Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: chrome: ständig neue tabs und meldungen von reimage

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Alt 13.09.2016, 20:22   #1
bohm
 
chrome: ständig neue tabs und meldungen von reimage - Standard

chrome: ständig neue tabs und meldungen von reimage



Hallo.

Habe nun zum zweiten mal das Problem das sich ständig neue Tabs in Chrome öffnen und da Werbung oder eine meldung von Reimage kommt.

Habe schon mal FRST durchlaufen lassen!

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-09-2016
durchgeführt von Alex (Administrator) auf PEACHY (13-09-2016 21:12:52)
Gestartet von C:\Users\Alex\Downloads
Geladene Profile: Alex (Verfügbare Profile: Alex & Administrator & DefaultAppPool)
Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [XMouseButtonControl] => C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1075344 2014-12-08] (Highresolution Enterprises)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1860120 2016-01-12] (NVIDIA Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [CmPCIaudio] => C:\WINDOWS\Syswow64\CMICNFG3.dll [8151040 2009-10-30] (C-Media Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: ["C:\Program Files (x86)\D-Link\D-ViewCam\MainConsole.EXE"] => "C:\Program Files (x86)\D-Link\D-ViewCam\MainConsole.EXE" RunWithWindows
HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-08-24] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation)
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [EPSON SX125 Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [World of Tanks] => D:\Spiele\World_of_Tanks\WargamingGameUpdater.exe [3134728 2016-08-05] (Wargaming.net)
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [TomTomHOME.exe] => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: H - "H:\AutoRun.exe" 
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: {0f748fbf-2152-11e5-8233-50465d90560b} - "N:\setup.exe" 
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: {75d42f49-1b0e-11e5-ac3c-50465d90560b} - "G:\setup.exe" 
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: {94b3fc27-1c9b-11e5-ac5a-50465d90560b} - "H:\setup.exe" 
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: {e3802153-18aa-11e5-ab60-50465d90560b} - "N:\setup.exe" 
GroupPolicy: Beschränkung - Chrome <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2a94d664-f07c-4e02-a516-4e233f0db8d2}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{faa03109-abab-40bf-9edb-fcd71145efd5}: [DhcpNameServer] 192.168.224.1
ManualProxies: 

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-07] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-07] (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2014-08-12] (Adblock Plus)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-07] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-07] (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2014-08-12] (Adblock Plus)
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\system32\mscoree.dll [2015-10-30] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\n4plk0l5.Alex
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-07] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-09-19] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-04-17] (Adobe Systems, Inc.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Keine Datei]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Keine Datei]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Keine Datei]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Keine Datei]
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-07] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-01-23] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-01-23] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin HKU\S-1-5-21-2927967124-101175508-2003510897-1000: @my.com/Games -> C:\Users\Alex\AppData\Local\MyComGames\NPMyComDetector.dll [2016-02-03] (MY.COM B.V.)
FF Plugin HKU\S-1-5-21-2927967124-101175508-2003510897-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Alex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-12] (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\n4plk0l5.Alex\searchplugins\ezcclg65.xml [2016-09-12]
FF Extension: (Firefox Hotfix) - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\n4plk0l5.Alex\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-10]
FF Extension: (Adblock Plus) - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\n4plk0l5.Alex\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-08-14]

Chrome: 
=======
CHR HomePage: ChromeDefaultData -> hxxp://www.google.de/
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-12]
CHR Extension: (Fast Social for Google Chrome™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\bkgibcbnbhhkelflcgappdalfbopghof [2016-09-12]
CHR Extension: (Avira Browserschutz) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-12]
CHR Extension: (AdBlock) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-09-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-12]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-12]
CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-07-26]
CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-26]
CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-26]
CHR Extension: (Fast Social for Google Chrome™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkgibcbnbhhkelflcgappdalfbopghof [2016-09-06]
CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-26]
CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-23]
CHR Extension: (Google Tabellen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-07-26]
CHR Extension: (Myinstants Soundboard) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fggacdedkdoacbemcilniodecinpfkgi [2016-08-30]
CHR Extension: (Avira Browserschutz) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-08]
CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-26]
CHR Extension: (AdBlock) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-24]
CHR Extension: (mydlink services plugin) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldibdoepbjbkkcbgndfljnphngpglhbb [2016-07-26]
CHR Extension: (Google Maps) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-07-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-26]
CHR Extension: (Mein Chrome-Design) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2016-07-26]
CHR Extension: (SEGA GENESIS / SEGA Mega Drive Emulator) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofnmgamcdbdieifheiiphnbbbcaofcbc [2016-07-26]
CHR Extension: (Emulador de Super Nintendo) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pffhngmcplldclknnkmkkecjlhhccmid [2016-07-26]
CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-26]
CHR Extension: (RHS) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkaifndebjpbndephomibbjjbnokmfab [2016-09-06]
CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-29]
CHR Extension: (Audio Cutter) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\plimnkafgoiilijmlbnfoafihjjijbfp [2016-09-08]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [346928 2016-08-24] (Avira Operations GmbH & Co. KG)
S2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [253392 2016-08-26] (Avira Operations GmbH & Co. KG)
R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [232208 2016-07-01] (EasyAntiCheat Ltd)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-12-03] (Freemake) [Datei ist nicht signiert]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-12] (NVIDIA Corporation)
S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 JoropygrosakDebuger; C:\Program Files (x86)\Prerpetaincliiph\clhBuilder.dll [301568 2016-09-12] () [Datei ist nicht signiert]
S4 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-01-12] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-01-12] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-12] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1310448 2016-09-07] (Overwolf LTD)
S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)
S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580144 2015-05-12] (WiseCleaner.com)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13368 2009-04-06] ()
R3 cmuda3; C:\Windows\system32\drivers\cmudax3.sys [1155072 2009-12-01] (C-Media Inc)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-06-22] (Disc Soft Ltd)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2015-11-04] (REALiX(tm))
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] ()
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-01-12] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
S3 Secdrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [20128 2016-01-15] () [Datei ist nicht signiert]
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.)
S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [14800 2015-07-31] (wisecleaner.com)
R1 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [12240 2015-05-19] (WiseCleaner.com)
U3 idsvc; kein ImagePath
S3 vmci; \SystemRoot\System32\drivers\vmci.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-13 21:12 - 2016-09-13 21:13 - 00023834 _____ C:\Users\Alex\Downloads\FRST.txt
2016-09-13 21:12 - 2016-09-13 21:12 - 02398720 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe
2016-09-13 21:12 - 2016-09-13 21:12 - 00000000 ____D C:\FRST
2016-09-13 21:10 - 2016-09-13 21:10 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Alex\Downloads\tdsskiller.exe
2016-09-13 21:04 - 2016-09-13 21:04 - 02870984 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe
2016-09-13 21:02 - 2016-09-13 21:02 - 00002296 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-09-13 21:02 - 2016-09-13 21:02 - 00002284 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-09-13 21:00 - 2016-09-13 21:05 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-13 21:00 - 2016-09-13 21:05 - 00001116 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-13 21:00 - 2016-09-13 21:00 - 01065376 _____ (Google Inc.) C:\Users\Alex\Downloads\ChromeSetup(1).exe
2016-09-13 21:00 - 2016-09-13 21:00 - 00004178 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-09-13 21:00 - 2016-09-13 21:00 - 00003946 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-09-13 20:58 - 2016-09-13 20:58 - 00152744 _____ C:\Users\Alex\Desktop\bookmarks.html
2016-09-13 20:47 - 2016-09-13 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2016-09-13 20:47 - 2016-09-13 20:47 - 00000000 ____D C:\Program Files\VS Revo Group
2016-09-13 20:14 - 2016-09-13 20:45 - 07093624 _____ (VS Revo Group ) C:\Users\Alex\Downloads\revosetup_2.0.exe
2016-09-13 20:13 - 2016-09-13 20:15 - 01610560 _____ (Malwarebytes) C:\Users\Alex\Downloads\JRT.exe
2016-09-12 08:13 - 2016-09-12 08:13 - 00009012 _____ C:\WINDOWS\System32\Tasks\Joropygrosak Debuger
2016-09-12 08:13 - 2016-09-12 08:13 - 00000046 _____ C:\WINDOWS\Joberphlusisp
2016-09-12 08:13 - 2016-09-12 08:13 - 00000000 ____D C:\ProgramData\Avg
2016-09-12 08:13 - 2016-09-12 08:13 - 00000000 ____D C:\ProgramData\AVAST Software
2016-09-12 08:12 - 2016-09-12 10:35 - 00000000 ____D C:\Program Files (x86)\Prerpetaincliiph
2016-09-12 08:12 - 2016-09-12 09:55 - 00000000 ____D C:\Users\Alex\AppData\Local\Sejoge
2016-09-12 08:10 - 2016-09-12 10:35 - 00000000 ____D C:\Users\Alex\AppData\Roaming\MyTransitGuide
2016-09-12 08:08 - 2016-09-12 08:08 - 01208320 _____ C:\Users\Alex\Downloads\fernbus_simulator_conspir4cy_crackrar.img
2016-09-11 22:59 - 2016-09-11 22:59 - 00000000 ____D C:\Users\Alex\Documents\The.Task
2016-09-11 22:28 - 2016-09-11 22:28 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\uTorrent
2016-09-11 21:34 - 2016-09-11 21:34 - 00016719 _____ C:\Users\Alex\Downloads\Fernbus_Simulator_2016.torrent
2016-09-11 19:42 - 2016-09-11 19:44 - 109132576 _____ C:\Users\Alex\Downloads\LMFAO_-_Sorry_For_Party_Rocking-2011-MOD.rar
2016-09-10 09:42 - 2016-09-10 09:42 - 01793045 _____ C:\Users\Alex\Downloads\187096_12.rar
2016-09-10 09:32 - 2016-09-10 09:32 - 03557465 _____ C:\Users\Alex\Downloads\FIFA 15 Latest Squads file by Mark.rar
2016-09-08 22:27 - 2016-09-08 22:27 - 00001032 _____ C:\Users\Alex\Desktop\fifa15.exe - Verknüpfung.lnk
2016-09-08 21:29 - 2016-09-08 21:33 - 00000000 ____D C:\Users\Alex\Documents\FIFA 15
2016-09-08 18:54 - 2016-09-08 18:54 - 00026052 ____N C:\Users\Alex\Downloads\88340998f9d272bb5a71c5b978fb316b42cc1347.dlc
2016-09-08 16:46 - 2016-09-08 16:46 - 00000000 ____D C:\Users\Alex\Documents\Soundaufnahmen
2016-09-07 22:17 - 2016-09-12 08:13 - 00000000 ____D C:\ProgramData\Avira
2016-09-07 22:17 - 2016-09-07 22:17 - 04446224 _____ (Avira Operations GmbH & Co. KG) C:\Users\Alex\Downloads\avira_de_avpn0_57d075bcae606__def.exe
2016-09-07 22:17 - 2016-09-07 22:17 - 00001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira Phantom VPN.lnk
2016-09-07 22:17 - 2016-09-07 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-09-07 21:03 - 2016-09-07 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari
2016-09-07 20:28 - 2016-09-07 20:28 - 00014357 _____ C:\Users\Alex\Downloads\RollerCoaster.Tycoon.World.Early.Access.torrent
2016-09-07 20:26 - 2016-09-07 20:35 - 566719036 _____ C:\Users\Alex\Downloads\Rcsrtycnpltn.rar
2016-09-07 20:21 - 2016-09-07 20:21 - 00003342 _____ C:\WINDOWS\System32\Tasks\{F823577C-328F-42E1-82E8-273F76E8E0F2}
2016-09-07 14:31 - 2016-09-07 14:31 - 86921726 _____ C:\Users\Alex\Downloads\LStThViC.rar
2016-09-07 14:30 - 2016-09-08 16:45 - 00000000 ____D C:\Users\Alex\Desktop\Lindsey Stirling
2016-09-07 14:30 - 2016-09-07 14:30 - 137263509 _____ C:\Users\Alex\Downloads\%2FLindsey_Stirling-Lindsey_Stirling-%28Deluxe_Edition%29-2013-C4.zip
2016-09-07 14:29 - 2016-09-07 14:32 - 118347516 _____ C:\Users\Alex\Downloads\Lindsey_Stirling-Brave_Enough-%28Limited_Deluxe_Edition%29-2016-C4.rar
2016-09-07 14:29 - 2016-09-07 14:30 - 111660182 _____ C:\Users\Alex\Downloads\Lindsey_Stirling-Shatter_Me-%28Deluxe_Edition%29-2014-C4.rar
2016-09-07 14:26 - 2016-09-07 14:25 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2016-09-07 14:24 - 2016-09-07 14:24 - 01196752 _____ (Adobe Systems Incorporated) C:\Users\Alex\Downloads\flashplayer22_xa_install.exe
2016-09-07 13:09 - 2016-09-07 13:13 - 01028096 ____N C:\Users\Alex\Downloads\Fernbus Simulator Free.img
2016-09-06 15:31 - 2016-09-13 20:44 - 00000000 ____D C:\Users\Alex\Desktop\mbar
2016-09-06 13:11 - 2016-09-06 13:11 - 00594944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Alex\Downloads\libeay32.dll
2016-09-06 13:11 - 2016-09-06 13:11 - 00152576 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Alex\Downloads\ssleay32.dll
2016-09-06 13:10 - 2016-09-06 13:10 - 00002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk
2016-09-06 13:10 - 2016-09-06 13:10 - 00002171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk
2016-09-06 13:10 - 2016-09-06 13:10 - 00000608 __RSH C:\ProgramData\ntuser.pol
2016-09-06 13:10 - 2016-09-06 13:10 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-09-06 13:10 - 2016-09-06 13:10 - 00000000 ____D C:\Program Files (x86)\FastSocial
2016-09-06 13:08 - 2016-09-06 13:08 - 00000381 _____ C:\Users\Alex\Downloads\FF16 TOR.txt
2016-09-06 08:34 - 2016-09-12 10:34 - 00000000 ____D C:\AdwCleaner
2016-09-06 08:34 - 2016-09-06 08:34 - 03826240 _____ C:\Users\Alex\Downloads\AdwCleaner_6.010.exe
2016-09-05 09:57 - 2016-09-05 09:57 - 01144832 _____ C:\Users\Alex\Downloads\Crack Setup.img
2016-09-02 20:44 - 2016-09-02 20:44 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Promotion Software GmbH
2016-09-02 20:39 - 2016-09-02 20:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver
2016-08-31 15:26 - 2016-08-31 15:26 - 00134808 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_ddjergopads (1).exe
2016-08-30 20:28 - 2016-08-30 20:28 - 00000553 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autobahn Police Simulator.lnk
2016-08-30 20:24 - 2016-08-30 20:24 - 00000580 _____ C:\Users\Alex\Downloads\windowsmediaplayer (2).asx
2016-08-30 13:45 - 2016-08-30 13:46 - 00000000 ____D C:\Program Files (x86)\MP3Gain
2016-08-30 13:45 - 2016-08-30 13:45 - 01474568 _____ C:\Users\Alex\Downloads\MP3Gain - CHIP-Installer (1).exe
2016-08-30 13:45 - 2016-08-30 13:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain
2016-08-30 13:42 - 2016-08-30 13:42 - 01474568 _____ C:\Users\Alex\Downloads\wxMP3Gain - CHIP-Installer.exe
2016-08-30 11:43 - 2016-08-30 11:43 - 01474568 _____ C:\Users\Alex\Downloads\MP3Gain - CHIP-Installer.exe
2016-08-30 09:52 - 2005-05-17 15:39 - 00349265 _____ C:\Users\Alex\Desktop\tvtotalnippelboard.swf
2016-08-30 09:50 - 2016-08-30 09:52 - 395414331 _____ () C:\Users\Alex\Downloads\GLP - Soundboard Setup.exe
2016-08-30 09:48 - 2016-08-30 09:48 - 01474568 _____ C:\Users\Alex\Downloads\Stefan Raabs TV Total Nippelboard - CHIP-Installer.exe
2016-08-29 21:18 - 2016-08-29 21:18 - 00134808 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_ddjergopads.exe
2016-08-29 21:15 - 2016-08-29 21:16 - 02000360 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_blacksheephd.exe
2016-08-29 20:53 - 2016-08-29 20:55 - 04411520 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_x96byzanard.exe
2016-08-29 20:47 - 2016-08-29 20:56 - 03227864 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_pioneerxdjrxbyzaik.exe
2016-08-29 10:28 - 2009-10-30 04:39 - 08151040 ____N (C-Media Corporation) C:\WINDOWS\SysWOW64\CMICNFG3.dll
2016-08-29 10:28 - 2009-04-02 10:59 - 00143360 ____N C:\WINDOWS\SysWOW64\VmixP6.dll
2016-08-29 10:28 - 2008-07-23 12:59 - 00389120 ____N () C:\WINDOWS\system32\CMICNFG3.cpl
2016-08-29 10:28 - 2006-09-13 20:21 - 00200704 ____N (C-Media) C:\WINDOWS\SysWOW64\CMPaOxy.dll
2016-08-29 10:27 - 2016-08-29 10:28 - 00000188 _____ C:\WINDOWS\Cmicnfg3.ini.cfl
2016-08-29 10:27 - 2016-08-29 10:27 - 00792576 ____N C:\WINDOWS\system32\Cmeaupci.exe
2016-08-29 10:27 - 2016-08-29 10:27 - 00000183 _____ C:\WINDOWS\Cmicnfg3.ini.imi
2016-08-29 10:27 - 2016-08-29 10:27 - 00000130 _____ C:\WINDOWS\system\Dlap.pfx
2016-08-29 10:27 - 2016-08-29 10:27 - 00000122 _____ C:\WINDOWS\system\Cmicnfg3.ini
2016-08-29 10:27 - 2016-08-29 10:27 - 00000000 ____D C:\Users\Alex\Desktop\PCI-8738-091211-7.12.8.1740(W7-RC-01)
2016-08-29 10:27 - 2009-12-11 05:28 - 00002754 ____N C:\WINDOWS\cmudax3.ini
2016-08-29 10:27 - 2009-12-01 05:31 - 01155072 _____ (C-Media Inc) C:\WINDOWS\system32\Drivers\cmudax3.sys
2016-08-29 10:27 - 2009-08-19 10:00 - 00359424 ____N C:\WINDOWS\system32\CmiInstallResAll64.dll
2016-08-29 10:27 - 2008-10-15 09:41 - 00002123 ____N C:\WINDOWS\Cmicnfg3.ini.cfg
2016-08-29 10:27 - 2007-11-04 19:30 - 01144983 ____N C:\WINDOWS\SysWOW64\KB936225x64.msu
2016-08-29 10:27 - 2007-02-26 14:30 - 00036864 _____ (C-Media Electronics Ins.) C:\WINDOWS\system32\cmudax3.dll
2016-08-29 10:27 - 2006-10-05 23:45 - 00524768 _____ (Microsoft Corporation) C:\WINDOWS\difxapi.dll
2016-08-28 20:36 - 2016-08-28 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
2016-08-28 20:36 - 2016-08-28 20:36 - 00000000 __HDC C:\ProgramData\{90D8CE90-3E6B-4034-A281-BC9F19B60A5B}
2016-08-28 20:36 - 2016-08-28 20:36 - 00000000 __HDC C:\ProgramData\{42DEBD12-9D09-4B77-B434-2EF604E45D3D}
2016-08-28 20:36 - 2016-08-28 20:36 - 00000000 ____D C:\ProgramData\Native Instruments
2016-08-28 20:36 - 2016-08-28 20:36 - 00000000 ____D C:\Program Files\Common Files\Native Instruments
2016-08-28 20:32 - 2016-08-28 20:33 - 244782432 _____ (Native Instruments ) C:\Users\Alex\Downloads\Traktor 2 2.10.3 Setup PC.exe
2016-08-28 20:32 - 2016-08-28 20:32 - 00000000 __HDC C:\ProgramData\{EB9C1D32-304E-4E8E-8D44-C4102A190A39}
2016-08-28 20:32 - 2016-08-28 20:32 - 00000000 ____D C:\Backup
2016-08-28 20:28 - 2016-08-28 20:28 - 00000000 ____D C:\Users\Alex\Desktop\DJ
2016-08-28 18:15 - 2016-09-13 15:38 - 00000000 ____D C:\Program Files (x86)\VirtualDJ
2016-08-28 18:15 - 2016-08-31 15:01 - 00000000 ____D C:\Users\Alex\Documents\VirtualDJ
2016-08-28 18:15 - 2016-08-28 18:15 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2016-08-28 18:14 - 2016-08-28 18:15 - 38203392 _____ C:\Users\Alex\Downloads\install_virtualdj_pc_v8.2.3343.msi
2016-08-28 17:52 - 2016-08-28 20:28 - 00000000 ____D C:\Users\Alex\AppData\Local\Mixxx
2016-08-28 17:48 - 2016-08-28 17:48 - 25035393 _____ C:\Users\Alex\Downloads\mixxx-2.0.0-win64.exe
2016-08-28 17:48 - 2016-08-28 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mixxx
2016-08-28 17:48 - 2016-08-28 17:48 - 00000000 ____D C:\Program Files\Mixxx
2016-08-28 17:41 - 2016-08-28 18:02 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2016-08-28 17:41 - 2016-08-28 17:41 - 00001123 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zulu DJ-Software.lnk
2016-08-28 17:41 - 2016-08-28 17:41 - 00000000 ____D C:\ProgramData\NCH Software
2016-08-28 17:41 - 2016-08-28 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2016-08-28 17:41 - 2016-08-28 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2016-08-28 17:41 - 2016-08-28 17:41 - 00000000 ____D C:\Program Files (x86)\NCH Software
2016-08-28 17:40 - 2016-08-28 17:40 - 00974560 _____ (NCH Software) C:\Users\Alex\Downloads\zulusetup.exe
2016-08-28 17:40 - 2016-08-28 17:40 - 00000000 ____D C:\Users\Alex\AppData\Roaming\NCH Software
2016-08-28 17:03 - 2016-08-28 17:03 - 38302328 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_virtualdj_home_v7.4.6.exe
2016-08-27 15:10 - 2016-08-27 15:10 - 02929520 _____ (Odem Mortis ) C:\Users\Alex\Downloads\OMC_ModPack_Installer.exe
2016-08-26 15:21 - 2016-08-26 15:21 - 01106840 _____ (Unity Technologies ApS) C:\Users\Alex\Downloads\UnityWebPlayer64.exe
2016-08-26 14:25 - 2016-08-26 14:25 - 00035784 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\tap0901.sys
2016-08-25 21:58 - 2016-08-25 21:58 - 00000000 ____D C:\Users\Alex\Documents\Ghosthunters
2016-08-25 21:12 - 2016-08-25 21:12 - 00000580 _____ C:\Users\Alex\Downloads\windowsmediaplayer (1).asx
2016-08-23 22:19 - 2016-08-23 22:19 - 00000000 ____D C:\Users\Alex\Documents\Die Unfassbaren 2
2016-08-23 21:09 - 2016-08-23 21:09 - 00000000 ____D C:\Users\Alex\Documents\Die.wilden.Kerle.6.Die.Legende.lebt
2016-08-22 18:36 - 2016-08-22 18:36 - 00001187 _____ C:\Users\Alex\Desktop\Dynamo Dresden v RB Leipzig - DFB Pokal 1 Runde 2016_17_08.lnk
2016-08-22 18:25 - 2016-08-22 18:25 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Aspyr Media
2016-08-22 17:53 - 2016-08-22 17:53 - 00000744 _____ C:\Users\Public\Desktop\Layers of Fear - Masterpiece Edition.lnk
2016-08-22 17:52 - 2016-08-22 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloober Team SA
2016-08-20 15:42 - 2016-09-12 08:10 - 00000000 ____D C:\Users\Alex\Desktop\Musik
2016-08-18 21:09 - 2016-08-18 21:09 - 00003320 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-08-16 20:19 - 2016-08-16 20:19 - 00610769 _____ C:\Users\Alex\Downloads\depends22_x86.zip
2016-08-16 20:05 - 2016-08-16 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2016-08-16 20:05 - 2016-08-16 20:05 - 00000000 ____D C:\Users\Alex\Documents\TomTom
2016-08-16 20:05 - 2016-08-16 20:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TomTom
2016-08-16 20:05 - 2016-08-16 20:05 - 00000000 ____D C:\Users\Alex\AppData\Local\TomTom
2016-08-16 20:03 - 2016-08-16 20:03 - 29403160 _____ C:\Users\Alex\Downloads\TomTomHOME2winlatest.exe
2016-08-16 20:00 - 2016-08-16 20:00 - 37565768 _____ (TomTom International B.V.) C:\Users\Alex\Downloads\InstallMyDriveConnect.exe
2016-08-16 20:00 - 2016-08-16 20:00 - 00000000 ____D C:\Program Files (x86)\TomTom International B.V
2016-08-14 22:26 - 2016-08-14 22:26 - 00000000 ____D C:\Users\Alex\Desktop\Flo Exklusiv
2016-08-14 19:44 - 2016-08-14 22:25 - 00000000 ____D C:\Users\Alex\Desktop\Neuer Ordner (4)
2016-08-14 17:41 - 2016-08-14 17:41 - 69347755 _____ C:\Users\Alex\Desktop\bob der Zug Tierstimme Song.mp4
2016-08-14 11:04 - 2016-08-14 11:04 - 00033791 _____ C:\Users\Alex\Downloads\tfp_1_2.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-09-13 21:02 - 2015-08-06 17:26 - 00004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9976B872-EBCD-4E3B-A512-199270B5525F}
2016-09-13 21:02 - 2014-12-31 21:03 - 00000000 ____D C:\Program Files (x86)\Google
2016-09-13 20:55 - 2015-03-30 17:38 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-09-13 20:50 - 2016-07-25 15:29 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2016-09-13 20:44 - 2016-07-20 12:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2016-09-13 20:11 - 2015-04-01 12:15 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-09-13 20:08 - 2016-07-20 12:07 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-09-13 20:08 - 2016-07-20 12:06 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-09-13 11:55 - 2016-03-24 18:55 - 06502080 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe
2016-09-13 11:55 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-09-13 11:55 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-09-13 08:45 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-09-13 08:45 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-09-13 08:34 - 2015-07-31 20:20 - 00002127 _____ C:\Users\Public\Desktop\Wise Care 365.lnk
2016-09-13 08:32 - 2015-05-04 14:56 - 00000000 ____D C:\Program Files (x86)\Steam
2016-09-12 10:37 - 2015-07-31 20:20 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Wise Care 365
2016-09-12 10:35 - 2015-12-22 17:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-09-12 10:35 - 2015-12-22 16:39 - 00000000 ____D C:\ProgramData\NVIDIA
2016-09-12 10:35 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-09-12 10:35 - 2015-10-30 08:28 - 01048576 ___SH C:\WINDOWS\system32\config\BBI
2016-09-12 10:29 - 2014-12-31 21:46 - 00000000 ____D C:\Users\Alex\AppData\Roaming\vlc
2016-09-12 08:12 - 2016-07-25 12:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-09-12 01:15 - 2015-01-04 22:19 - 00000000 ____D C:\Users\Alex\AppData\Roaming\uTorrent
2016-09-12 01:15 - 2015-01-02 16:17 - 00000000 ____D C:\Users\Alex\AppData\Local\JDownloader v2.0
2016-09-11 23:20 - 2015-12-22 16:42 - 02113470 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-09-11 23:20 - 2015-10-30 20:35 - 00898170 _____ C:\WINDOWS\system32\perfh007.dat
2016-09-11 23:20 - 2015-10-30 20:35 - 00201656 _____ C:\WINDOWS\system32\perfc007.dat
2016-09-11 23:20 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF
2016-09-11 22:43 - 2015-07-03 15:08 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-09-11 22:42 - 2015-07-03 15:19 - 00000000 ____D C:\Program Files\Rockstar Games
2016-09-09 22:07 - 2015-12-22 16:43 - 00000000 ____D C:\Users\Alex
2016-09-08 22:27 - 2015-01-02 20:33 - 00000000 ____D C:\Users\Alex\Documents\My Games
2016-09-08 13:14 - 2015-10-01 21:05 - 00000000 ____D C:\Users\Alex\AppData\Local\MyComGames
2016-09-08 12:28 - 2015-01-01 12:08 - 00000000 ____D C:\Users\Alex\Desktop\Spiele
2016-09-08 12:00 - 2015-08-21 10:33 - 00000000 ____D C:\Users\Alex\AppData\Local\CrashDumps
2016-09-07 22:17 - 2014-12-31 21:29 - 00000000 ____D C:\ProgramData\Package Cache
2016-09-07 22:17 - 2014-12-31 21:27 - 00000000 ____D C:\Program Files (x86)\Avira
2016-09-07 20:20 - 2015-01-03 13:40 - 00000000 ____D C:\Users\Alex\AppData\Local\ElevatedDiagnostics
2016-09-07 14:33 - 2015-03-30 20:16 - 00000000 ____D C:\ProgramData\Oracle
2016-09-07 14:26 - 2015-09-13 09:21 - 00000000 ____D C:\Users\Alex\.oracle_jre_usage
2016-09-07 14:26 - 2015-06-17 14:50 - 00000000 ____D C:\Program Files (x86)\Java
2016-09-07 14:26 - 2015-03-30 17:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-09-07 14:25 - 2016-02-19 14:31 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-09-07 14:25 - 2015-06-17 14:51 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-09-07 14:25 - 2015-06-17 14:51 - 00000000 ____D C:\Program Files\Java
2016-09-07 14:24 - 2015-01-01 21:08 - 00000000 ____D C:\Users\Alex\AppData\Local\Adobe
2016-09-07 13:07 - 2014-12-31 20:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-09-06 13:09 - 2016-07-26 21:31 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2016-09-04 19:09 - 2015-01-31 12:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-09-02 09:12 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-09-02 09:12 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-08-29 16:38 - 2015-02-01 10:39 - 00000000 ____D C:\ProgramData\Ultra Vision Video Converter
2016-08-29 10:29 - 2016-01-17 10:33 - 00387176 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-08-29 10:27 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\System
2016-08-27 15:56 - 2015-09-03 19:56 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack
2016-08-27 15:10 - 2015-09-03 18:58 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack Client
2016-08-27 13:19 - 2015-11-10 14:32 - 00000000 ____D C:\Users\Alex\AppData\Local\UnrealEngine
2016-08-27 09:24 - 2015-05-14 17:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ravenscourt
2016-08-22 18:55 - 2016-01-31 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Square Enix
2016-08-21 09:21 - 2015-08-17 19:42 - 00000000 ___RD C:\Users\Alex\Desktop\Bildbearbeitung
2016-08-20 15:21 - 2015-02-26 12:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2016-08-18 21:09 - 2015-08-04 19:56 - 00002416 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-18 21:09 - 2015-08-04 19:56 - 00000000 ___RD C:\Users\Alex\OneDrive
2016-08-16 20:03 - 2015-11-27 21:53 - 00000000 ____D C:\Users\Alex\AppData\Local\Downloaded Installations

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-11-15 18:22 - 2015-11-15 10:52 - 0012879 _____ () C:\Users\Alex\AppData\Roaming\alsoft.ini
2016-06-02 10:48 - 2016-06-02 10:49 - 266040255 _____ () C:\Users\Alex\AppData\Local\ACCCx3_6_0_248.zip
2015-04-10 15:38 - 2015-04-10 15:38 - 0004608 _____ () C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-04 18:01 - 2015-07-04 18:02 - 0003072 _____ () C:\Users\Alex\AppData\Local\file__0.localstorage
2015-07-24 20:25 - 2015-07-24 20:25 - 0000092 _____ () C:\Users\Alex\AppData\Local\fusioncache.dat
2015-11-18 12:41 - 2015-11-18 12:41 - 0000017 _____ () C:\Users\Alex\AppData\Local\resmon.resmoncfg
2015-12-22 16:38 - 2015-12-22 16:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Alex\AppData\Local\Temp\jre-8u101-windows-au.exe
C:\Users\Alex\AppData\Local\Temp\libeay32.dll
C:\Users\Alex\AppData\Local\Temp\msvcr120.dll
C:\Users\Alex\AppData\Local\Temp\proxy_vole4506188439364049303.dll
C:\Users\Alex\AppData\Local\Temp\sqlite3.dll
C:\Users\Alex\AppData\Local\Temp\VirtualDJ New Version.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-09-07 17:36

==================== Ende von FRST.txt ============================
         
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-09-2016
durchgeführt von Alex (13-09-2016 21:14:00)
Gestartet von C:\Users\Alex\Downloads
Windows 10 Pro Version 1511 (X64) (2015-12-22 15:12:12)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2927967124-101175508-2003510897-500 - Administrator - Enabled) => C:\Users\Administrator
Alex (S-1-5-21-2927967124-101175508-2003510897-1000 - Administrator - Enabled) => C:\Users\Alex
DefaultAccount (S-1-5-21-2927967124-101175508-2003510897-503 - Limited - Disabled)
Gast (S-1-5-21-2927967124-101175508-2003510897-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2927967124-101175508-2003510897-1005 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\uTorrent) (Version: 3.4.8.42576 - BitTorrent Inc.)
18 Wheels of Steel Extreme Trucker 2 (HKLM-x32\...\{A2B65355-E44A-4662-9533-AB5A4A3533ED}) (Version: 1.00.0000 - Valusoft)
AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers)
Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{123A22CB-6D84-4135-A71F-886C9119E996}) (Version: 99.9 - Eyeo GmbH)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.7 64-bit (HKLM\...\{1B77B02E-17E4-4B6D-B8A1-74B29AF3D8DD}) (Version: 5.7.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\{0E3C52E0-B4F1-4D1E-B172-E390813BD9FE}) (Version: 12.1.8.158 - Adobe Systems, Inc)
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft)
AIMP (HKLM-x32\...\AIMP) (Version: v4.02.1725, 11.06.2016 - AIMP DevTeam)
AKVIS Sketch (HKLM\...\{AC0BAA05-28E6-4911-B3F3-0AE2EB0F54A1}) (Version: 17.0.2946.11963 - AKVIS)
Armored Warfare MyCom (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Armored Warfare MyCom) (Version: 1.96 - My.com B.V.)
Armored Warfare MyCom Beta (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Armored Warfare MyCom Beta) (Version: 1.59 - My.com B.V.)
ATI Catalyst Install Manager (HKLM\...\{62140B07-129A-2BD0-81D2-2A1A7408ADC8}) (Version: 3.0.762.0 - ATI Technologies, Inc.)
Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 6.2.1.0 - Auslogics Labs Pty Ltd)
Autobahn Police Simulator MULTI4 (HKLM\...\YXV0b2JhaG5wb2xpY2VzaW11bGF0b3I_is1) (Version: 1 - )
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.8.9046 - )
Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG)
Avira Launcher (HKLM-x32\...\{af1966e2-5e60-4d93-8a48-c21462a87e3c}) (Version: 1.2.71.9779 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.2.71.9779 - Avira Operations GmbH & Co. KG) Hidden
Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 1.5.2.25975 - Avira Operations GmbH & Co. KG)
Bandicam (HKLM-x32\...\Bandicam) (Version: 2.1.3.757 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
BASE (HKLM-x32\...\{B4D9F24E-C5C2-4B5E-A56D-8E13E0729C64}) (Version: 1.0.0 - d3)
Berg und Tunnelbau (HKLM-x32\...\Mining and Tunneling) (Version:  - )
C-Media PCI Audio Device (HKLM\...\C-Media PCI Audio Driver) (Version:  - )
Cool & Quiet (HKLM-x32\...\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version:  - )
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd)
Dance eJay 7 (HKLM-x32\...\{A18BB607-BC5A-474E-88FD-C215B91A0F97}) (Version: 7 - Empire Interactive)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.)
DIG IT! - A Digger Simulator (HKLM\...\Steam App 311910) (Version:  - Cape Copenhagen)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts)
Emergency 2016 (HKLM-x32\...\Emergency 2016_is1) (Version:  - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX125 Series Printer Uninstall (HKLM\...\EPSON SX125 Series) (Version:  - SEIKO EPSON Corporation)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
FastSocial version 1 (HKLM-x32\...\{0C9D97C7-4EC9-4BAB-AE9E-FA4F9EE56484}_is1) (Version: 1 - )
FileZilla Client 3.13.0 (HKLM-x32\...\FileZilla Client) (Version: 3.13.0 - Tim Kosse)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.)
GdZ WoT ModPack Version 0.9.15.1.5 (HKLM-x32\...\{GdZ WoT ModPack}_is1) (Version: 0.9.15.1.5 - Gemeinschaft deutscher Zocker)
GdZ WoT ModPack Version 1.0 (HKLM-x32\...\{GdZ WoT ModPack Updater}_is1) (Version: 1.0 - Gemeinschaft deutscher Zocker)
German Truck Simulator 1.00 (HKLM-x32\...\German Truck Simulator) (Version: 1.00 - )
Ghostbusters (TM): The Video Game (HKLM-x32\...\InstallShield_{3A1B1652-D70A-4D19-981E-BB15D0DBF253}) (Version: 1.00.0000 - Atari)
Ghostbusters (TM): The Video Game (x32 Version: 1.00.0000 - Atari) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 53.0.2785.113 - Google Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Grand Theft Auto: Episodes From Liberty City (HKLM-x32\...\{61B8B2F9-D8DA-4B24-89A9-DB09F38A4899}) (Version: 1.1.0.0 - Rockstar Games)
Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0003.135 - Rockstar Games Inc.) Hidden
Heart's Medicine: Time to Heal (HKLM\...\aGVhcnRzbWVkaWNpbmV0aW1ldG9oZWFs_is1) (Version: 1 - )
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Krita Desktop (x86) "2.9.6.3" (HKLM-x32\...\{ACF8935C-CA56-43D2-A923-DD95CBCE1BEB}) (Version: 2.9.6.3 - Krita Foundation)
Layers of Fear (HKLM-x32\...\Layers of Fear_is1) (Version:  - )
Life is Strange (HKLM-x32\...\Life is Strange_is1) (Version:  - )
Locks Pro (HKLM-x32\...\Locks Pro) (Version:  - )
Logistics Company (HKLM\...\Steam App 328310) (Version:  - Crenetic GmbH Studios)
Logitech Gaming Software 64 (HKLM-x32\...\InstallShield_{58BF5D14-CBCF-473C-B0E0-A7955A23224E}) (Version:  - )
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version:  - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.6.140.0 - Microsoft Corporation)
Mixxx 2.0.0 (64-bit) (HKLM-x32\...\Mixxx (2.0.0)) (Version: 2.0.0 - The Mixxx Development Team)
Model_Viewer (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\007d47cbc8a50530) (Version: 2.0.0.23 - WOT MODEL VIEWER)
Mozilla Firefox 48.0.2 (x64 de) (HKLM\...\Mozilla Firefox 48.0.2 (x64 de)) (Version: 48.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla)
Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla)
My.com Game Center (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MyComGames) (Version: 3.147 - My.com B.V.)
Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.9.3.355 - Native Instruments)
Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments)
Nesbox Companion (HKLM-x32\...\com.nesbox.companion) (Version: 1.1 - UNKNOWN)
Nesbox Companion (x32 Version: 1.1 - UNKNOWN) Hidden
null (HKLM-x32\...\MonsterMaker) (Version:  - )
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.75 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.9.1.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.1.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.75 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
OMC ModPack Client Version 1.5.1.212 (HKLM-x32\...\{E2F3187C-2B94-486F-8914-E69211487FB6}_is1) (Version: 1.5.1.212 - Odem Mortis)
OMSI - Der Omnibussimulator (HKLM-x32\...\{9AE850A4-B89D-4875-A159-B1B64D717EFB}) (Version: 1.06 - aerosoft)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Origin (HKLM-x32\...\Origin) (Version: 9.5.10.780 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.97.306.0 - Overwolf Ltd.)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64)
ProTrain Perfect 2 - Dresden - Leipzig - (HKLM-x32\...\{509E436F-FEEA-49BC-BD16-8F5F67D715E1}) (Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect 2 - Nord-Süd 2  - Update (HKLM-x32\...\{2DE73DB6-37F4-4580-97A0-505D478EF02A}) (Version: 1.31 - Blue Sky Interactive)
ProTrain Perfect 2 - Streckenupdate - (HKLM-x32\...\{9547B52A-58E0-4AB5-B159-506728C5404B}) (Version: 1.0 - Blue Sky Interactive)
ProTrain Perfect Addon 4 - S-Bahn Berlin- Update 1.1 (HKLM-x32\...\{56706286-0B7A-46A3-9835-CF1ACB4BBFE2}) (Version: 1.0 - Blue Sky Interactive)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.52.203.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
RESCUE 2013 (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\RESCUE 2013) (Version: 1.30.00.00 - rondomedia GmbH)
Revo Uninstaller 2.0.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.0 - VS Revo Group, Ltd.)
RollerCoaster Tycoon 3 Platinum (HKLM-x32\...\RollerCoaster Tycoon 3 Platinum_is1) (Version:  - )
Samantha Swift and the Golden Touch (HKLM-x32\...\Samantha Swift and the Golden Touch) (Version: 1.1.0.0 - MumboJumbo)
SHIELD Streaming (Version: 4.1.0260 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.9.1.22 - NVIDIA Corporation) Hidden
Smart Application Controller (HKLM-x32\...\{A6AE177E-D46B-4463-AA69-B9F818E0DC4A}_is1) (Version: 1.00 - Smart Application Controller)
Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
The Last Dream - Developer's Edition (HKLM-x32\...\The Last Dream - Developer's Edition_is1) (Version:  - )
The Movies(TM) (HKLM-x32\...\InstallShield_{0556F885-2415-4666-B53E-33727E46AEA1}) (Version: 1.0 - Activision)
The Movies(TM) (x32 Version: 1.0 - Activision) Hidden
Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 3.0.0 - Tweaking.com)
UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.)
UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden
UK Truck Simulator 1.11 (HKLM-x32\...\UK Truck Simulator) (Version: 1.11 - )
Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
VirtualDJ 8 (HKLM-x32\...\{AC964E48-8E21-4622-9073-AD42BC6A57B1}) (Version: 8.2.3343.0 - Atomix Productions)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
waterMark V2 (HKLM-x32\...\waterMark V2) (Version:  - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wonderland Solitaire (HKLM-x32\...\Wonderland Solitaire) (Version:  - )
World Series Of Poker  (HKLM-x32\...\World_Series_Of_Poker_1.0) (Version:  - )
X-Mouse Button Control 2.9.1 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.9.1 - Highresolution Enterprises)
Zulu DJ-Software (HKLM-x32\...\Zulu) (Version: 3.63 - NCH Software)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2927967124-101175508-2003510897-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {03721160-D3EC-4395-9515-90AF4387D601} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-09-07] (Overwolf LTD)
Task: {08071F0B-7A8F-4307-AC19-CAC94B3D7CF0} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-09-10] (Microsoft Corporation)
Task: {088BCE7E-C0DF-4878-9566-F3DF074A0850} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2015-09-10] (Microsoft)
Task: {11072F2E-CF5D-4042-8117-BF302C3D1134} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22] (Oracle Corporation)
Task: {2D6D5D52-DEB4-4D7E-8582-BFA2594CE8A4} - System32\Tasks\{E38CF82E-0E32-471D-AF9A-11ACBB05F575} => pcalua.exe -a "D:\Spiele\Black &amp; White\Setup.exe" -d "D:\Spiele\Black &amp; White"
Task: {3219B889-3FAF-4BA3-87DF-9656385F0909} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-13] (Google Inc.)
Task: {3D26F772-E706-43C1-BB76-960259E909D5} - System32\Tasks\Joropygrosak Debuger => C:\Program Files (x86)\Prerpetaincliiph\keda.exe [2016-09-12] (CHENGDU YIWO Tech Development Co., Ltd)
Task: {3E59135F-C845-4CA7-9306-09BA53D3BF10} - System32\Tasks\Avira Browser Safety Updater Task => C:\Program Files (x86)\Avira\Browser Safety\AviraBrowserSafetyUpdater.exe [2015-03-11] (Avira Operations GmbH & Co. KG)
Task: {3ECA284F-6060-4355-8201-2B3667D6A8D0} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-09-10] (Microsoft Corporation)
Task: {48A39499-C887-47AB-A03E-EC1284135582} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-09-10] (Microsoft Corporation)
Task: {739D6E46-1EBE-45B0-B3A8-BE4B706B11C9} - System32\Tasks\{F823577C-328F-42E1-82E8-273F76E8E0F2} => pcalua.exe -a "D:\Spielei\RollerCoaster Tycoon 3 Platinum\RCT3.EXE" -d "D:\Spielei\RollerCoaster Tycoon 3 Platinum"
Task: {7D66D896-7E61-483F-AC36-CBF7B2F70AF8} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-09] (Microsoft Corporation)
Task: {82459BE3-0FD2-4083-A85E-4E159CB47C66} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK
Task: {9459BA5A-FD31-4742-B874-E18D2F2CFA4F} - System32\Tasks\{9F699765-8CF8-476D-B4B0-17A827A46CA3} => C:\Program Files (x86)\Origin\Origin.exe [2015-03-24] (Electronic Arts)
Task: {981322A7-5CE4-419F-9EE9-A5B122E6477F} - System32\Tasks\CheckControllerUpdatesUA => C:\Program Files (x86)\Smart Application Controller\smappscontroller.exe [2016-07-13] (Smart Application Controller)
Task: {A1F15BE6-717C-4421-B6F5-31A5D6F3E16A} - System32\Tasks\WiseCleaner\WFDSkipUAC => C:\Program Files (x86)\Wise\Wise Force Deleter\WiseDeleter.exe [2015-07-27] (WiseCleaner.com)
Task: {A395D13F-8616-4430-AA41-59C643D31545} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-13] (Google Inc.)
Task: {BCE3DD01-4356-448D-B9F2-B66F03DA84E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-13] (Adobe Systems Incorporated)
Task: {C90E9125-55FE-459E-B59C-A8CC3EDC83B2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {DF339562-E44E-4C7B-BFED-89CD5B300750} - System32\Tasks\{E32C968D-9A4A-468A-9739-5EC5DD81248A} => pcalua.exe -a "F:\Wolfenstein The Old Blood German Uncut Edition\WOLF.OB.GUE.exe" -d "F:\Wolfenstein The Old Blood German Uncut Edition"
Task: {E27BD397-DC88-4C92-9D33-9AEBB4FF1077} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-18] (Microsoft Corporation)
Task: {FD8DDAD2-0AB1-4C79-8872-2DE3B0CAA13A} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-09-10] (Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Alex\Favorites\Downloadseite von NCH Software.lnk -> hxxp://www.nch.com.au/de/index.html
Shortcut: C:\Users\Alex\AppData\Local\Microsoft\Windows\GameExplorer\{F6416E63-CBFE-49C4-8CFC-2042B9323E65}\SupportTasks\1\Support.lnk -> hxxp://www.activision.com/support/
Shortcut: C:\Users\Alex\AppData\Local\Microsoft\Windows\GameExplorer\{F6416E63-CBFE-49C4-8CFC-2042B9323E65}\SupportTasks\0\Weitere Spiele von Microsoft.lnk -> hxxp://www.activisiono2.com/tony_hawk/main.asp/
Shortcut: C:\Users\Alex\AppData\Local\Microsoft\Windows\GameExplorer\{78751FE4-B96B-4715-A617-314D7C47A2A0}\SupportTasks\0\Support.lnk -> hxxp://support.ubi.com/
Shortcut: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki/
Shortcut: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com/

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-12-31 20:57 - 2016-01-12 06:43 - 00291264 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-07-20 14:56 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-07-20 14:56 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-08-18 21:09 - 2016-08-18 21:09 - 01864384 _____ () C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll
2016-04-19 14:48 - 2016-04-19 14:49 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-12-23 10:07 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-20 14:57 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-07-20 14:56 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-20 14:56 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-20 14:56 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-20 14:56 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-09-13 21:02 - 2016-09-13 01:38 - 02280264 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.113\libglesv2.dll
2016-09-13 21:02 - 2016-09-13 01:38 - 00107848 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.113\libegl.dll
2016-07-21 18:32 - 2015-05-14 11:54 - 00422600 _____ () C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
2016-09-13 21:09 - 2016-09-12 17:48 - 30996160 _____ () C:\Users\Alex\AppData\Local\Google\Chrome\User Data\PepperFlash\23.0.0.166\pepflashplayer.dll
2016-09-12 08:12 - 2016-09-12 08:12 - 00301568 _____ () c:\program files (x86)\prerpetaincliiph\clhbuilder.dll
2016-04-19 14:48 - 2016-04-19 14:49 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 14:48 - 2016-04-19 14:49 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Alex\Cookies:gs5sys [3074]
AlternateDataStreams: C:\Users\Alex\Desktop\desktop.ini:gs5sys [3074]
AlternateDataStreams: C:\Users\Alex\AppData\Roaming\desktop.ini:gs5sys [3074]
AlternateDataStreams: C:\Users\Alex\AppData\Local\Verlauf:gs5sys [3074]
AlternateDataStreams: C:\Users\Alex\Documents\desktop.ini:gs5sys [3074]
AlternateDataStreams: C:\ProgramData\TEMP:054B9966 [137]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2016-09-06 13:11 - 00001037 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1       union.baidu2019.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2927967124-101175508-2003510897-1000\Control Panel\Desktop\\Wallpaper -> F:\Oskar\Neuer Ordner (21)\Neuer Ordner (8)\IMG-20160619-WA0004.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: Avira.OE.ServiceHost => 2
MSCONFIG\Services: GfExperienceService => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: Stereo Service => 2
HKLM\...\StartupApproved\Run32: => "Avira Systray"
HKLM\...\StartupApproved\Run32: => "avgnt"
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\StartupApproved\Run: => "EPSON SX125 Series"
HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\StartupApproved\Run: => "TomTomHOME.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [UDP Query User{B8EC54F5-26ED-48D9-8E73-FD26BA352BB4}G:\program files\skype\phone\skype.exe] => (Allow) G:\program files\skype\phone\skype.exe
FirewallRules: [TCP Query User{185431DA-2C79-4C60-AF6B-330AB0971EA2}G:\program files\skype\phone\skype.exe] => (Allow) G:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{203E9AAD-FAA1-49B9-9BE9-F2C2271A368F}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe
FirewallRules: [TCP Query User{D7B962F1-105F-488E-9678-984032B74CFF}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe
FirewallRules: [UDP Query User{59F51F14-EE3A-45A9-9C87-9485BF612573}E:\easysetupassistant\tssh2.exe] => (Allow) E:\easysetupassistant\tssh2.exe
FirewallRules: [TCP Query User{2453E5A1-8AEF-432D-9F29-4435D9123DAF}E:\easysetupassistant\tssh2.exe] => (Allow) E:\easysetupassistant\tssh2.exe
FirewallRules: [UDP Query User{68A87591-6E15-49C9-B6D5-00E0404EE469}E:\easysetupassistant\easysetupassistant.exe] => (Allow) E:\easysetupassistant\easysetupassistant.exe
FirewallRules: [TCP Query User{98862868-268B-46F0-A7A1-F419B1F37ED4}E:\easysetupassistant\easysetupassistant.exe] => (Allow) E:\easysetupassistant\easysetupassistant.exe
FirewallRules: [UDP Query User{A37D346B-E470-486D-886A-AB7A70CEA756}D:\spiele\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) D:\spiele\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [TCP Query User{9941EBEE-8E38-4E5A-B75F-BF3E22A5007B}D:\spiele\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) D:\spiele\armored warfare mycom beta\bin64\armoredwarfare.exe
FirewallRules: [UDP Query User{86285CEE-479B-46FD-B323-93D13AFF6BB7}C:\users\alex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\alex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [TCP Query User{F028F5E8-B9B2-4FFD-8967-454EF0D5C8AD}C:\users\alex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\alex\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{055257B4-7DB5-421A-B9CE-FC9A2768CEC8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{64626A8F-D518-4A3E-B800-B6E6E12D8A6C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [TCP Query User{351CF24C-5C76-480D-8504-68E0AD1843D7}D:\spiele\world_of_tanks\worldoftanks.exe] => (Allow) D:\spiele\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{948DAF27-C71D-4CC4-BE10-89DB3D4046BC}D:\spiele\world_of_tanks\worldoftanks.exe] => (Allow) D:\spiele\world_of_tanks\worldoftanks.exe
FirewallRules: [{253899B7-30F0-40FA-820D-42FC5EE64BDD}] => (Block) D:\spiele\world_of_tanks\worldoftanks.exe
FirewallRules: [{E6B46A64-C7FB-4B76-BDA2-7F8CE5C19BE2}] => (Block) D:\spiele\world_of_tanks\worldoftanks.exe
FirewallRules: [{7B9803AD-565F-484F-A3AC-7608B4E027C0}] => (Allow) C:\Users\Alex\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0B7B8C30-490B-4165-91C9-0BA2ECF08FE9}] => (Allow) C:\Users\Alex\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{63B3C213-6114-4963-A3D3-EB3CD2016612}D:\spiele\world_of_tanks\wotlauncher.exe] => (Allow) D:\spiele\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{B77A2EB4-C11B-43C6-BFA5-0DF9C825F01D}D:\spiele\world_of_tanks\wotlauncher.exe] => (Allow) D:\spiele\world_of_tanks\wotlauncher.exe
FirewallRules: [{ABC853EF-AA7D-4B6B-9898-2DE7F7131D17}] => (Block) D:\spiele\world_of_tanks\wotlauncher.exe
FirewallRules: [{3DE2D36C-CCC9-4E7F-A312-82C6FF4BAE64}] => (Block) D:\spiele\world_of_tanks\wotlauncher.exe
FirewallRules: [{4D80A436-398C-4BA4-9626-484B2BD6890B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{8C15BD84-ED5D-442F-B454-6093E1A34678}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F520FDF6-D5AF-49EE-9672-80D2D78A1ECE}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{DE4A103C-31F4-40A1-8F16-31CB15E8865C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8A82E90F-A1DD-4E49-867E-0D95254879E1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3DC96D98-714F-4456-ABFD-E54CF194D6CE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6E0C7D29-7456-4E18-8D41-C374DB54F8EF}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{BEE464F7-4F1A-4DC3-A9DF-C6496F7DC8EA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{F73A41F2-F6B4-4D42-94B0-24FB215C452E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{D2EE8800-F670-445E-8AED-196AEE247BB1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{8B8F73D0-7764-46F2-8DA0-FDE0DE8DFE90}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{676D9C46-E14F-4026-ADDE-B2C63446D955}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2B35FD59-01B0-44F0-85EF-E4ED1F88E13B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9A3D99F3-D921-426B-B7DF-7324B11E5EAF}] => (Allow) D:\Spiele\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe
FirewallRules: [{10DFF208-43B4-487F-B87C-EC2EDD159280}] => (Allow) D:\Spiele\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe
FirewallRules: [TCP Query User{267A32AA-CDCA-4691-A944-9E604C81E46D}D:\spiele\sebastien loeb rally evo\slrx64.exe] => (Allow) D:\spiele\sebastien loeb rally evo\slrx64.exe
FirewallRules: [UDP Query User{B181587D-6A97-4BAD-A8D4-A6AF6CBCC296}D:\spiele\sebastien loeb rally evo\slrx64.exe] => (Allow) D:\spiele\sebastien loeb rally evo\slrx64.exe
FirewallRules: [{EEF9EBA0-1956-40F6-B77F-614DD4EA5722}] => (Allow) C:\Users\Alex\AppData\Local\Temp\Andy_46.2_x64\Setup.exe
FirewallRules: [{9F3E3F30-F41B-4865-BE41-83FE9833B3F6}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{1BE673C4-9EBC-4746-8864-4EF8DE737B8F}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe
FirewallRules: [{94ED7558-F682-4093-9313-F8ACBF078BE0}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{97934D29-83EA-4C92-A58B-9C1490FA8661}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{BD969C95-3B4F-47ED-9D72-B0B16C1B9221}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{65209785-178C-4995-A308-6B16828E82FC}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{C765AC84-C3C6-4381-B834-7A4D9C1A7519}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{D0FB81DC-360F-4A36-8512-FD557837FBD0}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{612D9E77-960F-447F-900B-BA528AD8C8C3}] => (Allow) C:\Users\Alex\AppData\Local\Temp\Uninstall.exe
FirewallRules: [{DE0D30BD-785F-4C6E-AB2E-B2EA5B95A212}] => (Allow) C:\Users\Alex\AppData\Local\Temp\Uninstall.exe
FirewallRules: [{785C73F8-5AFE-469E-9E2D-2F1B814DE3C8}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{0B571320-7652-4382-A54C-630B0BBABE66}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{B1D7EA1F-B066-4CA0-8D50-E89501B0C6F0}] => (Allow) D:\Spiele\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{CBF73693-887B-4786-989A-E6B514955243}] => (Allow) D:\Spiele\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [TCP Query User{BAD49B2D-5B7E-4239-97FF-CCCC34FCE690}D:\spiele\ubisoft\far cry 4\bin\farcry4.exe] => (Allow) D:\spiele\ubisoft\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{39235AEA-0DD2-4CDA-B963-38FB32CEC0B1}D:\spiele\ubisoft\far cry 4\bin\farcry4.exe] => (Allow) D:\spiele\ubisoft\far cry 4\bin\farcry4.exe
FirewallRules: [TCP Query User{31F01DEC-1B23-430D-93A4-34E1165168BA}D:\spiele\anno 1404 gold edition\tools\anno4web.exe] => (Allow) D:\spiele\anno 1404 gold edition\tools\anno4web.exe
FirewallRules: [UDP Query User{663B8EBA-8FDD-4379-A5DB-5EAE3D1D4F06}D:\spiele\anno 1404 gold edition\tools\anno4web.exe] => (Allow) D:\spiele\anno 1404 gold edition\tools\anno4web.exe
FirewallRules: [TCP Query User{6C958C17-0A38-493E-99CC-B87F1FDB242D}D:\spiele\mxgp2\mxgp_2x64.exe] => (Allow) D:\spiele\mxgp2\mxgp_2x64.exe
FirewallRules: [UDP Query User{5455F566-360E-4D82-AF47-7E01DC44F3E8}D:\spiele\mxgp2\mxgp_2x64.exe] => (Allow) D:\spiele\mxgp2\mxgp_2x64.exe
FirewallRules: [TCP Query User{4FC326C9-DD65-4C55-B7CF-F00DC2A25734}D:\spiele\mxgp2\mxgp_2.exe] => (Allow) D:\spiele\mxgp2\mxgp_2.exe
FirewallRules: [UDP Query User{3DDC05D5-A11D-4FFF-9EBE-07A822FE9984}D:\spiele\mxgp2\mxgp_2.exe] => (Allow) D:\spiele\mxgp2\mxgp_2.exe
FirewallRules: [{15350DE1-C269-45CC-9C37-ED444708E09B}] => (Allow) D:\Spiele\SteamLibrary\steamapps\common\DIG IT! - A Digger Simulator\DigIt.exe
FirewallRules: [{0FAB828E-4B69-4960-AB60-B6E47BD20F3C}] => (Allow) D:\Spiele\SteamLibrary\steamapps\common\DIG IT! - A Digger Simulator\DigIt.exe
FirewallRules: [{822BDA0E-5DAC-4BA9-84DE-BEFCED48F171}] => (Allow) D:\Spiele\SteamLibrary\steamapps\common\Logistics Company\logisim.exe
FirewallRules: [{E3475040-EF12-4BFA-90D4-5CCFFD4182C3}] => (Allow) D:\Spiele\SteamLibrary\steamapps\common\Logistics Company\logisim.exe
FirewallRules: [{D5402871-D6DB-4AF8-A11B-211A8FC142C0}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{1C55D6CF-C802-4747-B16E-96E20EA42E76}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [TCP Query User{0653881F-C4F1-483B-9EEF-03B6E478915E}D:\spiele\medal of honor allied assault war chest\mohaa.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\mohaa.exe
FirewallRules: [UDP Query User{2C652085-C216-4B0B-B1F6-DFD07D862D05}D:\spiele\medal of honor allied assault war chest\mohaa.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\mohaa.exe
FirewallRules: [TCP Query User{CE25C343-01B1-4AC8-B589-828CC9C63538}D:\spiele\medal of honor allied assault war chest\moh_breakthrough.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\moh_breakthrough.exe
FirewallRules: [UDP Query User{329E50C5-1D43-40B1-AE0C-DF02A1473FFA}D:\spiele\medal of honor allied assault war chest\moh_breakthrough.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\moh_breakthrough.exe
FirewallRules: [TCP Query User{1ABB671C-E149-4942-90E0-2FB13CF7EA4F}D:\spiele\street fighter x tekken complete pack\sftk.exe] => (Allow) D:\spiele\street fighter x tekken complete pack\sftk.exe
FirewallRules: [UDP Query User{EDFA809B-57F0-462A-B2AA-19CD31295828}D:\spiele\street fighter x tekken complete pack\sftk.exe] => (Allow) D:\spiele\street fighter x tekken complete pack\sftk.exe
FirewallRules: [TCP Query User{6608EC4A-642D-47C4-AD82-C8174517D431}D:\spiele\medal of honor allied assault war chest\moh_spearhead.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\moh_spearhead.exe
FirewallRules: [UDP Query User{F3A2D79C-8F64-4056-9DA6-9D402E8BCB68}D:\spiele\medal of honor allied assault war chest\moh_spearhead.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\moh_spearhead.exe
FirewallRules: [TCP Query User{2203F989-B0FB-4A66-B5AC-7606BEEE091E}D:\downloads\fo4\igg-dead.by.daylight.v1.0\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\downloads\fo4\igg-dead.by.daylight.v1.0\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [UDP Query User{1A43CF24-88C0-4887-9A94-04DFD8A1B8FD}D:\downloads\fo4\igg-dead.by.daylight.v1.0\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\downloads\fo4\igg-dead.by.daylight.v1.0\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe
FirewallRules: [{15842196-AF0E-4252-8B98-1B0C1BD6F6C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{C5EDC8EF-6825-4B8C-BB28-47C641330927}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{71654F9A-49E1-4DB8-90D1-E6FDEE57BB02}D:\spiele\dovetail games flight school\fsc.exe] => (Allow) D:\spiele\dovetail games flight school\fsc.exe
FirewallRules: [UDP Query User{389B68A3-BDB8-4CC7-B5F1-B9EAD578C78D}D:\spiele\dovetail games flight school\fsc.exe] => (Allow) D:\spiele\dovetail games flight school\fsc.exe
FirewallRules: [TCP Query User{9022ED3A-732F-4D6B-B4A2-039E2232E84D}D:\spiele\ghostbusters\ghostbusters\binaries\win64\ghostbusters.exe] => (Allow) D:\spiele\ghostbusters\ghostbusters\binaries\win64\ghostbusters.exe
FirewallRules: [UDP Query User{50273C90-0B32-483A-82AB-CE40A761D30A}D:\spiele\ghostbusters\ghostbusters\binaries\win64\ghostbusters.exe] => (Allow) D:\spiele\ghostbusters\ghostbusters\binaries\win64\ghostbusters.exe
FirewallRules: [TCP Query User{A09AC952-684E-4B97-9EFD-1E9962A6A6C6}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{339B0FA0-5B3B-4771-B2CC-A7B468AB37BF}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{CAA3658F-D1DC-499D-A613-9D1FE46AC2EC}] => (Allow) D:\Spiele\OMC ModPack Client\OMC ModPack Client.exe
FirewallRules: [{7E1EC7E7-AD73-4F85-9297-13EB50549D60}] => (Allow) C:\Users\Alex\AppData\Local\Temp\MPCOnline\MPCDownload.exe
FirewallRules: [{5DABB8C9-E523-4BC0-B006-53BBB5DF8814}] => (Allow) C:\Users\Alex\AppData\Local\Temp\MPCOnline\MPCDownload.exe
FirewallRules: [{2D262BCC-E6F4-4697-87CB-E62DEBB048DC}] => (Allow) D:\Spiele\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{43DC8776-57FD-40B5-91B0-CBD2C03C5632}] => (Allow) D:\Spiele\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{012D1E29-64E0-446B-83D6-0A35E49F4953}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

12-09-2016 10:33:38 Malwarebytes Anti-Rootkit Restore Point
13-09-2016 20:15:41 JRT Pre-Junkware Removal
13-09-2016 20:44:23 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/13/2016 09:06:07 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.

Error: (09/13/2016 09:05:09 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.

Error: (09/13/2016 09:05:08 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.

Error: (09/13/2016 09:04:58 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "c:\users\alex\downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.

Error: (09/13/2016 08:53:36 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.

Error: (09/13/2016 08:49:10 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.

Error: (09/13/2016 08:44:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/13/2016 08:16:09 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (09/13/2016 08:45:01 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: )
Description: Das Volume "(C:)" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057)

Error: (09/12/2016 10:33:54 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.


Systemfehler:
=============
Error: (09/13/2016 09:12:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/13/2016 09:12:13 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys

Error: (09/13/2016 09:12:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/13/2016 09:12:13 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys

Error: (09/13/2016 09:12:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/13/2016 09:12:13 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys

Error: (09/13/2016 09:07:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/13/2016 09:07:41 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys

Error: (09/13/2016 09:07:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (09/13/2016 09:07:41 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys


CodeIntegrity:
===================================
  Date: 2016-09-12 21:35:11.184
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:19:58.169
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:19:58.150
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:19:58.102
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:19:57.838
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:19:57.817
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:19:57.750
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:15:51.278
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:15:51.256
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-09-12 08:15:51.232
  Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: AMD Phenom(tm) II X4 945 Processor
Prozentuale Nutzung des RAM: 37%
Installierter physikalischer RAM: 8190.11 MB
Verfügbarer physikalischer RAM: 5119.13 MB
Summe virtueller Speicher: 8702.11 MB
Verfügbarer virtueller Speicher: 5784.96 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:146.04 GB) (Free:25.27 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: () (Fixed) (Total:319.27 GB) (Free:67.11 GB) NTFS
Drive f: (HITACHI) (Fixed) (Total:931.28 GB) (Free:111.51 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A8DAA8DA)
Partition 1: (Active) - (Size=146 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=450 MB) - (Type=27)
Partition 3: (Not Active) - (Size=319.3 GB) - (Type=OF Extended)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 0DEE6153)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C)

==================== Ende von Addition.txt ============================
         

 

Themen zu chrome: ständig neue tabs und meldungen von reimage
avira, avp, desktop, flash player, google, helper, homepage, installation, kaspersky, mozilla, object, openvpn, popup, problem, proxy, prozesse, realtek, registry, scan, security, services.exe, software, super, system, werbung, windows, windows xp, windowsapps




Ähnliche Themen: chrome: ständig neue tabs und meldungen von reimage


  1. Win 10 seit 20.4 ständig neue Trojaner Meldungen
    Log-Analyse und Auswertung - 29.04.2016 (28)
  2. Problem mit selbstständigen øffnen neuer Tabs und Popups (Reimage) im google chrome
    Plagegeister aller Art und deren Bekämpfung - 24.03.2016 (14)
  3. Ständig Neue Tabs mit Werbung im Chrome
    Plagegeister aller Art und deren Bekämpfung - 07.02.2016 (10)
  4. Chrome öffnet ständig neue Tabs mit Werbung (Windows 7 )
    Log-Analyse und Auswertung - 22.01.2016 (11)
  5. Google Chrome öffnet ungewollt neue Tabs
    Plagegeister aller Art und deren Bekämpfung - 11.01.2016 (12)
  6. Google Chrome öffnet ständig neue Tabs mit Werbung und Warnungen
    Plagegeister aller Art und deren Bekämpfung - 22.12.2015 (11)
  7. WIN 7, Werbung (neue Tabs und Banner) im Chrome
    Log-Analyse und Auswertung - 21.12.2015 (25)
  8. Firefox lädt ständig - ununterbrochen neu/Werbung/neue Tabs/neue Fenster
    Log-Analyse und Auswertung - 28.10.2015 (11)
  9. Chrome öffnet automatisch neue Tabs mit Werbung
    Plagegeister aller Art und deren Bekämpfung - 13.05.2015 (29)
  10. Windows 7: Ständig neue Werbeanzeigen sowie neue Fenster öffnen sich in Chrome
    Plagegeister aller Art und deren Bekämpfung - 12.03.2015 (15)
  11. Chrome öffnet automatisch neue Tabs
    Log-Analyse und Auswertung - 30.01.2015 (15)
  12. Windows 7: Ständig neue Werbeanzeigen sowie neue Fenster öffnen sich in Chrome.
    Plagegeister aller Art und deren Bekämpfung - 13.01.2015 (10)
  13. Web-Browser Google Chrome öffnet ständig Werbe-Fenster und neue Tabs
    Plagegeister aller Art und deren Bekämpfung - 15.10.2014 (11)
  14. Chrome lädt neue tabs extrem langsam/ Lag bei mehreren offenen Tabs
    Log-Analyse und Auswertung - 11.10.2014 (14)
  15. Windows 7 Ultimate: Google Chrome öffnet von alleine neue Fenster mit Werbung oder neue Tabs
    Plagegeister aller Art und deren Bekämpfung - 28.04.2014 (19)
  16. Ständigen Popup-Meldungen, neue Tabs, keine WLAN-Verbindung mehr möglich
    Plagegeister aller Art und deren Bekämpfung - 09.12.2013 (13)
  17. neue Tabs mit Werbung in Google Chrome
    Plagegeister aller Art und deren Bekämpfung - 10.09.2013 (13)

Zum Thema chrome: ständig neue tabs und meldungen von reimage - Hallo. Habe nun zum zweiten mal das Problem das sich ständig neue Tabs in Chrome öffnen und da Werbung oder eine meldung von Reimage kommt. Habe schon mal FRST durchlaufen - chrome: ständig neue tabs und meldungen von reimage...
Archiv
Du betrachtest: chrome: ständig neue tabs und meldungen von reimage auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.