| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Maus und Tastatur machen sich selbstständigWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.07.2015, 20:58
| #1 |
 |  Maus und Tastatur machen sich selbstständig Hallo liebe Community, tut mir leid für den langen Text, ich liste am Ende nochmal die Probleme stichwortartig zusammen. Kurz meine PC Daten welche ich denke die wichtig sein können für mein Problem: Windows 7 Home 64-Bit Version Maus: MadCatz R.A.T. 7 Tastatur: MadCatz V.7 Antivir: Avira und zwar habe ich seit heute Mittag ein kleines Problem. Es hat damit angefangen das an meinen Windows 7 PC meine MadCatz Maus nicht mehr erkannt wurde, bzw. der Treiber nicht richtig installiert. Also habe ich ein bisschen "gegoogelt" und ein Programm runtergeladen welche angeblich die Treiberinstallation scannen soll. Dabei hat mein AntiVirenscanner "Avira" einen Virus festgestellt welchen ich unter Quarantäne gestellt habe. Seit diesen Zeitpunkt an spielt meine Tastatur verrückt. Wenn ich eine Taste gedrückt habe, hat sie nicht nur den Buchstaben geschrieben, sondern auch immer einen Buchstaben angehängt. Beispiel: Ich drücke A, am Bildschirm steht A1. Im Laufe des Tages ist es nun so schlimm geworden, dass ich die Tastatu nicht mehr benützen kann. Es reagiert auf keinen Knopfdruck, aber sie spammt in einen durch eine Zahl oder ein Kommazeichen. Das ist noch nicht alles, seit wenigen Minuten bewegt sich auch die Maus quer über den Desktop ohne das auch nur eine Maus angesteckt ist. Und wenn ich nun versuche etwas zu öffnen, egal ob es Word, Texteditor oder GoogleChrome ist, es kommt das Benachrichtigungsfeld mit dem Text: "Möchten Sie zulassen dass durch das folgende Programm Änderungen an diesen Computer vorgenommenwerden?" Das hatte ich zuvor auch nicht. Habe die Tastatur am Laptop getestet, dort hat sie einfach nicht reagiert. Zusammenfassung: - Maus bewegt sich ohne das ein angesteckt ist - Tastatur reagiert nicht, spammt aber andauernd eine Zahl, Buchstaben etc. - Avira Scann läuft seit 3 Stunden, noch nichts gefunden - Malwarebytes Anti Malware hat 2 Bedrohungen gefunden Hoffe ich bin hier halbwegs richtig und habe nicht zuviel geschrieben. LG Manuel |
|
13.07.2015, 21:12
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Maus und Tastatur machen sich selbstständig Hallo und
__________________ Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
 Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
13.07.2015, 21:32
| #3 |
| | Maus und Tastatur machen sich selbstständig Hallo und danke für die schnelle Antwort.
__________________Der Avira Scann läuft schon seit 3h und 40min. Ist noch nicht fertig (13%). Hier der aktuelle Avira Log von heute: Code:
ATTFilter Exportierte Ereignisse:
13.07.2015 20:49 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer MANUEL (10.0.0.3) erfolgreich
durchgeführt.
Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
aktualisiert:
aevdf.dat 8.11.247.188
xbv00209.vdf 8.11.247.188
local001.vdf
13.07.2015 20:48 [Planer] Auftrag gestartet
Auftrag "Automatisches Update Free"
wurde erfolgreich gestartet.
13.07.2015 18:49 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer MANUEL (10.0.0.3) erfolgreich
durchgeführt.
Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
aktualisiert:
aevdf.dat 8.11.247.186
xbv00207.vdf 8.11.247.184
xbv00208.vdf 8.11.247.186
local000.vdf
13.07.2015 18:48 [Planer] Auftrag gestartet
Auftrag "Automatisches Update Free"
wurde erfolgreich gestartet.
13.07.2015 18:48 [Planer] Auftrag gestartet
Auftrag "Vollständige Systemprüfung"
wurde erfolgreich gestartet.
13.07.2015 18:47 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 18:47 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.180
13.07.2015 18:46 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 18:46 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 18:46 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 18:44 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 18:44 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.180
13.07.2015 18:42 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 18:41 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 18:41 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 18:41 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 18:41 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.180
13.07.2015 18:40 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 18:39 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 18:39 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 18:14 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 18:14 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.180
13.07.2015 18:13 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 17:56 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:56 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:55 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 17:55 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.180
13.07.2015 17:54 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 17:52 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:52 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:47 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 17:47 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.180
13.07.2015 17:47 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 17:42 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:42 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:41 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 17:41 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.180
13.07.2015 17:40 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 17:28 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:28 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:23 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 17:23 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.180
13.07.2015 17:23 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 17:22 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:22 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 17:21 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde abgebrochen!].
Anzahl Dateien: 0
Anzahl Verzeichnisse: 0
Anzahl Malware: 0
Anzahl Warnungen: 0
13.07.2015 17:10 [Updater] Update nicht ausgeführt
Das Update von Computer MANUEL (10.0.0.3) von "'unbekannt'" ist fehlgeschlagen.
Abbruch durch den Benutzer.
Es wurden keine neuen Dateien geladen.
13.07.2015 17:09 [Planer] Auftrag gestartet
Auftrag "Vollständige Systemprüfung"
wurde erfolgreich gestartet.
13.07.2015 17:09 [Planer] Auftrag gestartet
Auftrag "AVImmediateUpdateJobEx"
wurde erfolgreich gestartet.
13.07.2015 16:40 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer MANUEL (10.0.0.3) erfolgreich
durchgeführt.
Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
aktualisiert:
aevdf.dat 8.11.247.180
xbv00205.vdf 8.11.247.176
xbv00206.vdf 8.11.247.180
local001.vdf
repair.rdf 1.0.8.78
13.07.2015 16:39 [Planer] Auftrag gestartet
Auftrag "Automatisches Update Free"
wurde erfolgreich gestartet.
13.07.2015 16:30 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 16:30 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.174
13.07.2015 16:29 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 16:25 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 16:25 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 16:19 [Planer] Auftrag gestartet
Auftrag "Vollständige Systemprüfung"
wurde erfolgreich gestartet.
13.07.2015 16:12 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 16:12 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.174
13.07.2015 16:12 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 16:11 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 16:11 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 15:55 [System-Scanner] Malware gefunden
Die Datei 'C:\Users\Admin\AppData\Local\Temp\JSE_install_app-1436795636492.exe'
enthielt einen Virus oder unerwünschtes Programm 'PUA/InstallCore.Gen (Cloud)'
[riskware].
Durchgeführte Aktion(en):
Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '525e6026.qua'
verschoben!
13.07.2015 15:55 [System-Scanner] Suche
Suchlauf beendet [Der Suchlauf wurde vollständig durchgeführt.].
Anzahl Dateien: 976
Anzahl Verzeichnisse: 0
Anzahl Malware: 1
Anzahl Warnungen: 0
13.07.2015 15:54 [Echtzeit-Scanner] Malware gefunden
In der Datei
'C:\Users\Admin\AppData\Local\Temp\JSE_install_app-1436795636492.exe'
wurde ein Virus oder unerwünschtes Programm 'PUA/InstallCore.Gen (Cloud)'
[PUA/InstallCore.Gen] gefunden.
Ausgeführte Aktion: Zugriff verweigern
13.07.2015 15:49 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 15:49 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.174
13.07.2015 15:48 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 15:46 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 15:46 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 15:39 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 15:39 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.174
13.07.2015 15:37 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 15:36 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 15:36 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 15:25 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 15:25 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.174
13.07.2015 15:25 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
13.07.2015 15:22 [Echtzeit-Scanner] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 15:22 [Planer] Dienst gestoppt
Der Dienst wurde gestoppt.
13.07.2015 14:30 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer MANUEL (10.0.0.3) erfolgreich
durchgeführt.
Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
aktualisiert:
repair.rdf 1.0.8.76
13.07.2015 14:30 [Planer] Auftrag gestartet
Auftrag "Automatisches Update Free"
wurde erfolgreich gestartet.
13.07.2015 12:30 [Updater] Update erfolgreich durchgeführt
Update von Avira Free Antivirus auf Computer MANUEL (10.0.0.3) erfolgreich
durchgeführt.
Folgende Dateien wurden von "hxxp://personal.avira-update.com/update"
aktualisiert:
aevdf.dat 8.11.247.174
xbv00198.vdf 8.11.247.112
xbv00199.vdf 8.11.247.128
xbv00200.vdf 8.11.247.142
xbv00201.vdf 8.11.247.144
xbv00202.vdf 8.11.247.158
xbv00203.vdf 8.11.247.160
xbv00204.vdf 8.11.247.174
local000.vdf
13.07.2015 12:30 [Planer] Auftrag gestartet
Auftrag "Automatisches Update Free"
wurde erfolgreich gestartet.
13.07.2015 12:22 [Echtzeit-Scanner] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.572
Engine Version:
VDF Version:
13.07.2015 12:22 [Hilfsdienst] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version: 15.0.11.550
Engine Version: 8.3.32.22
VDF Version: 8.11.247.110
13.07.2015 12:20 [Planer] Dienst gestartet
Der Dienst wurde gestartet.
Dienst Version 15.0.11.572
Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 13.07.2015 Suchlauf-Zeit: 21:15:40 Logdatei: moti.txt Administrator: Ja Version: 2.01.6.1022 Malware Datenbank: v2015.07.13.04 Rootkit Datenbank: v2015.07.10.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Admin Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 374265 Verstrichene Zeit: 25 Min, 26 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 0 (Keine schädliche Elemente gefunden) Registrierungsschlüssel: 0 (Keine schädliche Elemente gefunden) Registrierungswerte: 0 (Keine schädliche Elemente gefunden) Registrierungsdaten: 0 (Keine schädliche Elemente gefunden) Ordner: 1 PUP.Optional.APNToolBar.Gen, C:\ProgramData\APN\APN-Stub, In Quarantäne, [0444f6eb9febbf77797aae5027db06fa], Dateien: 1 PUP.Optional.APNToolBar.A, C:\Users\Admin\AppData\Local\Temp\APNSetup.exe, In Quarantäne, [bb8d0bd6e9a11f175498d2d4d72af907], Physische Sektoren: 0 (Keine schädliche Elemente gefunden) (end) FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-07-2015 Ran by Admin (administrator) on MANUEL on 13-07-2015 22:22:15 Running from F:\ Loaded Profiles: Admin & (Available Profiles: Admin) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Softwareentwicklung Remus - ArchiCrypt) C:\Windows\System32\ACRAMDiskHandlerService64RD3.exe () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtlService.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe (A1) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter_Launcher.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe (A1) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter_Repair.exe (A1 Telekom Austria AG) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter_Notification.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtWLan.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7203032 2013-10-22] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [730416 2015-06-10] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1282120 2013-05-02] (CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.) HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated) HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [37232 2008-06-12] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [640376 2008-06-11] (Adobe Systems Inc.) HKLM-x32\...\Run: [Adobe_ID0ENQBO] => C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe [378224 2008-08-15] (Adobe Systems Incorporated) HKLM-x32\...\Run: [A1Servicecenter] => C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter_Launcher.exe [11467864 2015-05-27] (A1) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [967568 2015-01-29] (Cisco Systems, Inc.) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [134368 2015-06-02] (Avira Operations GmbH & Co. KG) HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-04-14] (Malwarebytes Corporation) HKU\S-1-5-21-2266551883-2310591651-913177673-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2266551883-2310591651-913177673-1000\...\Run: [SaitekInstall] => C:\Windows\temp\MadCatz\Range_RAT7_SD7_64_Drivers\00000000\setup.exe [1275904 2012-09-20] (Saitek) <===== ATTENTION HKU\S-1-5-21-2266551883-2310591651-913177673-1000\...\MountPoints2: {754e3889-3aa6-11e4-a709-40167eacee28} - Autoplay.exe -auto HKU\S-1-5-21-2266551883-2310591651-913177673-1000\...\MountPoints2: {895f7100-4632-11e4-ab26-40167eacee28} - E:\setup.exe HKU\S-1-5-21-2266551883-2310591651-913177673-1000\...\MountPoints2: {ca063958-fc33-11e3-8100-806e6f6e6963} - D:\Bin\ASSETUP.exe HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd) HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SaitekInstall] => C:\Windows\temp\MadCatz\Range_RAT7_SD7_64_Drivers\00000000\setup.exe [1275904 2012-09-20] (Saitek) <===== ATTENTION HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {754e3889-3aa6-11e4-a709-40167eacee28} - Autoplay.exe -auto HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {895f7100-4632-11e4-ab26-40167eacee28} - E:\setup.exe HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {ca063958-fc33-11e3-8100-806e6f6e6963} - D:\Bin\ASSETUP.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk [2014-10-26] ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe () ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKU\S-1-5-21-2266551883-2310591651-913177673-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?fr=avantsearch6 HKU\S-1-5-21-2266551883-2310591651-913177673-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.search.yahoo.com/?fr=avantsearch6 HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2266551883-2310591651-913177673-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: ContributeBHO Class -> {074C1DC5-9320-4A9A-947D-C042949C6216} -> C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10] (Adobe Systems Incorporated.) BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-07-07] (CANON INC.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-24] (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-24] (Oracle Corporation) BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-07-07] (CANON INC.) Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10] (Adobe Systems Incorporated.) Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 Tcpip\..\Interfaces\{A75B5883-73FB-4066-9BFA-C15703B38937}: [DhcpNameServer] 10.0.0.138 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default FF SelectedSearchEngine: FF Homepage: hxxp://www.google.at FF NetworkProxy: "gopher", "" FF NetworkProxy: "gopher_port", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_191.dll [2015-07-10] () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd.) FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd.) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_191.dll [2015-07-10] () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-24] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-24] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-12-13] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-12-13] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-2266551883-2310591651-913177673-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll [2014-07-28] (Tracker Software Products (Canada) Ltd.) FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default\searchplugins\google-images.xml [2014-09-25] FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default\searchplugins\google-maps.xml [2014-09-25] FF Extension: Avira Browser Safety - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default\Extensions\abs@avira.com [2015-07-02] FF Extension: A1 Servicecenter - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default\Extensions\{594657B4-413A-41D0-8F85-A6D3F35C9BDF} [2015-06-03] FF Extension: Cliqz Beta - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default\Extensions\cliqz@cliqz.com.xpi [2014-09-25] FF Extension: FlashGot - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-09-24] FF HKU\S-1-5-21-2266551883-2310591651-913177673-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default\extensions\cliqz@cliqz.com FF HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\vv9lddwx.default\extensions\cliqz@cliqz.com Chrome: ======= CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-07] CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-07] CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-07] CHR Extension: (Google Search) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-07] CHR Extension: (AdBlock) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-20] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15] CHR Extension: (Download Master) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcceagdollnkjlogmdckgjakjapmkdjf [2014-10-07] CHR Extension: (Twitch Now) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2015-01-31] CHR Extension: (Google Wallet) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-07] CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-07] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [284016 2008-08-15] (Adobe Systems Incorporated) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827184 2015-06-10] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [450808 2015-06-10] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1188360 2015-06-10] (Avira Operations GmbH & Co. KG) R2 ArchiCrypt Ultimate RAM-Disk 3; C:\Windows\system32\ACRAMDiskHandlerService64RD3.exe [436840 2012-03-06] (Softwareentwicklung Remus - ArchiCrypt) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-05-07] () R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [217280 2015-06-02] (Avira Operations GmbH & Co. KG) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1060352 2015-06-15] () R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [216576 2014-09-03] () [File not signed] R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-11-06] (NVIDIA Corporation) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] () R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19819848 2014-11-06] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2004488 2015-07-05] (Electronic Arts) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2014-11-10] () R2 Realtek8723AU; C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtlService.exe [36864 2012-05-10] (Realtek Semiconductor Corp.) [File not signed] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 ACMoFlex64RD3; C:\Windows\system32\drivers\ACMoFlex64RD3.sys [23656 2012-03-06] (Softwareentwicklung Remus - ArchiCrypt.com) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] () R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [153256 2015-06-10] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132656 2015-06-10] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-08-15] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-03-04] (Avira Operations GmbH & Co. KG) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2015-01-30] (DT Soft Ltd) R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation) S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2015-07-13] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19784 2014-11-06] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) S3 pflt; C:\Windows\System32\DRIVERS\vfilter.sys [57344 2008-11-11] () [File not signed] S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-05-14] (Realtek Semiconductor Corporation ) R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2012-12-05] (Realtek Semiconductor Corporation ) S3 SaiK1708; C:\Windows\System32\DRIVERS\SaiK1708.sys [180544 2012-09-20] (Saitek) R3 Sftfs; C:\Windows\System32\DRIVERS\Sftfswin7.sys [767648 2014-10-08] (Microsoft Corporation) R3 Sftplay; C:\Windows\System32\DRIVERS\Sftplaywin7.sys [273576 2014-10-08] (Microsoft Corporation) R3 Sftredir; C:\Windows\System32\DRIVERS\Sftredirwin7.sys [29864 2014-10-08] (Microsoft Corporation) R3 Sftvol; C:\Windows\System32\DRIVERS\Sftvolwin7.sys [23208 2014-10-08] (Microsoft Corporation) U0 stidqvy; C:\Windows\System32\drivers\sarcvck.sys [79064 2015-07-13] (Malwarebytes Corporation) S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52592 2014-03-12] (Cisco Systems, Inc.) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-13 22:21 - 2015-07-13 22:22 - 00000000 ____D C:\FRST 2015-07-13 22:21 - 2015-07-13 22:21 - 00026602 _____ C:\Users\Admin\Desktop\Ereignisse.txt 2015-07-13 22:17 - 2015-07-13 22:17 - 00001102 _____ C:\Users\Admin\Desktop\ Malwarebytes Anti-Malware (6).lnk 2015-07-13 22:17 - 2015-07-13 22:17 - 00001102 _____ C:\Users\Admin\Desktop\ Malwarebytes Anti-Malware (5).lnk 2015-07-13 22:17 - 2015-07-13 22:17 - 00001092 _____ C:\Users\Admin\Desktop\Meerwasser - Datenblatt - Verknüpfung.lnk 2015-07-13 22:17 - 2015-07-13 22:17 - 00000803 _____ C:\Users\Admin\Desktop\moti - Verknüpfung.lnk 2015-07-13 22:15 - 2015-07-13 22:15 - 00001155 _____ C:\Users\Admin\Desktop\Avira (2).lnk 2015-07-13 22:15 - 2015-07-13 22:15 - 00001102 _____ C:\Users\Admin\Desktop\ Malwarebytes Anti-Malware .lnk 2015-07-13 22:15 - 2015-07-13 22:15 - 00001102 _____ C:\Users\Admin\Desktop\ Malwarebytes Anti-Malware (4).lnk 2015-07-13 22:15 - 2015-07-13 22:15 - 00001102 _____ C:\Users\Admin\Desktop\ Malwarebytes Anti-Malware (3).lnk 2015-07-13 22:15 - 2015-07-13 22:15 - 00001102 _____ C:\Users\Admin\Desktop\ Malwarebytes Anti-Malware (2).lnk 2015-07-13 22:03 - 2015-07-13 22:03 - 00079064 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\sarcvck.sys 2015-07-13 21:14 - 2015-07-13 22:15 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-07-13 21:14 - 2015-07-13 21:14 - 00001102 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2015-07-13 21:14 - 2015-07-13 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2015-07-13 21:14 - 2015-07-13 21:14 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-07-13 21:14 - 2015-07-13 21:14 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-07-13 21:14 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-07-13 21:14 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-07-13 21:14 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-07-13 18:46 - 2015-07-13 18:46 - 00000022 _____ C:\Windows\S.dirmngr 2015-07-13 16:35 - 2015-07-13 16:35 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_SaiK1708_01009.Wdf 2015-07-13 16:07 - 2015-07-13 16:07 - 00000000 ____D C:\Program Files\CPUID 2015-07-13 15:59 - 2015-07-13 15:59 - 13229920 _____ (Mad catz ) C:\Users\Admin\Downloads\Range_RAT7_SD7_0_20_0_64Bit_Drivers.exe 2015-07-13 15:53 - 2015-07-13 15:53 - 01192171 _____ C:\Users\Admin\Downloads\USB-Fehlerbehebung.jse 2015-07-13 15:41 - 2015-07-13 15:41 - 00347816 _____ (Microsoft Corporation) C:\Users\Admin\Downloads\MicrosoftFixit.WinUSB.RNP.1893602508426677.2.1.Run.exe 2015-07-10 22:17 - 2015-07-10 22:17 - 00000000 ____D C:\Users\Admin\AppData\Local\DCS 2015-06-28 18:15 - 2015-06-28 19:51 - 00000000 ____D C:\Users\Admin\Downloads\chris 2015-06-15 21:34 - 2015-06-16 13:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-07-13 22:16 - 2015-04-21 19:37 - 00001374 _____ C:\Users\Admin\Desktop\moti.txt 2015-07-13 22:16 - 2014-10-07 16:24 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-07-13 22:03 - 2015-01-24 19:45 - 00000000 ____D C:\ProgramData\APN 2015-07-13 22:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2015-07-13 22:01 - 2015-06-03 19:53 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-07-13 21:27 - 2014-06-25 08:47 - 01964955 _____ C:\Windows\WindowsUpdate.log 2015-07-13 21:17 - 2014-06-25 18:40 - 00700906 _____ C:\Windows\system32\perfh007.dat 2015-07-13 21:17 - 2014-06-25 18:40 - 00150286 _____ C:\Windows\system32\perfc007.dat 2015-07-13 21:17 - 2009-07-14 07:13 - 01625650 _____ C:\Windows\system32\PerfStringBackup.INI 2015-07-13 21:02 - 2014-09-04 11:49 - 00003922 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{683DD6E3-A7DC-45AD-B686-FE6E461222F1} 2015-07-13 20:42 - 2009-07-14 06:45 - 00035872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-07-13 20:42 - 2009-07-14 06:45 - 00035872 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-07-13 20:37 - 2015-06-03 19:54 - 00000000 ____D C:\Users\Public\Documents\a1 2015-07-13 18:47 - 2014-10-07 16:24 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-07-13 18:46 - 2014-06-25 09:12 - 00000000 ____D C:\ProgramData\NVIDIA 2015-07-13 18:46 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-07-13 18:46 - 2009-07-14 06:51 - 00143114 _____ C:\Windows\setupact.log 2015-07-13 18:13 - 2014-06-25 08:47 - 00000000 ____D C:\Users\Admin 2015-07-12 14:52 - 2014-09-03 14:23 - 00000000 ____D C:\Users\Admin\AppData\Roaming\TS3Client 2015-07-12 14:52 - 2014-09-03 14:20 - 00000000 ____D C:\Program Files (x86)\Steam 2015-07-10 22:36 - 2014-09-04 11:07 - 00000000 ____D C:\Users\Admin\AppData\Local\Arma 3 2015-07-10 22:01 - 2015-06-03 19:53 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-07-10 22:01 - 2014-09-05 00:16 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-07-10 22:01 - 2014-09-05 00:16 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-07-10 16:28 - 2014-09-09 15:02 - 00000000 ____D C:\Program Files (x86)\Origin Games 2015-07-10 16:28 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-07-10 16:16 - 2014-11-18 01:08 - 00032588 _____ C:\Users\Admin\Desktop\Meerwasser - Datenblatt.xlsx 2015-07-09 13:14 - 2015-04-22 14:21 - 00000000 ____D C:\ProgramData\Riot Games 2015-07-08 23:34 - 2014-09-22 20:01 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.xtr 2015-07-08 23:34 - 2014-09-17 19:13 - 00282296 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2015-07-08 23:32 - 2014-09-17 19:13 - 00215128 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2015-07-08 11:15 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2015-07-07 23:05 - 2014-09-25 14:23 - 00000000 ____D C:\Users\Admin\AppData\Roaming\vlc 2015-07-07 13:31 - 2014-09-03 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2015-07-06 11:11 - 2014-09-03 14:13 - 00000000 ____D C:\ProgramData\Package Cache 2015-07-06 11:11 - 2014-09-03 14:13 - 00000000 ____D C:\Program Files (x86)\Avira 2015-07-05 15:43 - 2014-09-09 15:01 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Origin 2015-07-05 15:43 - 2014-09-09 14:54 - 00000000 ____D C:\ProgramData\Origin 2015-07-05 15:43 - 2014-09-09 14:54 - 00000000 ____D C:\Program Files (x86)\Origin 2015-07-04 18:28 - 2014-09-12 21:57 - 00000000 ____D C:\ProgramData\CanonIJPLM 2015-06-27 10:17 - 2015-03-18 18:06 - 00000000 ____D C:\Users\Admin\AppData\Roaming\AquaCalculator 2015-06-18 15:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2015-06-16 13:25 - 2014-09-03 14:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-06-16 13:25 - 2010-11-21 05:47 - 00451544 _____ C:\Windows\PFRO.log 2015-06-15 23:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2015-06-15 20:14 - 2014-09-03 14:13 - 00000000 ____D C:\ProgramData\Avira ==================== Files in the root of some directories ======= 2015-03-18 18:06 - 2015-05-13 18:34 - 0000017 _____ () C:\Users\Admin\AppData\Roaming\AquaCalculatorBL.AUsr 2014-10-26 22:07 - 2014-10-27 18:42 - 0000098 _____ () C:\Users\Admin\AppData\Roaming\LauncherSettings_live.cfg 2014-10-27 18:16 - 2014-10-27 18:29 - 0008145 _____ () C:\Users\Admin\AppData\Roaming\TheHunterSettings_live.bin 2014-10-26 21:47 - 2014-10-26 21:47 - 0000040 _____ () C:\Users\Admin\AppData\Roaming\TheHunterSettings_steam_live.cfg 2014-10-13 14:53 - 2014-10-13 14:53 - 0000000 _____ () C:\Users\Admin\AppData\Local\Input.xml 2014-10-22 10:32 - 2014-10-22 10:43 - 0000600 _____ () C:\Users\Admin\AppData\Local\PUTTY.RND 2014-10-13 14:52 - 2014-10-13 14:52 - 0000000 _____ () C:\Users\Admin\AppData\Local\Settings.xml 2014-06-25 08:54 - 2014-06-25 08:54 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Files to move or delete: ==================== C:\Windows\temp\MadCatz\Range_RAT7_SD7_64_Drivers\00000000\setup.exe Some files in TEMP: ==================== C:\Users\Admin\AppData\Local\Temp\20141026025141782jniverify.dll C:\Users\Admin\AppData\Local\Temp\avgnt.exe C:\Users\Admin\AppData\Local\Temp\awesomium_setup.exe C:\Users\Admin\AppData\Local\Temp\DelayInst.exe C:\Users\Admin\AppData\Local\Temp\FP_AX_MSI_INSTALLER.exe C:\Users\Admin\AppData\Local\Temp\FP_PL_MSI_INSTALLER.exe C:\Users\Admin\AppData\Local\Temp\gpg4win.exe C:\Users\Admin\AppData\Local\Temp\installerdll13125924.dll C:\Users\Admin\AppData\Local\Temp\installerdll8540851.dll C:\Users\Admin\AppData\Local\Temp\installservice.exe C:\Users\Admin\AppData\Local\Temp\instmsi.exe C:\Users\Admin\AppData\Local\Temp\instmsiw.exe C:\Users\Admin\AppData\Local\Temp\jre-8u31-windows-au.exe C:\Users\Admin\AppData\Local\Temp\MSETUP4.EXE C:\Users\Admin\AppData\Local\Temp\nvSCPAPI.dll C:\Users\Admin\AppData\Local\Temp\nvStInst.exe C:\Users\Admin\AppData\Local\Temp\restarter5870487771654156437.exe C:\Users\Admin\AppData\Local\Temp\uninstall.exe C:\Users\Admin\AppData\Local\Temp\vpnclient_setup.exe C:\Users\Admin\AppData\Local\Temp\wusetup.exE C:\Users\Admin\AppData\Local\Temp\_is6CC6.exe C:\Users\Admin\AppData\Local\Temp\{EFF616A3-14B1-4A6A-9192-4E85EA2DE69E}_emergency.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-07-03 21:27 ==================== End of log ============================ sowie die addition: [CODE]Additional FRST Logfile: Code:
ATTFilter scan result of Farbar Recovery Scan Tool (x64) Version:13-07-2015
Ran by Admin at 2015-07-13 22:22:56
Running from F:\
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Admin (S-1-5-21-2266551883-2310591651-913177673-1000 - Administrator - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-2266551883-2310591651-913177673-500 - Administrator - Disabled)
Gast (S-1-5-21-2266551883-2310591651-913177673-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2266551883-2310591651-913177673-1000\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.)
µTorrent (HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\uTorrent) (Version: 3.4.2.37754 - BitTorrent Inc.)
A1 Servicecenter (HKLM-x32\...\A1 Servicecenter) (Version: 9.15.1.1250 - A1 Telekom Austria AG)
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.2.443 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.1.0.5790 - Adobe Systems Inc.)
Adobe Anchor Service x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe CMaps x64 CS4 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe Creative Suite 4 Master Collection (HKLM-x32\...\Adobe_7e74552a59eaf9fafd13f90894ac9bd) (Version: 4.0 - Adobe Systems Incorporated)
Adobe CSI CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Drive CS4 x64 (Version: 1 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.191 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.191 - Adobe Systems Incorporated)
Adobe Fonts All x64 (Version: 2.0 - Adobe Systems Incorporated) Hidden
Adobe InDesign CS4 Icon Handler x64 (Version: 6.0 - Adobe Systems Incorporated) Hidden
Adobe Linguistics CS4 x64 (Version: 4.0.0 - Adobe Systems Incorporated) Hidden
Adobe Media Player (HKLM-x32\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
Adobe PDF Library Files x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe Photoshop CS4 (64 Bit) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Adobe Type Support x64 CS4 (Version: 9.0 - Adobe Systems Incorporated) Hidden
Adobe WinSoft Linguistics Plugin x64 (Version: 1.1 - Adobe Systems Incorporated) Hidden
Airline Tycoon - Deluxe (HKLM-x32\...\Airline Tycoon - Deluxe) (Version: - Spellbound Entertainment AG)
Aqua Calculator Version 4.0 (HKLM-x32\...\{957493A6-E72E-4477-931A-4AFABFBCC3EB}_is1) (Version: 4.0 - Kuhn Software Development (HSK))
ArchiCrypt Ultimate RAM-Disk 3 Version 3.8.1.3564 (HKLM\...\ArchiCrypt Ultimate RAM-Disk3_is1) (Version: 3.8.1.3564 - Softwareentwicklung Patric Remus - ArchiCrypt)
ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version: - Studio Wildcard)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version: - Bohemia Interactive)
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.12.0 - Asmedia Technology)
Avant Browser (remove only) (HKLM-x32\...\AvantBrowser) (Version: 12.5.0.0 - Avant Force)
Avira (HKLM-x32\...\{8467e01f-0496-42ce-b247-88ef205b4880}) (Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.579 - Avira Operations GmbH & Co. KG)
Awesomium Redistributable (HKLM-x32\...\{5BCB064B-9F65-4E15-BAFB-669E72E54FD9}) (Version: 1.7.4.2 - SIX Networks GmbH)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.0.0.0 - Electronic Arts)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.5.1 - EA Digital Illusions CE AB)
Besiege (HKLM-x32\...\Steam App 346010) (Version: - Spiderling Studios)
Blender (HKLM\...\Blender) (Version: 2.70 - Blender Foundation)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.5.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.3.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 4.1.0 - Canon Inc.)
Canon MG5500 series Benutzerregistrierung (HKLM-x32\...\Canon MG5500 series Benutzerregistrierung) (Version: - *Canon Inc.)
Canon MG5500 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5500_series) (Version: 1.01 - Canon Inc.)
Canon MG5500 series On-screen Manual (HKLM-x32\...\Canon MG5500 series On-screen Manual) (Version: 7.6.1 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 2.0.1 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 2.0.0 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.2.1 - Canon Inc.)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.0.00061 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 4.0.00061 - Cisco Systems, Inc.) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order Ltd.)
Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.22 - Cliqz.com)
Connect (x32 Version: 1.0.0.1 - Adobe Systems Incorporated) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
DayZ (HKLM-x32\...\Steam App 221100) (Version: - Bohemia Interactive)
DCS World (HKLM-x32\...\Steam App 223750) (Version: - Eagle Dynamics)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.67.2 - Electronic Arts)
Die Sims™ 3 Stadt-Accessoires (HKLM-x32\...\{7B11296A-F894-449C-8DF6-6AAAA7D4D118}) (Version: 9.0.73 - Electronic Arts)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version: - The Creative Assembly)
Euro Truck Simulator 2 (HKLM-x32\...\{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1) (Version: 1.1.1 - SCS Software)
F1 2013 (HKLM-x32\...\Steam App 223670) (Version: - Codemasters Birmingham)
Free YouTube to MP3 Converter version 3.12.59.505 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.505 - DVDVideoSoft Ltd.)
FUSSBALL MANAGER 14 (HKLM-x32\...\{5FC27E1E-08C0-4346-A321-ED2D31FAE936}) (Version: 1.0.0.0 - Electronic Arts)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Gpg4win (2.2.2) (HKLM-x32\...\GPG4Win) (Version: 2.2.2 - The Gpg4win Project)
GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 2.5.0.19 - Intel Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
JetBrains PyCharm 3.4.1 (HKLM-x32\...\PyCharm 3.4.1) (Version: 135.1057 - JetBrains s.r.o.)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
kuler (x32 Version: 2.0 - Adobe Systems Incorporated) Hidden
Landwirtschafts Simulator 2013 (HKLM-x32\...\FarmingSimulator2013DE_is1) (Version: 1.0 - GIANTS Software)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
MD5 Checksum Verifier 5.1 (HKLM-x32\...\MD5 Checksum Verifier_is1) (Version: - GoldSolution Software, Inc.)
Metro 2033 (HKLM-x32\...\Steam App 43110) (Version: - 4A Games)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.6122.5000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.6129.5001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.1.2 - Mozilla)
Mozilla Thunderbird 31.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.2.0 (x86 de)) (Version: 31.2.0 - Mozilla)
novaPDF Lite Desktop 7.6 printer (HKLM\...\novaPDF Lite Desktop 7 printer_is1) (Version: - Softland)
NVIDIA 3D Vision Controller-Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 347.09 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.09 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.5 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.09 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.22.2815 - Electronic Arts, Inc.)
PDF Settings CS4 (x32 Version: 9.0 - Adobe Systems Incorporated) Hidden
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.309.0 - Tracker Software Products Ltd)
Photoshop Camera Raw (x32 Version: 5.0 - Adobe Systems Incorporated) Hidden
Photoshop Camera Raw_x64 (Version: 5.0 - Adobe Systems Incorporated) Hidden
Pixel Bender Toolkit (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
Prison Architect (HKLM-x32\...\Steam App 233450) (Version: - Introversion Software)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7071 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0201 - )
SHIELD Streaming (Version: 3.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.65 - NVIDIA Corporation) Hidden
SimCity™ (HKLM-x32\...\{F70FDE4B-8F86-4eb6-8C8E-636EC89F6419}) (Version: 4.0.86.0859 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
Sublime Text 2.0.2 (HKLM\...\Sublime Text 2_is1) (Version: - )
Suite Shared Configuration CS4 (x32 Version: 1.0 - Adobe Systems Incorporated) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeX Live 2014 (HKLM-x32\...\TeXLive2014) (Version: 2014 - )
The Escapists (HKLM-x32\...\Steam App 298630) (Version: - Mouldy Toof Studios)
The Guild II: Renaissance (HKLM-x32\...\Steam App 39680) (Version: - Rune Forge)
This War of Mine (HKLM-x32\...\Steam App 282070) (Version: - 11 bit studios)
Tropico 4 (HKLM-x32\...\Steam App 57690) (Version: - Haemimont Games)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.7 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version: - )
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2266551883-2310591651-913177673-1000_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()
==================== Restore Points =========================
13-07-2015 16:00:18 Gerätetreiber-Paketinstallation: Mad Catz Mäuse und andere Zeigegeräte
13-07-2015 16:00:40 Gerätetreiber-Paketinstallation: Mad Catz Eingabegeräte (Human Interface Devices)
13-07-2015 16:07:07 Gerätetreiber-Paketinstallation: Mad Catz
13-07-2015 16:14:39 Smart Technology Programming Software 7.0.27.13 wird entfernt
13-07-2015 16:24:44 Wiederherstellungsvorgang
13-07-2015 16:34:42 Gerätetreiber-Paketinstallation: Mad Catz Mäuse und andere Zeigegeräte
13-07-2015 16:35:18 Gerätetreiber-Paketinstallation: Mad Catz Eingabegeräte (Human Interface Devices)
13-07-2015 18:49:22 Windows-Sicherung
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {6599AAC5-2AD0-4B9A-9FB5-5BFD6998177A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-10] (Adobe Systems Incorporated)
Task: {82919966-058B-4AB5-BEE7-4804C158813A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
Task: {F4A4A470-7264-4C63-941C-CD4594719D10} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-07] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2014-06-25 09:12 - 2014-12-13 10:03 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-06-25 08:50 - 2013-05-07 09:45 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
2014-09-03 13:07 - 2014-09-03 13:07 - 00216576 _____ () C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
2014-09-12 22:15 - 2013-05-14 11:50 - 00140936 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2014-09-17 19:13 - 2014-11-10 14:25 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-01-29 00:48 - 2015-01-29 00:48 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2014-06-25 08:50 - 2015-07-13 18:46 - 00027648 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2014-06-25 08:50 - 2013-05-07 09:45 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll
2010-03-23 14:26 - 2010-03-23 14:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2014-09-03 12:53 - 2014-09-03 12:53 - 00221184 _____ () C:\Program Files (x86)\GNU\GnuPG\libksba-8.dll
2014-09-03 12:48 - 2014-09-03 12:48 - 00038400 _____ () C:\Program Files (x86)\GNU\GnuPG\libgpg-error-0.dll
2014-09-03 12:41 - 2014-09-03 12:41 - 00050176 _____ () C:\Program Files (x86)\GNU\GnuPG\libw32pth-0.dll
2014-09-03 12:53 - 2014-09-03 12:53 - 00069632 _____ () C:\Program Files (x86)\GNU\GnuPG\libassuan-0.dll
2014-09-03 12:56 - 2014-09-03 12:56 - 00742400 _____ () C:\Program Files (x86)\GNU\GnuPG\libgcrypt-20.dll
2014-09-24 15:45 - 2012-11-06 09:47 - 00114688 _____ () C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\EnumDevLib.dll
2014-06-25 08:57 - 2013-09-16 12:17 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2266551883-2310591651-913177673-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
HKU\S-1-5-21-2266551883-2310591651-913177673-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 10.0.0.138
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{BA0A1A63-50F6-46DC-B658-D71859ABA5C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{A8FD77DD-F18B-4D3F-B7D4-3E85484DAE50}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{7C75A38B-5AA1-4E20-A7E6-FC4615EFD17B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9AA9C65F-D8DF-440D-8FD9-8EE76798A7E0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{D2A794D6-6B04-4587-B9F0-422AF93C0C9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{F320E320-F2D5-4EAD-821B-063332293AF0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{92281424-D410-43FC-A332-C451A17E1579}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FA1F6928-8E4B-40BB-A296-29623D252C0D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F3810248-10F5-43A0-9265-B748D6DB2730}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C20656D0-0020-42B5-83CE-A5AC37CA491E}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E0056B91-877A-4593-AC2E-A2B09FEB0BC2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7470A580-6FAB-4DC0-B7D2-01B8BA84F423}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{3453227D-7BB4-4153-8EA6-3693665ED542}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{48048E56-D9BF-4423-937A-DD0F50BF5AC3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{34FC3DE3-7509-4015-8988-B3E2674AC059}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{48106E82-6EF2-42C9-8D0B-0569D3CE648C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{84B92878-B336-4FCC-80B1-D66BF060120E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{BA4A49C4-967D-4744-B826-275A9CFC1BF0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{8E472A41-E32C-4BE5-941D-D14810154ABE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metro 2033\metro2033.exe
FirewallRules: [{F1615B80-8D90-4F9C-8FFF-FA53A5EA28D8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Metro 2033\metro2033.exe
FirewallRules: [{707053F5-699B-45F9-8F41-0D8C7DEFF4D7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{8F243AA4-88E7-49B3-80D1-F811D6B2E763}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{82253CCA-24F0-4B43-9424-474251AD8D07}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{CA57DC92-BDD6-4E2C-BF97-7173A97BDBE2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico 4\Tropico4.exe
FirewallRules: [{C9AA96D3-EB60-4135-B8D5-6C5E00CE0146}] => (Allow) LPort=5353
FirewallRules: [{75B43CD7-1E1E-408C-B955-491B2B15C61F}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{367F9E02-1502-4BCD-81A7-DA6BF49E9898}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe
FirewallRules: [{FC5A2335-A246-45F5-BB93-F68875CBBF32}] => (Allow) LPort=3703
FirewallRules: [{47BD4487-BE19-44BD-BAF7-8DA15C63FCCA}] => (Allow) LPort=3704
FirewallRules: [{AB8A3138-0736-4781-B696-7EDD721A0EFB}] => (Allow) LPort=51000
FirewallRules: [{FEE16CBF-E540-4ACD-91AD-2ADD17C5CBEB}] => (Allow) LPort=51001
FirewallRules: [{40689129-2AAC-467F-A328-7EF4FD13531E}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
FirewallRules: [{796F67C9-9699-4C97-A944-5DA45469386C}] => (Allow) C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
FirewallRules: [{6E9B66C4-05A5-41E4-8D2C-DBDEC66F371D}] => (Allow) C:\Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe
FirewallRules: [{D339DEC3-80BE-41EB-9827-784487B832F8}] => (Allow) C:\Program Files (x86)\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe
FirewallRules: [{3279906B-6FC6-4A29-80DD-3A5A3A2165FA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{5343CF4E-F160-4659-B572-AE8B7C3B6160}] => (Allow) LPort=2869
FirewallRules: [{E63BB6C6-CC7A-440E-BE94-0980E393AA17}] => (Allow) LPort=1900
FirewallRules: [{FD658A75-BFE7-48C8-8C06-C5351BEF8F82}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{E3589F56-1260-40D7-80F7-C4A870AB8FCF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{142FF37D-935F-4B31-9E33-3FB4DA5A707B}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CF0267AD-6E6A-4BD4-9F7C-C7A52749CD71}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{92837B16-3658-47AD-88B3-4C95A02C60F5}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{CFEC1226-2593-41F4-B286-7ABDEDB174BA}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{575AFACD-508B-4626-9EC3-3F02D6005B4F}C:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe] => (Allow) C:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe
FirewallRules: [UDP Query User{432F032A-A094-4080-BE8A-FC5D95111B65}C:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe] => (Allow) C:\program files (x86)\electronic arts\battlefield bad company 2\bfbc2game.exe
FirewallRules: [{1D2FD7DE-9995-4A4D-8B5E-9EC2E88A3A12}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA Manager 14\Manager14.exe
FirewallRules: [{41DAE128-2E1B-4566-9F71-F9C3BE363C85}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA Manager 14\Manager14.exe
FirewallRules: [{7A6C0387-5D5C-424C-8E23-76C6565346BB}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{C9647241-410C-4367-B4EF-D2015E01CB44}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 1942\BF1942.exe
FirewallRules: [{6B1E7EC7-F37C-4C4C-928C-976BF6F6B037}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{98736208-C870-4078-B312-C8F2D84B422D}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{78800795-8E4B-410F-8BEA-42769FE05A9E}] => (Allow) LPort=1542
FirewallRules: [{58C4BEF6-B5DF-43D6-8609-C07416E721B3}] => (Allow) LPort=1542
FirewallRules: [{58E9CB6C-F8A1-4308-9C79-AF094DC995FD}] => (Allow) LPort=53
FirewallRules: [{41CC1CDB-999B-45DA-BDF3-8446C8E1BB9D}] => (Allow) LPort=67
FirewallRules: [{7480A074-635D-400E-8AC9-C3BEAC276E31}] => (Allow) LPort=68
FirewallRules: [{8AEC23C5-943C-42FB-A370-4750F3585684}] => (Allow) LPort=53
FirewallRules: [{E6F78AFB-4D6A-4408-9A45-8882AD41B471}] => (Allow) LPort=53
FirewallRules: [{09E3D95B-6751-489F-BD5D-E3625C952014}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\Rtldhcp.exe
FirewallRules: [{1AB396C4-2519-4519-ADE4-24CFEBC46A60}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{F6B4B9E0-817A-4186-B9BE-C8389A5F9F62}] => (Allow) C:\Program Files (x86)\Origin Games\SimCity\SimCity\SimCity.exe
FirewallRules: [{6E007106-97F2-4AD6-8440-E48624A4993A}] => (Allow) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9BEBA875-1BE2-4B4D-9787-3B7FBDB1BBA9}] => (Allow) C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{97E664D5-7EC0-4298-AD55-663020344303}C:\users\admin\downloads\utorrent_3.4.2b34309.exe] => (Allow) C:\users\admin\downloads\utorrent_3.4.2b34309.exe
FirewallRules: [UDP Query User{D626D57A-BE41-4E1D-86C0-D575878B0C19}C:\users\admin\downloads\utorrent_3.4.2b34309.exe] => (Allow) C:\users\admin\downloads\utorrent_3.4.2b34309.exe
FirewallRules: [{ACF72C6B-CAA5-4FF4-BFB5-4A5A84772EBE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{6E242C5B-0993-4008-AC90-CE99B6869BA6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [TCP Query User{8E636945-EE91-4EA9-8D31-00C0D70E69D1}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{BE430D25-30F0-41AB-9119-BA8842F366CD}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{6DF040DA-03B5-45CA-8404-E318056E1DA1}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2013\FarmingSimulator2013.exe
FirewallRules: [{37C3BDE0-D469-4C4D-A248-1232B9BF4DA7}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2013\FarmingSimulator2013.exe
FirewallRules: [{5602873B-98CF-4D5D-84FC-470B29CC345F}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [{834F6001-DF48-4337-B304-675D182BC81B}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [{E94CECE9-DB33-433B-9CBE-14A6890CB33D}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2013\x64\FarmingSimulator2013Game.exe
FirewallRules: [{D9DB5F79-E79B-457E-B3CE-E7F2486E33CE}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2013\x64\FarmingSimulator2013Game.exe
FirewallRules: [{6729F8A5-4B19-409E-9868-9BFECD6D595A}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2013\x86\FarmingSimulator2013Game.exe
FirewallRules: [{F0F45360-C952-49CF-ACD0-25C31241A6C4}] => (Allow) C:\Program Files (x86)\Landwirtschafts Simulator 2013\x86\FarmingSimulator2013Game.exe
FirewallRules: [TCP Query User{9F233060-F945-4336-8AF7-00A5AF33AE31}C:\users\admin\downloads\programme\utorrent_3.4.2b34309.exe] => (Allow) C:\users\admin\downloads\programme\utorrent_3.4.2b34309.exe
FirewallRules: [UDP Query User{C9258410-104E-4287-8269-718E37410CFB}C:\users\admin\downloads\programme\utorrent_3.4.2b34309.exe] => (Allow) C:\users\admin\downloads\programme\utorrent_3.4.2b34309.exe
FirewallRules: [TCP Query User{23F2F33A-5264-4882-9994-374062FD8364}C:\program files (x86)\jetbrains\pycharm 3.4.1\bin\pycharm.exe] => (Allow) C:\program files (x86)\jetbrains\pycharm 3.4.1\bin\pycharm.exe
FirewallRules: [UDP Query User{3BC3890B-B57C-4B84-AF0F-A5A79119D934}C:\program files (x86)\jetbrains\pycharm 3.4.1\bin\pycharm.exe] => (Allow) C:\program files (x86)\jetbrains\pycharm 3.4.1\bin\pycharm.exe
FirewallRules: [{98AC7646-4104-4B9D-BF26-1C6F890E385C}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{87346332-AB58-436F-A0C4-DD54507CD941}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{90334AEC-3C98-4AA0-8CFC-585061420024}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe
FirewallRules: [{887F2D12-41DA-4485-A74F-9A651CB2F28E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe
FirewallRules: [TCP Query User{631FFA09-3A4A-4117-8573-C985A2879D24}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe
FirewallRules: [UDP Query User{D9336C60-8D83-406F-B991-5402EB20E700}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe
FirewallRules: [TCP Query User{B7A75ECA-9488-4CA2-9BB9-89D7E846EB61}C:\users\admin\downloads\withsix-play.exe] => (Allow) C:\users\admin\downloads\withsix-play.exe
FirewallRules: [UDP Query User{F4618753-BF83-46EE-BE02-EEE88D0913F8}C:\users\admin\downloads\withsix-play.exe] => (Allow) C:\users\admin\downloads\withsix-play.exe
FirewallRules: [TCP Query User{A2C57271-D43A-4864-877C-BC21E91CF045}C:\users\admin\desktop\withsix-play.exe] => (Allow) C:\users\admin\desktop\withsix-play.exe
FirewallRules: [UDP Query User{0A5D365A-4D30-4B10-BDFF-6BE8D324E5E2}C:\users\admin\desktop\withsix-play.exe] => (Allow) C:\users\admin\desktop\withsix-play.exe
FirewallRules: [{6F7BF650-D8DE-40D2-B387-9464994CBD5F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{A53E3E97-6BD4-4A5D-B4A8-8297BC7A8B0F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{8C51642F-D919-48B0-AB50-CC035BAB128D}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{7864608F-EE69-421A-87C0-4A9C56AE7665}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [TCP Query User{FBD442B0-AA81-4EB9-9577-30F63891A6E5}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{FB0D9022-3855-40E9-BB49-295905A38EEB}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{9DAF6EA5-7ACB-4924-B1BC-AE6A0003A6C5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C2719AF2-8AAD-4020-9404-40745E62CD7B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A7518455-D331-4183-96C8-5203CD102AD2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe
FirewallRules: [{42CE383E-550C-4369-BB95-CC92ECF8D5AE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader 2\bin\win32_release\Crusader2.exe
FirewallRules: [{1959255B-980C-43CA-AF94-7C8EF33F8E18}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spintires\SpinTires.exe
FirewallRules: [{F486DA15-0687-47D4-B967-BB3A07E00171}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Spintires\SpinTires.exe
FirewallRules: [{F62BC1C0-0B1B-4D03-9246-7C2282618EA2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\f12013\F1_2013.exe
FirewallRules: [{7871B423-D2FD-424E-88C9-087020C83FDD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\f12013\F1_2013.exe
FirewallRules: [{B580B66E-1B1F-4C0C-B8F7-E26DFD59F248}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{6C1F2316-D9D1-46C0-B1E0-A40E0D8B4CDD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{0E8DD15B-8EAC-44C9-A3E5-C51683A92F0F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{35EBD7F1-6804-4DED-9170-75D30E5F3C76}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{0370DC31-36B8-460C-B4E2-8DF18B4818DE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Escapists\TheEscapists.exe
FirewallRules: [{2219E330-5340-4803-87D3-BD1C1CD1B713}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Escapists\TheEscapists.exe
FirewallRules: [{332826BB-4F47-4E9E-A0F2-D622141EB896}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{A1791F49-1072-41F4-A919-2328C5D11632}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{2D172257-9381-4C2C-BF7E-E11D48D2D319}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{9E8D4D48-7135-42BB-A4D0-400D466176F8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{D2F81FFB-656A-44AC-9295-B90BD04B3F86}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Guild 2 Renaissance\GuildII.exe
FirewallRules: [{4A8B0C3C-2ED5-425E-A84C-EDA51AE3745A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Guild 2 Renaissance\GuildII.exe
FirewallRules: [{36B4B64A-390B-4B56-A887-C86867D437DA}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1WLANAssistent.exe
FirewallRules: [{00176289-1B7E-4ED1-9B60-979600B2A43A}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Diagnose\A1WLANAssistent.exe
FirewallRules: [{1151420D-06B5-4A08-ADD4-02E901436995}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter.exe
FirewallRules: [{03736EB4-551C-49B3-B291-C1CE3355CD59}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter.exe
FirewallRules: [{EE1B9371-5BB9-47FE-BC06-DF4C65A2B294}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Breitband\A1Breitband.exe
FirewallRules: [{5A4CD6DD-3FB4-4974-AA84-82F151718D33}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Breitband\A1Breitband.exe
FirewallRules: [{A8F13B72-CFA4-4FF2-AD7B-C3E947F0B5F8}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Modemkonfigurator.exe
FirewallRules: [{182C1E2E-B567-48ED-BFAD-7F5D6C2FEB41}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Modemkonfigurator.exe
FirewallRules: [{BDB8053D-0375-4E91-B89D-D9C2227E3C13}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1WLANAssistent.exe
FirewallRules: [{B47A3B77-7110-402B-B2CD-E4402B72DB7E}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1WLANAssistent.exe
FirewallRules: [{D0222677-BAFA-47F1-AC85-A374DF1B6289}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Bandbreiten-Optimierer\A1_Bandbreiten_Optimierer.exe
FirewallRules: [{EAD5E88E-D168-4CA4-A567-836BEF1690C9}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Bandbreiten-Optimierer\A1_Bandbreiten_Optimierer.exe
FirewallRules: [{2ABA4EFF-EF39-4F02-A86B-2818EA4A8898}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Bandbreiten-Optimierer\A1_Bandbreiten_Optimierer.exe
FirewallRules: [{F156A029-AE80-40D9-9DFF-99C25AB2A564}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Bandbreiten-Optimierer\A1_Bandbreiten_Optimierer.exe
FirewallRules: [{50741F82-3616-40AB-880C-B4CEF314D5E8}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter_Launcher.exe
FirewallRules: [{D17D870E-75CC-4439-9EE5-ADED2DB16F77}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter_Launcher.exe
FirewallRules: [{275588A3-49C2-4FF1-9952-374B4DB9F134}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter_Repair.exe
FirewallRules: [{A2828069-BFDE-49FA-A9F9-AC51B4F5C2E0}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Servicecenter\A1Servicecenter_Repair.exe
FirewallRules: [{B908FC2C-EA9F-4341-979E-C8BA4EA16B50}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Update\M2Updater.exe
FirewallRules: [{D3D6AD0C-719E-47B8-BD65-C0E98B54520A}] => (Allow) C:\Program Files (x86)\A1 Servicecenter\A1 Update\M2Updater.exe
FirewallRules: [{E9868C37-7D05-4F49-A7DC-FDFB281D94B9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{5AB04D37-B94F-44D0-8143-945CB90D1771}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{E57F45E4-7FBB-4EC2-BFEC-0A18DFEA863C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{6F6422DB-DE58-41F7-ACFC-C466AB7E3610}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{BFDBA6D9-DE9F-4A08-8723-3DF117AC99AA}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{B12C45E1-84C5-4781-88B1-C47BF814FB6C}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{46375583-1755-4FB9-A06F-D59940CB83CF}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{523CFE91-AB57-4C9F-ACC9-4BEF37C0DAE1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DCSWorld\Run.exe
FirewallRules: [{189CB528-090E-4F35-9471-0685D735A934}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DCSWorld\Run.exe
==================== Faulty Device Manager Devices =============
Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Event log errors: =========================
Application errors:
==================
Error: (07/13/2015 08:57:19 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Die Sicherung war nicht erfolgreich. Fehler: "Die Syntax für den Dateinamen, Verzeichnisnamen oder die Datenträgerbezeichnung ist falsch. (0x8007007B)"
Error: (07/13/2015 06:46:55 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/13/2015 06:46:04 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [18]
Error: (07/13/2015 06:43:43 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/13/2015 06:41:41 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [1008]
Error: (07/13/2015 06:41:32 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/13/2015 06:14:29 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/13/2015 05:56:06 PM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcCan continue stopping. [1008]
Error: (07/13/2015 05:55:57 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/13/2015 05:47:53 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (07/13/2015 06:47:13 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
Error: (07/13/2015 06:46:04 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst ArchiCrypt Ultimate RAM-Disk 3 - Realisiert RAM-Disk konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error: (07/13/2015 06:44:19 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
Error: (07/13/2015 06:41:40 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst ArchiCrypt Ultimate RAM-Disk 3 - Realisiert RAM-Disk konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error: (07/13/2015 06:41:22 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
Error: (07/13/2015 06:39:01 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst ArchiCrypt Ultimate RAM-Disk 3 - Realisiert RAM-Disk konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error: (07/13/2015 06:15:03 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: ComputerstandardLokalAktivierung{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}{BC50CF2A-E12C-4F18-90CE-714CC8600CEE}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)
Error: (07/13/2015 06:14:23 PM) (Source: NetBT) (EventID: 4321) (User: )
Description: Der Name "MANUEL :20" konnte nicht auf der Schnittstelle mit IP-Adresse 10.0.0.3
registriert werden. Der Computer mit IP-Adresse 10.0.0.5 hat nicht
zugelassen, dass dieser Computer diesen Namen verwendet.
Error: (07/13/2015 06:14:23 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{A75B5883-73FB-4066-9BFA-C15703B38937} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.
Error: (07/13/2015 05:56:06 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst ArchiCrypt Ultimate RAM-Disk 3 - Realisiert RAM-Disk konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Microsoft Office:
=========================
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Percentage of memory in use: 25%
Total physical RAM: 16319.48 MB
Available physical RAM: 12078.64 MB
Total Virtual: 32637.16 MB
Available Virtual: 28650.01 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.41 GB) (Free:564.16 GB) NTFS
Drive f: (MANUEL) (Fixed) (Total:1862.79 GB) (Free:1263.03 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 30622510)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: 73696D20)
No partition Table on disk 1.
==================== End of log ============================
LG Manuel |
|
13.07.2015, 21:40
| #4 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Maus und Tastatur machen sich selbstständigZitat:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
13.07.2015, 21:43
| #5 |
| | Maus und Tastatur machen sich selbstständig Es handet sich dabei um die .iso der Adobe Programme mit Studiumlizenz |
|
13.07.2015, 21:58
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Maus und Tastatur machen sich selbstständig Ok, Studenten-Version erklärt einiges. Bitte mit MBAR fortfahren: Downloade dir bitte  Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ --> Maus und Tastatur machen sich selbstständig |
|
13.07.2015, 21:59
| #7 |
| | Maus und Tastatur machen sich selbstständig Okay danke. Soll ich den Avirascan abbrechen? Der scheint noch ewig zu dauern. LG Manuel |
|
13.07.2015, 22:01
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Maus und Tastatur machen sich selbstständig Ja brich den ab. Avira braucht kein Mensch.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.07.2015, 22:15
| #9 |
| | Maus und Tastatur machen sich selbstständig Am PC kommt ständig: Failed:Canceled update Am Laptop funktioniert es aber einwandfrei |
|
13.07.2015, 22:17
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Maus und Tastatur machen sich selbstständig Wir behandeln in diesem Strang nur ein System. Würfel jetzt bitte NICHT Logs von verschiedenen Rechnern hier zusammen in diesen Thread.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.07.2015, 22:19
| #11 |
| | Maus und Tastatur machen sich selbstständig Ich kopiere nichts vom Laptop hier rein. Da das updaten am PC scheitert habe ich nur versuchsweise am Laptop nachgesehen ob dort das Update geht. |
|
13.07.2015, 22:20
| #12 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Maus und Tastatur machen sich selbstständig Sollte ja auch nur als Hinweis dienen falls du es vor hattest 
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.07.2015, 22:20
| #13 |
| | Maus und Tastatur machen sich selbstständig Nein hätte ja keinen Sinn^^ Soll ich es nun ohne Update starten? |
|
13.07.2015, 22:27
| #14 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Maus und Tastatur machen sich selbstständig Naja, mal sehen was ohne Update rauskommt. Mach einfach mal weiter.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
13.07.2015, 22:32
| #15 |
| | Maus und Tastatur machen sich selbstständig Es kam "no Malware found" Hier das logfile: Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org
Database version:
main: v2014.11.18.05
rootkit: v2014.11.12.01
Windows 7 Service Pack 1 x64 FAT32
Internet Explorer 11.0.9600.17843
Admin :: MANUEL [administrator]
13.07.2015 23:16:54
mbar-log-2015-07-13 (23-16-54).txt
Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 351287
Time elapsed: 13 minute(s), 34 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
Physical Sectors Detected: 0
(No malicious items detected)
(end)
|
|
| Themen zu Maus und Tastatur machen sich selbstständig |
| bildschirm, computer, desktop, erkannt, festgestellt, folge, gen, laptop, malware, malwarebytes, manuel, maus, maus und tastatur, nicht mehr, pc-maus, probleme, programm, quarantäne, scan, scannen, scanner, selbstständig, tastatur, treiber, virus, wichtig, zuviel, öffnen |
Linear-Darstellung
