Windows 7 100% CPU Auslastung

Kekz. · 24.07.2015, 13:35

Hey,
ich habe seit 3-4Tagen jetzt das Problem das mein Computer immer wieder nach einer weile auf die 100% CPU Auslastung steigt und dann muss ich den Computer neustarten damit die CPU wieder runtergehen und der Computer einigermaßen benutzbar ist.Ich habe ihn mehrmals durchscannen lassen mit Kaspersky Internet Security 2015 da waren keine Viren gefunden worden.Microsoft Windows-Tool zum Entfernen bösartiger Software - JUN 2015 es stand zwar während des Scanne's das 2 Infizierte Dateien Gefunden wurden aber als der Scan beendet wurde stand mein PC Sei Viren frei.Ich bin mir relativ sicher das es ein Virus oder ähnliches ist.Da ich dieses Problem schon einmal hatte,doch damals hatte mich Kaspersky Internet Security 2015 weiter gebracht und entfernte den Virus.Nur in dieses mal findet es nichts.Ich würde mich sehr freuen könnte mir jemand weiter Helfen.

Mit freundlichen Grüßen
Kekz.

cosinus · 24.07.2015, 13:49

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Kekz. · 24.07.2015, 14:07

FRST Log

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015
Ran by Adminxx (administrator) on KEKZ-PC on 24-07-2015 15:00:33
Running from C:\Users\Adminxx\Downloads
Loaded Profiles: Adminxx (Available Profiles: Adminxx)
Platform: Windows 7 Professional (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G930\G930.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\plugin-nm-server.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.250\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\LoLPatcher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\LolClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-07-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [Logitech G930] => C:\Program Files (x86)\Logitech\G930\G930.exe [1516888 2011-03-23] (Logitech(c))
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.)
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\RunOnce: [Uninstall C:\Users\Adminxx\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Adminxx\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64"
HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
Startup: C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2015-06-25]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk [2015-02-10]
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
GroupPolicyScripts: Group Policy detected <======= ATTENTION
GroupPolicyScripts\User: Group Policy detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKLM -> {98939DF3-2C26-4247-9D80-90B4291B1688} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-07-20] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO: bestadblocker -> {A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC} -> C:\Program Files (x86)\bestadblocker\WfzloncOFaEdIt.x64.dll [2015-07-08] ()
BHO: CutThePrIIce -> {AF7B4F14-EF87-4A15-965D-35B2700A866D} -> C:\Program Files (x86)\CutThePrIIce\dRBtildM3cfKGA.x64.dll [2015-07-08] ()
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-05-25] (DVDVideoSoft Ltd.)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Ads Removal -> {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll [2014-06-11] (Adblock)
BHO-x32: bestadblocker -> {A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC} -> C:\Program Files (x86)\bestadblocker\WfzloncOFaEdIt.dll [2015-07-08] ()
BHO-x32: CutThePrIIce -> {AF7B4F14-EF87-4A15-965D-35B2700A866D} -> C:\Program Files (x86)\CutThePrIIce\dRBtildM3cfKGA.dll [2015-07-08] ()
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-05-25] (DVDVideoSoft Ltd.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{07806CF7-8EF9-48CC-AA59-4B025B0DCA64}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{87871B33-DD73-48AA-88FB-AD62945348AF}: [DhcpNameServer] 192.168.178.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-19] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-07-02] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-19] ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2014-10-30] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Adminxx\AppData\Roaming\raidcall\plugins\nprcplugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-07-02] (Adobe Systems)
FF user.js: detected! => C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\user.js [2015-06-06]
FF Extension: CutThePrIIce - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\5Sc8@Q.org [2015-07-08]
FF Extension: Amazon-Icon - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\amazon-icon@giga.de [2015-04-21]
FF Extension: bestadblocker - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\b0kvzG@aKd7j.net [2015-07-08]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\iobitascsurfingprotection@iobit.com [2015-07-20]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-06-07]
FF Extension: Adblock Plus - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-17]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com [2014-12-12]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2014-12-12]
FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com [2014-12-12]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [not found]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-06-28]
CHR Extension: (Google Docs) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-28]
CHR Extension: (Google Drive) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-28]
CHR Extension: (Weather) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\beapnbfmjmjhhfpaoajfhjbbfnnlfpnc [2014-12-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06]
CHR Extension: (YouTube) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-28]
CHR Extension: (Google Search) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-28]
CHR Extension: (AdBlock) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-28]
CHR Extension: (Google Wallet) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-28]
CHR Extension: (Blue Space Sunset Chrome Theme) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nndfdjfoclbidmgpmbelcieibgjjfdog [2014-06-28]
CHR Extension: (ProxPrice) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nopgehbobniifpngnhmljfojnkkopbje [2014-06-28]
CHR Extension: (My Chrome Theme) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-06-28]
CHR Extension: (Evernote Web Clipper) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-07-08]
CHR Extension: (Gmail) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-28]
CHR Extension: (BuyNsave) - C:\ProgramData\dkaejgbnphngipoonelnaiblfdgpcpig\ []
CHR Extension: (CutThePrIIce) - C:\ProgramData\gcllmbgmppjgdmhopdojhhigojhfjkdh\ []
CHR Profile: C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-08]
CHR Extension: (YouTube) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-08]
CHR Extension: (Google Search) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-08]
CHR Extension: (Kaspersky Protection) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2014-12-12]
CHR Extension: (AdBlock) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Zelda Dark) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lilddpnkkhkcjkdaaglfminjopbijomp [2015-06-15]
CHR Extension: (Google Wallet) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-08]
CHR Extension: (Evernote Web Clipper) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-07-08]
CHR Extension: (Gmail) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-08]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [680112 2015-06-09] (Adobe Systems Incorporated)
R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S3 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [344896 2014-09-30] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2904864 2015-06-02] (IObit)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
S3 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-21] (Electronic Arts)
S3 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-23] ()
S3 RalinkRegistryWriter; C:\Program Files (x86)\TP-LINK\COMMON\RaRegistry.exe [185632 2010-06-25] (Ralink Technology, Corp.)
S3 RalinkRegistryWriter64; C:\Program Files (x86)\TP-LINK\COMMON\RaRegistry64.exe [212256 2010-06-25] (Ralink Technology, Corp.)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174600 2014-10-14] (Sandboxie Holdings, LLC)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2014-12-03] (Advanced Micro Devices Inc.)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
S3 EagleX64; No ImagePath
S3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-29] (REALiX(tm))
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2014-12-12] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [819896 2015-03-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2014-12-12] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
R3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
R3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 NTIOLib_1_0_4; No ImagePath
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
S3 pmem; No ImagePath
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
R3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
R3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-20] (Saitek)
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-10-14] (Sandboxie Holdings, LLC)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 X86BDA; C:\Windows\System32\DRIVERS\OEMDrv.sys [268416 2011-06-08] ( ) [File not signed]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-24 15:00 - 2015-07-24 15:01 - 00025619 _____ C:\Users\Adminxx\Downloads\FRST.txt
2015-07-24 14:57 - 2015-07-24 14:57 - 02135552 _____ (Farbar) C:\Users\Adminxx\Downloads\FRST64.exe
2015-07-24 13:25 - 2015-07-24 13:25 - 00000590 _____ C:\Windows\PFRO.log
2015-07-24 13:25 - 2015-07-24 13:25 - 00000056 _____ C:\Windows\setupact.log
2015-07-24 13:25 - 2015-07-24 13:25 - 00000000 _____ C:\Windows\setuperr.log
2015-07-23 15:00 - 2015-07-23 15:00 - 00000189 _____ C:\siw_debug.txt
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\Users\Adminxx\AppData\Local\CrashRpt
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIW
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\Program Files (x86)\SIW 2013 Home Edition
2015-07-23 14:41 - 2015-07-23 14:41 - 04524952 _____ (Topala Software Solutions ) C:\Users\Adminxx\Downloads\siw13-setup.exe
2015-07-21 19:14 - 2015-07-21 19:14 - 00000000 ____H C:\asc_rdflag
2015-07-21 03:26 - 2015-07-21 03:27 - 00003186 _____ C:\Windows\System32\Tasks\ASC8_PerformanceMonitor
2015-07-21 03:25 - 2015-07-21 03:25 - 00003184 _____ C:\Windows\System32\Tasks\SmartDefrag4_Update
2015-07-20 01:55 - 2015-07-20 01:55 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Apple Computer
2015-07-20 01:54 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\Windows\SysWOW64\IObitSmartDefragExtension.dll
2015-07-20 01:53 - 2015-07-20 01:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2015-07-19 02:10 - 2015-07-19 02:10 - 01187008 _____ (Adobe Systems Incorporated) C:\Users\Adminxx\Downloads\flashplayer18_ha_install.exe
2015-07-09 03:54 - 2015-07-09 03:54 - 01528823 _____ C:\Users\Adminxx\Downloads\LOLReplay-0.8.9.37.exe
2015-07-08 08:47 - 2015-07-08 08:47 - 00001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2015-07-08 08:30 - 2015-07-08 08:30 - 00262144 _____ C:\Windows\system32\config\elam
2015-07-08 04:41 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\Evernote Web Clipper
2015-07-08 04:40 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\CutThePrIIce
2015-07-08 04:40 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\bestadblocker
2015-07-08 04:39 - 2015-07-08 04:42 - 00000000 ____D C:\ProgramData\gcllmbgmppjgdmhopdojhhigojhfjkdh
2015-07-08 04:38 - 2015-07-08 08:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-08 04:38 - 2015-07-08 04:38 - 00000404 _____ C:\Windows\Tasks\JustWrite.job
2015-07-08 04:38 - 2015-07-08 04:38 - 00000000 ____D C:\ProgramData\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}
2015-07-06 03:58 - 2015-07-06 03:58 - 42729104 _____ C:\Windows\system32\nvcompiler.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 30481552 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 22947144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 16145200 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 15866992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 15224784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 14497520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 13263056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 11831856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 11011216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-07-06 03:58 - 2015-07-06 03:58 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 02599752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01060168 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01050768 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00975176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00938752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-07-06 03:58 - 2015-07-06 03:58 - 00000000 ____D C:\Windows\system32\DAX2
2015-07-06 03:55 - 2015-07-06 03:55 - 12996528 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 05708736 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 04496600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-07-06 03:55 - 2015-07-06 03:55 - 03234520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 03195416 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 03157796 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2015-07-06 03:55 - 2015-07-06 03:55 - 03129672 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02930904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02862488 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-07-06 03:55 - 2015-07-06 03:55 - 02702040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-07-06 03:55 - 2015-07-06 03:55 - 02585816 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02461016 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02393432 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01748184 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01576976 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01374640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01192368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01145264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00980400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00944984 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00728392 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00349528 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00166616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2015-06-30 19:07 - 2015-06-30 19:07 - 00105546 _____ C:\Users\Adminxx\Downloads\Radvisual-Holographic-Folder.icns
2015-06-30 18:46 - 2015-06-30 18:47 - 52701004 _____ C:\Users\Adminxx\Downloads\Seven Lions with Myon & Shane 54 ft. Tove Lo - Strangers (The Eden Project Remix).mp4
2015-06-30 18:46 - 2015-06-30 18:47 - 05263042 _____ C:\Users\Adminxx\Downloads\videoplayback.m4a
2015-06-30 16:37 - 2015-06-30 16:40 - 00735295 _____ C:\Users\Adminxx\Downloads\CoreTemp_106.zip
2015-06-30 14:47 - 2015-06-30 14:47 - 00000000 ____D C:\Users\Adminxx\Documents\Adobe
2015-06-30 14:41 - 2015-06-30 14:41 - 01503788 _____ C:\Users\Adminxx\Downloads\Adobe+Creative+Cloud+Crack+and+Serial+Number+Free+Download_10924_i25545428_il345.exe.zip
2015-06-30 14:40 - 2015-06-30 14:40 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\PDAppFlex
2015-06-29 03:18 - 2015-06-29 03:18 - 00001222 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2015.lnk
2015-06-29 03:16 - 2015-06-29 03:16 - 00001328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator (Preview).lnk
2015-06-27 16:25 - 2015-06-27 16:31 - 564744309 _____ C:\Users\Adminxx\Downloads\Windows6.1-KB947821-v34-x64.msu
2015-06-25 22:01 - 2015-06-25 22:01 - 00042020 _____ C:\Users\Adminxx\Downloads\Franksouza183-Fs-Places-folder-black.icns
2015-06-25 22:00 - 2015-06-25 22:00 - 00058989 _____ C:\Users\Adminxx\Downloads\Draseart-Dumper-PokeBall.icns
2015-06-25 21:41 - 2015-05-22 18:47 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-25 21:41 - 2015-05-22 18:42 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-25 21:41 - 2015-05-21 15:12 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-25 21:35 - 2015-07-24 13:29 - 00600694 _____ C:\Windows\WindowsUpdate.log
2015-06-25 21:33 - 2015-06-25 21:33 - 10082692 _____ C:\Users\Adminxx\Downloads\jelly_lockscreen_v_1_by_aidendrew-d8nz429.rmskin
2015-06-25 21:32 - 2015-06-25 21:32 - 00461353 _____ C:\Users\Adminxx\Downloads\___rainmeter_lockscreen____by_aidendrew-d8nbaht.rmskin
2015-06-25 21:30 - 2015-06-25 21:30 - 00032291 _____ C:\Users\Adminxx\Downloads\isteve___1_by_emilniemi-d8ok2dl.rmskin
2015-06-25 21:30 - 2015-06-25 21:30 - 00024058 _____ C:\Users\Adminxx\Downloads\fountain_of_colors__music_visualizer___rainmeter__by_alatsombath-d8kxplv.rmskin
2015-06-25 21:27 - 2015-06-25 21:27 - 05440992 _____ C:\Users\Adminxx\Downloads\drizzle_v1_0_by_fadeoffset-d8y6dqn.rmskin
2015-06-25 21:27 - 2015-06-25 21:27 - 00090906 _____ C:\Users\Adminxx\Downloads\radialclock_1_02_by_pvoijen-d8wzdmz.rmskin
2015-06-25 21:23 - 2015-06-25 21:23 - 00008997 _____ C:\Users\Adminxx\Downloads\Citrus_1.5.rmskin
2015-06-25 21:18 - 2015-06-25 21:18 - 01219088 _____ C:\Users\Adminxx\Downloads\Metropolis_1.0.rmskin
2015-06-25 21:01 - 2015-06-25 21:01 - 02335944 _____ C:\Users\Adminxx\Downloads\Rainmeter-3.3-r2416-beta (1).exe
2015-06-25 21:01 - 2015-06-25 21:01 - 00001706 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk
2015-06-25 21:01 - 2015-06-25 21:01 - 00000000 ____D C:\Program Files\Rainmeter
2015-06-25 20:59 - 2015-06-25 20:59 - 00090435 _____ C:\Users\Adminxx\Downloads\Blue_Visualization_2.0.rmskin
2015-06-25 20:57 - 2015-06-25 20:57 - 00146725 _____ C:\Users\Adminxx\Downloads\Gray_.rmskin
2015-06-25 20:56 - 2015-06-25 20:56 - 05408767 _____ C:\Users\Adminxx\Downloads\The_Arc_Menu_Launcher_Suite_3.2.0.zip
2015-06-25 20:37 - 2015-06-25 20:37 - 00000000 ____D C:\Rainmeter
2015-06-25 20:36 - 2015-06-25 20:36 - 02335944 _____ C:\Users\Adminxx\Downloads\Rainmeter-3.3-r2416-beta.exe
2015-06-25 13:06 - 2015-06-25 13:06 - 01528662 _____ C:\Users\Adminxx\Downloads\LOLReplay-0.8.9.35.exe
2015-06-24 00:52 - 2015-06-24 00:52 - 00000097 _____ C:\Users\Adminxx\Downloads\Einhorn---

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-24 15:00 - 2014-12-11 02:45 - 00000000 ____D C:\FRST
2015-07-24 14:58 - 2014-12-12 22:02 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Skype
2015-07-24 14:09 - 2014-10-17 17:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-24 13:40 - 2014-12-12 19:29 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-07-24 13:33 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-24 13:33 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-24 13:26 - 2014-04-27 16:11 - 00002876 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Adminxx)
2015-07-24 13:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-23 15:26 - 2015-01-04 13:59 - 00000000 ____D C:\Users\Public\Documents\Blizzard Entertainment
2015-07-23 00:44 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-21 19:14 - 2014-05-30 12:23 - 56094720 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00282624 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00028672 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-07-20 13:44 - 2014-12-05 01:54 - 00000392 _____ C:\Windows\Tasks\update-sys.job
2015-07-20 13:44 - 2014-12-05 01:54 - 00000392 _____ C:\Windows\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000.job
2015-07-20 03:33 - 2015-06-08 15:26 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-20 03:33 - 2014-06-23 19:54 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Adobe
2015-07-20 02:34 - 2014-12-27 15:54 - 00003134 _____ C:\Windows\System32\Tasks\{386CB472-0168-45D8-97E3-6ACAA83DEFB4}
2015-07-20 02:34 - 2014-12-05 01:54 - 00003384 _____ C:\Windows\System32\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000
2015-07-20 02:28 - 2014-12-05 01:54 - 00003402 _____ C:\Windows\System32\Tasks\update-sys
2015-07-20 02:28 - 2014-06-23 20:45 - 00003506 _____ C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-KEKZ-PC-Adminxx
2015-07-20 01:54 - 2014-12-19 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-07-20 01:53 - 2015-03-16 18:50 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\IObit
2015-07-20 01:53 - 2014-04-27 16:09 - 00000000 ____D C:\Program Files (x86)\IObit
2015-07-19 02:09 - 2014-10-17 17:38 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-19 02:09 - 2014-10-17 17:38 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-19 02:09 - 2014-10-17 17:38 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-19 00:59 - 2014-04-27 16:15 - 00000000 ____D C:\ProgramData\ProductData
2015-07-12 15:52 - 2014-04-29 19:35 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-12 15:52 - 2014-04-29 19:35 - 00000000 ____D C:\ProgramData\Skype
2015-07-09 04:02 - 2014-05-09 22:58 - 00000000 ____D C:\Users\Adminxx\Documents\LOLReplay
2015-07-09 03:54 - 2014-11-27 05:34 - 00000000 ____D C:\Program Files (x86)\LOLReplay
2015-07-09 03:54 - 2014-05-09 22:58 - 00001913 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
2015-07-08 08:47 - 2014-06-23 19:58 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-08 08:40 - 2014-12-17 05:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-08 04:41 - 2014-12-06 05:34 - 00000000 ____D C:\ProgramData\10033927629175197721
2015-07-07 09:40 - 2014-07-06 06:08 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Battle.net
2015-07-07 09:28 - 2014-07-06 06:08 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-07-06 04:02 - 2014-04-27 21:23 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-06 04:01 - 2014-04-27 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-07-06 04:01 - 2014-04-27 21:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-07-06 03:58 - 2015-05-19 23:58 - 01099992 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 17724600 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 12855416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 02997544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-07-06 03:58 - 2014-04-27 21:21 - 03395648 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-07-06 03:57 - 2014-04-27 22:33 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2015-07-05 20:54 - 2014-04-26 20:10 - 00000000 ____D C:\Users\Adminxx
2015-07-03 05:16 - 2014-04-29 19:48 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-03 00:14 - 2014-04-26 21:01 - 00000000 ____D C:\Windows\Minidump
2015-06-30 14:48 - 2015-03-16 20:58 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Adobe
2015-06-30 14:48 - 2014-06-23 20:44 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-06-29 15:37 - 2014-04-27 16:10 - 00064024 _____ C:\Users\Adminxx\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-29 15:36 - 2009-07-14 06:45 - 04959608 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-29 03:22 - 2014-06-23 20:29 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-06-29 03:18 - 2014-06-23 20:30 - 00000000 ____D C:\Program Files\Adobe
2015-06-29 03:13 - 2014-04-29 19:46 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-29 02:51 - 2014-06-23 20:00 - 00000000 ____D C:\ProgramData\Adobe
2015-06-28 22:40 - 2014-05-10 18:49 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Spotify
2015-06-28 22:37 - 2015-05-01 09:29 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Spotify
2015-06-28 13:54 - 2015-06-14 18:39 - 00000000 ___RD C:\Users\Adminxx\Desktop\Pokemon
2015-06-26 02:17 - 2015-04-15 12:49 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-26 02:17 - 2015-04-15 12:49 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-25 21:46 - 2014-04-27 16:27 - 00000000 ____D C:\Windows\system32\MRT
2015-06-25 21:41 - 2014-04-27 16:27 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2015-04-22 23:12 - 2015-04-22 23:12 - 0001951 _____ () C:\Users\Adminxx\AppData\Local\recently-used.xbel
2014-11-20 05:41 - 2014-11-20 05:41 - 0007601 _____ () C:\Users\Adminxx\AppData\Local\Resmon.ResmonCfg
2014-12-05 01:54 - 2014-12-05 01:54 - 0000003 _____ () C:\Users\Adminxx\AppData\Local\updater.log
2014-12-05 01:54 - 2015-04-24 00:04 - 0000424 _____ () C:\Users\Adminxx\AppData\Local\UserProducts.xml
2014-04-27 22:33 - 2014-04-27 22:33 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-24 09:49

==================== End of log ============================

--- --- ---

[/CODE]

und uhm soll ich mir nun noch ein anderes Antiviren Programm runterladen oder eher lassen?Weil andere habe ich auf dem PC nicht drauf und wo die Logs von Kaspersky sind und MRT.exe weiß ich leider nicht.

Code:

ATTFilter

Additional
FRST Logfile:

	Code: 

 ATTFilter

  
	scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015
Ran by Adminxx at 2015-07-24 15:02:30
Running from C:\Users\Adminxx\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-877811456-2021815861-1849052563-500 - Administrator - Disabled)
Adminxx (S-1-5-21-877811456-2021815861-1849052563-1000 - Administrator - Enabled) => C:\Users\Adminxx
Gast (S-1-5-21-877811456-2021815861-1849052563-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe After Effects CC 2015 (HKLM-x32\...\{147EC100-14BE-45EF-AB42-35BAEE7D02F0}) (Version: 13.5.0 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.1.3.121 - Adobe Systems Incorporated)
Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.3.0 - IObit)
Akamai NetSession Interface (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Auto Keyboard v1.6 (HKLM-x32\...\{71E16EE4-BBED-44A8-8724-9E68D05EE945}_is1) (Version: 1.6 - MurGee.com)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Driver Booster 2.3 (HKLM-x32\...\Driver Booster_is1) (Version: 2.3 - IObit)
Druckerdeinstallation für EPSON SX430 Series (HKLM\...\EPSON SX430 Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Fiesta Online DE (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\fiestaonline_de) (Version: 1.0.0.1 - Gamigo Games)
Free YouTube to MP3 Converter version 3.12.59.525 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.525 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Happy Cloud Client (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\HappyCloud) (Version: 5.24 - Happy Cloud, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
HexChat (HKLM\...\HexChat_is1) (Version: 2.10.2 - HexChat)
IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.5 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.3.0.5 - IObit)
Java 7 Update 72 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217072FF}) (Version: 7.0.720 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lightshot-5.2.1.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.1.1 - Skillbrains)
Logitech G930 (HKLM\...\{91C4D79C-3579-48E8-ADFA-8818042AEB73}) (Version: 1.0.364 - Logitech)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.37 - www.leaguereplays.com)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 39.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version:  - MSI Co., LTD)
MTA:SA v1.3.5 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3.5 - Multi Theft Auto)
MTA:SA v1.4.0 (HKLM-x32\...\MTA:SA 1.4) (Version: v1.4.0 - Multi Theft Auto)
MyPC Backup  (HKLM\...\OLBPre) (Version:  - MyPC Backup) <==== ATTENTION
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.18.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.18.0 - NEC Electronics Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.3 beta r2416 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Sandboxie 4.14 (64-bit) (HKLM\...\Sandboxie) (Version: 4.14 - Sandboxie Holdings, LLC)
Scordalus Setup Version 1.0 (HKLM-x32\...\{870A82F3-865A-43AE-9E64-77F85CB0FFE9}_is1) (Version: 1.0 - Scordalus Network)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Shutdown Manager (HKLM-x32\...\{C457BA5F-35F9-480C-90F8-5C91DB443A15}_is1) (Version: 2.0.7 - Daniel Höllig)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.1 - IObit)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{C9193CBB-C31A-412A-A074-AD08F0F2CF3D}) (Version: 7.0.27.13 - Mad Catz)
Spotify (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
System Requirements Lab CYRI (HKLM-x32\...\{6C8C4577-8E15-4C63-96ED-D40F2072FF74}) (Version: 6.0.19.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)
TP-LINK Wireless Utility (HKLM-x32\...\{6FFEF5E1-F7B0-40DD-838D-557BD7EE4301}) (Version: 1.5.6.0 - TP-LINK)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wireshark 1.12.2 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.2 - The Wireshark developer community, hxxp://www.wireshark.org)
Yahoo Community Smartbar Engine (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\{79a1ec54-8fe4-4517-be9e-1122e2792dec}) (Version: 11.38.66.16134 - Linkury Inc.) <==== ATTENTION
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)

==================== Restore Points =========================

24-07-2015 09:56:16 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-12-06 06:21 - 00000959 __RAH C:\Windows\system32\Drivers\etc\hosts
0.0.0.0 host.sandboxie.com
0.0.0.0 host2.sandboxie.com
0.0.0.0 host3.sandboxie.com
0.0.0.0 host4.sandboxie.com


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0403E109-2010-4A1A-9A8A-B9C3BD621E9E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {13829D37-79A7-443C-BFFD-D9DB14748168} - System32\Tasks\{364F549A-CA2E-4D8B-BCAD-B388B6719CFA} => pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {20006C6A-A99B-40EC-BE9C-77070A943DC3} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-06-10] (IObit)
Task: {2CEF832B-83F3-4206-B080-43AB9FE691D6} - System32\Tasks\AdobeAAMUpdater-1.0-KEKZ-PC-Adminxx => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-05-26] (Adobe Systems Incorporated)
Task: {36425D32-A9FB-4705-A816-B85AD8522AC3} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-03-03] (IObit)
Task: {3DC9986E-CDA4-47B5-A7DB-6361525C170A} - System32\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {49177CC2-00BC-418A-B152-E9ACD7C70ADE} - System32\Tasks\ASC8_SkipUac_Adminxx => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-06-16] (IObit)
Task: {5306945C-F39B-4991-8174-BC38BC3CA12D} - System32\Tasks\Driver Booster SkipUAC (Adminxx) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-04-28] (IObit)
Task: {62CB6F46-B940-44A8-8132-69EEE3C0C59B} - System32\Tasks\{6FA0550B-BA83-4446-A73D-FD7B6EB604B0} => C:\Users\Adminxx\Desktop\Vicinity Online\VicinityLauncher.exe
Task: {67164103-B51E-4545-978F-8CAEE754BC4E} - System32\Tasks\{A9A292A1-85C6-41E2-9D5A-AD2B3D8628EC} => pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {793A8584-6DE1-4C35-9D39-BFD4B651D4B8} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-04-07] (IObit)
Task: {92881E4D-E5B6-4800-BC37-47F9A09B6F28} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-05-20] (IObit)
Task: {9A880C69-2884-4351-8CE6-D326090395C3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-19] (Adobe Systems Incorporated)
Task: {C6CF2936-D030-4162-8E31-56BFDDE9D6E4} - System32\Tasks\{386CB472-0168-45D8-97E3-6ACAA83DEFB4} => pcalua.exe -a C:\Users\Adminxx\Downloads\NetFx64.exe -d C:\Users\Adminxx\Downloads
Task: {D15596EA-3E1D-496F-A973-6E7F8354DE83} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2015-04-28] (IObit)
Task: {D2718CB9-C3F5-4E96-921A-A58713D9A874} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {D82E79F4-9A50-4258-9283-8BA94E09A812} - System32\Tasks\{7776A7EB-3B1D-4BDA-B1FC-7D5C81511218} => C:\Users\Adminxx\Desktop\Vicinity Online\VicinityLauncher.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\JustWrite.job => c:\programdata\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}\alexamilesakahaleyissoarx.exe-1436323086587.exe <==== ATTENTION
Task: C:\Windows\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Loaded Modules (Whitelisted) ==============

2014-04-27 21:22 - 2015-06-17 08:48 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-31 14:00 - 2015-05-31 14:00 - 00036544 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2015-05-31 14:00 - 2015-05-31 14:00 - 00781504 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00011776 _____ () C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00058368 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00033792 _____ () C:\Program Files\Rainmeter\Plugins\AudioLevel.DLL
2014-01-21 17:54 - 2015-02-20 02:15 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
2015-07-23 00:54 - 2015-07-23 00:54 - 02354168 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.250\deploy\LoLLauncher.exe
2015-07-23 00:54 - 2015-07-23 00:54 - 03985912 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\LoLPatcher.exe
2015-02-20 02:31 - 2015-02-20 02:31 - 00074752 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\LolClient.exe
2014-12-19 13:04 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\sqlite3.dll
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\kpcengine.2.3.dll
2015-07-08 06:21 - 2015-07-08 06:21 - 00424448 _____ () C:\Program Files (x86)\LOLReplay\LOLUtils.dll
2015-04-14 23:15 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-12-19 13:04 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2014-12-19 13:04 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2014-12-19 13:04 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
2015-07-07 19:40 - 2015-07-07 05:49 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll
2015-07-07 19:40 - 2015-07-07 05:49 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll
2015-03-16 12:11 - 2015-03-16 12:11 - 00040448 _____ () C:\Program Files (x86)\LOLReplay\Launcher.dll
2015-07-23 00:54 - 2015-07-23 00:54 - 01715704 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\RiotLauncher.dll
2015-03-27 05:31 - 2015-03-27 05:31 - 00166400 _____ () C:\Program Files (x86)\LOLReplay\Air.dll
2015-02-20 02:23 - 2015-02-20 02:23 - 04774248 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll
2015-02-20 02:23 - 2015-02-20 02:23 - 16032616 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\Users\Adminxx\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Adminxx\Anwendungsdaten:NT2
AlternateDataStreams: C:\Users\Adminxx\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Adminxx\AppData\Roaming:NT2
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-877811456-2021815861-1849052563-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK Wireless Utility.lnk => C:\Windows\pss\TP-LINK Wireless Utility.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Adminxx^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Advanced SystemCare 7 => 
MSCONFIG\startupreg: APSDaemon => 
MSCONFIG\startupreg: Browser Infrastructure Helper => 
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: EvolveClient => 
MSCONFIG\startupreg: IObit Malware Fighter => "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
MSCONFIG\startupreg: MurGee.com Auto Keyboard => C:\ProgramData\Auto Keyboard\AutoKeyboard.exe :silent
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
MSCONFIG\startupreg: puush => 
MSCONFIG\startupreg: QuickTime Task => 
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => 
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Adminxx\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{888FC972-2F45-4974-B011-2A5BAF6A47E7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5887CDF1-C533-4687-ADA1-4C2D05A2F617}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0FAD3BC9-E2EB-4FB9-88CF-53A8A529802F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{A0FBA2AE-182E-4BF0-BFA1-991AFD743974}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{ABA8C8E1-6771-4CF8-80E6-FD1309A7F24E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0DDB10F9-4020-4707-B178-2757975AA16E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E9569CD6-C259-44EB-A20B-91A82E36B3CA}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{7C13CB8B-BDF3-462C-9D2A-14795A78E974}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{D33443EA-9983-4990-8708-87ACB93EDD9E}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{8D571B72-CD50-4538-A3B5-CB67DE752D38}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{6CD58CA9-1084-4681-9B0A-F0962C5B38E0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CC64DB76-EA15-406B-AE3C-6D29A5303416}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6BD50363-3232-4487-BC10-5518154754AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{E92E636F-6D22-44B9-89F6-BADE1BD67B9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{CA91E12C-3D2F-4A47-AE18-B729839F178E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D0BF7B70-AE87-4A51-B865-66173B2F28B1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{3BFE2313-300C-40CD-ACA9-24E43C3F6681}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{ED57C8B9-616D-463B-9171-E284FA1529DD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FC37E0DC-FADC-4494-ABAA-416E85483D02}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D388CBE9-09FE-4356-B921-9EB0295EE627}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CF0200C2-DA03-4749-A4E4-62AC5A24E43D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{720FE1E0-F8A0-4B6D-9310-E3D5CDEBABEB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D75295B4-DA8B-4079-99AC-B9B9A8881994}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{A7040605-37D3-424F-8100-9A75AEC4A9D9}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{9CBCE74B-7ADC-447D-8E8F-76B3F67AD05B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7497CDF4-B924-4780-968F-9D2E9C7C1D77}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{B4051526-1A9C-4E32-98D1-442DE5853017}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{C5DB0057-5A5E-4D99-9399-CE850E5521D5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{917219B2-7DB2-4655-A292-DC626F0F150A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{F3CA7A40-ED25-4AB7-8A4A-4ECB0B1E13E5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{145D516D-9FAF-4B48-95C0-9E42322B4C99}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{0C1E7CD5-63E7-4F10-B791-B66893092D61}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{399320A3-E702-45D7-B9B5-0F6443B0694A}C:\users\adminxx\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\adminxx\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{DAB9CB42-4631-4DB0-9545-C6D23148B54B}C:\users\adminxx\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\adminxx\appdata\local\akamai\netsession_win.exe
FirewallRules: [{290EAC14-3629-42C5-B893-D365FCE129EB}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{EC58FE13-0AD0-43E6-A6BD-9F4BAAE48B31}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{54421C57-A574-4BC7-B13D-FD8279460782}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0AF3498E-B2CE-425D-9F23-0BE682E84C1B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C9E50E22-3B25-48F0-8D65-9DA21E5DAAF6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{88CE7845-0314-456B-A1E6-FBA21E271C49}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{DEF96DF8-26EB-45B9-B061-3E6374B1E97B}C:\users\adminxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adminxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{74EAF886-C054-455F-AD38-25FB68CC06BE}C:\users\adminxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adminxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [{601ECCFB-1896-4029-820B-7E7C1798B629}] => (Allow) %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{024EF658-720F-4B6A-8D9D-F228A6198C0D}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{962139BA-D304-4C20-930F-FBFD368F9F05}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{FC4E485B-0B14-47F0-85B3-D3D0EC1B986A}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{2C5FFC94-1B6C-45C5-8ADC-8CDFDEEBA8D5}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{344FFD4B-3FA3-48BD-A7B0-047B1EAD5023}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{17B408A0-3115-4E88-A9BA-EA5162EA3C46}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{C9D5782D-2902-4CB6-9D39-8D28C7EA5A61}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{E389075A-9E1F-4F1F-83CF-BCD0C25DD6B7}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{6B810E55-FB5A-41A3-9430-11DB0F64B5E0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Microsoft-ISATAP-Adapter
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (07/24/2015 09:56:17 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (07/24/2015 09:56:16 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (07/19/2015 04:52:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x738
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD initialization failed [6]).

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]).

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD endpoint registration failed [0]).

Error: (07/14/2015 01:49:02 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig

Error: (07/11/2015 03:58:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x1d58
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3

Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD initialization failed [6]).

Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]).


System errors:
=============
Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 05:08:29 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office:
=========================
Error: (07/24/2015 09:56:17 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.

Error: (07/24/2015 09:56:16 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.

Error: (07/19/2015 04:52:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b855473801d0c2328272f80eC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exec1ae0044-2e25-11e5-b6e1-8c89a569b94b

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (07/14/2015 01:49:02 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig

Error: (07/11/2015 03:58:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b85541d5801d0bb7d07c2ddffC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe4c2937ee-2770-11e5-9033-8c89a569b94b

Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]


CodeIntegrity Errors:
===================================
  Date: 2015-07-20 01:10:30.626
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 01:10:30.623
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 00:42:55.613
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 00:42:55.599
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-08 09:58:23.735
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-08 09:58:23.733
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-08 09:47:28.503
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-08 09:47:28.502
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-06 18:37:32.553
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-06 18:37:32.552
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 37%
Total physical RAM: 8191.18 MB
Available physical RAM: 5145.59 MB
Total Virtual: 16380.5 MB
Available Virtual: 12224.49 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:683.5 GB) (Free:507.41 GB) NTFS
Drive e: (Backup) (Fixed) (Total:247.92 GB) (Free:247.81 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 968D461D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=683.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=247.9 GB) - (Type=07 NTFS)

==================== End of log ============================
         
 --- --- ---

cosinus · 24.07.2015, 14:18

Zitat:

2015-06-30 14:41 - 2015-06-30 14:41 - 01503788 _____ C:\Users\Adminxx\Downloads\Adobe+Creative+Cloud+Crack+and+Serial+Number+Free+Download_10924_i25545428_il345.exe.zip

Cracks verwenden und sich dann über ein spinnendes System wundern

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

Kekz. · 24.07.2015, 14:22

Bin jetzt dabei die Illegale Software zu entfernen.Soll ich irgendwie Screen's oder ähnliches machen oder was genau mache ich wenn ich die Software entfernt habe?

cosinus · 24.07.2015, 14:25

Alles deinstallieren. Und alle Cracks löschen. Danach neue FRST-Logs.

Kekz. · 24.07.2015, 14:45

FRST Log

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015
Ran by Adminxx (administrator) on KEKZ-PC on 24-07-2015 15:38:46
Running from C:\Users\Adminxx\Downloads
Loaded Profiles: Adminxx (Available Profiles: Adminxx)
Platform: Windows 7 Professional (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G930\G930.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\plugin-nm-server.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.250\deploy\LoLLauncher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\LoLPatcher.exe
() C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\LolClient.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-07-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [Logitech G930] => C:\Program Files (x86)\Logitech\G930\G930.exe [1516888 2011-03-23] (Logitech(c))
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.)
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\RunOnce: [Uninstall C:\Users\Adminxx\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Adminxx\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64"
HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
Startup: C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2015-06-25]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk [2015-02-10]
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
GroupPolicyScripts: Group Policy detected <======= ATTENTION
GroupPolicyScripts\User: Group Policy detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.qone8.com/web/?type=ds&ts=1401799398&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKLM -> {98939DF3-2C26-4247-9D80-90B4291B1688} URL = hxxp://www.sm.de/?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2015-07-20] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO: bestadblocker -> {A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC} -> C:\Program Files (x86)\bestadblocker\WfzloncOFaEdIt.x64.dll [2015-07-08] ()
BHO: CutThePrIIce -> {AF7B4F14-EF87-4A15-965D-35B2700A866D} -> C:\Program Files (x86)\CutThePrIIce\dRBtildM3cfKGA.x64.dll [2015-07-08] ()
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-05-25] (DVDVideoSoft Ltd.)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Ads Removal -> {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll [2014-06-11] (Adblock)
BHO-x32: bestadblocker -> {A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC} -> C:\Program Files (x86)\bestadblocker\WfzloncOFaEdIt.dll [2015-07-08] ()
BHO-x32: CutThePrIIce -> {AF7B4F14-EF87-4A15-965D-35B2700A866D} -> C:\Program Files (x86)\CutThePrIIce\dRBtildM3cfKGA.dll [2015-07-08] ()
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Advanced SystemCare Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2015-04-01] (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2015-05-25] (DVDVideoSoft Ltd.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{07806CF7-8EF9-48CC-AA59-4B025B0DCA64}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{87871B33-DD73-48AA-88FB-AD62945348AF}: [DhcpNameServer] 192.168.178.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-19] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-19] ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2014-10-30] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Adminxx\AppData\Roaming\raidcall\plugins\nprcplugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\user.js [2015-06-06]
FF Extension: CutThePrIIce - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\5Sc8@Q.org [2015-07-08]
FF Extension: Amazon-Icon - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\amazon-icon@giga.de [2015-04-21]
FF Extension: bestadblocker - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\b0kvzG@aKd7j.net [2015-07-08]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\iobitascsurfingprotection@iobit.com [2015-07-20]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-06-07]
FF Extension: Adblock Plus - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-17]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com [2014-12-12]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2014-12-12]
FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com [2014-12-12]
FF Extension: No Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [not found]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-06-28]
CHR Extension: (Google Docs) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-28]
CHR Extension: (Google Drive) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-28]
CHR Extension: (Weather) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\beapnbfmjmjhhfpaoajfhjbbfnnlfpnc [2014-12-06]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06]
CHR Extension: (YouTube) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-28]
CHR Extension: (Google Search) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-28]
CHR Extension: (AdBlock) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-28]
CHR Extension: (Google Wallet) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-28]
CHR Extension: (Blue Space Sunset Chrome Theme) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nndfdjfoclbidmgpmbelcieibgjjfdog [2014-06-28]
CHR Extension: (ProxPrice) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nopgehbobniifpngnhmljfojnkkopbje [2014-06-28]
CHR Extension: (My Chrome Theme) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-06-28]
CHR Extension: (Evernote Web Clipper) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-07-08]
CHR Extension: (Gmail) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-28]
CHR Extension: (BuyNsave) - C:\ProgramData\dkaejgbnphngipoonelnaiblfdgpcpig\ []
CHR Extension: (CutThePrIIce) - C:\ProgramData\gcllmbgmppjgdmhopdojhhigojhfjkdh\ []
CHR Profile: C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-08]
CHR Extension: (YouTube) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-08]
CHR Extension: (Google Search) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-08]
CHR Extension: (Kaspersky Protection) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2014-12-12]
CHR Extension: (AdBlock) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Zelda Dark) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lilddpnkkhkcjkdaaglfminjopbijomp [2015-06-15]
CHR Extension: (Google Wallet) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-08]
CHR Extension: (Evernote Web Clipper) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-07-08]
CHR Extension: (Gmail) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-08]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S3 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [344896 2014-09-30] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2904864 2015-06-02] (IObit)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
S3 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-21] (Electronic Arts)
S3 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-23] ()
S3 RalinkRegistryWriter; C:\Program Files (x86)\TP-LINK\COMMON\RaRegistry.exe [185632 2010-06-25] (Ralink Technology, Corp.)
S3 RalinkRegistryWriter64; C:\Program Files (x86)\TP-LINK\COMMON\RaRegistry64.exe [212256 2010-06-25] (Ralink Technology, Corp.)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174600 2014-10-14] (Sandboxie Holdings, LLC)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2014-12-03] (Advanced Micro Devices Inc.)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
S3 EagleX64; No ImagePath
S3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-29] (REALiX(tm))
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2014-12-12] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [819896 2015-03-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2014-12-12] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
R3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
R3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 NTIOLib_1_0_4; No ImagePath
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
S3 pmem; No ImagePath
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
R3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
R3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-20] (Saitek)
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-10-14] (Sandboxie Holdings, LLC)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 X86BDA; C:\Windows\System32\DRIVERS\OEMDrv.sys [268416 2011-06-08] ( ) [File not signed]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-24 15:33 - 2015-07-24 15:36 - 00002906 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_Adminxx
2015-07-24 15:02 - 2015-07-24 15:04 - 00047870 _____ C:\Users\Adminxx\Downloads\Addition.txt
2015-07-24 15:00 - 2015-07-24 15:38 - 00025200 _____ C:\Users\Adminxx\Downloads\FRST.txt
2015-07-24 14:57 - 2015-07-24 14:57 - 02135552 _____ (Farbar) C:\Users\Adminxx\Downloads\FRST64.exe
2015-07-24 13:25 - 2015-07-24 13:25 - 00000590 _____ C:\Windows\PFRO.log
2015-07-24 13:25 - 2015-07-24 13:25 - 00000056 _____ C:\Windows\setupact.log
2015-07-24 13:25 - 2015-07-24 13:25 - 00000000 _____ C:\Windows\setuperr.log
2015-07-23 15:00 - 2015-07-23 15:00 - 00000189 _____ C:\siw_debug.txt
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\Users\Adminxx\AppData\Local\CrashRpt
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIW
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\Program Files (x86)\SIW 2013 Home Edition
2015-07-23 14:41 - 2015-07-23 14:41 - 04524952 _____ (Topala Software Solutions ) C:\Users\Adminxx\Downloads\siw13-setup.exe
2015-07-21 19:14 - 2015-07-21 19:14 - 00000000 ____H C:\asc_rdflag
2015-07-21 03:26 - 2015-07-21 03:27 - 00003186 _____ C:\Windows\System32\Tasks\ASC8_PerformanceMonitor
2015-07-21 03:25 - 2015-07-21 03:25 - 00003184 _____ C:\Windows\System32\Tasks\SmartDefrag4_Update
2015-07-20 01:55 - 2015-07-20 01:55 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Apple Computer
2015-07-20 01:54 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\Windows\SysWOW64\IObitSmartDefragExtension.dll
2015-07-20 01:53 - 2015-07-20 01:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2015-07-19 02:10 - 2015-07-19 02:10 - 01187008 _____ (Adobe Systems Incorporated) C:\Users\Adminxx\Downloads\flashplayer18_ha_install.exe
2015-07-08 08:30 - 2015-07-08 08:30 - 00262144 _____ C:\Windows\system32\config\elam
2015-07-08 04:41 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\Evernote Web Clipper
2015-07-08 04:40 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\CutThePrIIce
2015-07-08 04:40 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\bestadblocker
2015-07-08 04:39 - 2015-07-08 04:42 - 00000000 ____D C:\ProgramData\gcllmbgmppjgdmhopdojhhigojhfjkdh
2015-07-08 04:38 - 2015-07-08 08:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-08 04:38 - 2015-07-08 04:38 - 00000404 _____ C:\Windows\Tasks\JustWrite.job
2015-07-08 04:38 - 2015-07-08 04:38 - 00000000 ____D C:\ProgramData\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}
2015-07-06 03:58 - 2015-07-06 03:58 - 42729104 _____ C:\Windows\system32\nvcompiler.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 30481552 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 22947144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 16145200 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 15866992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 15224784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 14497520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 13263056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 11831856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 11011216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-07-06 03:58 - 2015-07-06 03:58 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 02599752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01060168 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01050768 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00975176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00938752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-07-06 03:58 - 2015-07-06 03:58 - 00000000 ____D C:\Windows\system32\DAX2
2015-07-06 03:55 - 2015-07-06 03:55 - 12996528 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 05708736 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 04496600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-07-06 03:55 - 2015-07-06 03:55 - 03234520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 03195416 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 03157796 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2015-07-06 03:55 - 2015-07-06 03:55 - 03129672 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02930904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02862488 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-07-06 03:55 - 2015-07-06 03:55 - 02702040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-07-06 03:55 - 2015-07-06 03:55 - 02585816 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02461016 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02393432 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01748184 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01576976 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01374640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01192368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01145264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00980400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00944984 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00728392 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00349528 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00166616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2015-06-30 18:46 - 2015-06-30 18:47 - 52701004 _____ C:\Users\Adminxx\Downloads\Seven Lions with Myon & Shane 54 ft. Tove Lo - Strangers (The Eden Project Remix).mp4
2015-06-30 18:46 - 2015-06-30 18:47 - 05263042 _____ C:\Users\Adminxx\Downloads\videoplayback.m4a
2015-06-30 16:37 - 2015-06-30 16:40 - 00735295 _____ C:\Users\Adminxx\Downloads\CoreTemp_106.zip
2015-06-30 14:47 - 2015-06-30 14:47 - 00000000 ____D C:\Users\Adminxx\Documents\Adobe
2015-06-30 14:40 - 2015-06-30 14:40 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\PDAppFlex
2015-06-27 16:25 - 2015-06-27 16:31 - 564744309 _____ C:\Users\Adminxx\Downloads\Windows6.1-KB947821-v34-x64.msu
2015-06-25 22:01 - 2015-06-25 22:01 - 00042020 _____ C:\Users\Adminxx\Downloads\Franksouza183-Fs-Places-folder-black.icns
2015-06-25 22:00 - 2015-06-25 22:00 - 00058989 _____ C:\Users\Adminxx\Downloads\Draseart-Dumper-PokeBall.icns
2015-06-25 21:41 - 2015-05-22 18:47 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-25 21:41 - 2015-05-22 18:42 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-25 21:41 - 2015-05-21 15:12 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-25 21:35 - 2015-07-24 15:37 - 00608981 _____ C:\Windows\WindowsUpdate.log
2015-06-25 21:32 - 2015-06-25 21:32 - 00461353 _____ C:\Users\Adminxx\Downloads\___rainmeter_lockscreen____by_aidendrew-d8nbaht.rmskin
2015-06-25 21:30 - 2015-06-25 21:30 - 00032291 _____ C:\Users\Adminxx\Downloads\isteve___1_by_emilniemi-d8ok2dl.rmskin
2015-06-25 21:30 - 2015-06-25 21:30 - 00024058 _____ C:\Users\Adminxx\Downloads\fountain_of_colors__music_visualizer___rainmeter__by_alatsombath-d8kxplv.rmskin
2015-06-25 21:27 - 2015-06-25 21:27 - 05440992 _____ C:\Users\Adminxx\Downloads\drizzle_v1_0_by_fadeoffset-d8y6dqn.rmskin
2015-06-25 21:27 - 2015-06-25 21:27 - 00090906 _____ C:\Users\Adminxx\Downloads\radialclock_1_02_by_pvoijen-d8wzdmz.rmskin
2015-06-25 21:23 - 2015-06-25 21:23 - 00008997 _____ C:\Users\Adminxx\Downloads\Citrus_1.5.rmskin
2015-06-25 21:18 - 2015-06-25 21:18 - 01219088 _____ C:\Users\Adminxx\Downloads\Metropolis_1.0.rmskin
2015-06-25 21:01 - 2015-06-25 21:01 - 02335944 _____ C:\Users\Adminxx\Downloads\Rainmeter-3.3-r2416-beta (1).exe
2015-06-25 21:01 - 2015-06-25 21:01 - 00001706 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk
2015-06-25 21:01 - 2015-06-25 21:01 - 00000000 ____D C:\Program Files\Rainmeter
2015-06-25 20:59 - 2015-06-25 20:59 - 00090435 _____ C:\Users\Adminxx\Downloads\Blue_Visualization_2.0.rmskin
2015-06-25 20:57 - 2015-06-25 20:57 - 00146725 _____ C:\Users\Adminxx\Downloads\Gray_.rmskin
2015-06-25 20:37 - 2015-06-25 20:37 - 00000000 ____D C:\Rainmeter
2015-06-25 20:36 - 2015-06-25 20:36 - 02335944 _____ C:\Users\Adminxx\Downloads\Rainmeter-3.3-r2416-beta.exe
2015-06-24 00:52 - 2015-06-24 00:52 - 00000097 _____ C:\Users\Adminxx\Downloads\Einhorn---

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-24 15:38 - 2014-12-11 02:45 - 00000000 ____D C:\FRST
2015-07-24 15:37 - 2014-12-12 22:02 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Skype
2015-07-24 15:36 - 2014-06-23 19:58 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-24 15:35 - 2015-03-16 20:58 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Adobe
2015-07-24 15:35 - 2014-06-23 20:00 - 00000000 ____D C:\ProgramData\Adobe
2015-07-24 15:35 - 2014-04-26 20:10 - 00000000 ____D C:\Users\Adminxx
2015-07-24 15:33 - 2014-06-23 20:29 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-07-24 15:09 - 2014-10-17 17:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-24 13:40 - 2014-12-12 19:29 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-07-24 13:33 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-24 13:33 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-24 13:26 - 2014-04-27 16:11 - 00002876 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Adminxx)
2015-07-24 13:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-23 15:26 - 2015-01-04 13:59 - 00000000 ____D C:\Users\Public\Documents\Blizzard Entertainment
2015-07-23 00:44 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-21 19:14 - 2014-05-30 12:23 - 56094720 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00282624 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00028672 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-07-20 13:44 - 2014-12-05 01:54 - 00000392 _____ C:\Windows\Tasks\update-sys.job
2015-07-20 13:44 - 2014-12-05 01:54 - 00000392 _____ C:\Windows\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000.job
2015-07-20 03:33 - 2015-06-08 15:26 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-20 03:33 - 2014-06-23 19:54 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Adobe
2015-07-20 02:34 - 2014-12-27 15:54 - 00003134 _____ C:\Windows\System32\Tasks\{386CB472-0168-45D8-97E3-6ACAA83DEFB4}
2015-07-20 02:34 - 2014-12-05 01:54 - 00003384 _____ C:\Windows\System32\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000
2015-07-20 02:28 - 2014-12-05 01:54 - 00003402 _____ C:\Windows\System32\Tasks\update-sys
2015-07-20 01:54 - 2014-12-19 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-07-20 01:53 - 2015-03-16 18:50 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\IObit
2015-07-20 01:53 - 2014-04-27 16:09 - 00000000 ____D C:\Program Files (x86)\IObit
2015-07-19 02:09 - 2014-10-17 17:38 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-19 02:09 - 2014-10-17 17:38 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-19 02:09 - 2014-10-17 17:38 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-19 00:59 - 2014-04-27 16:15 - 00000000 ____D C:\ProgramData\ProductData
2015-07-12 15:52 - 2014-04-29 19:35 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-12 15:52 - 2014-04-29 19:35 - 00000000 ____D C:\ProgramData\Skype
2015-07-09 04:02 - 2014-05-09 22:58 - 00000000 ____D C:\Users\Adminxx\Documents\LOLReplay
2015-07-09 03:54 - 2014-11-27 05:34 - 00000000 ____D C:\Program Files (x86)\LOLReplay
2015-07-09 03:54 - 2014-05-09 22:58 - 00001913 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
2015-07-08 08:40 - 2014-12-17 05:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-08 04:41 - 2014-12-06 05:34 - 00000000 ____D C:\ProgramData\10033927629175197721
2015-07-07 09:40 - 2014-07-06 06:08 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Battle.net
2015-07-07 09:28 - 2014-07-06 06:08 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-07-06 04:02 - 2014-04-27 21:23 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-06 04:01 - 2014-04-27 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-07-06 04:01 - 2014-04-27 21:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-07-06 03:58 - 2015-05-19 23:58 - 01099992 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 17724600 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 12855416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 02997544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-07-06 03:58 - 2014-04-27 21:21 - 03395648 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-07-06 03:57 - 2014-04-27 22:33 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2015-07-03 05:16 - 2014-04-29 19:48 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-03 00:14 - 2014-04-26 21:01 - 00000000 ____D C:\Windows\Minidump
2015-06-30 14:48 - 2014-06-23 20:44 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-06-29 15:37 - 2014-04-27 16:10 - 00064024 _____ C:\Users\Adminxx\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-29 15:36 - 2009-07-14 06:45 - 04959608 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-29 03:13 - 2014-04-29 19:46 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-28 22:40 - 2014-05-10 18:49 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Spotify
2015-06-28 22:37 - 2015-05-01 09:29 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Spotify
2015-06-28 13:54 - 2015-06-14 18:39 - 00000000 ___RD C:\Users\Adminxx\Desktop\Pokemon
2015-06-26 02:17 - 2015-04-15 12:49 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-26 02:17 - 2015-04-15 12:49 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-25 21:46 - 2014-04-27 16:27 - 00000000 ____D C:\Windows\system32\MRT
2015-06-25 21:41 - 2014-04-27 16:27 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories =======

2015-04-22 23:12 - 2015-04-22 23:12 - 0001951 _____ () C:\Users\Adminxx\AppData\Local\recently-used.xbel
2014-11-20 05:41 - 2014-11-20 05:41 - 0007601 _____ () C:\Users\Adminxx\AppData\Local\Resmon.ResmonCfg
2014-12-05 01:54 - 2014-12-05 01:54 - 0000003 _____ () C:\Users\Adminxx\AppData\Local\updater.log
2014-12-05 01:54 - 2015-04-24 00:04 - 0000424 _____ () C:\Users\Adminxx\AppData\Local\UserProducts.xml
2014-04-27 22:33 - 2014-04-27 22:33 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-07-24 09:49

==================== End of log ============================

--- --- ---

[/CODE]

Addition Log

Code:

ATTFilter

Additional
FRST Logfile:

	Code: 

 ATTFilter

  
	scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015
Ran by Adminxx at 2015-07-24 15:40:23
Running from C:\Users\Adminxx\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-877811456-2021815861-1849052563-500 - Administrator - Disabled)
Adminxx (S-1-5-21-877811456-2021815861-1849052563-1000 - Administrator - Enabled) => C:\Users\Adminxx
Gast (S-1-5-21-877811456-2021815861-1849052563-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.3.0 - IObit)
Akamai NetSession Interface (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Auto Keyboard v1.6 (HKLM-x32\...\{71E16EE4-BBED-44A8-8724-9E68D05EE945}_is1) (Version: 1.6 - MurGee.com)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Driver Booster 2.3 (HKLM-x32\...\Driver Booster_is1) (Version: 2.3 - IObit)
Druckerdeinstallation für EPSON SX430 Series (HKLM\...\EPSON SX430 Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Fiesta Online DE (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\fiestaonline_de) (Version: 1.0.0.1 - Gamigo Games)
Free YouTube to MP3 Converter version 3.12.59.525 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.525 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Happy Cloud Client (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\HappyCloud) (Version: 5.24 - Happy Cloud, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
HexChat (HKLM\...\HexChat_is1) (Version: 2.10.2 - HexChat)
IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.5 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.3.0.5 - IObit)
Java 7 Update 72 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217072FF}) (Version: 7.0.720 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lightshot-5.2.1.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.1.1 - Skillbrains)
Logitech G930 (HKLM\...\{91C4D79C-3579-48E8-ADFA-8818042AEB73}) (Version: 1.0.364 - Logitech)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.37 - www.leaguereplays.com)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 39.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version:  - MSI Co., LTD)
MTA:SA v1.3.5 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3.5 - Multi Theft Auto)
MTA:SA v1.4.0 (HKLM-x32\...\MTA:SA 1.4) (Version: v1.4.0 - Multi Theft Auto)
MyPC Backup  (HKLM\...\OLBPre) (Version:  - MyPC Backup) <==== ATTENTION
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.18.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.18.0 - NEC Electronics Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.3 beta r2416 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Sandboxie 4.14 (64-bit) (HKLM\...\Sandboxie) (Version: 4.14 - Sandboxie Holdings, LLC)
Scordalus Setup Version 1.0 (HKLM-x32\...\{870A82F3-865A-43AE-9E64-77F85CB0FFE9}_is1) (Version: 1.0 - Scordalus Network)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Shutdown Manager (HKLM-x32\...\{C457BA5F-35F9-480C-90F8-5C91DB443A15}_is1) (Version: 2.0.7 - Daniel Höllig)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.1 - IObit)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{C9193CBB-C31A-412A-A074-AD08F0F2CF3D}) (Version: 7.0.27.13 - Mad Catz)
Spotify (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
System Requirements Lab CYRI (HKLM-x32\...\{6C8C4577-8E15-4C63-96ED-D40F2072FF74}) (Version: 6.0.19.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)
TP-LINK Wireless Utility (HKLM-x32\...\{6FFEF5E1-F7B0-40DD-838D-557BD7EE4301}) (Version: 1.5.6.0 - TP-LINK)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wireshark 1.12.2 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.2 - The Wireshark developer community, hxxp://www.wireshark.org)
Yahoo Community Smartbar Engine (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\{79a1ec54-8fe4-4517-be9e-1122e2792dec}) (Version: 11.38.66.16134 - Linkury Inc.) <==== ATTENTION
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

==================== Restore Points =========================

24-07-2015 09:56:16 Geplanter Prüfpunkt

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-12-06 06:21 - 00000959 __RAH C:\Windows\system32\Drivers\etc\hosts
0.0.0.0 host.sandboxie.com
0.0.0.0 host2.sandboxie.com
0.0.0.0 host3.sandboxie.com
0.0.0.0 host4.sandboxie.com


==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0403E109-2010-4A1A-9A8A-B9C3BD621E9E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {13829D37-79A7-443C-BFFD-D9DB14748168} - System32\Tasks\{364F549A-CA2E-4D8B-BCAD-B388B6719CFA} => pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {20006C6A-A99B-40EC-BE9C-77070A943DC3} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-06-10] (IObit)
Task: {36425D32-A9FB-4705-A816-B85AD8522AC3} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-03-03] (IObit)
Task: {3DC9986E-CDA4-47B5-A7DB-6361525C170A} - System32\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [2014-03-25] ()
Task: {49177CC2-00BC-418A-B152-E9ACD7C70ADE} - System32\Tasks\ASC8_SkipUac_Adminxx => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-06-16] (IObit)
Task: {5306945C-F39B-4991-8174-BC38BC3CA12D} - System32\Tasks\Driver Booster SkipUAC (Adminxx) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-04-28] (IObit)
Task: {62CB6F46-B940-44A8-8132-69EEE3C0C59B} - System32\Tasks\{6FA0550B-BA83-4446-A73D-FD7B6EB604B0} => C:\Users\Adminxx\Desktop\Vicinity Online\VicinityLauncher.exe
Task: {67164103-B51E-4545-978F-8CAEE754BC4E} - System32\Tasks\{A9A292A1-85C6-41E2-9D5A-AD2B3D8628EC} => pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {793A8584-6DE1-4C35-9D39-BFD4B651D4B8} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-04-07] (IObit)
Task: {92881E4D-E5B6-4800-BC37-47F9A09B6F28} - System32\Tasks\Uninstaller_SkipUac_Administrator => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-05-20] (IObit)
Task: {9A880C69-2884-4351-8CE6-D326090395C3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-19] (Adobe Systems Incorporated)
Task: {B3EEDF84-32F7-470B-B05A-5AEF82ADB19D} - System32\Tasks\Uninstaller_SkipUac_Adminxx => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-05-20] (IObit)
Task: {C6CF2936-D030-4162-8E31-56BFDDE9D6E4} - System32\Tasks\{386CB472-0168-45D8-97E3-6ACAA83DEFB4} => pcalua.exe -a C:\Users\Adminxx\Downloads\NetFx64.exe -d C:\Users\Adminxx\Downloads
Task: {D15596EA-3E1D-496F-A973-6E7F8354DE83} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2015-04-28] (IObit)
Task: {D2718CB9-C3F5-4E96-921A-A58713D9A874} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {D82E79F4-9A50-4258-9283-8BA94E09A812} - System32\Tasks\{7776A7EB-3B1D-4BDA-B1FC-7D5C81511218} => C:\Users\Adminxx\Desktop\Vicinity Online\VicinityLauncher.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\JustWrite.job => c:\programdata\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}\alexamilesakahaleyissoarx.exe-1436323086587.exe <==== ATTENTION
Task: C:\Windows\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Loaded Modules (Whitelisted) ==============

2014-04-27 21:22 - 2015-06-17 08:48 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-31 14:00 - 2015-05-31 14:00 - 00036544 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2015-05-31 14:00 - 2015-05-31 14:00 - 00781504 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00011776 _____ () C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00058368 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00033792 _____ () C:\Program Files\Rainmeter\Plugins\AudioLevel.DLL
2014-01-21 17:54 - 2015-02-20 02:15 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe
2015-07-23 00:54 - 2015-07-23 00:54 - 02354168 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.250\deploy\LoLLauncher.exe
2015-07-23 00:54 - 2015-07-23 00:54 - 03985912 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\LoLPatcher.exe
2015-02-20 02:31 - 2015-02-20 02:31 - 00074752 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\LolClient.exe
2014-12-19 13:04 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\sqlite3.dll
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\kpcengine.2.3.dll
2015-07-08 06:21 - 2015-07-08 06:21 - 00424448 _____ () C:\Program Files (x86)\LOLReplay\LOLUtils.dll
2015-04-14 23:15 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-12-19 13:04 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2014-12-19 13:04 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2014-12-19 13:04 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
2015-07-07 19:40 - 2015-07-07 05:49 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll
2015-07-07 19:40 - 2015-07-07 05:49 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll
2015-03-16 12:11 - 2015-03-16 12:11 - 00040448 _____ () C:\Program Files (x86)\LOLReplay\Launcher.dll
2015-07-23 00:54 - 2015-07-23 00:54 - 01715704 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.34\deploy\RiotLauncher.dll
2015-03-27 05:31 - 2015-03-27 05:31 - 00166400 _____ () C:\Program Files (x86)\LOLReplay\Air.dll
2015-02-20 02:23 - 2015-02-20 02:23 - 04774248 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\Adobe AIR\Versions\1.0\Resources\WebKit.dll
2015-02-20 02:23 - 2015-02-20 02:23 - 16032616 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.152\deploy\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\Users\Adminxx\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Adminxx\Anwendungsdaten:NT2
AlternateDataStreams: C:\Users\Adminxx\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Adminxx\AppData\Roaming:NT2
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2

==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\100sexlinks.com -> 100sexlinks.com

There are 4788 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-877811456-2021815861-1849052563-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK Wireless Utility.lnk => C:\Windows\pss\TP-LINK Wireless Utility.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Adminxx^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Advanced SystemCare 7 => 
MSCONFIG\startupreg: APSDaemon => 
MSCONFIG\startupreg: Browser Infrastructure Helper => 
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: EvolveClient => 
MSCONFIG\startupreg: IObit Malware Fighter => "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
MSCONFIG\startupreg: MurGee.com Auto Keyboard => C:\ProgramData\Auto Keyboard\AutoKeyboard.exe :silent
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
MSCONFIG\startupreg: puush => 
MSCONFIG\startupreg: QuickTime Task => 
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => 
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Adminxx\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{888FC972-2F45-4974-B011-2A5BAF6A47E7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5887CDF1-C533-4687-ADA1-4C2D05A2F617}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0FAD3BC9-E2EB-4FB9-88CF-53A8A529802F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{A0FBA2AE-182E-4BF0-BFA1-991AFD743974}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{ABA8C8E1-6771-4CF8-80E6-FD1309A7F24E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0DDB10F9-4020-4707-B178-2757975AA16E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E9569CD6-C259-44EB-A20B-91A82E36B3CA}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{7C13CB8B-BDF3-462C-9D2A-14795A78E974}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{D33443EA-9983-4990-8708-87ACB93EDD9E}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{8D571B72-CD50-4538-A3B5-CB67DE752D38}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{6CD58CA9-1084-4681-9B0A-F0962C5B38E0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CC64DB76-EA15-406B-AE3C-6D29A5303416}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6BD50363-3232-4487-BC10-5518154754AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{E92E636F-6D22-44B9-89F6-BADE1BD67B9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{CA91E12C-3D2F-4A47-AE18-B729839F178E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D0BF7B70-AE87-4A51-B865-66173B2F28B1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{3BFE2313-300C-40CD-ACA9-24E43C3F6681}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{ED57C8B9-616D-463B-9171-E284FA1529DD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FC37E0DC-FADC-4494-ABAA-416E85483D02}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D388CBE9-09FE-4356-B921-9EB0295EE627}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CF0200C2-DA03-4749-A4E4-62AC5A24E43D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{720FE1E0-F8A0-4B6D-9310-E3D5CDEBABEB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D75295B4-DA8B-4079-99AC-B9B9A8881994}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{A7040605-37D3-424F-8100-9A75AEC4A9D9}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{9CBCE74B-7ADC-447D-8E8F-76B3F67AD05B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7497CDF4-B924-4780-968F-9D2E9C7C1D77}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{B4051526-1A9C-4E32-98D1-442DE5853017}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{C5DB0057-5A5E-4D99-9399-CE850E5521D5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{917219B2-7DB2-4655-A292-DC626F0F150A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{F3CA7A40-ED25-4AB7-8A4A-4ECB0B1E13E5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{145D516D-9FAF-4B48-95C0-9E42322B4C99}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{0C1E7CD5-63E7-4F10-B791-B66893092D61}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{399320A3-E702-45D7-B9B5-0F6443B0694A}C:\users\adminxx\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\adminxx\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{DAB9CB42-4631-4DB0-9545-C6D23148B54B}C:\users\adminxx\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\adminxx\appdata\local\akamai\netsession_win.exe
FirewallRules: [{290EAC14-3629-42C5-B893-D365FCE129EB}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{EC58FE13-0AD0-43E6-A6BD-9F4BAAE48B31}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{54421C57-A574-4BC7-B13D-FD8279460782}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0AF3498E-B2CE-425D-9F23-0BE682E84C1B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C9E50E22-3B25-48F0-8D65-9DA21E5DAAF6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{88CE7845-0314-456B-A1E6-FBA21E271C49}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{DEF96DF8-26EB-45B9-B061-3E6374B1E97B}C:\users\adminxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adminxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{74EAF886-C054-455F-AD38-25FB68CC06BE}C:\users\adminxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adminxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [{601ECCFB-1896-4029-820B-7E7C1798B629}] => (Allow) %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{024EF658-720F-4B6A-8D9D-F228A6198C0D}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{962139BA-D304-4C20-930F-FBFD368F9F05}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{FC4E485B-0B14-47F0-85B3-D3D0EC1B986A}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{2C5FFC94-1B6C-45C5-8ADC-8CDFDEEBA8D5}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{344FFD4B-3FA3-48BD-A7B0-047B1EAD5023}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{17B408A0-3115-4E88-A9BA-EA5162EA3C46}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{C9D5782D-2902-4CB6-9D39-8D28C7EA5A61}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{E389075A-9E1F-4F1F-83CF-BCD0C25DD6B7}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{6B810E55-FB5A-41A3-9430-11DB0F64B5E0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Microsoft-ISATAP-Adapter
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (07/24/2015 09:56:17 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (07/24/2015 09:56:16 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (07/19/2015 04:52:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x738
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD initialization failed [6]).

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]).

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD endpoint registration failed [0]).

Error: (07/14/2015 01:49:02 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig

Error: (07/11/2015 03:58:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x1d58
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3

Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD initialization failed [6]).

Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]).


System errors:
=============
Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:59 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 01:30:17 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/24/2015 05:08:29 AM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.


Microsoft Office:
=========================
Error: (07/24/2015 09:56:17 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.

Error: (07/24/2015 09:56:16 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.

Error: (07/19/2015 04:52:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b855473801d0c2328272f80eC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exec1ae0044-2e25-11e5-b6e1-8c89a569b94b

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (07/14/2015 01:49:02 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig

Error: (07/11/2015 03:58:18 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b85541d5801d0bb7d07c2ddffC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe4c2937ee-2770-11e5-9033-8c89a569b94b

Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (07/10/2015 01:32:26 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]


CodeIntegrity Errors:
===================================
  Date: 2015-07-20 01:10:30.626
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 01:10:30.623
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 00:42:55.613
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 00:42:55.599
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-08 09:58:23.735
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-08 09:58:23.733
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-08 09:47:28.503
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-08 09:47:28.502
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-06 18:37:32.553
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-06-06 18:37:32.552
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 41%
Total physical RAM: 8191.18 MB
Available physical RAM: 4830.46 MB
Total Virtual: 16380.5 MB
Available Virtual: 11754.02 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:683.5 GB) (Free:528.31 GB) NTFS
Drive e: (Backup) (Fixed) (Total:247.92 GB) (Free:247.81 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 968D461D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=683.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=247.9 GB) - (Type=07 NTFS)

==================== End of log ============================
         
 --- --- ---

cosinus · 24.07.2015, 15:33

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Kekz. · 25.07.2015, 02:42

Code:

ATTFilter

Malwarebytes Anti-Rootkit BETA 1.09.1.1004
www.malwarebytes.org

Database version:
  main:    v2015.07.24.05
  rootkit: v2015.07.22.01

Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
Adminxx :: KEKZ-PC [administrator]

24.07.2015 16:37:27
mbar-log-2015-07-24 (16-37-27).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 374763
Time elapsed: 42 minute(s), 9 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

Die Resultate:
Sind die Temperaturen in Ordnung?

Kekz. · 25.07.2015, 08:55

Habe neue Wärmeleitpaste aufgetragen und mal allg alles gesäubert am Computer.Ich schätze mal das die CPU so hoch gestiegen sind lag daran das die Lüfter etwas verstopft waren mit Staub und unter anderem Insekten.
Momentane Temperaturen - Sind die so in Ordnung?

cosinus · 25.07.2015, 17:17

Die Temperaturen haben nichts mit Malwareanalyse und Bereinigung zu tun und ich kann da auch keine verlässlichen Aussagen zu machen allein nur aus ein paar Screenshot. Mach dazu einen neuen Thread im Hardwarebereich auf wenn's sein muss.

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Kekz. · 25.07.2015, 19:40

AdwCleaner Log

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.208 - Bericht erstellt 25/07/2015 um 20:26:41
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-07-15.1 [Server]
# Betriebssystem : Windows 7 Professional  (x64)
# Benutzername : Adminxx - KEKZ-PC
# Gestarted von : C:\Users\Adminxx\Downloads\AdwCleaner_4.208.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\WPM
Ordner Gelöscht : C:\ProgramData\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}
Ordner Gelöscht : C:\Program Files (x86)\DeltaFix
Ordner Gelöscht : C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\5Sc8@Q.org
Ordner Gelöscht : C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\b0kvzG@aKd7j.net
Ordner Gelöscht : C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\beapnbfmjmjhhfpaoajfhjbbfnnlfpnc
Ordner Gelöscht : C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc
Ordner Gelöscht : C:\ProgramData\dkaejgbnphngipoonelnaiblfdgpcpig
Ordner Gelöscht : C:\ProgramData\gcllmbgmppjgdmhopdojhhigojhfjkdh
Datei Gelöscht : C:\END
Datei Gelöscht : C:\prefs.js
Datei Gelöscht : C:\Users\Adminxx\Favorites\Startfenster.lnk
Datei Gelöscht : C:\Users\Adminxx\Favorites\Links\Startfenster.lnk

***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{06DEB529-DE09-43EC-B6E2-451AAB0FF000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{FDA3E1DF-B9C8-4A1A-A646-58E5E01520E4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{98939DF3-2C26-4247-9D80-90B4291B1688}
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\simplytech
Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{842C4394-47F7-60DE-480B-C09116B63559}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OLBPre
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v9.0.8112.16545

Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v39.0 (x86 de)


-\\ Google Chrome v43.0.2357.132

[C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.qone8.com/web/?type=dspp&ts=1410174062&from=vtt&uid=HitachiXHDS721010CLA332_JP2940J82HXS8V2HXS8VX&q={searchTerms}

*************************

AdwCleaner[R0].txt - [2659 Bytes] - [25/07/2015 20:16:51]
AdwCleaner[R1].txt - [5831 Bytes] - [25/07/2015 20:24:49]
AdwCleaner[S0].txt - [5014 Bytes] - [25/07/2015 20:26:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5073  Bytes] ##########

--- --- ---

[/CODE]

FRST Log

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-07-2015
durchgeführt von Adminxx (Administrator) auf KEKZ-PC (25-07-2015 20:34:08)
Gestartet von C:\Users\Adminxx\Downloads
Geladene Profile: Adminxx (Verfügbare Profile: Adminxx)
Platform: Windows 7 Professional (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 9 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(LOL Replay) C:\Program Files (x86)\LOLReplay\LOLRecorder.exe
() C:\Program Files\Rainmeter\Rainmeter.exe
(Logitech(c)) C:\Program Files (x86)\Logitech\G930\G930.exe
(Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.2.1.1\Lightshot.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avpui.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\plugin-nm-server.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-07-06] (Realtek Semiconductor)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226560 2014-11-18] ()
HKLM-x32\...\Run: [Logitech G930] => C:\Program Files (x86)\Logitech\G930\G930.exe [1516888 2011-03-23] (Logitech(c))
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1802048 2014-10-13] (IObit)
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.)
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\RunOnce: [Uninstall C:\Users\Adminxx\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Adminxx\AppData\Local\Microsoft\SkyDrive\17.3.1229.0918\amd64"
HKU\S-1-5-18\...\Run: [Advanced SystemCare 8] => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCTray.exe [2429728 2015-04-08] (IObit)
Startup: C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2015-06-25]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk [2015-02-10]
ShortcutTarget: LOLRecorder.lnk -> C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
GroupPolicyScripts: Gruppenrichtline erkannt <======= ATTENTION
GroupPolicyScripts\User: Gruppenrichtline erkannt <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ATTENTION

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-877811456-2021815861-1849052563-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.de
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO: bestadblocker -> {A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC} -> C:\Program Files (x86)\bestadblocker\WfzloncOFaEdIt.x64.dll Keine Datei
BHO: CutThePrIIce -> {AF7B4F14-EF87-4A15-965D-35B2700A866D} -> C:\Program Files (x86)\CutThePrIIce\dRBtildM3cfKGA.x64.dll Keine Datei
BHO: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\x64\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin -> {03C04F0A-E2A3-4F7F-BA30-BFA06FFD1358} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Virtual Keyboard Plugin -> {B5D5BB14-C8E2-478D-9C97-574AC10AF9E8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Safe Money Plugin -> {E3D96E85-529D-4269-AC6A-97CF9E2221E3} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\IEExt\ie_plugin.dll [2014-12-12] (Kaspersky Lab ZAO)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{07806CF7-8EF9-48CC-AA59-4B025B0DCA64}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{87871B33-DD73-48AA-88FB-AD62945348AF}: [DhcpNameServer] 192.168.178.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-19] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-19] ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_6418E0D362104DADA084DC312DFA8ABC -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @kaspersky.com/online_banking_69A4E213815F42BD863D889007201D82 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2014-12-12] ()
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2014-10-30] (Nexon)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\Adminxx\AppData\Roaming\raidcall\plugins\nprcplugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: Amazon-Icon - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\amazon-icon@giga.de [2015-04-21]
FF Extension: Adblock Plus - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-17]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_6418E0D362104DADA084DC312DFA8ABC@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\content_blocker@kaspersky.com [2014-12-12]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_294FF26A1D5B455495946778FDE7CEDB@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\virtual_keyboard@kaspersky.com [2014-12-12]
FF HKLM-x32\...\Firefox\Extensions: [online_banking_69A4E213815F42BD863D889007201D82@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\FFExt\online_banking@kaspersky.com [2014-12-12]
FF Extension: Kein Name - C:\Users\Adminxx\AppData\Roaming\Mozilla\Firefox\Profiles\en1xp5t0.default\extensions\iobitascsurfingprotection@iobit.com [nicht gefunden]
FF Extension: Kein Name - C:\Program Files (x86)\IObit Apps Toolbar\FF [nicht gefunden]

Chrome: 
=======
CHR dev: Chrome dev build erkannt! <======= ATTENTION
CHR Profile: C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2014-06-28]
CHR Extension: (Google Docs) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-28]
CHR Extension: (Google Drive) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-28]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06]
CHR Extension: (YouTube) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-28]
CHR Extension: (Google Search) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-28]
CHR Extension: (AdBlock) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-28]
CHR Extension: (Google Wallet) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-28]
CHR Extension: (Blue Space Sunset Chrome Theme) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nndfdjfoclbidmgpmbelcieibgjjfdog [2014-06-28]
CHR Extension: (ProxPrice) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nopgehbobniifpngnhmljfojnkkopbje [2014-06-28]
CHR Extension: (My Chrome Theme) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-06-28]
CHR Extension: (Gmail) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-28]
CHR Profile: C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-09-08]
CHR Extension: (YouTube) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-08]
CHR Extension: (Google Search) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-08]
CHR Extension: (Kaspersky Protection) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2014-12-12]
CHR Extension: (AdBlock) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-07-02]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12]
CHR Extension: (Zelda Dark) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lilddpnkkhkcjkdaaglfminjopbijomp [2015-06-15]
CHR Extension: (Google Wallet) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-08]
CHR Extension: (Evernote Web Clipper) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2015-07-08]
CHR Extension: (Gmail) - C:\Users\Adminxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-08]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Services (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdvancedSystemCareService8; C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASCService.exe [814880 2015-04-03] (IObit)
R2 AVP15.0.1; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\avp.exe [234520 2014-08-30] (Kaspersky Lab ZAO)
S3 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [344896 2014-09-30] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2904864 2015-06-02] (IObit)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
S3 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1903472 2015-01-21] (Electronic Arts)
S3 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-06-23] ()
S3 RalinkRegistryWriter; C:\Program Files (x86)\TP-LINK\COMMON\RaRegistry.exe [185632 2010-06-25] (Ralink Technology, Corp.)
S3 RalinkRegistryWriter64; C:\Program Files (x86)\TP-LINK\COMMON\RaRegistry64.exe [212256 2010-06-25] (Ralink Technology, Corp.)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S3 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174600 2014-10-14] (Sandboxie Holdings, LLC)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11944 2014-12-03] (Advanced Micro Devices Inc.)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [238288 2013-01-14] (Kaspersky Lab UK Ltd)
S3 EagleX64; No ImagePath
S3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2014-12-29] (REALiX(tm))
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [468576 2014-03-31] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [46144 2014-07-02] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [150536 2014-12-12] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [246456 2014-08-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [819896 2015-03-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55872 2014-06-05] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [77512 2014-12-12] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179776 2014-07-09] (Kaspersky Lab ZAO)
R3 LADF_BakerCOnly; C:\Windows\System32\DRIVERS\ladfBakerCamd64.sys [410184 2011-03-18] (Logitech)
R3 LADF_BakerROnly; C:\Windows\System32\DRIVERS\ladfBakerRamd64.sys [335688 2011-03-18] (Logitech)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
S3 NTIOLib_1_0_4; No ImagePath
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
S3 pmem; No ImagePath
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-01-23] ()
R3 SaiK1705; C:\Windows\System32\DRIVERS\SaiK1705.sys [180584 2012-09-20] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [25120 2013-04-30] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [52640 2013-04-30] (Saitek)
R3 SaiU1705; C:\Windows\System32\DRIVERS\SaiU1705.sys [47208 2012-09-20] (Saitek)
S3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-10-14] (Sandboxie Holdings, LLC)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
S3 X86BDA; C:\Windows\System32\DRIVERS\OEMDrv.sys [268416 2011-06-08] ( ) [Datei ist nicht signiert]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-07-25 20:33 - 2015-07-25 20:33 - 00000000 ____D C:\Users\Adminxx\Downloads\FRST-OlderVersion
2015-07-25 20:29 - 2015-07-25 20:29 - 00000000 ____D C:\ProgramData\ProductData
2015-07-25 20:28 - 2015-07-25 20:28 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\ProductData
2015-07-25 20:21 - 2015-07-25 20:21 - 00006854 _____ C:\Users\Adminxx\Desktop\JRT.txt
2015-07-25 20:15 - 2015-07-25 20:15 - 01798288 _____ (Malwarebytes Corporation) C:\Users\Adminxx\Downloads\JRT.exe
2015-07-25 20:14 - 2015-07-25 20:26 - 00000000 ____D C:\AdwCleaner
2015-07-25 20:13 - 2015-07-25 20:13 - 02248704 _____ C:\Users\Adminxx\Downloads\AdwCleaner_4.208.exe
2015-07-25 03:52 - 2015-07-25 03:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
2015-07-25 03:52 - 2015-07-25 03:52 - 00000000 ____D C:\Program Files (x86)\Lavalys
2015-07-25 03:51 - 2015-07-25 03:51 - 10255080 _____ (Lavalys, Inc. ) C:\Users\Adminxx\Downloads\everestultimate550.exe
2015-07-25 03:38 - 2015-07-25 07:41 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2015-07-25 03:38 - 2015-07-25 03:38 - 00000045 _____ C:\Windows\SysWOW64\initdebug.nfo
2015-07-25 03:37 - 2015-07-25 03:38 - 02218504 _____ C:\Users\Adminxx\Downloads\instspeedfan451.exe
2015-07-24 16:36 - 2015-07-25 00:30 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-07-24 16:36 - 2015-07-24 23:41 - 00000000 ____D C:\Users\Adminxx\Desktop\mbar
2015-07-24 16:36 - 2015-07-24 23:41 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-07-24 16:36 - 2015-07-24 18:17 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-07-24 16:35 - 2015-07-24 16:35 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Adminxx\Downloads\mbar-1.09.1.1004.exe
2015-07-24 15:02 - 2015-07-24 15:42 - 00047233 _____ C:\Users\Adminxx\Downloads\Addition.txt
2015-07-24 15:00 - 2015-07-25 20:34 - 00022544 _____ C:\Users\Adminxx\Downloads\FRST.txt
2015-07-24 14:57 - 2015-07-25 20:33 - 02146816 _____ (Farbar) C:\Users\Adminxx\Downloads\FRST64.exe
2015-07-24 13:25 - 2015-07-25 20:27 - 00000224 _____ C:\Windows\setupact.log
2015-07-24 13:25 - 2015-07-24 13:25 - 00000590 _____ C:\Windows\PFRO.log
2015-07-24 13:25 - 2015-07-24 13:25 - 00000000 _____ C:\Windows\setuperr.log
2015-07-23 15:00 - 2015-07-25 18:26 - 00000189 _____ C:\siw_debug.txt
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIW
2015-07-23 14:43 - 2015-07-23 14:43 - 00000000 ____D C:\Program Files (x86)\SIW 2013 Home Edition
2015-07-23 14:41 - 2015-07-23 14:41 - 04524952 _____ (Topala Software Solutions ) C:\Users\Adminxx\Downloads\siw13-setup.exe
2015-07-21 19:14 - 2015-07-21 19:14 - 00000000 ____H C:\asc_rdflag
2015-07-21 03:26 - 2015-07-21 03:27 - 00003186 _____ C:\Windows\System32\Tasks\ASC8_PerformanceMonitor
2015-07-21 03:25 - 2015-07-21 03:25 - 00003184 _____ C:\Windows\System32\Tasks\SmartDefrag4_Update
2015-07-20 01:55 - 2015-07-20 01:55 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Apple Computer
2015-07-20 01:54 - 2015-01-10 15:32 - 00128288 _____ (IObit) C:\Windows\SysWOW64\IObitSmartDefragExtension.dll
2015-07-20 01:53 - 2015-07-20 01:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4
2015-07-19 02:10 - 2015-07-19 02:10 - 01187008 _____ (Adobe Systems Incorporated) C:\Users\Adminxx\Downloads\flashplayer18_ha_install.exe
2015-07-08 08:30 - 2015-07-08 08:30 - 00262144 _____ C:\Windows\system32\config\elam
2015-07-08 04:41 - 2015-07-08 06:03 - 00000000 ____D C:\Program Files (x86)\Evernote Web Clipper
2015-07-08 04:38 - 2015-07-08 08:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-07-08 04:38 - 2015-07-08 04:38 - 00000404 _____ C:\Windows\Tasks\JustWrite.job
2015-07-06 03:58 - 2015-07-06 03:58 - 42729104 _____ C:\Windows\system32\nvcompiler.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 37748880 _____ C:\Windows\SysWOW64\nvcompiler.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 30481552 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 22947144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 16145200 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 15866992 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 15224784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 14497520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 13263056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 11831856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 11011216 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-07-06 03:58 - 2015-07-06 03:58 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 02599752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01898128 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435330.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435330.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01060168 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 01050768 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00982672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00975176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00938752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00176904 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00155280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00150832 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-07-06 03:58 - 2015-07-06 03:58 - 00030966 _____ C:\Windows\system32\nvinfo.pb
2015-07-06 03:58 - 2015-07-06 03:58 - 00000000 ____D C:\Windows\system32\DAX2
2015-07-06 03:55 - 2015-07-06 03:55 - 12996528 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO3064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 05708736 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICV2apo.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 04496600 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2015-07-06 03:55 - 2015-07-06 03:55 - 03234520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 03195416 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 03157796 _____ C:\Windows\system32\Drivers\rtkSSTsetting.dat
2015-07-06 03:55 - 2015-07-06 03:55 - 03129672 _____ (Intel Corporation) C:\Windows\system32\IntelSSTAPO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02930904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02862488 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2015-07-06 03:55 - 2015-07-06 03:55 - 02702040 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2015-07-06 03:55 - 2015-07-06 03:55 - 02585816 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RltkAPO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02461016 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv211.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 02393432 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOv201.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01748184 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01576976 _____ (Conexant Systems Inc.) C:\Windows\system32\CX64APO.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01374640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO6064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01192368 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 01145264 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00980400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00944984 _____ (Dolby Laboratories) C:\Windows\system32\DolbyDAX2APOProp.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00728392 _____ (Intel Corporation) C:\Windows\system32\IntelSstCApoPropPage.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00349528 _____ (Dolby Laboratories) C:\Windows\system32\HiFiDAX2API.dll
2015-07-06 03:55 - 2015-07-06 03:55 - 00166616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2015-06-30 18:46 - 2015-06-30 18:47 - 52701004 _____ C:\Users\Adminxx\Downloads\Seven Lions with Myon & Shane 54 ft. Tove Lo - Strangers (The Eden Project Remix).mp4
2015-06-30 18:46 - 2015-06-30 18:47 - 05263042 _____ C:\Users\Adminxx\Downloads\videoplayback.m4a
2015-06-30 16:37 - 2015-06-30 16:40 - 00735295 _____ C:\Users\Adminxx\Downloads\CoreTemp_106.zip
2015-06-30 14:47 - 2015-06-30 14:47 - 00000000 ____D C:\Users\Adminxx\Documents\Adobe
2015-06-30 14:40 - 2015-06-30 14:40 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\PDAppFlex
2015-06-27 16:25 - 2015-06-27 16:31 - 564744309 _____ C:\Users\Adminxx\Downloads\Windows6.1-KB947821-v34-x64.msu
2015-06-25 22:01 - 2015-06-25 22:01 - 00042020 _____ C:\Users\Adminxx\Downloads\Franksouza183-Fs-Places-folder-black.icns
2015-06-25 22:00 - 2015-06-25 22:00 - 00058989 _____ C:\Users\Adminxx\Downloads\Draseart-Dumper-PokeBall.icns
2015-06-25 21:41 - 2015-05-22 18:47 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-25 21:41 - 2015-05-22 18:47 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-25 21:41 - 2015-05-22 18:42 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-25 21:41 - 2015-05-21 15:12 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-25 21:35 - 2015-07-25 20:27 - 00633582 _____ C:\Windows\WindowsUpdate.log
2015-06-25 21:32 - 2015-06-25 21:32 - 00461353 _____ C:\Users\Adminxx\Downloads\___rainmeter_lockscreen____by_aidendrew-d8nbaht.rmskin
2015-06-25 21:30 - 2015-06-25 21:30 - 00032291 _____ C:\Users\Adminxx\Downloads\isteve___1_by_emilniemi-d8ok2dl.rmskin
2015-06-25 21:30 - 2015-06-25 21:30 - 00024058 _____ C:\Users\Adminxx\Downloads\fountain_of_colors__music_visualizer___rainmeter__by_alatsombath-d8kxplv.rmskin
2015-06-25 21:27 - 2015-06-25 21:27 - 05440992 _____ C:\Users\Adminxx\Downloads\drizzle_v1_0_by_fadeoffset-d8y6dqn.rmskin
2015-06-25 21:27 - 2015-06-25 21:27 - 00090906 _____ C:\Users\Adminxx\Downloads\radialclock_1_02_by_pvoijen-d8wzdmz.rmskin
2015-06-25 21:23 - 2015-06-25 21:23 - 00008997 _____ C:\Users\Adminxx\Downloads\Citrus_1.5.rmskin
2015-06-25 21:18 - 2015-06-25 21:18 - 01219088 _____ C:\Users\Adminxx\Downloads\Metropolis_1.0.rmskin
2015-06-25 21:01 - 2015-06-25 21:01 - 02335944 _____ C:\Users\Adminxx\Downloads\Rainmeter-3.3-r2416-beta (1).exe
2015-06-25 21:01 - 2015-06-25 21:01 - 00001706 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainmeter.lnk
2015-06-25 21:01 - 2015-06-25 21:01 - 00000000 ____D C:\Program Files\Rainmeter
2015-06-25 20:59 - 2015-06-25 20:59 - 00090435 _____ C:\Users\Adminxx\Downloads\Blue_Visualization_2.0.rmskin
2015-06-25 20:57 - 2015-06-25 20:57 - 00146725 _____ C:\Users\Adminxx\Downloads\Gray_.rmskin
2015-06-25 20:37 - 2015-06-25 20:37 - 00000000 ____D C:\Rainmeter
2015-06-25 20:36 - 2015-06-25 20:36 - 02335944 _____ C:\Users\Adminxx\Downloads\Rainmeter-3.3-r2416-beta.exe

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-07-25 20:34 - 2014-12-11 02:45 - 00000000 ____D C:\FRST
2015-07-25 20:29 - 2014-12-12 22:02 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Skype
2015-07-25 20:28 - 2014-12-12 19:29 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-07-25 20:27 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-25 20:17 - 2015-03-16 18:50 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\IObit
2015-07-25 20:17 - 2014-04-27 16:09 - 00000000 ____D C:\ProgramData\IObit
2015-07-25 20:17 - 2014-04-27 16:09 - 00000000 ____D C:\Program Files (x86)\IObit
2015-07-25 20:17 - 2014-04-26 20:10 - 00000000 ____D C:\Users\Adminxx
2015-07-25 20:09 - 2014-10-17 17:38 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-25 07:38 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-25 07:38 - 2009-07-14 06:45 - 00020512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-24 16:37 - 2014-11-20 05:50 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-07-24 15:36 - 2014-06-23 19:58 - 00000000 ____D C:\Program Files (x86)\Adobe
2015-07-24 15:35 - 2015-03-16 20:58 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Adobe
2015-07-24 15:35 - 2014-06-23 20:00 - 00000000 ____D C:\ProgramData\Adobe
2015-07-24 15:33 - 2014-06-23 20:29 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-07-23 15:26 - 2015-01-04 13:59 - 00000000 ____D C:\Users\Public\Documents\Blizzard Entertainment
2015-07-23 00:44 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-21 19:14 - 2014-05-30 12:23 - 56094720 _____ C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00282624 _____ C:\Windows\system32\config\DEFAULT.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00028672 _____ C:\Windows\system32\config\SAM.iodefrag.bak
2015-07-21 19:14 - 2014-05-30 12:23 - 00024576 _____ C:\Windows\system32\config\SECURITY.iodefrag.bak
2015-07-20 03:33 - 2015-06-08 15:26 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-07-20 03:33 - 2014-06-23 19:54 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Adobe
2015-07-20 02:34 - 2014-12-27 15:54 - 00003134 _____ C:\Windows\System32\Tasks\{386CB472-0168-45D8-97E3-6ACAA83DEFB4}
2015-07-20 01:54 - 2014-12-19 13:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 8
2015-07-19 02:09 - 2014-10-17 17:38 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-19 02:09 - 2014-10-17 17:38 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-19 02:09 - 2014-10-17 17:38 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-12 15:52 - 2014-04-29 19:35 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-07-12 15:52 - 2014-04-29 19:35 - 00000000 ____D C:\ProgramData\Skype
2015-07-09 04:02 - 2014-05-09 22:58 - 00000000 ____D C:\Users\Adminxx\Documents\LOLReplay
2015-07-09 03:54 - 2014-11-27 05:34 - 00000000 ____D C:\Program Files (x86)\LOLReplay
2015-07-09 03:54 - 2014-05-09 22:58 - 00001913 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
2015-07-08 08:40 - 2014-12-17 05:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-07-07 09:40 - 2014-07-06 06:08 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Battle.net
2015-07-07 09:28 - 2014-07-06 06:08 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-07-06 04:02 - 2014-04-27 21:23 - 00000000 ____D C:\ProgramData\NVIDIA
2015-07-06 04:01 - 2014-04-27 21:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-07-06 04:01 - 2014-04-27 21:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-07-06 03:58 - 2015-05-19 23:58 - 01099992 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 17724600 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 12855416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-07-06 03:58 - 2014-05-29 19:25 - 02997544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-07-06 03:58 - 2014-04-27 21:21 - 03395648 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-07-06 03:57 - 2014-04-27 22:33 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
2015-07-03 05:16 - 2014-04-29 19:48 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-03 00:14 - 2014-04-26 21:01 - 00000000 ____D C:\Windows\Minidump
2015-06-30 14:48 - 2014-06-23 20:44 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-06-29 15:37 - 2014-04-27 16:10 - 00064024 _____ C:\Users\Adminxx\AppData\Local\GDIPFONTCACHEV1.DAT
2015-06-29 15:36 - 2009-07-14 06:45 - 04959608 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-29 03:13 - 2014-04-29 19:46 - 00000000 ____D C:\ProgramData\Package Cache
2015-06-28 22:40 - 2014-05-10 18:49 - 00000000 ____D C:\Users\Adminxx\AppData\Local\Spotify
2015-06-28 22:37 - 2015-05-01 09:29 - 00000000 ____D C:\Users\Adminxx\AppData\Roaming\Spotify
2015-06-28 13:54 - 2015-06-14 18:39 - 00000000 ___RD C:\Users\Adminxx\Desktop\Pokemon
2015-06-26 02:17 - 2015-04-15 12:49 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-26 02:17 - 2015-04-15 12:49 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-25 21:46 - 2014-04-27 16:27 - 00000000 ____D C:\Windows\system32\MRT
2015-06-25 21:41 - 2014-04-27 16:27 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-04-22 23:12 - 2015-04-22 23:12 - 0001951 _____ () C:\Users\Adminxx\AppData\Local\recently-used.xbel
2014-11-20 05:41 - 2014-11-20 05:41 - 0007601 _____ () C:\Users\Adminxx\AppData\Local\Resmon.ResmonCfg
2014-12-05 01:54 - 2014-12-05 01:54 - 0000003 _____ () C:\Users\Adminxx\AppData\Local\updater.log
2014-12-05 01:54 - 2015-04-24 00:04 - 0000424 _____ () C:\Users\Adminxx\AppData\Local\UserProducts.xml
2014-04-27 22:33 - 2014-04-27 22:33 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Adminxx\AppData\Local\Temp\Quarantine.exe
C:\Users\Adminxx\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Adminxx\AppData\Local\Temp\sfareca00001.dll
C:\Users\Adminxx\AppData\Local\Temp\sfextra.dll
C:\Users\Adminxx\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\System32\winlogon.exe => Datei ist digital signiert
C:\Windows\System32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\System32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\System32\services.exe => Datei ist digital signiert
C:\Windows\System32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\System32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\System32\rpcss.dll => Datei ist digital signiert
C:\Windows\System32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-07-24 09:49

==================== Ende von log ============================

Addition Log wurde nicht erstellt

JRT Log

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.1 (07.16.2015:1)
OS: Windows 7 Professional x64
Ran by Adminxx on 25.07.2015 at 20:16:29,34
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks

Successfully deleted: [Task] C:\Windows\system32\tasks\Driver Booster Scan
Successfully deleted: [Task] C:\Windows\system32\tasks\Driver Booster SkipUAC (Adminxx)
Successfully deleted: [Task] C:\Windows\system32\tasks\Driver Booster Update
Successfully deleted: [Task] C:\Windows\system32\tasks\Uninstaller_SkipUac_Administrator
Successfully deleted: [Task] C:\Windows\system32\tasks\Uninstaller_SkipUac_Adminxx
Successfully deleted: [Task] C:\Windows\system32\tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000
Successfully deleted: [Task] C:\Windows\system32\tasks\update-sys
Successfully deleted: [Task] C:\Windows\Tasks\update-S-1-5-21-877811456-2021815861-1849052563-1000.job
Successfully deleted: [Task] C:\Windows\Tasks\update-sys.job



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{AF7B4F14-EF87-4A15-965D-35B2700A866D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF7B4F14-EF87-4A15-965D-35B2700A866D}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{A68EF7BE-20B0-4CAC-95E9-9442EDC46BBC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{AF7B4F14-EF87-4A15-965D-35B2700A866D}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}



~~~ Files

Successfully deleted: [File] C:\Users\Adminxx\Appdata\Local\google\chrome\user data\default\local storage\chrome-extension_coljhboelhlkbgaaolcngflenaggpeao_0.localstorage
Successfully deleted: [File] C:\Users\Adminxx\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\startfenster.lnk
Successfully deleted: [File] C:\Users\Adminxx\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\startfenster.lnk
Successfully deleted: [File] C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Start Menu\startfenster.lnk



~~~ Folders

Successfully deleted: [Folder] C:\Program Files (x86)\bestadblocker
Successfully deleted: [Folder] C:\Program Files (x86)\CutThePrIIce
Successfully deleted: [Folder] C:\Program Files (x86)\IObit\Driver Booster
Successfully deleted: [Folder] C:\Program Files (x86)\mail.ru
Successfully deleted: [Folder] C:\Program Files (x86)\Obnovi Soft
Successfully deleted: [Folder] C:\Program Files (x86)\olbpre
Successfully deleted: [Folder] C:\ProgramData\IObit\Driver Booster
Successfully deleted: [Folder] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\driver booster 2
Successfully deleted: [Folder] C:\ProgramData\productdata
Successfully deleted: [Folder] C:\Users\Adminxx\Appdata\Local\crashrpt
Successfully deleted: [Folder] C:\Users\Adminxx\Appdata\Local\mail.ru
Successfully deleted: [Folder] C:\Users\Adminxx\Appdata\Local\stormfall
Successfully deleted: [Folder] C:\Users\Adminxx\AppData\Roaming\dvdvideosoftiehelpers
Successfully deleted: [Folder] C:\Users\Adminxx\AppData\Roaming\IObit\Driver Booster
Successfully deleted: [Folder] C:\Users\Adminxx\AppData\Roaming\productdata
Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin
Successfully deleted: [Folder] C:\ProgramData\10033927629175197721



~~~ FireFox

Successfully deleted: [File] C:\Users\Adminxx\AppData\Roaming\mozilla\firefox\profiles\en1xp5t0.default\user.js
Successfully deleted: [File] C:\Users\Adminxx\AppData\Roaming\mozilla\firefox\profiles\en1xp5t0.default\extensions\{b64d9b05-48e1-4ceb-bf58-e0643994e900}.xpi
Successfully deleted: [Folder] C:\Users\Adminxx\AppData\Roaming\mozilla\firefox\profiles\en1xp5t0.default\extensions\iobitascsurfingprotection@iobit.com
Successfully deleted the following from C:\Users\Adminxx\AppData\Roaming\mozilla\firefox\profiles\en1xp5t0.default\prefs.js

user_pref(extensions.xpiState, {\app-profile\:{\5Sc8@Q.org\:{\d\:\C:\\\\Users\\\\Adminxx\\\\AppData\\\\Roaming\\\\Mozilla\\\\Firefox\\\\Profiles\\\\en1xp5t0.default\
Emptied folder: C:\Users\Adminxx\AppData\Roaming\mozilla\firefox\profiles\en1xp5t0.default\minidumps [28 files]



~~~ Chrome


[C:\Users\Adminxx\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\Adminxx\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\Adminxx\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\Adminxx\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 25.07.2015 at 20:21:44,59
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

cosinus · 25.07.2015, 19:52

Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Scan klicken.

Kekz. · 25.07.2015, 19:55

Addition Log

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:25-07-2015
durchgeführt von Adminxx an 2015-07-25 20:54:00
Gestartet von C:\Users\Adminxx\Downloads
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-877811456-2021815861-1849052563-500 - Administrator - Disabled)
Adminxx (S-1-5-21-877811456-2021815861-1849052563-1000 - Administrator - Enabled) => C:\Users\Adminxx
Gast (S-1-5-21-877811456-2021815861-1849052563-501 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.3.0 - IObit)
Akamai NetSession Interface (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Auto Keyboard v1.6 (HKLM-x32\...\{71E16EE4-BBED-44A8-8724-9E68D05EE945}_is1) (Version: 1.6 - MurGee.com)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.05 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Driver Booster 2.3 (HKLM-x32\...\Driver Booster_is1) (Version: 2.3 - IObit)
Druckerdeinstallation für EPSON SX430 Series (HKLM\...\EPSON SX430 Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EVEREST Ultimate Edition v5.50 (HKLM-x32\...\EVEREST Ultimate Edition_is1) (Version: 5.50 - Lavalys, Inc.)
Fiesta Online DE (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\fiestaonline_de) (Version: 1.0.0.1 - Gamigo Games)
Free YouTube to MP3 Converter version 3.12.59.525 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.525 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Happy Cloud Client (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\HappyCloud) (Version: 5.24 - Happy Cloud, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
HexChat (HKLM\...\HexChat_is1) (Version: 2.10.2 - HexChat)
IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.5 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.3.0.5 - IObit)
Java 7 Update 72 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217072FF}) (Version: 7.0.720 - Oracle)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Java SE Development Kit 8 Update 25 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180250}) (Version: 8.0.250.18 - Oracle Corporation)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{8ED07EBD-22AD-415A-B71E-C1AD86862C2E}) (Version: 15.0.1.415 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.1.415 - Kaspersky Lab) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lightshot-5.2.1.1 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.2.1.1 - Skillbrains)
Logitech G930 (HKLM\...\{91C4D79C-3579-48E8-ADFA-8818042AEB73}) (Version: 1.0.364 - Logitech)
LOLReplay (HKLM-x32\...\LOLReplay) (Version: 0.8.9.37 - www.leaguereplays.com)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 39.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 39.0 (x86 de)) (Version: 39.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 34.0.5 - Mozilla)
MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
MSI Kombustor 2.5.0 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version:  - MSI Co., LTD)
MTA:SA v1.3.5 (HKLM-x32\...\MTA:SA 1.3) (Version: v1.3.5 - Multi Theft Auto)
MTA:SA v1.4.0 (HKLM-x32\...\MTA:SA 1.4) (Version: v1.4.0 - Multi Theft Auto)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.18.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.18.0 - NEC Electronics Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.3 beta r2416 - )
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.51 - Piriform)
Sandboxie 4.14 (64-bit) (HKLM\...\Sandboxie) (Version: 4.14 - Sandboxie Holdings, LLC)
Scordalus Setup Version 1.0 (HKLM-x32\...\{870A82F3-865A-43AE-9E64-77F85CB0FFE9}_is1) (Version: 1.0 - Scordalus Network)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Shutdown Manager (HKLM-x32\...\{C457BA5F-35F9-480C-90F8-5C91DB443A15}_is1) (Version: 2.0.7 - Daniel Höllig)
SIW 2013 Home Edition (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2013.05.14 - Topala Software Solutions)
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Smart Defrag 4 (HKLM-x32\...\Smart Defrag 4_is1) (Version: 4.1 - IObit)
Smart Technology Programming Software 7.0.27.13 (HKLM\...\{C9193CBB-C31A-412A-A074-AD08F0F2CF3D}) (Version: 7.0.27.13 - Mad Catz)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Spotify (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\Spotify) (Version: 1.0.4.90.g0b6df40b - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit)
System Requirements Lab CYRI (HKLM-x32\...\{6C8C4577-8E15-4C63-96ED-D40F2072FF74}) (Version: 6.0.19.0 - Husdawg, LLC)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)
TP-LINK Wireless Utility (HKLM-x32\...\{6FFEF5E1-F7B0-40DD-838D-557BD7EE4301}) (Version: 1.5.6.0 - TP-LINK)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Wireshark 1.12.2 (64-bit) (HKLM-x32\...\Wireshark) (Version: 1.12.2 - The Wireshark developer community, hxxp://www.wireshark.org)
Yahoo Community Smartbar Engine (HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\{79a1ec54-8fe4-4517-be9e-1122e2792dec}) (Version: 11.38.66.16134 - Linkury Inc.) <==== ATTENTION
Zune (HKLM\...\Zune) (Version: 04.08.2345.00 - Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-877811456-2021815861-1849052563-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

==================== Wiederherstellungspunkte =========================

24-07-2015 09:56:16 Geplanter Prüfpunkt
25-07-2015 20:16:32 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2014-12-06 06:21 - 00000959 __RAH C:\Windows\system32\Drivers\etc\hosts
0.0.0.0 host.sandboxie.com
0.0.0.0 host2.sandboxie.com
0.0.0.0 host3.sandboxie.com
0.0.0.0 host4.sandboxie.com


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {13829D37-79A7-443C-BFFD-D9DB14748168} - System32\Tasks\{364F549A-CA2E-4D8B-BCAD-B388B6719CFA} => pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {20006C6A-A99B-40EC-BE9C-77070A943DC3} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-06-10] (IObit)
Task: {36425D32-A9FB-4705-A816-B85AD8522AC3} - System32\Tasks\SmartDefrag4_Update => C:\Program Files (x86)\IObit\Smart Defrag 4\AutoUpdate.exe [2015-03-03] (IObit)
Task: {49177CC2-00BC-418A-B152-E9ACD7C70ADE} - System32\Tasks\ASC8_SkipUac_Adminxx => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-06-16] (IObit)
Task: {62CB6F46-B940-44A8-8132-69EEE3C0C59B} - System32\Tasks\{6FA0550B-BA83-4446-A73D-FD7B6EB604B0} => C:\Users\Adminxx\Desktop\Vicinity Online\VicinityLauncher.exe
Task: {67164103-B51E-4545-978F-8CAEE754BC4E} - System32\Tasks\{A9A292A1-85C6-41E2-9D5A-AD2B3D8628EC} => pcalua.exe -a "C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\Uninstall.exe"
Task: {9A880C69-2884-4351-8CE6-D326090395C3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-19] (Adobe Systems Incorporated)
Task: {C6CF2936-D030-4162-8E31-56BFDDE9D6E4} - System32\Tasks\{386CB472-0168-45D8-97E3-6ACAA83DEFB4} => pcalua.exe -a C:\Users\Adminxx\Downloads\NetFx64.exe -d C:\Users\Adminxx\Downloads
Task: {D2718CB9-C3F5-4E96-921A-A58713D9A874} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-04-23] (Piriform Ltd)
Task: {D82E79F4-9A50-4258-9283-8BA94E09A812} - System32\Tasks\{7776A7EB-3B1D-4BDA-B1FC-7D5C81511218} => C:\Users\Adminxx\Desktop\Vicinity Online\VicinityLauncher.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\JustWrite.job => c:\programdata\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}\alexamilesakahaleyissoarx.exe-1436323086587.exe <==== ATTENTION

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-04-27 21:22 - 2015-06-17 08:48 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-31 14:00 - 2015-05-31 14:00 - 00036544 _____ () C:\Program Files\Rainmeter\Rainmeter.exe
2015-05-31 14:00 - 2015-05-31 14:00 - 00781504 _____ () C:\Program Files\Rainmeter\Rainmeter.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00011776 _____ () C:\Program Files\Rainmeter\Plugins\PowerPlugin.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00058368 _____ () C:\Program Files\Rainmeter\Plugins\WebParser.dll
2015-05-31 13:59 - 2015-05-31 13:59 - 00033792 _____ () C:\Program Files\Rainmeter\Plugins\AudioLevel.DLL
2014-12-19 13:04 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 8\sqlite3.dll
2014-08-30 18:12 - 2014-08-30 18:12 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\kpcengine.2.3.dll
2015-07-08 06:21 - 2015-07-08 06:21 - 00424448 _____ () C:\Program Files (x86)\LOLReplay\LOLUtils.dll
2014-11-19 13:53 - 2013-01-15 19:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madExcept_.bpl
2014-11-19 13:53 - 2013-01-15 19:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madBasic_.bpl
2014-11-19 13:53 - 2013-01-15 19:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\madDisAsm_.bpl
2014-11-19 13:53 - 2013-12-12 19:46 - 08001344 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\WebUI.dll
2014-11-19 13:53 - 2013-05-16 20:26 - 00182080 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\unrar.dll
2014-11-19 13:53 - 2013-10-16 23:17 - 00185168 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\libcurl-4.dll
2014-11-19 13:53 - 2013-05-16 20:26 - 00145216 _____ () C:\Program Files (x86)\IObit\IObit Malware Fighter\zlibwapi.dll
2015-04-14 23:15 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2014-12-19 13:04 - 2013-01-15 18:48 - 00348992 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2014-12-19 13:04 - 2013-01-15 18:48 - 00183616 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2014-12-19 13:04 - 2013-01-15 18:48 - 00051008 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
2015-07-07 19:40 - 2015-07-07 05:49 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll
2015-07-07 19:40 - 2015-07-07 05:49 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\Users\Adminxx\Anwendungsdaten:NT
AlternateDataStreams: C:\Users\Adminxx\Anwendungsdaten:NT2
AlternateDataStreams: C:\Users\Adminxx\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Adminxx\AppData\Roaming:NT2
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. The "AlternateShell" value will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer trusted/restricted ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-877811456-2021815861-1849052563-1000\...\100sexlinks.com -> 100sexlinks.com

Da befinden sich 4788 mehr eingeschränkte Seiten.

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-877811456-2021815861-1849052563-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Adminxx\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TP-LINK Wireless Utility.lnk => C:\Windows\pss\TP-LINK Wireless Utility.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Adminxx^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Curse.lnk => C:\Windows\pss\Curse.lnk.Startup
MSCONFIG\startupreg: Adobe Creative Cloud => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" --showwindow=false --onOSstartup=true
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: Advanced SystemCare 7 => 
MSCONFIG\startupreg: APSDaemon => 
MSCONFIG\startupreg: Browser Infrastructure Helper => 
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: EvolveClient => 
MSCONFIG\startupreg: IObit Malware Fighter => "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart
MSCONFIG\startupreg: MurGee.com Auto Keyboard => C:\ProgramData\Auto Keyboard\AutoKeyboard.exe :silent
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
MSCONFIG\startupreg: puush => 
MSCONFIG\startupreg: QuickTime Task => 
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: Spotify => 
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Adminxx\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: Zune Launcher => "C:\Program Files\Zune\ZuneLauncher.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{888FC972-2F45-4974-B011-2A5BAF6A47E7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{5887CDF1-C533-4687-ADA1-4C2D05A2F617}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{0FAD3BC9-E2EB-4FB9-88CF-53A8A529802F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{A0FBA2AE-182E-4BF0-BFA1-991AFD743974}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{ABA8C8E1-6771-4CF8-80E6-FD1309A7F24E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0DDB10F9-4020-4707-B178-2757975AA16E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{E9569CD6-C259-44EB-A20B-91A82E36B3CA}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{7C13CB8B-BDF3-462C-9D2A-14795A78E974}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{D33443EA-9983-4990-8708-87ACB93EDD9E}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{8D571B72-CD50-4538-A3B5-CB67DE752D38}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{6CD58CA9-1084-4681-9B0A-F0962C5B38E0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{CC64DB76-EA15-406B-AE3C-6D29A5303416}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6BD50363-3232-4487-BC10-5518154754AA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{E92E636F-6D22-44B9-89F6-BADE1BD67B9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{CA91E12C-3D2F-4A47-AE18-B729839F178E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{D0BF7B70-AE87-4A51-B865-66173B2F28B1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{3BFE2313-300C-40CD-ACA9-24E43C3F6681}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{ED57C8B9-616D-463B-9171-E284FA1529DD}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FC37E0DC-FADC-4494-ABAA-416E85483D02}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D388CBE9-09FE-4356-B921-9EB0295EE627}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CF0200C2-DA03-4749-A4E4-62AC5A24E43D}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{720FE1E0-F8A0-4B6D-9310-E3D5CDEBABEB}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D75295B4-DA8B-4079-99AC-B9B9A8881994}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{A7040605-37D3-424F-8100-9A75AEC4A9D9}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{9CBCE74B-7ADC-447D-8E8F-76B3F67AD05B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7497CDF4-B924-4780-968F-9D2E9C7C1D77}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{B4051526-1A9C-4E32-98D1-442DE5853017}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{C5DB0057-5A5E-4D99-9399-CE850E5521D5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{917219B2-7DB2-4655-A292-DC626F0F150A}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{F3CA7A40-ED25-4AB7-8A4A-4ECB0B1E13E5}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{145D516D-9FAF-4B48-95C0-9E42322B4C99}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{0C1E7CD5-63E7-4F10-B791-B66893092D61}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [TCP Query User{399320A3-E702-45D7-B9B5-0F6443B0694A}C:\users\adminxx\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\adminxx\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{DAB9CB42-4631-4DB0-9545-C6D23148B54B}C:\users\adminxx\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\adminxx\appdata\local\akamai\netsession_win.exe
FirewallRules: [{290EAC14-3629-42C5-B893-D365FCE129EB}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{EC58FE13-0AD0-43E6-A6BD-9F4BAAE48B31}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{54421C57-A574-4BC7-B13D-FD8279460782}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{0AF3498E-B2CE-425D-9F23-0BE682E84C1B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{C9E50E22-3B25-48F0-8D65-9DA21E5DAAF6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{88CE7845-0314-456B-A1E6-FBA21E271C49}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{DEF96DF8-26EB-45B9-B061-3E6374B1E97B}C:\users\adminxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adminxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{74EAF886-C054-455F-AD38-25FB68CC06BE}C:\users\adminxx\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adminxx\appdata\roaming\spotify\spotify.exe
FirewallRules: [{601ECCFB-1896-4029-820B-7E7C1798B629}] => (Allow) %ProgramFiles%\Zune\Zune.exe
FirewallRules: [{024EF658-720F-4B6A-8D9D-F228A6198C0D}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{962139BA-D304-4C20-930F-FBFD368F9F05}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{FC4E485B-0B14-47F0-85B3-D3D0EC1B986A}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{2C5FFC94-1B6C-45C5-8ADC-8CDFDEEBA8D5}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{344FFD4B-3FA3-48BD-A7B0-047B1EAD5023}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{17B408A0-3115-4E88-A9BA-EA5162EA3C46}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{C9D5782D-2902-4CB6-9D39-8D28C7EA5A61}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{E389075A-9E1F-4F1F-83CF-BCD0C25DD6B7}] => (Allow) %ProgramFiles%\Zune\ZuneNSS.exe
FirewallRules: [{6B810E55-FB5A-41A3-9430-11DB0F64B5E0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Programmable Root Enumerator
Description: Programming Support
Class Guid: {678dcf40-e2e6-11d5-8cd5-e960089ea00a}
Manufacturer: Mad Catz
Service: SaiNtBus
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Microsoft-ISATAP-Adapter
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (07/25/2015 08:16:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (07/25/2015 07:30:41 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)

Error: (07/25/2015 07:30:41 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: Vom Suchdienst wurden beschädigte Datendateien im Index {id=2418} erkannt. Vom Dienst wird versucht, dieses Problem durch Neuerstellung des Indexes automatisch zu beheben.


Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)

Error: (07/24/2015 09:56:17 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (07/24/2015 09:56:16 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".


Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.
.

Error: (07/19/2015 04:52:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000b8554
ID des fehlerhaften Prozesses: 0x738
Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0
Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1
Pfad des fehlerhaften Moduls: rads_user_kernel.exe2
Berichtskennung: rads_user_kernel.exe3

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD initialization failed [6]).

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]).

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: An error has occurred (NvVAD endpoint registration failed [0]).

Error: (07/14/2015 01:49:02 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig


Systemfehler:
=============
Error: (07/25/2015 08:27:12 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: 
%%1056

Error: (07/25/2015 08:26:42 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/25/2015 08:26:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/25/2015 08:26:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/25/2015 08:17:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Network Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/25/2015 08:17:10 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/25/2015 08:17:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "IMF Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/25/2015 08:17:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/25/2015 08:17:09 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Advanced SystemCare Service 8" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/25/2015 04:42:15 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.


Microsoft Office:
=========================
Error: (07/25/2015 08:16:32 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.

Error: (07/25/2015 07:30:41 AM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)
The catalog is corrupt

Error: (07/25/2015 07:30:41 AM) (Source: Windows Search Service) (EventID: 7040) (User: )
Description: 
Details:
	Der Inhaltsindexkatalog ist fehlerhaft.   0xc0041801 (0xc0041801)
2418

Error: (07/24/2015 09:56:17 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.

Error: (07/24/2015 09:56:16 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: 
Details:
AddCoreCsiFiles : GetNextFileMapContent() failed.

System Error:
Falscher Parameter.

Error: (07/19/2015 04:52:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b855473801d0c2328272f80eC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exec1ae0044-2e25-11e5-b6e1-8c89a569b94b

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (07/19/2015 04:43:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (07/14/2015 01:49:02 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: )
Description: Das Handle ist ungültig


CodeIntegrity Fehler:
===================================
  Date: 2015-07-25 10:32:46.997
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-25 10:32:46.996
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-25 10:32:46.995
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-25 10:32:46.943
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-24 23:48:27.901
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-24 23:48:27.898
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 01:10:30.626
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 01:10:30.623
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.1\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 00:42:55.613
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-07-20 00:42:55.599
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Processor: AMD Phenom(tm) II X4 955 Processor
Percentage of memory in use: 37%
Total physical RAM: 8191.18 MB
Available physical RAM: 5097.86 MB
Total Virtual: 16380.5 MB
Available Virtual: 12560.74 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:683.5 GB) (Free:526.59 GB) NTFS
Drive e: (Backup) (Fixed) (Total:247.92 GB) (Free:247.81 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 968D461D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=683.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=247.9 GB) - (Type=07 NTFS)

==================== Ende von log ============================

cosinus · 25.07.2015, 20:08

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

GroupPolicyScripts: Gruppenrichtline erkannt <======= ATTENTION
GroupPolicyScripts\User: Gruppenrichtline erkannt <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ATTENTION
Task: C:\Windows\Tasks\JustWrite.job => c:\programdata\{9a3ed56b-4740-7927-9a3e-ed56b47455ad}\alexamilesakahaleyissoarx.exe-1436323086587.exe <==== ATTENTION
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

24.07.2015, 14:25	#6
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows 7 100% CPU Auslastung Alles deinstallieren. Und alle Cracks löschen. Danach neue FRST-Logs. __________________ --> Windows 7 100% CPU Auslastung

25.07.2015, 19:52	#13
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows 7 100% CPU Auslastung Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Scan klicken. __________________ Logfiles bitte immer in CODE-Tags posten

Windows 7 100% CPU Auslastung

Plagegeister aller Art und deren Bekämpfung: Windows 7 100% CPU Auslastung