![]() |
|
Plagegeister aller Art und deren Bekämpfung: chrome: ständig neue tabs und meldungen von reimageWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() ![]() ![]() | ![]() chrome: ständig neue tabs und meldungen von reimage Hallo. Habe nun zum zweiten mal das Problem das sich ständig neue Tabs in Chrome öffnen und da Werbung oder eine meldung von Reimage kommt. Habe schon mal FRST durchlaufen lassen! ![]() Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-09-2016 durchgeführt von Alex (Administrator) auf PEACHY (13-09-2016 21:12:52) Gestartet von C:\Users\Alex\Downloads Geladene Profile: Alex (Verfügbare Profile: Alex & Administrator & DefaultAppPool) Platform: Windows 10 Pro Version 1511 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corporation) C:\Windows\System32\mqsvc.exe (Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe () C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor) HKLM\...\Run: [XMouseButtonControl] => C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1075344 2014-12-08] (Highresolution Enterprises) HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\nvspcap64.dll [1860120 2016-01-12] (NVIDIA Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2787264 2016-01-12] (NVIDIA Corporation) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated) HKLM\...\Run: [CmPCIaudio] => C:\WINDOWS\Syswow64\CMICNFG3.dll [8151040 2009-10-30] (C-Media Corporation) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: ["C:\Program Files (x86)\D-Link\D-ViewCam\MainConsole.EXE"] => "C:\Program Files (x86)\D-Link\D-ViewCam\MainConsole.EXE" RunWithWindows HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [60136 2016-08-24] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation) HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files (x86)\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd) HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [EPSON SX125 Series] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGGE.EXE [224768 2009-09-14] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [World of Tanks] => D:\Spiele\World_of_Tanks\WargamingGameUpdater.exe [3134728 2016-08-05] (Wargaming.net) HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Run: [TomTomHOME.exe] => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: H - "H:\AutoRun.exe" HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: {0f748fbf-2152-11e5-8233-50465d90560b} - "N:\setup.exe" HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: {75d42f49-1b0e-11e5-ac3c-50465d90560b} - "G:\setup.exe" HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: {94b3fc27-1c9b-11e5-ac5a-50465d90560b} - "H:\setup.exe" HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MountPoints2: {e3802153-18aa-11e5-ab60-50465d90560b} - "N:\setup.exe" GroupPolicy: Beschränkung - Chrome <======= ACHTUNG CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{2a94d664-f07c-4e02-a516-4e233f0db8d2}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{faa03109-abab-40bf-9edb-fcd71145efd5}: [DhcpNameServer] 192.168.224.1 ManualProxies: Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank HKU\S-1-5-21-2927967124-101175508-2003510897-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.giga.de/androidnews/ SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-09-07] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-07] (Oracle Corporation) BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2014-08-12] (Adblock Plus) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-07] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-07] (Oracle Corporation) BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2014-08-12] (Adblock Plus) Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\system32\mscoree.dll [2015-10-30] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\n4plk0l5.Alex FF Homepage: www.google.de FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] () FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-07] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-07] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-06-08] (Unity Technologies ApS) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-09-19] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-04-17] (Adobe Systems, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Keine Datei] FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Keine Datei] FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Keine Datei] FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [Keine Datei] FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-07] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-07] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-01-23] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-01-23] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin HKU\S-1-5-21-2927967124-101175508-2003510897-1000: @my.com/Games -> C:\Users\Alex\AppData\Local\MyComGames\NPMyComDetector.dll [2016-02-03] (MY.COM B.V.) FF Plugin HKU\S-1-5-21-2927967124-101175508-2003510897-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Alex\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-12] (Unity Technologies ApS) FF SearchPlugin: C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\n4plk0l5.Alex\searchplugins\ezcclg65.xml [2016-09-12] FF Extension: (Firefox Hotfix) - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\n4plk0l5.Alex\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-10] FF Extension: (Adblock Plus) - C:\Users\Alex\AppData\Roaming\Mozilla\Firefox\Profiles\n4plk0l5.Alex\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-08-14] Chrome: ======= CHR HomePage: ChromeDefaultData -> hxxp://www.google.de/ CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-12] CHR Extension: (Fast Social for Google Chrome™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\bkgibcbnbhhkelflcgappdalfbopghof [2016-09-12] CHR Extension: (Avira Browserschutz) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-12] CHR Extension: (AdBlock) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-09-12] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-12] CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-12] CHR Profile: C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Präsentationen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-07-26] CHR Extension: (Google Docs) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-26] CHR Extension: (Google Drive) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-26] CHR Extension: (Fast Social for Google Chrome™) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkgibcbnbhhkelflcgappdalfbopghof [2016-09-06] CHR Extension: (YouTube) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-26] CHR Extension: (Adblock Plus) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-08-23] CHR Extension: (Google Tabellen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-07-26] CHR Extension: (Myinstants Soundboard) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\fggacdedkdoacbemcilniodecinpfkgi [2016-08-30] CHR Extension: (Avira Browserschutz) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-09-08] CHR Extension: (Google Docs Offline) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-26] CHR Extension: (AdBlock) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-24] CHR Extension: (mydlink services plugin) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldibdoepbjbkkcbgndfljnphngpglhbb [2016-07-26] CHR Extension: (Google Maps) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2016-07-26] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-26] CHR Extension: (Mein Chrome-Design) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2016-07-26] CHR Extension: (SEGA GENESIS / SEGA Mega Drive Emulator) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofnmgamcdbdieifheiiphnbbbcaofcbc [2016-07-26] CHR Extension: (Emulador de Super Nintendo) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pffhngmcplldclknnkmkkecjlhhccmid [2016-07-26] CHR Extension: (Google Mail) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-26] CHR Extension: (RHS) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkaifndebjpbndephomibbjjbnokmfab [2016-09-06] CHR Extension: (Chrome Media Router) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-29] CHR Extension: (Audio Cutter) - C:\Users\Alex\AppData\Local\Google\Chrome\User Data\Default\Extensions\plimnkafgoiilijmlbnfoafihjjijbfp [2016-09-08] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [346928 2016-08-24] (Avira Operations GmbH & Co. KG) S2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [253392 2016-08-26] (Avira Operations GmbH & Co. KG) R3 Disc Soft Lite Bus Service; C:\Program Files (x86)\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd) S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [232208 2016-07-01] (EasyAntiCheat Ltd) S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-12-03] (Freemake) [Datei ist nicht signiert] R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-01-12] (NVIDIA Corporation) S4 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert] R2 JoropygrosakDebuger; C:\Program Files (x86)\Prerpetaincliiph\clhBuilder.dll [301568 2016-09-12] () [Datei ist nicht signiert] S4 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-01-12] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6308288 2016-01-12] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4812736 2016-01-12] (NVIDIA Corporation) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1310448 2016-09-07] (Overwolf LTD) S3 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation) S2 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [580144 2015-05-12] (WiseCleaner.com) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13368 2009-04-06] () R3 cmuda3; C:\Windows\system32\drivers\cmudax3.sys [1155072 2009-12-01] (C-Media Inc) S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-06-22] (Disc Soft Ltd) R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [27552 2015-11-04] (REALiX(tm)) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes) S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation) R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] () R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-01-12] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek ) S3 Secdrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [20128 2016-01-15] () [Datei ist nicht signiert] S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.) S3 ssudserd; C:\Windows\system32\DRIVERS\ssudserd.sys [221824 2016-04-25] (Samsung Electronics Co., Ltd.) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [14800 2015-07-31] (wisecleaner.com) R1 WiseUnlock; C:\WINDOWS\WiseUnlock64.sys [12240 2015-05-19] (WiseCleaner.com) U3 idsvc; kein ImagePath S3 vmci; \SystemRoot\System32\drivers\vmci.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-09-13 21:12 - 2016-09-13 21:13 - 00023834 _____ C:\Users\Alex\Downloads\FRST.txt 2016-09-13 21:12 - 2016-09-13 21:12 - 02398720 _____ (Farbar) C:\Users\Alex\Downloads\FRST64.exe 2016-09-13 21:12 - 2016-09-13 21:12 - 00000000 ____D C:\FRST 2016-09-13 21:10 - 2016-09-13 21:10 - 04747704 _____ (AO Kaspersky Lab) C:\Users\Alex\Downloads\tdsskiller.exe 2016-09-13 21:04 - 2016-09-13 21:04 - 02870984 _____ (ESET) C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe 2016-09-13 21:02 - 2016-09-13 21:02 - 00002296 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-09-13 21:02 - 2016-09-13 21:02 - 00002284 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-09-13 21:00 - 2016-09-13 21:05 - 00001120 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-09-13 21:00 - 2016-09-13 21:05 - 00001116 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-09-13 21:00 - 2016-09-13 21:00 - 01065376 _____ (Google Inc.) C:\Users\Alex\Downloads\ChromeSetup(1).exe 2016-09-13 21:00 - 2016-09-13 21:00 - 00004178 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2016-09-13 21:00 - 2016-09-13 21:00 - 00003946 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2016-09-13 20:58 - 2016-09-13 20:58 - 00152744 _____ C:\Users\Alex\Desktop\bookmarks.html 2016-09-13 20:47 - 2016-09-13 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller 2016-09-13 20:47 - 2016-09-13 20:47 - 00000000 ____D C:\Program Files\VS Revo Group 2016-09-13 20:14 - 2016-09-13 20:45 - 07093624 _____ (VS Revo Group ) C:\Users\Alex\Downloads\revosetup_2.0.exe 2016-09-13 20:13 - 2016-09-13 20:15 - 01610560 _____ (Malwarebytes) C:\Users\Alex\Downloads\JRT.exe 2016-09-12 08:13 - 2016-09-12 08:13 - 00009012 _____ C:\WINDOWS\System32\Tasks\Joropygrosak Debuger 2016-09-12 08:13 - 2016-09-12 08:13 - 00000046 _____ C:\WINDOWS\Joberphlusisp 2016-09-12 08:13 - 2016-09-12 08:13 - 00000000 ____D C:\ProgramData\Avg 2016-09-12 08:13 - 2016-09-12 08:13 - 00000000 ____D C:\ProgramData\AVAST Software 2016-09-12 08:12 - 2016-09-12 10:35 - 00000000 ____D C:\Program Files (x86)\Prerpetaincliiph 2016-09-12 08:12 - 2016-09-12 09:55 - 00000000 ____D C:\Users\Alex\AppData\Local\Sejoge 2016-09-12 08:10 - 2016-09-12 10:35 - 00000000 ____D C:\Users\Alex\AppData\Roaming\MyTransitGuide 2016-09-12 08:08 - 2016-09-12 08:08 - 01208320 _____ C:\Users\Alex\Downloads\fernbus_simulator_conspir4cy_crackrar.img 2016-09-11 22:59 - 2016-09-11 22:59 - 00000000 ____D C:\Users\Alex\Documents\The.Task 2016-09-11 22:28 - 2016-09-11 22:28 - 00000000 ____D C:\Users\Alex\AppData\LocalLow\uTorrent 2016-09-11 21:34 - 2016-09-11 21:34 - 00016719 _____ C:\Users\Alex\Downloads\Fernbus_Simulator_2016.torrent 2016-09-11 19:42 - 2016-09-11 19:44 - 109132576 _____ C:\Users\Alex\Downloads\LMFAO_-_Sorry_For_Party_Rocking-2011-MOD.rar 2016-09-10 09:42 - 2016-09-10 09:42 - 01793045 _____ C:\Users\Alex\Downloads\187096_12.rar 2016-09-10 09:32 - 2016-09-10 09:32 - 03557465 _____ C:\Users\Alex\Downloads\FIFA 15 Latest Squads file by Mark.rar 2016-09-08 22:27 - 2016-09-08 22:27 - 00001032 _____ C:\Users\Alex\Desktop\fifa15.exe - Verknüpfung.lnk 2016-09-08 21:29 - 2016-09-08 21:33 - 00000000 ____D C:\Users\Alex\Documents\FIFA 15 2016-09-08 18:54 - 2016-09-08 18:54 - 00026052 ____N C:\Users\Alex\Downloads\88340998f9d272bb5a71c5b978fb316b42cc1347.dlc 2016-09-08 16:46 - 2016-09-08 16:46 - 00000000 ____D C:\Users\Alex\Documents\Soundaufnahmen 2016-09-07 22:17 - 2016-09-12 08:13 - 00000000 ____D C:\ProgramData\Avira 2016-09-07 22:17 - 2016-09-07 22:17 - 04446224 _____ (Avira Operations GmbH & Co. KG) C:\Users\Alex\Downloads\avira_de_avpn0_57d075bcae606__def.exe 2016-09-07 22:17 - 2016-09-07 22:17 - 00001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira Phantom VPN.lnk 2016-09-07 22:17 - 2016-09-07 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2016-09-07 21:03 - 2016-09-07 21:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atari 2016-09-07 20:28 - 2016-09-07 20:28 - 00014357 _____ C:\Users\Alex\Downloads\RollerCoaster.Tycoon.World.Early.Access.torrent 2016-09-07 20:26 - 2016-09-07 20:35 - 566719036 _____ C:\Users\Alex\Downloads\Rcsrtycnpltn.rar 2016-09-07 20:21 - 2016-09-07 20:21 - 00003342 _____ C:\WINDOWS\System32\Tasks\{F823577C-328F-42E1-82E8-273F76E8E0F2} 2016-09-07 14:31 - 2016-09-07 14:31 - 86921726 _____ C:\Users\Alex\Downloads\LStThViC.rar 2016-09-07 14:30 - 2016-09-08 16:45 - 00000000 ____D C:\Users\Alex\Desktop\Lindsey Stirling 2016-09-07 14:30 - 2016-09-07 14:30 - 137263509 _____ C:\Users\Alex\Downloads\%2FLindsey_Stirling-Lindsey_Stirling-%28Deluxe_Edition%29-2013-C4.zip 2016-09-07 14:29 - 2016-09-07 14:32 - 118347516 _____ C:\Users\Alex\Downloads\Lindsey_Stirling-Brave_Enough-%28Limited_Deluxe_Edition%29-2016-C4.rar 2016-09-07 14:29 - 2016-09-07 14:30 - 111660182 _____ C:\Users\Alex\Downloads\Lindsey_Stirling-Shatter_Me-%28Deluxe_Edition%29-2014-C4.rar 2016-09-07 14:26 - 2016-09-07 14:25 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll 2016-09-07 14:24 - 2016-09-07 14:24 - 01196752 _____ (Adobe Systems Incorporated) C:\Users\Alex\Downloads\flashplayer22_xa_install.exe 2016-09-07 13:09 - 2016-09-07 13:13 - 01028096 ____N C:\Users\Alex\Downloads\Fernbus Simulator Free.img 2016-09-06 15:31 - 2016-09-13 20:44 - 00000000 ____D C:\Users\Alex\Desktop\mbar 2016-09-06 13:11 - 2016-09-06 13:11 - 00594944 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Alex\Downloads\libeay32.dll 2016-09-06 13:11 - 2016-09-06 13:11 - 00152576 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Alex\Downloads\ssleay32.dll 2016-09-06 13:10 - 2016-09-06 13:10 - 00002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk 2016-09-06 13:10 - 2016-09-06 13:10 - 00002171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk 2016-09-06 13:10 - 2016-09-06 13:10 - 00000608 __RSH C:\ProgramData\ntuser.pol 2016-09-06 13:10 - 2016-09-06 13:10 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-09-06 13:10 - 2016-09-06 13:10 - 00000000 ____D C:\Program Files (x86)\FastSocial 2016-09-06 13:08 - 2016-09-06 13:08 - 00000381 _____ C:\Users\Alex\Downloads\FF16 TOR.txt 2016-09-06 08:34 - 2016-09-12 10:34 - 00000000 ____D C:\AdwCleaner 2016-09-06 08:34 - 2016-09-06 08:34 - 03826240 _____ C:\Users\Alex\Downloads\AdwCleaner_6.010.exe 2016-09-05 09:57 - 2016-09-05 09:57 - 01144832 _____ C:\Users\Alex\Downloads\Crack Setup.img 2016-09-02 20:44 - 2016-09-02 20:44 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Promotion Software GmbH 2016-09-02 20:39 - 2016-09-02 20:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Deep Silver 2016-08-31 15:26 - 2016-08-31 15:26 - 00134808 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_ddjergopads (1).exe 2016-08-30 20:28 - 2016-08-30 20:28 - 00000553 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autobahn Police Simulator.lnk 2016-08-30 20:24 - 2016-08-30 20:24 - 00000580 _____ C:\Users\Alex\Downloads\windowsmediaplayer (2).asx 2016-08-30 13:45 - 2016-08-30 13:46 - 00000000 ____D C:\Program Files (x86)\MP3Gain 2016-08-30 13:45 - 2016-08-30 13:45 - 01474568 _____ C:\Users\Alex\Downloads\MP3Gain - CHIP-Installer (1).exe 2016-08-30 13:45 - 2016-08-30 13:45 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain 2016-08-30 13:42 - 2016-08-30 13:42 - 01474568 _____ C:\Users\Alex\Downloads\wxMP3Gain - CHIP-Installer.exe 2016-08-30 11:43 - 2016-08-30 11:43 - 01474568 _____ C:\Users\Alex\Downloads\MP3Gain - CHIP-Installer.exe 2016-08-30 09:52 - 2005-05-17 15:39 - 00349265 _____ C:\Users\Alex\Desktop\tvtotalnippelboard.swf 2016-08-30 09:50 - 2016-08-30 09:52 - 395414331 _____ () C:\Users\Alex\Downloads\GLP - Soundboard Setup.exe 2016-08-30 09:48 - 2016-08-30 09:48 - 01474568 _____ C:\Users\Alex\Downloads\Stefan Raabs TV Total Nippelboard - CHIP-Installer.exe 2016-08-29 21:18 - 2016-08-29 21:18 - 00134808 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_ddjergopads.exe 2016-08-29 21:15 - 2016-08-29 21:16 - 02000360 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_blacksheephd.exe 2016-08-29 20:53 - 2016-08-29 20:55 - 04411520 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_x96byzanard.exe 2016-08-29 20:47 - 2016-08-29 20:56 - 03227864 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_pioneerxdjrxbyzaik.exe 2016-08-29 10:28 - 2009-10-30 04:39 - 08151040 ____N (C-Media Corporation) C:\WINDOWS\SysWOW64\CMICNFG3.dll 2016-08-29 10:28 - 2009-04-02 10:59 - 00143360 ____N C:\WINDOWS\SysWOW64\VmixP6.dll 2016-08-29 10:28 - 2008-07-23 12:59 - 00389120 ____N () C:\WINDOWS\system32\CMICNFG3.cpl 2016-08-29 10:28 - 2006-09-13 20:21 - 00200704 ____N (C-Media) C:\WINDOWS\SysWOW64\CMPaOxy.dll 2016-08-29 10:27 - 2016-08-29 10:28 - 00000188 _____ C:\WINDOWS\Cmicnfg3.ini.cfl 2016-08-29 10:27 - 2016-08-29 10:27 - 00792576 ____N C:\WINDOWS\system32\Cmeaupci.exe 2016-08-29 10:27 - 2016-08-29 10:27 - 00000183 _____ C:\WINDOWS\Cmicnfg3.ini.imi 2016-08-29 10:27 - 2016-08-29 10:27 - 00000130 _____ C:\WINDOWS\system\Dlap.pfx 2016-08-29 10:27 - 2016-08-29 10:27 - 00000122 _____ C:\WINDOWS\system\Cmicnfg3.ini 2016-08-29 10:27 - 2016-08-29 10:27 - 00000000 ____D C:\Users\Alex\Desktop\PCI-8738-091211-7.12.8.1740(W7-RC-01) 2016-08-29 10:27 - 2009-12-11 05:28 - 00002754 ____N C:\WINDOWS\cmudax3.ini 2016-08-29 10:27 - 2009-12-01 05:31 - 01155072 _____ (C-Media Inc) C:\WINDOWS\system32\Drivers\cmudax3.sys 2016-08-29 10:27 - 2009-08-19 10:00 - 00359424 ____N C:\WINDOWS\system32\CmiInstallResAll64.dll 2016-08-29 10:27 - 2008-10-15 09:41 - 00002123 ____N C:\WINDOWS\Cmicnfg3.ini.cfg 2016-08-29 10:27 - 2007-11-04 19:30 - 01144983 ____N C:\WINDOWS\SysWOW64\KB936225x64.msu 2016-08-29 10:27 - 2007-02-26 14:30 - 00036864 _____ (C-Media Electronics Ins.) C:\WINDOWS\system32\cmudax3.dll 2016-08-29 10:27 - 2006-10-05 23:45 - 00524768 _____ (Microsoft Corporation) C:\WINDOWS\difxapi.dll 2016-08-28 20:36 - 2016-08-28 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments 2016-08-28 20:36 - 2016-08-28 20:36 - 00000000 __HDC C:\ProgramData\{90D8CE90-3E6B-4034-A281-BC9F19B60A5B} 2016-08-28 20:36 - 2016-08-28 20:36 - 00000000 __HDC C:\ProgramData\{42DEBD12-9D09-4B77-B434-2EF604E45D3D} 2016-08-28 20:36 - 2016-08-28 20:36 - 00000000 ____D C:\ProgramData\Native Instruments 2016-08-28 20:36 - 2016-08-28 20:36 - 00000000 ____D C:\Program Files\Common Files\Native Instruments 2016-08-28 20:32 - 2016-08-28 20:33 - 244782432 _____ (Native Instruments ) C:\Users\Alex\Downloads\Traktor 2 2.10.3 Setup PC.exe 2016-08-28 20:32 - 2016-08-28 20:32 - 00000000 __HDC C:\ProgramData\{EB9C1D32-304E-4E8E-8D44-C4102A190A39} 2016-08-28 20:32 - 2016-08-28 20:32 - 00000000 ____D C:\Backup 2016-08-28 20:28 - 2016-08-28 20:28 - 00000000 ____D C:\Users\Alex\Desktop\DJ 2016-08-28 18:15 - 2016-09-13 15:38 - 00000000 ____D C:\Program Files (x86)\VirtualDJ 2016-08-28 18:15 - 2016-08-31 15:01 - 00000000 ____D C:\Users\Alex\Documents\VirtualDJ 2016-08-28 18:15 - 2016-08-28 18:15 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ 2016-08-28 18:14 - 2016-08-28 18:15 - 38203392 _____ C:\Users\Alex\Downloads\install_virtualdj_pc_v8.2.3343.msi 2016-08-28 17:52 - 2016-08-28 20:28 - 00000000 ____D C:\Users\Alex\AppData\Local\Mixxx 2016-08-28 17:48 - 2016-08-28 17:48 - 25035393 _____ C:\Users\Alex\Downloads\mixxx-2.0.0-win64.exe 2016-08-28 17:48 - 2016-08-28 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mixxx 2016-08-28 17:48 - 2016-08-28 17:48 - 00000000 ____D C:\Program Files\Mixxx 2016-08-28 17:41 - 2016-08-28 18:02 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software 2016-08-28 17:41 - 2016-08-28 17:41 - 00001123 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zulu DJ-Software.lnk 2016-08-28 17:41 - 2016-08-28 17:41 - 00000000 ____D C:\ProgramData\NCH Software 2016-08-28 17:41 - 2016-08-28 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette 2016-08-28 17:41 - 2016-08-28 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme 2016-08-28 17:41 - 2016-08-28 17:41 - 00000000 ____D C:\Program Files (x86)\NCH Software 2016-08-28 17:40 - 2016-08-28 17:40 - 00974560 _____ (NCH Software) C:\Users\Alex\Downloads\zulusetup.exe 2016-08-28 17:40 - 2016-08-28 17:40 - 00000000 ____D C:\Users\Alex\AppData\Roaming\NCH Software 2016-08-28 17:03 - 2016-08-28 17:03 - 38302328 _____ (Atomix Productions) C:\Users\Alex\Downloads\install_virtualdj_home_v7.4.6.exe 2016-08-27 15:10 - 2016-08-27 15:10 - 02929520 _____ (Odem Mortis ) C:\Users\Alex\Downloads\OMC_ModPack_Installer.exe 2016-08-26 15:21 - 2016-08-26 15:21 - 01106840 _____ (Unity Technologies ApS) C:\Users\Alex\Downloads\UnityWebPlayer64.exe 2016-08-26 14:25 - 2016-08-26 14:25 - 00035784 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\tap0901.sys 2016-08-25 21:58 - 2016-08-25 21:58 - 00000000 ____D C:\Users\Alex\Documents\Ghosthunters 2016-08-25 21:12 - 2016-08-25 21:12 - 00000580 _____ C:\Users\Alex\Downloads\windowsmediaplayer (1).asx 2016-08-23 22:19 - 2016-08-23 22:19 - 00000000 ____D C:\Users\Alex\Documents\Die Unfassbaren 2 2016-08-23 21:09 - 2016-08-23 21:09 - 00000000 ____D C:\Users\Alex\Documents\Die.wilden.Kerle.6.Die.Legende.lebt 2016-08-22 18:36 - 2016-08-22 18:36 - 00001187 _____ C:\Users\Alex\Desktop\Dynamo Dresden v RB Leipzig - DFB Pokal 1 Runde 2016_17_08.lnk 2016-08-22 18:25 - 2016-08-22 18:25 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Aspyr Media 2016-08-22 17:53 - 2016-08-22 17:53 - 00000744 _____ C:\Users\Public\Desktop\Layers of Fear - Masterpiece Edition.lnk 2016-08-22 17:52 - 2016-08-22 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloober Team SA 2016-08-20 15:42 - 2016-09-12 08:10 - 00000000 ____D C:\Users\Alex\Desktop\Musik 2016-08-18 21:09 - 2016-08-18 21:09 - 00003320 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task 2016-08-16 20:19 - 2016-08-16 20:19 - 00610769 _____ C:\Users\Alex\Downloads\depends22_x86.zip 2016-08-16 20:05 - 2016-08-16 20:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom 2016-08-16 20:05 - 2016-08-16 20:05 - 00000000 ____D C:\Users\Alex\Documents\TomTom 2016-08-16 20:05 - 2016-08-16 20:05 - 00000000 ____D C:\Users\Alex\AppData\Roaming\TomTom 2016-08-16 20:05 - 2016-08-16 20:05 - 00000000 ____D C:\Users\Alex\AppData\Local\TomTom 2016-08-16 20:03 - 2016-08-16 20:03 - 29403160 _____ C:\Users\Alex\Downloads\TomTomHOME2winlatest.exe 2016-08-16 20:00 - 2016-08-16 20:00 - 37565768 _____ (TomTom International B.V.) C:\Users\Alex\Downloads\InstallMyDriveConnect.exe 2016-08-16 20:00 - 2016-08-16 20:00 - 00000000 ____D C:\Program Files (x86)\TomTom International B.V 2016-08-14 22:26 - 2016-08-14 22:26 - 00000000 ____D C:\Users\Alex\Desktop\Flo Exklusiv 2016-08-14 19:44 - 2016-08-14 22:25 - 00000000 ____D C:\Users\Alex\Desktop\Neuer Ordner (4) 2016-08-14 17:41 - 2016-08-14 17:41 - 69347755 _____ C:\Users\Alex\Desktop\bob der Zug Tierstimme Song.mp4 2016-08-14 11:04 - 2016-08-14 11:04 - 00033791 _____ C:\Users\Alex\Downloads\tfp_1_2.pdf ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-09-13 21:02 - 2015-08-06 17:26 - 00004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9976B872-EBCD-4E3B-A512-199270B5525F} 2016-09-13 21:02 - 2014-12-31 21:03 - 00000000 ____D C:\Program Files (x86)\Google 2016-09-13 20:55 - 2015-03-30 17:38 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2016-09-13 20:50 - 2016-07-25 15:29 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2016-09-13 20:44 - 2016-07-20 12:07 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2016-09-13 20:11 - 2015-04-01 12:15 - 00000000 ____D C:\Program Files (x86)\Overwolf 2016-09-13 20:08 - 2016-07-20 12:07 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2016-09-13 20:08 - 2016-07-20 12:06 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys 2016-09-13 11:55 - 2016-03-24 18:55 - 06502080 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe 2016-09-13 11:55 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2016-09-13 11:55 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\Macromed 2016-09-13 08:45 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-09-13 08:45 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-09-13 08:34 - 2015-07-31 20:20 - 00002127 _____ C:\Users\Public\Desktop\Wise Care 365.lnk 2016-09-13 08:32 - 2015-05-04 14:56 - 00000000 ____D C:\Program Files (x86)\Steam 2016-09-12 10:37 - 2015-07-31 20:20 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Wise Care 365 2016-09-12 10:35 - 2015-12-22 17:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-09-12 10:35 - 2015-12-22 16:39 - 00000000 ____D C:\ProgramData\NVIDIA 2016-09-12 10:35 - 2015-10-30 09:24 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2016-09-12 10:35 - 2015-10-30 08:28 - 01048576 ___SH C:\WINDOWS\system32\config\BBI 2016-09-12 10:29 - 2014-12-31 21:46 - 00000000 ____D C:\Users\Alex\AppData\Roaming\vlc 2016-09-12 08:12 - 2016-07-25 12:45 - 00000000 ____D C:\Program Files\Mozilla Firefox 2016-09-12 01:15 - 2015-01-04 22:19 - 00000000 ____D C:\Users\Alex\AppData\Roaming\uTorrent 2016-09-12 01:15 - 2015-01-02 16:17 - 00000000 ____D C:\Users\Alex\AppData\Local\JDownloader v2.0 2016-09-11 23:20 - 2015-12-22 16:42 - 02113470 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-09-11 23:20 - 2015-10-30 20:35 - 00898170 _____ C:\WINDOWS\system32\perfh007.dat 2016-09-11 23:20 - 2015-10-30 20:35 - 00201656 _____ C:\WINDOWS\system32\perfc007.dat 2016-09-11 23:20 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-09-11 22:43 - 2015-07-03 15:08 - 00000000 ____D C:\Program Files (x86)\Rockstar Games 2016-09-11 22:42 - 2015-07-03 15:19 - 00000000 ____D C:\Program Files\Rockstar Games 2016-09-09 22:07 - 2015-12-22 16:43 - 00000000 ____D C:\Users\Alex 2016-09-08 22:27 - 2015-01-02 20:33 - 00000000 ____D C:\Users\Alex\Documents\My Games 2016-09-08 13:14 - 2015-10-01 21:05 - 00000000 ____D C:\Users\Alex\AppData\Local\MyComGames 2016-09-08 12:28 - 2015-01-01 12:08 - 00000000 ____D C:\Users\Alex\Desktop\Spiele 2016-09-08 12:00 - 2015-08-21 10:33 - 00000000 ____D C:\Users\Alex\AppData\Local\CrashDumps 2016-09-07 22:17 - 2014-12-31 21:29 - 00000000 ____D C:\ProgramData\Package Cache 2016-09-07 22:17 - 2014-12-31 21:27 - 00000000 ____D C:\Program Files (x86)\Avira 2016-09-07 20:20 - 2015-01-03 13:40 - 00000000 ____D C:\Users\Alex\AppData\Local\ElevatedDiagnostics 2016-09-07 14:33 - 2015-03-30 20:16 - 00000000 ____D C:\ProgramData\Oracle 2016-09-07 14:26 - 2015-09-13 09:21 - 00000000 ____D C:\Users\Alex\.oracle_jre_usage 2016-09-07 14:26 - 2015-06-17 14:50 - 00000000 ____D C:\Program Files (x86)\Java 2016-09-07 14:26 - 2015-03-30 17:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-09-07 14:25 - 2016-02-19 14:31 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2016-09-07 14:25 - 2015-06-17 14:51 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2016-09-07 14:25 - 2015-06-17 14:51 - 00000000 ____D C:\Program Files\Java 2016-09-07 14:24 - 2015-01-01 21:08 - 00000000 ____D C:\Users\Alex\AppData\Local\Adobe 2016-09-07 13:07 - 2014-12-31 20:52 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-09-06 13:09 - 2016-07-26 21:31 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps 2016-09-04 19:09 - 2015-01-31 12:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-09-02 09:12 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-09-02 09:12 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-08-29 16:38 - 2015-02-01 10:39 - 00000000 ____D C:\ProgramData\Ultra Vision Video Converter 2016-08-29 10:29 - 2016-01-17 10:33 - 00387176 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-08-29 10:27 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\System 2016-08-27 15:56 - 2015-09-03 19:56 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack 2016-08-27 15:10 - 2015-09-03 18:58 - 00000000 ____D C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\OMC ModPack Client 2016-08-27 13:19 - 2015-11-10 14:32 - 00000000 ____D C:\Users\Alex\AppData\Local\UnrealEngine 2016-08-27 09:24 - 2015-05-14 17:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ravenscourt 2016-08-22 18:55 - 2016-01-31 10:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Square Enix 2016-08-21 09:21 - 2015-08-17 19:42 - 00000000 ___RD C:\Users\Alex\Desktop\Bildbearbeitung 2016-08-20 15:21 - 2015-02-26 12:41 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird 2016-08-18 21:09 - 2015-08-04 19:56 - 00002416 _____ C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-08-18 21:09 - 2015-08-04 19:56 - 00000000 ___RD C:\Users\Alex\OneDrive 2016-08-16 20:03 - 2015-11-27 21:53 - 00000000 ____D C:\Users\Alex\AppData\Local\Downloaded Installations ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-11-15 18:22 - 2015-11-15 10:52 - 0012879 _____ () C:\Users\Alex\AppData\Roaming\alsoft.ini 2016-06-02 10:48 - 2016-06-02 10:49 - 266040255 _____ () C:\Users\Alex\AppData\Local\ACCCx3_6_0_248.zip 2015-04-10 15:38 - 2015-04-10 15:38 - 0004608 _____ () C:\Users\Alex\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-07-04 18:01 - 2015-07-04 18:02 - 0003072 _____ () C:\Users\Alex\AppData\Local\file__0.localstorage 2015-07-24 20:25 - 2015-07-24 20:25 - 0000092 _____ () C:\Users\Alex\AppData\Local\fusioncache.dat 2015-11-18 12:41 - 2015-11-18 12:41 - 0000017 _____ () C:\Users\Alex\AppData\Local\resmon.resmoncfg 2015-12-22 16:38 - 2015-12-22 16:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl Einige Dateien in TEMP: ==================== C:\Users\Alex\AppData\Local\Temp\jre-8u101-windows-au.exe C:\Users\Alex\AppData\Local\Temp\libeay32.dll C:\Users\Alex\AppData\Local\Temp\msvcr120.dll C:\Users\Alex\AppData\Local\Temp\proxy_vole4506188439364049303.dll C:\Users\Alex\AppData\Local\Temp\sqlite3.dll C:\Users\Alex\AppData\Local\Temp\VirtualDJ New Version.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-09-07 17:36 ==================== Ende von FRST.txt ============================ Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-09-2016 durchgeführt von Alex (13-09-2016 21:14:00) Gestartet von C:\Users\Alex\Downloads Windows 10 Pro Version 1511 (X64) (2015-12-22 15:12:12) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2927967124-101175508-2003510897-500 - Administrator - Enabled) => C:\Users\Administrator Alex (S-1-5-21-2927967124-101175508-2003510897-1000 - Administrator - Enabled) => C:\Users\Alex DefaultAccount (S-1-5-21-2927967124-101175508-2003510897-503 - Limited - Disabled) Gast (S-1-5-21-2927967124-101175508-2003510897-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2927967124-101175508-2003510897-1005 - Limited - Enabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) µTorrent (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\uTorrent) (Version: 3.4.8.42576 - BitTorrent Inc.) 18 Wheels of Steel Extreme Trucker 2 (HKLM-x32\...\{A2B65355-E44A-4662-9533-AB5A4A3533ED}) (Version: 1.00.0000 - Valusoft) AbiWord 2.9.4 (HKLM-x32\...\AbiWord2) (Version: 2.9.4 - AbiSource Developers) Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{123A22CB-6D84-4135-A71F-886C9119E996}) (Version: 99.9 - Eyeo GmbH) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated) Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated) Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.0 - Adobe Systems Incorporated) Adobe Photoshop Lightroom 5.7 64-bit (HKLM\...\{1B77B02E-17E4-4B6D-B8A1-74B29AF3D8DD}) (Version: 5.7.0 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\{0E3C52E0-B4F1-4D1E-B172-E390813BD9FE}) (Version: 12.1.8.158 - Adobe Systems, Inc) Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.2.0.3 - Aerosoft) AIMP (HKLM-x32\...\AIMP) (Version: v4.02.1725, 11.06.2016 - AIMP DevTeam) AKVIS Sketch (HKLM\...\{AC0BAA05-28E6-4911-B3F3-0AE2EB0F54A1}) (Version: 17.0.2946.11963 - AKVIS) Armored Warfare MyCom (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Armored Warfare MyCom) (Version: 1.96 - My.com B.V.) Armored Warfare MyCom Beta (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\Armored Warfare MyCom Beta) (Version: 1.59 - My.com B.V.) ATI Catalyst Install Manager (HKLM\...\{62140B07-129A-2BD0-81D2-2A1A7408ADC8}) (Version: 3.0.762.0 - ATI Technologies, Inc.) Auslogics DiskDefrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: 6.2.1.0 - Auslogics Labs Pty Ltd) Autobahn Police Simulator MULTI4 (HKLM\...\YXV0b2JhaG5wb2xpY2VzaW11bGF0b3I_is1) (Version: 1 - ) Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.8.9046 - ) Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG) Avira Launcher (HKLM-x32\...\{af1966e2-5e60-4d93-8a48-c21462a87e3c}) (Version: 1.2.71.9779 - Avira Operations GmbH & Co. KG) Avira Launcher (x32 Version: 1.2.71.9779 - Avira Operations GmbH & Co. KG) Hidden Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 1.5.2.25975 - Avira Operations GmbH & Co. KG) Bandicam (HKLM-x32\...\Bandicam) (Version: 2.1.3.757 - Bandisoft.com) Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandisoft.com) BASE (HKLM-x32\...\{B4D9F24E-C5C2-4B5E-A56D-8E13E0729C64}) (Version: 1.0.0 - d3) Berg und Tunnelbau (HKLM-x32\...\Mining and Tunneling) (Version: - ) C-Media PCI Audio Device (HKLM\...\C-Media PCI Audio Driver) (Version: - ) Cool & Quiet (HKLM-x32\...\{1ADE1AA0-7F82-4BB1-B1BD-727DE438057B}) (Version: - ) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.1.0.0074 - Disc Soft Ltd) Dance eJay 7 (HKLM-x32\...\{A18BB607-BC5A-474E-88FD-C215B91A0F97}) (Version: 7 - Empire Interactive) Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.) DIG IT! - A Digger Simulator (HKLM\...\Steam App 311910) (Version: - Cape Copenhagen) EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.8.0.0 - Electronic Arts) Emergency 2016 (HKLM-x32\...\Emergency 2016_is1) (Version: - ) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EPSON SX125 Series Printer Uninstall (HKLM\...\EPSON SX125 Series) (Version: - SEIKO EPSON Corporation) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) FastSocial version 1 (HKLM-x32\...\{0C9D97C7-4EC9-4BAB-AE9E-FA4F9EE56484}_is1) (Version: 1 - ) FileZilla Client 3.13.0 (HKLM-x32\...\FileZilla Client) (Version: 3.13.0 - Tim Kosse) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.) GdZ WoT ModPack Version 0.9.15.1.5 (HKLM-x32\...\{GdZ WoT ModPack}_is1) (Version: 0.9.15.1.5 - Gemeinschaft deutscher Zocker) GdZ WoT ModPack Version 1.0 (HKLM-x32\...\{GdZ WoT ModPack Updater}_is1) (Version: 1.0 - Gemeinschaft deutscher Zocker) German Truck Simulator 1.00 (HKLM-x32\...\German Truck Simulator) (Version: 1.00 - ) Ghostbusters (TM): The Video Game (HKLM-x32\...\InstallShield_{3A1B1652-D70A-4D19-981E-BB15D0DBF253}) (Version: 1.00.0000 - Atari) Ghostbusters (TM): The Video Game (x32 Version: 1.00.0000 - Atari) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 53.0.2785.113 - Google Inc.) Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden Grand Theft Auto: Episodes From Liberty City (HKLM-x32\...\{61B8B2F9-D8DA-4B24-89A9-DB09F38A4899}) (Version: 1.1.0.0 - Rockstar Games) Grand Theft Auto: Episodes from Liberty City (x32 Version: 1.0.0003.135 - Rockstar Games Inc.) Hidden Heart's Medicine: Time to Heal (HKLM\...\aGVhcnRzbWVkaWNpbmV0aW1ldG9oZWFs_is1) (Version: 1 - ) Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation) Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation) JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH) Krita Desktop (x86) "2.9.6.3" (HKLM-x32\...\{ACF8935C-CA56-43D2-A923-DD95CBCE1BEB}) (Version: 2.9.6.3 - Krita Foundation) Layers of Fear (HKLM-x32\...\Layers of Fear_is1) (Version: - ) Life is Strange (HKLM-x32\...\Life is Strange_is1) (Version: - ) Locks Pro (HKLM-x32\...\Locks Pro) (Version: - ) Logistics Company (HKLM\...\Steam App 328310) (Version: - Crenetic GmbH Studios) Logitech Gaming Software 64 (HKLM-x32\...\InstallShield_{58BF5D14-CBCF-473C-B0E0-A7955A23224E}) (Version: - ) Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - ) Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - ) Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - ) Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - ) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{3c3aafc8-d898-43ec-998f-965ffdae065a}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.6.140.0 - Microsoft Corporation) Mixxx 2.0.0 (64-bit) (HKLM-x32\...\Mixxx (2.0.0)) (Version: 2.0.0 - The Mixxx Development Team) Model_Viewer (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\007d47cbc8a50530) (Version: 2.0.0.23 - WOT MODEL VIEWER) Mozilla Firefox 48.0.2 (x64 de) (HKLM\...\Mozilla Firefox 48.0.2 (x64 de)) (Version: 48.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2.6079 - Mozilla) Mozilla Thunderbird 45.2.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 45.2.0 (x86 de)) (Version: 45.2.0 - Mozilla) My.com Game Center (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\MyComGames) (Version: 3.147 - My.com B.V.) Native Instruments Controller Editor (HKLM-x32\...\Native Instruments Controller Editor) (Version: 1.9.3.355 - Native Instruments) Native Instruments Service Center (HKLM-x32\...\Native Instruments Service Center) (Version: 2.6.0.137 - Native Instruments) Nesbox Companion (HKLM-x32\...\com.nesbox.companion) (Version: 1.1 - UNKNOWN) Nesbox Companion (x32 Version: 1.1 - UNKNOWN) Hidden null (HKLM-x32\...\MonsterMaker) (Version: - ) NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.75 - NVIDIA Corporation) NVIDIA GeForce Experience 2.9.1.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.9.1.22 - NVIDIA Corporation) NVIDIA Grafiktreiber 361.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.75 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) OMC ModPack Client Version 1.5.1.212 (HKLM-x32\...\{E2F3187C-2B94-486F-8914-E69211487FB6}_is1) (Version: 1.5.1.212 - Odem Mortis) OMSI - Der Omnibussimulator (HKLM-x32\...\{9AE850A4-B89D-4875-A159-B1B64D717EFB}) (Version: 1.06 - aerosoft) OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org) Origin (HKLM-x32\...\Origin) (Version: 9.5.10.780 - Electronic Arts, Inc.) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.97.306.0 - Overwolf Ltd.) PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Project64 1.6 (HKLM-x32\...\{9559F7CA-5E34-4237-A2D9-D856464AD727}) (Version: 1.6 - Project64) ProTrain Perfect 2 - Dresden - Leipzig - (HKLM-x32\...\{509E436F-FEEA-49BC-BD16-8F5F67D715E1}) (Version: 1.0 - Blue Sky Interactive) ProTrain Perfect 2 - Nord-Süd 2 - Update (HKLM-x32\...\{2DE73DB6-37F4-4580-97A0-505D478EF02A}) (Version: 1.31 - Blue Sky Interactive) ProTrain Perfect 2 - Streckenupdate - (HKLM-x32\...\{9547B52A-58E0-4AB5-B159-506728C5404B}) (Version: 1.0 - Blue Sky Interactive) ProTrain Perfect Addon 4 - S-Bahn Berlin- Update 1.1 (HKLM-x32\...\{56706286-0B7A-46A3-9835-CF1ACB4BBFE2}) (Version: 1.0 - Blue Sky Interactive) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.52.203.2012 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) RESCUE 2013 (HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\RESCUE 2013) (Version: 1.30.00.00 - rondomedia GmbH) Revo Uninstaller 2.0.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.0 - VS Revo Group, Ltd.) RollerCoaster Tycoon 3 Platinum (HKLM-x32\...\RollerCoaster Tycoon 3 Platinum_is1) (Version: - ) Samantha Swift and the Golden Touch (HKLM-x32\...\Samantha Swift and the Golden Touch) (Version: 1.1.0.0 - MumboJumbo) SHIELD Streaming (Version: 4.1.0260 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.9.1.22 - NVIDIA Corporation) Hidden Smart Application Controller (HKLM-x32\...\{A6AE177E-D46B-4463-AA69-B9F818E0DC4A}_is1) (Version: 1.00 - Smart Application Controller) Sony PC Companion 2.10.303 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.303 - Sony) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) The Last Dream - Developer's Edition (HKLM-x32\...\The Last Dream - Developer's Edition_is1) (Version: - ) The Movies(TM) (HKLM-x32\...\InstallShield_{0556F885-2415-4666-B53E-33727E46AEA1}) (Version: 1.0 - Activision) The Movies(TM) (x32 Version: 1.0 - Activision) Hidden Tweaking.com - Windows Repair (All in One) (HKLM-x32\...\Tweaking.com - Windows Repair (All in One)) (Version: 3.0.0 - Tweaking.com) UE4 Prerequisites (x64) (HKLM-x32\...\{b46d36bc-2438-471e-abe8-1fbbd51754ee}) (Version: 1.0.10.0 - Epic Games, Inc.) UE4 Prerequisites (x64) (Version: 1.0.10.0 - Epic Games, Inc.) Hidden UK Truck Simulator 1.11 (HKLM-x32\...\UK Truck Simulator) (Version: 1.11 - ) Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) VirtualDJ 8 (HKLM-x32\...\{AC964E48-8E21-4622-9073-AD42BC6A57B1}) (Version: 8.2.3343.0 - Atomix Productions) Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) waterMark V2 (HKLM-x32\...\waterMark V2) (Version: - ) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH) Wonderland Solitaire (HKLM-x32\...\Wonderland Solitaire) (Version: - ) World Series Of Poker (HKLM-x32\...\World_Series_Of_Poker_1.0) (Version: - ) X-Mouse Button Control 2.9.1 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.9.1 - Highresolution Enterprises) Zulu DJ-Software (HKLM-x32\...\Zulu) (Version: 3.63 - NCH Software) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-2927967124-101175508-2003510897-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {03721160-D3EC-4395-9515-90AF4387D601} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-09-07] (Overwolf LTD) Task: {08071F0B-7A8F-4307-AC19-CAC94B3D7CF0} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-09-10] (Microsoft Corporation) Task: {088BCE7E-C0DF-4878-9566-F3DF074A0850} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2015-09-10] (Microsoft) Task: {11072F2E-CF5D-4042-8117-BF302C3D1134} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-06-22] (Oracle Corporation) Task: {2D6D5D52-DEB4-4D7E-8582-BFA2594CE8A4} - System32\Tasks\{E38CF82E-0E32-471D-AF9A-11ACBB05F575} => pcalua.exe -a "D:\Spiele\Black & White\Setup.exe" -d "D:\Spiele\Black & White" Task: {3219B889-3FAF-4BA3-87DF-9656385F0909} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-13] (Google Inc.) Task: {3D26F772-E706-43C1-BB76-960259E909D5} - System32\Tasks\Joropygrosak Debuger => C:\Program Files (x86)\Prerpetaincliiph\keda.exe [2016-09-12] (CHENGDU YIWO Tech Development Co., Ltd) Task: {3E59135F-C845-4CA7-9306-09BA53D3BF10} - System32\Tasks\Avira Browser Safety Updater Task => C:\Program Files (x86)\Avira\Browser Safety\AviraBrowserSafetyUpdater.exe [2015-03-11] (Avira Operations GmbH & Co. KG) Task: {3ECA284F-6060-4355-8201-2B3667D6A8D0} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2015-09-10] (Microsoft Corporation) Task: {48A39499-C887-47AB-A03E-EC1284135582} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-09-10] (Microsoft Corporation) Task: {739D6E46-1EBE-45B0-B3A8-BE4B706B11C9} - System32\Tasks\{F823577C-328F-42E1-82E8-273F76E8E0F2} => pcalua.exe -a "D:\Spielei\RollerCoaster Tycoon 3 Platinum\RCT3.EXE" -d "D:\Spielei\RollerCoaster Tycoon 3 Platinum" Task: {7D66D896-7E61-483F-AC36-CBF7B2F70AF8} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-09] (Microsoft Corporation) Task: {82459BE3-0FD2-4083-A85E-4E159CB47C66} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK Task: {9459BA5A-FD31-4742-B874-E18D2F2CFA4F} - System32\Tasks\{9F699765-8CF8-476D-B4B0-17A827A46CA3} => C:\Program Files (x86)\Origin\Origin.exe [2015-03-24] (Electronic Arts) Task: {981322A7-5CE4-419F-9EE9-A5B122E6477F} - System32\Tasks\CheckControllerUpdatesUA => C:\Program Files (x86)\Smart Application Controller\smappscontroller.exe [2016-07-13] (Smart Application Controller) Task: {A1F15BE6-717C-4421-B6F5-31A5D6F3E16A} - System32\Tasks\WiseCleaner\WFDSkipUAC => C:\Program Files (x86)\Wise\Wise Force Deleter\WiseDeleter.exe [2015-07-27] (WiseCleaner.com) Task: {A395D13F-8616-4430-AA41-59C643D31545} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-09-13] (Google Inc.) Task: {BCE3DD01-4356-448D-B9F2-B66F03DA84E8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-09-13] (Adobe Systems Incorporated) Task: {C90E9125-55FE-459E-B59C-A8CC3EDC83B2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated) Task: {DF339562-E44E-4C7B-BFED-89CD5B300750} - System32\Tasks\{E32C968D-9A4A-468A-9739-5EC5DD81248A} => pcalua.exe -a "F:\Wolfenstein The Old Blood German Uncut Edition\WOLF.OB.GUE.exe" -d "F:\Wolfenstein The Old Blood German Uncut Edition" Task: {E27BD397-DC88-4C92-9D33-9AEBB4FF1077} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-18] (Microsoft Corporation) Task: {FD8DDAD2-0AB1-4C79-8872-2DE3B0CAA13A} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2015-09-10] (Microsoft Corporation) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) Shortcut: C:\Users\Alex\Favorites\Downloadseite von NCH Software.lnk -> hxxp://www.nch.com.au/de/index.html Shortcut: C:\Users\Alex\AppData\Local\Microsoft\Windows\GameExplorer\{F6416E63-CBFE-49C4-8CFC-2042B9323E65}\SupportTasks\1\Support.lnk -> hxxp://www.activision.com/support/ Shortcut: C:\Users\Alex\AppData\Local\Microsoft\Windows\GameExplorer\{F6416E63-CBFE-49C4-8CFC-2042B9323E65}\SupportTasks\0\Weitere Spiele von Microsoft.lnk -> hxxp://www.activisiono2.com/tony_hawk/main.asp/ Shortcut: C:\Users\Alex\AppData\Local\Microsoft\Windows\GameExplorer\{78751FE4-B96B-4715-A617-314D7C47A2A0}\SupportTasks\0\Support.lnk -> hxxp://support.ubi.com/ Shortcut: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\Online Help.lnk -> hxxp://www.virtualdj.com/wiki/ Shortcut: C:\Users\Alex\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ\www.virtualdj.com.lnk -> hxxp://www.virtualdj.com/ ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-12-31 20:57 - 2016-01-12 06:43 - 00291264 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-07-20 14:56 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-07-20 14:56 - 2016-07-01 06:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-08-18 21:09 - 2016-08-18 21:09 - 01864384 _____ () C:\Users\Alex\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll 2016-04-19 14:48 - 2016-04-19 14:49 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2015-12-23 10:07 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-07-20 14:57 - 2016-07-01 05:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-07-20 14:56 - 2016-07-01 05:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-07-20 14:56 - 2016-07-01 05:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-07-20 14:56 - 2016-07-01 05:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-07-20 14:56 - 2016-07-01 05:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-09-13 21:02 - 2016-09-13 01:38 - 02280264 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.113\libglesv2.dll 2016-09-13 21:02 - 2016-09-13 01:38 - 00107848 _____ () C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.113\libegl.dll 2016-07-21 18:32 - 2015-05-14 11:54 - 00422600 _____ () C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe 2016-09-13 21:09 - 2016-09-12 17:48 - 30996160 _____ () C:\Users\Alex\AppData\Local\Google\Chrome\User Data\PepperFlash\23.0.0.166\pepflashplayer.dll 2016-09-12 08:12 - 2016-09-12 08:12 - 00301568 _____ () c:\program files (x86)\prerpetaincliiph\clhbuilder.dll 2016-04-19 14:48 - 2016-04-19 14:49 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2016-04-19 14:48 - 2016-04-19 14:49 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\Alex\Cookies:gs5sys [3074] AlternateDataStreams: C:\Users\Alex\Desktop\desktop.ini:gs5sys [3074] AlternateDataStreams: C:\Users\Alex\AppData\Roaming\desktop.ini:gs5sys [3074] AlternateDataStreams: C:\Users\Alex\AppData\Local\Verlauf:gs5sys [3074] AlternateDataStreams: C:\Users\Alex\Documents\desktop.ini:gs5sys [3074] AlternateDataStreams: C:\ProgramData\TEMP:054B9966 [137] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2016-09-06 13:11 - 00001037 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-2927967124-101175508-2003510897-1000\Control Panel\Desktop\\Wallpaper -> F:\Oskar\Neuer Ordner (21)\Neuer Ordner (8)\IMG-20160619-WA0004.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: Avira.OE.ServiceHost => 2 MSCONFIG\Services: GfExperienceService => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: IDriverT => 3 MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: NvNetworkService => 2 MSCONFIG\Services: NvStreamSvc => 2 MSCONFIG\Services: nvsvc => 2 MSCONFIG\Services: Stereo Service => 2 HKLM\...\StartupApproved\Run32: => "Avira Systray" HKLM\...\StartupApproved\Run32: => "avgnt" HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\StartupApproved\Run: => "EPSON SX125 Series" HKU\S-1-5-21-2927967124-101175508-2003510897-1000\...\StartupApproved\Run: => "TomTomHOME.exe" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [UDP Query User{B8EC54F5-26ED-48D9-8E73-FD26BA352BB4}G:\program files\skype\phone\skype.exe] => (Allow) G:\program files\skype\phone\skype.exe FirewallRules: [TCP Query User{185431DA-2C79-4C60-AF6B-330AB0971EA2}G:\program files\skype\phone\skype.exe] => (Allow) G:\program files\skype\phone\skype.exe FirewallRules: [UDP Query User{203E9AAD-FAA1-49B9-9BE9-F2C2271A368F}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe FirewallRules: [TCP Query User{D7B962F1-105F-488E-9678-984032B74CFF}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe FirewallRules: [UDP Query User{59F51F14-EE3A-45A9-9C87-9485BF612573}E:\easysetupassistant\tssh2.exe] => (Allow) E:\easysetupassistant\tssh2.exe FirewallRules: [TCP Query User{2453E5A1-8AEF-432D-9F29-4435D9123DAF}E:\easysetupassistant\tssh2.exe] => (Allow) E:\easysetupassistant\tssh2.exe FirewallRules: [UDP Query User{68A87591-6E15-49C9-B6D5-00E0404EE469}E:\easysetupassistant\easysetupassistant.exe] => (Allow) E:\easysetupassistant\easysetupassistant.exe FirewallRules: [TCP Query User{98862868-268B-46F0-A7A1-F419B1F37ED4}E:\easysetupassistant\easysetupassistant.exe] => (Allow) E:\easysetupassistant\easysetupassistant.exe FirewallRules: [UDP Query User{A37D346B-E470-486D-886A-AB7A70CEA756}D:\spiele\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) D:\spiele\armored warfare mycom beta\bin64\armoredwarfare.exe FirewallRules: [TCP Query User{9941EBEE-8E38-4E5A-B75F-BF3E22A5007B}D:\spiele\armored warfare mycom beta\bin64\armoredwarfare.exe] => (Allow) D:\spiele\armored warfare mycom beta\bin64\armoredwarfare.exe FirewallRules: [UDP Query User{86285CEE-479B-46FD-B323-93D13AFF6BB7}C:\users\alex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\alex\appdata\local\mycomgames\mycomgames.exe FirewallRules: [TCP Query User{F028F5E8-B9B2-4FFD-8967-454EF0D5C8AD}C:\users\alex\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\alex\appdata\local\mycomgames\mycomgames.exe FirewallRules: [{055257B4-7DB5-421A-B9CE-FC9A2768CEC8}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{64626A8F-D518-4A3E-B800-B6E6E12D8A6C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [TCP Query User{351CF24C-5C76-480D-8504-68E0AD1843D7}D:\spiele\world_of_tanks\worldoftanks.exe] => (Allow) D:\spiele\world_of_tanks\worldoftanks.exe FirewallRules: [UDP Query User{948DAF27-C71D-4CC4-BE10-89DB3D4046BC}D:\spiele\world_of_tanks\worldoftanks.exe] => (Allow) D:\spiele\world_of_tanks\worldoftanks.exe FirewallRules: [{253899B7-30F0-40FA-820D-42FC5EE64BDD}] => (Block) D:\spiele\world_of_tanks\worldoftanks.exe FirewallRules: [{E6B46A64-C7FB-4B76-BDA2-7F8CE5C19BE2}] => (Block) D:\spiele\world_of_tanks\worldoftanks.exe FirewallRules: [{7B9803AD-565F-484F-A3AC-7608B4E027C0}] => (Allow) C:\Users\Alex\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{0B7B8C30-490B-4165-91C9-0BA2ECF08FE9}] => (Allow) C:\Users\Alex\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [TCP Query User{63B3C213-6114-4963-A3D3-EB3CD2016612}D:\spiele\world_of_tanks\wotlauncher.exe] => (Allow) D:\spiele\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{B77A2EB4-C11B-43C6-BFA5-0DF9C825F01D}D:\spiele\world_of_tanks\wotlauncher.exe] => (Allow) D:\spiele\world_of_tanks\wotlauncher.exe FirewallRules: [{ABC853EF-AA7D-4B6B-9898-2DE7F7131D17}] => (Block) D:\spiele\world_of_tanks\wotlauncher.exe FirewallRules: [{3DE2D36C-CCC9-4E7F-A312-82C6FF4BAE64}] => (Block) D:\spiele\world_of_tanks\wotlauncher.exe FirewallRules: [{4D80A436-398C-4BA4-9626-484B2BD6890B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{8C15BD84-ED5D-442F-B454-6093E1A34678}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{F520FDF6-D5AF-49EE-9672-80D2D78A1ECE}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{DE4A103C-31F4-40A1-8F16-31CB15E8865C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{8A82E90F-A1DD-4E49-867E-0D95254879E1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{3DC96D98-714F-4456-ABFD-E54CF194D6CE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{6E0C7D29-7456-4E18-8D41-C374DB54F8EF}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{BEE464F7-4F1A-4DC3-A9DF-C6496F7DC8EA}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{F73A41F2-F6B4-4D42-94B0-24FB215C452E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{D2EE8800-F670-445E-8AED-196AEE247BB1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{8B8F73D0-7764-46F2-8DA0-FDE0DE8DFE90}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{676D9C46-E14F-4026-ADDE-B2C63446D955}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{2B35FD59-01B0-44F0-85EF-E4ED1F88E13B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{9A3D99F3-D921-426B-B7DF-7324B11E5EAF}] => (Allow) D:\Spiele\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe FirewallRules: [{10DFF208-43B4-487F-B87C-EC2EDD159280}] => (Allow) D:\Spiele\THQ\Frontlines-Fuel of War\Binaries\FFOW.exe FirewallRules: [TCP Query User{267A32AA-CDCA-4691-A944-9E604C81E46D}D:\spiele\sebastien loeb rally evo\slrx64.exe] => (Allow) D:\spiele\sebastien loeb rally evo\slrx64.exe FirewallRules: [UDP Query User{B181587D-6A97-4BAD-A8D4-A6AF6CBCC296}D:\spiele\sebastien loeb rally evo\slrx64.exe] => (Allow) D:\spiele\sebastien loeb rally evo\slrx64.exe FirewallRules: [{EEF9EBA0-1956-40F6-B77F-614DD4EA5722}] => (Allow) C:\Users\Alex\AppData\Local\Temp\Andy_46.2_x64\Setup.exe FirewallRules: [{9F3E3F30-F41B-4865-BE41-83FE9833B3F6}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe FirewallRules: [{1BE673C4-9EBC-4746-8864-4EF8DE737B8F}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe FirewallRules: [{94ED7558-F682-4093-9313-F8ACBF078BE0}] => (Allow) C:\Program Files\Andy\andy.exe FirewallRules: [{97934D29-83EA-4C92-A58B-9C1490FA8661}] => (Allow) C:\Program Files\Andy\andy.exe FirewallRules: [{BD969C95-3B4F-47ED-9D72-B0B16C1B9221}] => (Allow) C:\Program Files\Andy\AndyConsole.exe FirewallRules: [{65209785-178C-4995-A308-6B16828E82FC}] => (Allow) C:\Program Files\Andy\AndyConsole.exe FirewallRules: [{C765AC84-C3C6-4381-B834-7A4D9C1A7519}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe FirewallRules: [{D0FB81DC-360F-4A36-8512-FD557837FBD0}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe FirewallRules: [{612D9E77-960F-447F-900B-BA528AD8C8C3}] => (Allow) C:\Users\Alex\AppData\Local\Temp\Uninstall.exe FirewallRules: [{DE0D30BD-785F-4C6E-AB2E-B2EA5B95A212}] => (Allow) C:\Users\Alex\AppData\Local\Temp\Uninstall.exe FirewallRules: [{785C73F8-5AFE-469E-9E2D-2F1B814DE3C8}] => (Allow) C:\Program Files\Andy\HandyAndy.exe FirewallRules: [{0B571320-7652-4382-A54C-630B0BBABE66}] => (Allow) C:\Program Files\Andy\HandyAndy.exe FirewallRules: [{B1D7EA1F-B066-4CA0-8D50-E89501B0C6F0}] => (Allow) D:\Spiele\The Sims 4\Game\Bin\TS4.exe FirewallRules: [{CBF73693-887B-4786-989A-E6B514955243}] => (Allow) D:\Spiele\The Sims 4\Game\Bin\TS4.exe FirewallRules: [TCP Query User{BAD49B2D-5B7E-4239-97FF-CCCC34FCE690}D:\spiele\ubisoft\far cry 4\bin\farcry4.exe] => (Allow) D:\spiele\ubisoft\far cry 4\bin\farcry4.exe FirewallRules: [UDP Query User{39235AEA-0DD2-4CDA-B963-38FB32CEC0B1}D:\spiele\ubisoft\far cry 4\bin\farcry4.exe] => (Allow) D:\spiele\ubisoft\far cry 4\bin\farcry4.exe FirewallRules: [TCP Query User{31F01DEC-1B23-430D-93A4-34E1165168BA}D:\spiele\anno 1404 gold edition\tools\anno4web.exe] => (Allow) D:\spiele\anno 1404 gold edition\tools\anno4web.exe FirewallRules: [UDP Query User{663B8EBA-8FDD-4379-A5DB-5EAE3D1D4F06}D:\spiele\anno 1404 gold edition\tools\anno4web.exe] => (Allow) D:\spiele\anno 1404 gold edition\tools\anno4web.exe FirewallRules: [TCP Query User{6C958C17-0A38-493E-99CC-B87F1FDB242D}D:\spiele\mxgp2\mxgp_2x64.exe] => (Allow) D:\spiele\mxgp2\mxgp_2x64.exe FirewallRules: [UDP Query User{5455F566-360E-4D82-AF47-7E01DC44F3E8}D:\spiele\mxgp2\mxgp_2x64.exe] => (Allow) D:\spiele\mxgp2\mxgp_2x64.exe FirewallRules: [TCP Query User{4FC326C9-DD65-4C55-B7CF-F00DC2A25734}D:\spiele\mxgp2\mxgp_2.exe] => (Allow) D:\spiele\mxgp2\mxgp_2.exe FirewallRules: [UDP Query User{3DDC05D5-A11D-4FFF-9EBE-07A822FE9984}D:\spiele\mxgp2\mxgp_2.exe] => (Allow) D:\spiele\mxgp2\mxgp_2.exe FirewallRules: [{15350DE1-C269-45CC-9C37-ED444708E09B}] => (Allow) D:\Spiele\SteamLibrary\steamapps\common\DIG IT! - A Digger Simulator\DigIt.exe FirewallRules: [{0FAB828E-4B69-4960-AB60-B6E47BD20F3C}] => (Allow) D:\Spiele\SteamLibrary\steamapps\common\DIG IT! - A Digger Simulator\DigIt.exe FirewallRules: [{822BDA0E-5DAC-4BA9-84DE-BEFCED48F171}] => (Allow) D:\Spiele\SteamLibrary\steamapps\common\Logistics Company\logisim.exe FirewallRules: [{E3475040-EF12-4BFA-90D4-5CCFFD4182C3}] => (Allow) D:\Spiele\SteamLibrary\steamapps\common\Logistics Company\logisim.exe FirewallRules: [{D5402871-D6DB-4AF8-A11B-211A8FC142C0}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{1C55D6CF-C802-4747-B16E-96E20EA42E76}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [TCP Query User{0653881F-C4F1-483B-9EEF-03B6E478915E}D:\spiele\medal of honor allied assault war chest\mohaa.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\mohaa.exe FirewallRules: [UDP Query User{2C652085-C216-4B0B-B1F6-DFD07D862D05}D:\spiele\medal of honor allied assault war chest\mohaa.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\mohaa.exe FirewallRules: [TCP Query User{CE25C343-01B1-4AC8-B589-828CC9C63538}D:\spiele\medal of honor allied assault war chest\moh_breakthrough.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\moh_breakthrough.exe FirewallRules: [UDP Query User{329E50C5-1D43-40B1-AE0C-DF02A1473FFA}D:\spiele\medal of honor allied assault war chest\moh_breakthrough.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\moh_breakthrough.exe FirewallRules: [TCP Query User{1ABB671C-E149-4942-90E0-2FB13CF7EA4F}D:\spiele\street fighter x tekken complete pack\sftk.exe] => (Allow) D:\spiele\street fighter x tekken complete pack\sftk.exe FirewallRules: [UDP Query User{EDFA809B-57F0-462A-B2AA-19CD31295828}D:\spiele\street fighter x tekken complete pack\sftk.exe] => (Allow) D:\spiele\street fighter x tekken complete pack\sftk.exe FirewallRules: [TCP Query User{6608EC4A-642D-47C4-AD82-C8174517D431}D:\spiele\medal of honor allied assault war chest\moh_spearhead.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\moh_spearhead.exe FirewallRules: [UDP Query User{F3A2D79C-8F64-4056-9DA6-9D402E8BCB68}D:\spiele\medal of honor allied assault war chest\moh_spearhead.exe] => (Allow) D:\spiele\medal of honor allied assault war chest\moh_spearhead.exe FirewallRules: [TCP Query User{2203F989-B0FB-4A66-B5AC-7606BEEE091E}D:\downloads\fo4\igg-dead.by.daylight.v1.0\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\downloads\fo4\igg-dead.by.daylight.v1.0\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe FirewallRules: [UDP Query User{1A43CF24-88C0-4887-9A94-04DFD8A1B8FD}D:\downloads\fo4\igg-dead.by.daylight.v1.0\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\downloads\fo4\igg-dead.by.daylight.v1.0\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe FirewallRules: [{15842196-AF0E-4252-8B98-1B0C1BD6F6C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{C5EDC8EF-6825-4B8C-BB28-47C641330927}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{71654F9A-49E1-4DB8-90D1-E6FDEE57BB02}D:\spiele\dovetail games flight school\fsc.exe] => (Allow) D:\spiele\dovetail games flight school\fsc.exe FirewallRules: [UDP Query User{389B68A3-BDB8-4CC7-B5F1-B9EAD578C78D}D:\spiele\dovetail games flight school\fsc.exe] => (Allow) D:\spiele\dovetail games flight school\fsc.exe FirewallRules: [TCP Query User{9022ED3A-732F-4D6B-B4A2-039E2232E84D}D:\spiele\ghostbusters\ghostbusters\binaries\win64\ghostbusters.exe] => (Allow) D:\spiele\ghostbusters\ghostbusters\binaries\win64\ghostbusters.exe FirewallRules: [UDP Query User{50273C90-0B32-483A-82AB-CE40A761D30A}D:\spiele\ghostbusters\ghostbusters\binaries\win64\ghostbusters.exe] => (Allow) D:\spiele\ghostbusters\ghostbusters\binaries\win64\ghostbusters.exe FirewallRules: [TCP Query User{A09AC952-684E-4B97-9EFD-1E9962A6A6C6}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [UDP Query User{339B0FA0-5B3B-4771-B2CC-A7B468AB37BF}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe FirewallRules: [{CAA3658F-D1DC-499D-A613-9D1FE46AC2EC}] => (Allow) D:\Spiele\OMC ModPack Client\OMC ModPack Client.exe FirewallRules: [{7E1EC7E7-AD73-4F85-9297-13EB50549D60}] => (Allow) C:\Users\Alex\AppData\Local\Temp\MPCOnline\MPCDownload.exe FirewallRules: [{5DABB8C9-E523-4BC0-B006-53BBB5DF8814}] => (Allow) C:\Users\Alex\AppData\Local\Temp\MPCOnline\MPCDownload.exe FirewallRules: [{2D262BCC-E6F4-4697-87CB-E62DEBB048DC}] => (Allow) D:\Spiele\FIFA 15\fifasetup\fifaconfig.exe FirewallRules: [{43DC8776-57FD-40B5-91B0-CBD2C03C5632}] => (Allow) D:\Spiele\FIFA 15\fifasetup\fifaconfig.exe FirewallRules: [{012D1E29-64E0-446B-83D6-0A35E49F4953}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Wiederherstellungspunkte ========================= 12-09-2016 10:33:38 Malwarebytes Anti-Rootkit Restore Point 13-09-2016 20:15:41 JRT Pre-Junkware Removal 13-09-2016 20:44:23 JRT Pre-Junkware Removal ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (09/13/2016 09:06:07 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest. Error: (09/13/2016 09:05:09 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest. Error: (09/13/2016 09:05:08 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Alex\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest. Error: (09/13/2016 09:04:58 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "c:\users\alex\downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest. Error: (09/13/2016 08:53:36 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest. Error: (09/13/2016 08:49:10 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest. Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest. Error: (09/13/2016 08:44:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (09/13/2016 08:16:09 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (09/13/2016 08:45:01 AM) (Source: Microsoft-Windows-Defrag) (EventID: 257) (User: ) Description: Das Volume "(C:)" wurde aufgrund eines Fehlers nicht optimiert: Falscher Parameter. (0x80070057) Error: (09/12/2016 10:33:54 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Systemfehler: ============= Error: (09/13/2016 09:12:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: Der Treiber konnte nicht geladen werden. Error: (09/13/2016 09:12:13 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys Error: (09/13/2016 09:12:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: Der Treiber konnte nicht geladen werden. Error: (09/13/2016 09:12:13 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys Error: (09/13/2016 09:12:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: Der Treiber konnte nicht geladen werden. Error: (09/13/2016 09:12:13 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys Error: (09/13/2016 09:07:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: Der Treiber konnte nicht geladen werden. Error: (09/13/2016 09:07:41 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys Error: (09/13/2016 09:07:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: Der Treiber konnte nicht geladen werden. Error: (09/13/2016 09:07:41 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Alex\AppData\Local\Temp\ehdrv.sys CodeIntegrity: =================================== Date: 2016-09-12 21:35:11.184 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:19:58.169 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:19:58.150 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:19:58.102 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:19:57.838 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:19:57.817 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:19:57.750 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:15:51.278 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:15:51.256 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-09-12 08:15:51.232 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Speicherinformationen =========================== Prozessor: AMD Phenom(tm) II X4 945 Processor Prozentuale Nutzung des RAM: 37% Installierter physikalischer RAM: 8190.11 MB Verfügbarer physikalischer RAM: 5119.13 MB Summe virtueller Speicher: 8702.11 MB Verfügbarer virtueller Speicher: 5784.96 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:146.04 GB) (Free:25.27 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)] Drive d: () (Fixed) (Total:319.27 GB) (Free:67.11 GB) NTFS Drive f: (HITACHI) (Fixed) (Total:931.28 GB) (Free:111.51 GB) FAT32 ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A8DAA8DA) Partition 1: (Active) - (Size=146 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=450 MB) - (Type=27) Partition 3: (Not Active) - (Size=319.3 GB) - (Type=OF Extended) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 0DEE6153) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C) ==================== Ende von Addition.txt ============================ |
Themen zu chrome: ständig neue tabs und meldungen von reimage |
avira, avp, desktop, flash player, google, helper, homepage, installation, kaspersky, mozilla, object, openvpn, popup, problem, proxy, prozesse, realtek, registry, scan, security, services.exe, software, super, system, werbung, windows, windows xp, windowsapps |