (Available profiles: Andre)
Platform: Microsoft Windows 7 Enterprise  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Desktop.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
() C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\adbhelper@mozilla.org\win32\adb.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SoundMAXPnP] => C:\Program Files\Analog Devices\Core\smax4pnp.exe [868352 2006-12-18] (Analog Devices, Inc.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3745232 2015-04-15] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap.dll,ShadowPlayOnSystemStart
HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\Run: [TeamSpeak 3 Client] => C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe [9238472 2014-08-04] (TeamSpeak Systems GmbH)
HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [4811032 2014-09-26] (Piriform Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2014-10-05]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
Startup: C:\Users\Andre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 1510 series.lnk [2014-10-10]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 1510 series.lnk -> C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-166339250-2700308587-1543000564-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-gb/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Tcpip\Parameters: [DhcpNameServer] 192.168.3.1

FireFox:
========
FF ProfilePath: C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-03-13] (NVIDIA Corporation)
FF Plugin HKU\S-1-5-21-166339250-2700308587-1543000564-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Andre\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-12-05] (Unity Technologies ApS)
FF Extension: ADB Helper - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\adbhelper@mozilla.org [2015-02-27]
FF Extension: Download videos and MP3s from YouTube - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900} [2014-12-13]
FF Extension: YouTube mp3 - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\info@youtube-mp3.org.xpi [2014-10-17]
FF Extension: Adblock Plus - C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-08]
FF HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff [2014-12-13]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgfws; C:\Program Files\AVG\AVG2015\avgfws.exe [1517480 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3438032 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [311792 2015-04-15] (AVG Technologies CZ, s.r.o.)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [918160 2015-03-28] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
S2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [20696720 2015-03-28] (NVIDIA Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5448976 2015-04-17] (TeamViewer GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S2 WtuSystemSupport; C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-02-27] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [132576 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [57824 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [226784 2015-04-09] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [166880 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [29664 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [206816 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [269792 2015-03-11] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [110048 2015-04-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35808 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [213984 2015-04-07] (AVG Technologies CZ, s.r.o.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad32v.sys [32912 2015-02-05] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [801896 2013-03-12] (Realtek Semiconductor Corporation                           )
S3 athr; system32\DRIVERS\athr.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 21:10 - 2015-05-13 21:10 - 00010432 _____ () C:\Users\Andre\Downloads\Main.txt
2015-05-13 21:07 - 2015-05-13 21:08 - 00025842 _____ () C:\Users\Andre\Desktop\Addition.txt
2015-05-13 21:06 - 2015-05-13 21:07 - 00026764 _____ () C:\Users\Andre\Desktop\Main.txt
2015-05-13 21:01 - 2015-05-13 21:02 - 00001718 _____ () C:\Users\Andre\Desktop\JRT.txt
2015-05-13 20:55 - 2015-05-13 20:55 - 00000207 _____ () C:\Windows\tweaking.com-regbackup-ANDRE62-Windows-7-Enterprise-(32-bit).dat
2015-05-13 20:55 - 2015-05-13 20:55 - 00000000 ____D () C:\RegBackup
2015-05-13 20:54 - 2015-05-13 20:54 - 00001169 _____ () C:\Users\Andre\Desktop\AdwCleaner[S2].txt
2015-05-13 20:52 - 2015-05-13 20:52 - 00000364 _____ () C:\Windows\PFRO.log
2015-05-13 20:43 - 2015-05-13 20:44 - 00012749 _____ () C:\Users\Andre\Desktop\mbam.txt
2015-05-13 20:34 - 2015-05-13 20:33 - 02720307 _____ (Thisisu) C:\Users\Andre\Desktop\JRT.exe
2015-05-13 20:33 - 2015-05-13 20:33 - 02720307 _____ (Thisisu) C:\Users\Andre\Downloads\JRT.exe
2015-05-13 20:30 - 2015-05-13 20:29 - 02209792 _____ () C:\Users\Andre\Desktop\AdwCleaner_4.204.exe
2015-05-13 20:28 - 2015-05-13 20:29 - 02209792 _____ () C:\Users\Andre\Downloads\AdwCleaner_4.204.exe
2015-05-13 20:17 - 2015-05-13 20:17 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-13 20:16 - 2015-05-13 20:16 - 00001060 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-05-13 20:16 - 2015-05-13 20:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-13 20:16 - 2015-05-13 20:16 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2015-05-13 20:16 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-13 20:16 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-13 20:16 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-13 20:15 - 2015-05-13 20:15 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Andre\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-13 19:51 - 2015-05-13 21:04 - 00026359 _____ () C:\Users\Andre\Downloads\FRST.txt
2015-05-13 19:46 - 2015-05-13 21:10 - 00000000 ____D () C:\FRST
2015-05-13 19:45 - 2015-05-13 19:45 - 01143808 _____ (Farbar) C:\Users\Andre\Downloads\FRST.exe
2015-05-13 18:40 - 2015-05-13 18:40 - 00004678 _____ () C:\Users\Andre\Desktop\AdwCleaner[S1].txt
2015-05-13 18:07 - 2015-05-13 18:07 - 00000929 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2015-05-13 18:07 - 2015-05-13 18:07 - 00000917 _____ () C:\Users\Public\Desktop\TeamViewer 10.lnk
2015-04-23 19:42 - 2015-04-23 19:42 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-04-21 03:33 - 2015-05-13 20:52 - 00004872 _____ () C:\Windows\setupact.log
2015-04-21 03:33 - 2015-04-21 03:33 - 00000000 _____ () C:\Windows\setuperr.log
2015-04-16 17:35 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-16 17:35 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-16 17:35 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-16 17:35 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-16 17:35 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-16 17:35 - 2015-03-17 06:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-16 17:35 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-16 17:35 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-16 17:34 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-16 17:34 - 2015-03-17 07:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-16 17:34 - 2015-03-17 07:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-16 17:34 - 2015-03-17 06:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-16 17:34 - 2015-03-17 06:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-16 17:34 - 2015-03-17 06:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-16 17:34 - 2015-03-17 06:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-16 17:34 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-16 17:34 - 2015-03-17 06:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-16 17:34 - 2015-03-17 06:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-16 17:34 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-16 17:34 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-16 17:34 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-16 17:34 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-16 17:34 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-16 17:34 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-16 17:34 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-16 17:34 - 2015-03-13 05:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-16 17:34 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-16 17:34 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-16 17:34 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-16 17:34 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-16 17:34 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-16 17:34 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-16 17:34 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-16 17:34 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-16 17:34 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-16 17:34 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-16 17:34 - 2015-03-13 05:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-16 17:34 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-16 17:34 - 2015-03-13 05:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-16 17:34 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-16 17:34 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-16 17:34 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-16 17:34 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-16 17:34 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-16 17:34 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-16 17:34 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-16 17:34 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-16 17:34 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-16 17:34 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-16 17:34 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-16 17:34 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-16 17:34 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-16 17:34 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-16 17:34 - 2015-03-05 06:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-16 17:33 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-16 17:33 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-16 17:33 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-16 17:33 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-16 17:33 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-16 17:33 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2015-04-15 13:05 - 2015-04-15 13:05 - 00206816 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx86.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 21:05 - 2009-07-14 06:34 - 00023824 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-13 21:05 - 2009-07-14 06:34 - 00023824 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-13 21:03 - 2015-04-11 16:39 - 01209072 _____ () C:\Windows\WindowsUpdate.log
2015-05-13 21:00 - 2014-10-05 19:47 - 00000000 ____D () C:\Users\Andre\AppData\Roaming\TS3Client
2015-05-13 20:52 - 2015-01-17 12:57 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-13 20:52 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-13 20:49 - 2014-10-14 18:57 - 00000000 ____D () C:\AdwCleaner
2015-05-13 20:38 - 2014-10-06 15:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-13 19:28 - 2014-10-12 17:58 - 00000000 ____D () C:\ProgramData\MFAData
2015-05-13 19:04 - 2014-10-09 17:19 - 00064024 _____ () C:\Users\Andre\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-13 18:36 - 2009-07-14 06:33 - 00287344 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-13 18:34 - 2014-11-06 17:02 - 00029864 _____ () C:\Windows\system32\debug.log
2015-05-13 18:34 - 2014-10-12 17:50 - 00000000 ____D () C:\Program Files\TeamViewer
2015-04-25 07:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-04-24 20:15 - 2014-10-12 19:55 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-04-23 19:29 - 2014-10-07 17:02 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-23 19:24 - 2012-06-23 21:52 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-18 09:41 - 2014-10-12 18:13 - 00000951 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-04-18 09:41 - 2014-10-12 18:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-04-17 20:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-17 13:56 - 2014-12-10 11:39 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-17 13:56 - 2014-10-07 16:28 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-17 13:56 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2015-04-16 21:31 - 2010-11-20 23:01 - 01591896 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-14 18:38 - 2014-10-06 15:56 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-14 18:38 - 2014-10-06 15:56 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2014-10-10 16:21 - 2014-10-10 16:21 - 0000057 _____ () C:\ProgramData\Ament.ini

Some content of TEMP:
====================
C:\Users\Andre\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Andre\AppData\Local\Temp\nvStInst.exe
C:\Users\Andre\AppData\Local\Temp\Quarantine.exe
C:\Users\Andre\AppData\Local\Temp\sqlite3.dll
C:\Users\Andre\AppData\Local\Temp\Uninstaller-5376.exe
C:\Users\Andre\AppData\Local\Temp\Uninstaller-6496.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-04 14:36

==================== End Of Log ============================

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 13-05-2015
Ran by Andre at 2015-05-13 21:11:13
Running from C:\Users\Andre\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-166339250-2700308587-1543000564-500 - Administrator - Disabled)
Andre (S-1-5-21-166339250-2700308587-1543000564-1000 - Administrator - Enabled) => C:\Users\Andre
Gast (S-1-5-21-166339250-2700308587-1543000564-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: AVG Internet Security 2015 (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2015 (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
FW: AVG Internet Security 2015 (Enabled) {757AB44A-78C2-7D1A-E37F-CA42A037B368}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 17.0.0.169 - Adobe Systems Incorporated)
AVG 2015 (HKLM\...\AVG) (Version: 2015.0.5941 - AVG Technologies)
AVG 2015 (Version: 15.0.4342 - AVG Technologies) Hidden
AVG 2015 (Version: 15.0.5941 - AVG Technologies) Hidden
AVG Web TuneUp (HKLM\...\AVG Web TuneUp) (Version: 4.1.0.411 - AVG Technologies)
CCleaner (HKLM\...\CCleaner) (Version: 4.18 - Piriform)
Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
Free YouTube to MP3 Converter version 3.12.50.1122 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.50.1122 - DVDVideoSoft Ltd.)
HP Deskjet 1510 series - Grundlegende Software für das Gerät (HKLM\...\{0C7ED99F-AF77-4AF5-BA4E-7B9BB32DF285}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
HP Deskjet 1510 series Hilfe (HKLM\...\{23972F22-BA23-4C61-9F91-B9470E1563EB}) (Version: 30.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (Version: 1.00.0001 - Microsoft) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 32.0.3 - Mozilla)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.88 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.88 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.88 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OCCT 4.4.1 (HKLM\...\OCCT) (Version: 4.4.1 - Ocbase.com)
OpenOffice 4.1.1 (HKLM\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PlanetSide 2 (HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\SOE-PlanetSide 2) (Version:  - Sony Online Entertainment)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.1.21 - NVIDIA Corporation) Hidden
SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.1.6140 - Analog Devices)
Studie zur Verbesserung von HP Deskjet 1510 series (HKLM\...\{498BD73A-022A-408D-A50E-B9C615286E95}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM\...\TeamViewer) (Version: 10.0.41459 - TeamViewer)
TP-LINK TL-WN821N(C)_TL-WN822N_TL-WN823N Driver (HKLM\...\{852E893E-E4FD-45BB-8B17-72ADDF686974}) (Version: 1.3.1 - TP-LINK)
TP-LINK Wireless Configuration Utility (HKLM\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Unity Web Player (HKU\S-1-5-21-166339250-2700308587-1543000564-1000\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Windows Phone app for desktop (HKLM\...\{19773614-FC22-4ACC-AAA3-E6BDA81ACF92}) (Version: 1.1.2726.0 - Microsoft Corporation)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-166339250-2700308587-1543000564-1000_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Andre\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-166339250-2700308587-1543000564-1000_Classes\CLSID\{49BBAA3C-C574-419E-8378-783C362E9C15}\InprocServer32 -> C:\Program Files\HP\Common\FWUpdateEDO2.dll (Hewlett-Packard Co.)

==================== Restore Points  =========================

25-03-2015 22:24:47 Windows Update
16-04-2015 21:28:10 Windows Update
23-04-2015 19:24:07 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1B83276C-0148-4AC2-8497-B02F5890AA82} - System32\Tasks\HP AR Program Upload - 346c60a8e33f47b998737513d9a9a6ff5af018adc7e14589b185500b9e9f071b => C:\Program Files\HP\HP Deskjet 1510 series\bin\HPRewards.exe [2013-08-13] (TODO: <Company name>)
Task: {3D68181B-FFA0-4DE4-B9D7-EDF03EF1D358} - System32\Tasks\HPCustParticipation HP Deskjet 1510 series => C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [2013-08-13] (Hewlett-Packard Co.)
Task: {7CC0F03B-4E6A-4AB0-B7CA-6BC67830B187} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-09-26] (Piriform Ltd)
Task: {94AAF310-5C29-481A-AE1A-19EA35067AD6} - System32\Tasks\{1A0BB0EF-D024-4365-9011-C65B2BF14FA6} => pcalua.exe -a "C:\Program Files\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {98B60530-0EB8-4FE0-AFCC-326CBA7081F7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-04-14] (Adobe Systems Incorporated)
Task: {999AA635-61FD-480D-9414-3B02340BFCE1} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2014-10-05] ()

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) ==============

2014-09-25 20:44 - 2014-09-25 20:44 - 00053248 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2014-02-28 15:33 - 2014-02-28 15:33 - 00148480 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00864768 _____ () C:\Program Files\TeamSpeak 3 Client\platforms\qwindows.dll
2014-02-27 15:45 - 2014-02-27 15:45 - 00677376 _____ () C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite.dll
2014-08-04 15:43 - 2014-08-04 15:43 - 00092104 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2014-08-04 15:43 - 2014-08-04 15:43 - 00105416 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00025600 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qgif.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00242688 _____ () C:\Program Files\TeamSpeak 3 Client\imageformats\qjpeg.dll
2014-08-04 15:45 - 2014-08-04 15:45 - 00477128 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 15:45 - 2014-08-04 15:45 - 00484808 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-02-27 15:46 - 2014-02-27 15:46 - 00123904 _____ () C:\Program Files\TeamSpeak 3 Client\accessible\qtaccessiblewidgets.dll
2014-11-06 17:01 - 2014-11-06 17:01 - 01685528 ____N () C:\Program Files\AVG Web TuneUp\TBAPI.dll
2015-02-27 19:55 - 2015-02-27 19:55 - 00818176 _____ () C:\Users\Andre\AppData\Roaming\Mozilla\Firefox\Profiles\wxjpvk9t.default\extensions\adbhelper@mozilla.org\win32\adb.exe
2015-01-17 12:56 - 2015-03-13 17:57 - 00107664 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax.dll
2015-03-30 20:47 - 2015-03-28 05:45 - 00011920 _____ () C:\Program Files\NVIDIA Corporation\Update Core\detoured.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, the associated entry will be removed from the registry.)

IE trusted site: HKU\.DEFAULT\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\.DEFAULT\...\freerealms.com -> freerealms.com
IE trusted site: HKU\.DEFAULT\...\soe.com -> soe.com
IE trusted site: HKU\.DEFAULT\...\sony.com -> sony.com


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-166339250-2700308587-1543000564-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Andre\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.3.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== FirewallRules (whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{211485CA-34F6-46AD-B5E4-2ADC7C13B571}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{A1CEF72E-95A9-41EE-A261-44C7AE8EED18}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\USBSetup.exe
FirewallRules: [{F9A40D6E-D5B7-40F1-BA21-00097B13D55C}] => (Allow) C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{D2AEF533-C6C7-4776-BF7B-4E9C4A905466}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{D9C56E5B-1796-4DAF-9E39-5B8C75CADD2C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{AD66D746-B10A-4F5B-9099-441A5F29C63C}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0C568F66-D64F-4358-B9C8-6B031FFAC1EE}] => (Allow) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{620D6E61-ED1C-4926-AEB5-068ECDDA8AF3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3D47C888-99A9-463A-917B-33B668B875B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{03A9B5F4-3A97-44B3-9B94-404B0EF1E927}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{18BEC9EB-EBB6-4A37-A4F9-064CA06CC2A4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{73693901-DE76-4665-AAAB-8C21F98FB1E0}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{06BBE351-93DB-403F-B27D-3F4379D5590F}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe
FirewallRules: [{1C736664-CBF6-4D81-8792-1640889F1A50}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{9225E456-85C1-4CFC-BD97-5C03ED8F1D9F}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{5F05FC4A-9F0C-4EE6-A948-9D822A4DE191}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{36033BBF-C4B8-40D9-A4B8-C9488C48BF4A}] => (Allow) C:\Program Files\AVG\AVG2015\avgnsx.exe
FirewallRules: [{86403328-9A27-442E-80B1-E633BA51B74D}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{6F7D4703-69F9-4749-8A53-CA847C7612B1}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{1B7E2287-759F-4609-B8B0-16D71E2E2408}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe
FirewallRules: [{BDF7601F-4C25-4260-9397-0E391EA39B26}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe
FirewallRules: [{DE8773F8-60C9-479C-98DC-945B3A829AC5}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{8E071D80-5690-4D7D-9A10-999F3892CC48}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe
FirewallRules: [{2DC2FFE3-DAFE-4F8A-98C6-46B01C89F6EC}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6A82DD02-23BF-4938-B588-516A98E82C1B}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/13/2015 08:52:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0040f257
ID des fehlerhaften Prozesses: 0xba0
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (05/13/2015 08:52:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 06:37:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0040f257
ID des fehlerhaften Prozesses: 0xae8
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (05/13/2015 06:36:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 06:00:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: plugin-container.exe, Version: 37.0.2.5583, Zeitstempel: 0x552ef76c
Name des fehlerhaften Moduls: mozalloc.dll, Version: 37.0.2.5583, Zeitstempel: 0x552ee9ae
Ausnahmecode: 0x80000003
Fehleroffset: 0x00001aa1
ID des fehlerhaften Prozesses: 0x1744
Startzeit der fehlerhaften Anwendung: 0xplugin-container.exe0
Pfad der fehlerhaften Anwendung: plugin-container.exe1
Pfad des fehlerhaften Moduls: plugin-container.exe2
Berichtskennung: plugin-container.exe3

Error: (05/13/2015 05:15:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0040f257
ID des fehlerhaften Prozesses: 0xbb4
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (05/13/2015 05:15:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 09:32:11 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (05/12/2015 05:04:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Name des fehlerhaften Moduls: NvStreamNetworkService.exe, Version: 4.1.1943.6202, Zeitstempel: 0x5513995d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0040f257
ID des fehlerhaften Prozesses: 0xc64
Startzeit der fehlerhaften Anwendung: 0xNvStreamNetworkService.exe0
Pfad der fehlerhaften Anwendung: NvStreamNetworkService.exe1
Pfad des fehlerhaften Moduls: NvStreamNetworkService.exe2
Berichtskennung: NvStreamNetworkService.exe3

Error: (05/12/2015 05:04:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/13/2015 08:58:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/13/2015 08:58:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/13/2015 08:58:06 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Software Protection" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/13/2015 08:58:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/13/2015 08:58:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/13/2015 08:58:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA GeForce Experience Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/13/2015 08:58:00 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "AVG WatchDog" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/13/2015 08:58:00 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AVG Firewall" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/13/2015 08:57:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/13/2015 08:57:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AMD External Events Utility" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (05/13/2015 08:52:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.62025513995dNvStreamNetworkService.exe4.1.1943.62025513995dc00000050040f257ba001d08dadf9a4b847C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe44978d7f-f9a1-11e4-9e2c-0018f369a300

Error: (05/13/2015 08:52:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 06:37:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.62025513995dNvStreamNetworkService.exe4.1.1943.62025513995dc00000050040f257ae801d08d9b0189552bC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe4b76ba6a-f98e-11e4-b661-0018f369a300

Error: (05/13/2015 06:36:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/13/2015 06:00:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe37.0.2.5583552ef76cmozalloc.dll37.0.2.5583552ee9ae8000000300001aa1174401d08d933ead61ccC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Mozilla Firefox\mozalloc.dll3d6fcb9e-f989-11e4-b596-0018f369a300

Error: (05/13/2015 05:15:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.62025513995dNvStreamNetworkService.exe4.1.1943.62025513995dc00000050040f257bb401d08d8f9b392361C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeee3f06da-f982-11e4-b596-0018f369a300

Error: (05/13/2015 05:15:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/12/2015 09:32:11 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcSSAU restarted too many times in a short period. Aborting. [0]

Error: (05/12/2015 05:04:28 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: NvStreamNetworkService.exe4.1.1943.62025513995dNvStreamNetworkService.exe4.1.1943.62025513995dc00000050040f257c6401d08cc4df62ebf2C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exeC:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe2efb95e1-f8b8-11e4-b231-0018f369a300

Error: (05/12/2015 05:04:09 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info =========================== 

Processor: Intel(R) Pentium(R) Dual CPU E2180 @ 2.00GHz
Percentage of memory in use: 51%
Total physical RAM: 3071.18 MB
Available physical RAM: 1488.59 MB
Total Pagefile: 6138.6 MB
Available Pagefile: 4236.83 MB
Total Virtual: 2047.88 MB
Available Virtual: 1916.71 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:116.35 GB) (Free:84.88 GB) NTFS
Drive d: () (Fixed) (Total:116.43 GB) (Free:113.64 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: B4B746C3)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=116.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=116.4 GB) - (Type=OF Extended)

==================== End Of Log ============================

cosinus · 13.05.2015, 20:47

Was soll ich da erklären? Du hast ja selbst schon adwCleaner ausgeführt. Wenn es das für dich sichtbare Symptom entfernt, was soll man da noch erklären?

Zitat:

Platform: Microsoft Windows 7 Enterprise

Ich würde ja lieber ne Erklärung für die Enterprise-Edition haben.
Hast du das Gerät von deinem Arbeitgeber so gestellt bekommen oder von der Uni? Privat bekommt man keine Enterprise-Edition. Jedenfalls weder legal, noch ohne Hintertüren.

Textlinks mit Overlay im Firefox

Plagegeister aller Art und deren Bekämpfung: Textlinks mit Overlay im Firefox