BrowserModifier:Win32/SupTab!blnk - "Entfernen erfolgreich" war das echt so erfolgreich?

NkPhillip · 09.11.2016, 18:08

Guten Abend!

Erstmal schon mal danke für die weiteren Anweisungen.
Wie angefragt sind die 5 Log-Dateien der Reihe nach weiter unten zu finden.

Ich hätte jedoch noch paar Fragen bezüglich dieses Problems:

Wie ich sehen konnte wurden ja von "AdwCleaner" und den anderen Programmen zum Teil schädliche bzw. "bösartige" Programme gefunden und in die Quarantäne verschoben.

(1) Ich habe gestern noch einen kompletten Festplatten-Scan von "GData" machen lassen und nichts gefunden. Auf Rootkits und etwaige andere Sachen gescannt, aber nichts gefunden. Wieso wurde dann was von den anderen Programmen wie "AdwCleaner" gefunden?

(2) Diese Dateien wurden von den Programmen jetzt so wie ich das mitbekommen habe in eine Quarantäne verschoben. Soll ich die jetzt im Quarantäne-Ordner verschlüsselt so lassen oder kann ich den Ordner auch einfach löschen. Wie es mir schien waren alle infizierten Dateien von keiner Bedeutung für mich, soweit ich das sagen kann.

(3) Um was handelt es sich genau mit was ich da infiziert wurde? Einem Trojaner oder nur Adware? Wie sieht vermutlich der bisher angerichtete Schaden aus (hab zwar bisher nichts gemerkt, aber kann ich davon ausgehen, dass irgendwelche Daten von mir auf einen 3. Server übertragen wurden oder sowas in der Art?).

Ich bedanke mich schon im Voraus für die Antworten.

die Logdatei von AdwCleaner

Code:

ATTFilter

# AdwCleaner v6.030 - Bericht erstellt am 08/11/2016 um 21:17:32
# Aktualisiert am 19/10/2016 von Malwarebytes
# Datenbank : 2016-11-08.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64)
# Benutzername : x - x-PC
# Gestartet von : C:\Users\x\Desktop\AdwCleaner_6.030.exe
# Modus: Löschen
# Unterstützung : hxxps://www.malwarebytes.com/support



***** [ Dienste ] *****

[-] Dienst gelöscht: Wajam Web Enhancer


***** [ Ordner ] *****

[-] Ordner gelöscht: C:\Users\x\AppData\Roaming\InetStat
[-] Ordner gelöscht: C:\Users\x\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat
[-] Ordner gelöscht: C:\ProgramData\DeviceVM
[#] Ordner mit Neustart gelöscht: C:\ProgramData\Application Data\DeviceVM


***** [ Dateien ] *****

[-] Datei gelöscht: C:\END


***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\InetStat
[-] Schlüssel gelöscht: HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\DeviceVM Inc.
[-] Schlüssel gelöscht: HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\InetStat
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\InetStat
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\DeviceVM Inc.
[-] Schlüssel gelöscht: HKLM\SOFTWARE\webssearchesSoftware
[#] Schlüssel mit Neustart gelöscht: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\InetStat
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\InetStat
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\DeviceVM Inc.
[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\Speedchecker Limited
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\InetStat
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[-] Schlüssel gelöscht: HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
[-] Schlüssel gelöscht: HKCU\Software\Classes\Applications\inetstat.exe


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [2779 Bytes] - [08/11/2016 21:17:32]
C:\AdwCleaner\AdwCleaner[S0].txt - [2773 Bytes] - [08/11/2016 21:16:22]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [2925 Bytes] ##########

die Logdatei von MBAM:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 08.11.2016
Suchlaufzeit: 21:35
Protokolldatei: log-mbam.txt
Administrator: Ja

Version: 2.2.1.1043
Malware-Datenbank: v2016.11.08.16
Rootkit-Datenbank: v2016.10.31.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: x

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 364417
Abgelaufene Zeit: 9 Min., 26 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 6
PUP.Optional.WebSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Search_URL, hxxp://istart.webssearches.com/web/?type=ds&ts=1423394766&from=cvs&uid=SamsungXSSDX840XPROXSeries_S1AXNSADB02487H&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1423394766&from=cvs&uid=SamsungXSSDX840XPROXSeries_S1AXNSADB02487H&q={searchTerms}),Ersetzt,[bb257e3f7426d75f32166f081ee624dc]
PUP.Optional.WebSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Default_Page_URL, hxxp://istart.webssearches.com/?type=hp&ts=1423394766&from=cvs&uid=SamsungXSSDX840XPROXSeries_S1AXNSADB02487H, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1423394766&from=cvs&uid=SamsungXSSDX840XPROXSeries_S1AXNSADB02487H),Ersetzt,[cd139c21c6d4270f1b2dec8bd62ef40c]
PUP.Optional.WebSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://istart.webssearches.com/?type=hp&ts=1423394766&from=cvs&uid=SamsungXSSDX840XPROXSeries_S1AXNSADB02487H, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/?type=hp&ts=1423394766&from=cvs&uid=SamsungXSSDX840XPROXSeries_S1AXNSADB02487H),Ersetzt,[ba2603ba1486280e95b3ff78897b16ea]
PUP.Optional.WebSearch, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, hxxp://istart.webssearches.com/web/?type=ds&ts=1423394766&from=cvs&uid=SamsungXSSDX840XPROXSeries_S1AXNSADB02487H&q={searchTerms}, Gut: (www.google.com), Schlecht: (hxxp://istart.webssearches.com/web/?type=ds&ts=1423394766&from=cvs&uid=SamsungXSSDX840XPROXSeries_S1AXNSADB02487H&q={searchTerms}),Ersetzt,[5789d6e7bddd41f5db6d5e19ff056c94]
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[f1ef7f3ee0baf73fe393760023e1966a]
PUP.Optional.Qone8, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Gut: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Schlecht: ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Ersetzt,[38a8813c297147efc1b589ed966ea25e]

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

die Logdatei von JRT:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Home Premium x64 
Ran by x (Administrator) on 08.11.2016 at 22:02:37,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 42 

Successfully deleted: C:\Users\x\AppData\Local\crashrpt (Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\06E4BM1T (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5RXT2PNA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8WH92PZF (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\910FNDSH (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\92XCYA5H (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FFJKEU61 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB32QY1L (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P7CD5FD1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QRM6FCR9 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T8TX7B2K (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TAOP3PCI (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U2IGG9XL (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V6244RES (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XDQ17UX1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0E2T15H (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZZB5AK7R (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\06E4BM1T (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5RXT2PNA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8WH92PZF (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\910FNDSH (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\92XCYA5H (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FFJKEU61 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB32QY1L (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P7CD5FD1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QRM6FCR9 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T8TX7B2K (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TAOP3PCI (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U2IGG9XL (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V6244RES (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XDQ17UX1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0E2T15H (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZZB5AK7R (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\SysWOW64\REN444.tmp (File) 



Registry: 2 

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.11.2016 at 22:04:16,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logdatei von FRST:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.9 (09.30.2016)
Operating System: Windows 7 Home Premium x64 
Ran by x (Administrator) on 08.11.2016 at 22:02:37,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 42 

Successfully deleted: C:\Users\x\AppData\Local\crashrpt (Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\06E4BM1T (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5RXT2PNA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8WH92PZF (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\910FNDSH (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\92XCYA5H (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FFJKEU61 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB32QY1L (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P7CD5FD1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QRM6FCR9 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T8TX7B2K (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TAOP3PCI (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U2IGG9XL (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V6244RES (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XDQ17UX1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0E2T15H (Temporary Internet Files Folder) 
Successfully deleted: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZZB5AK7R (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\06E4BM1T (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5RXT2PNA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8WH92PZF (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\910FNDSH (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\92XCYA5H (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FFJKEU61 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JB32QY1L (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P7CD5FD1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QRM6FCR9 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T8TX7B2K (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TAOP3PCI (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U2IGG9XL (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\V6244RES (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XDQ17UX1 (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0E2T15H (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZZB5AK7R (Temporary Internet Files Folder) 
Successfully deleted: C:\Windows\SysWOW64\REN444.tmp (File) 



Registry: 2 

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (Registry Key)
Successfully deleted: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.11.2016 at 22:04:16,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Addition.txt:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 04-11-2016
durchgeführt von x (09-11-2016 17:40:08)
Gestartet von C:\Users\x\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-10-01 12:02:17)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3243579912-1492025509-2315471678-500 - Administrator - Disabled)
Gast (S-1-5-21-3243579912-1492025509-2315471678-501 - Limited - Disabled)
x (S-1-5-21-3243579912-1492025509-2315471678-1000 - Administrator - Enabled) => C:\Users\x

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)
Ansel (Version: 373.06 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AppNHost 1.0.5.1 (HKLM-x32\...\{A8CB86C7-CD4C-4C4F-AF6A-33D1CAC63562}) (Version: 1.0.5.1 - Mixesoft Project)
ARK: Survival Evolved (HKLM\...\Steam App 346110) (Version:  - Studio Wildcard)
ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version:  - ASRock Inc.)
ASRock eXtreme Tuner v0.1.54 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version:  - )
ASRock InstantBoot v1.26 (HKLM-x32\...\ASRock InstantBoot_is1) (Version:  - )
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Besiege (HKLM-x32\...\Steam App 346010) (Version:  - Spiderling Studios)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borderlands 2 (HKLM\...\Steam App 49520) (Version:  - Gearbox Software)
Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version:  - 2K Australia)
Brawlhalla (HKLM\...\Steam App 291550) (Version:  - Blue Mammoth Games)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Chivalry: Medieval Warfare (HKLM\...\Steam App 219640) (Version:  - Torn Banner Studios)
Choice of Robots (HKLM\...\Steam App 339350) (Version:  - Choice of Games)
Core Temp 1.0 RC8 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version:  - Valve)
CPUID CPU-Z 1.71 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version:  - )
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version:  - CyberGhost S.R.L.)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)
Dying Light (HKLM-x32\...\Steam App 239140) (Version:  - Techland)
Epic Games Launcher (HKLM\...\{8727C279-A122-40B8-8ACA-271E1809DAA5}) (Version: 1.1.23.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.96 - Etron Technology) Hidden
EXPERTool 7.16 (HKLM-x32\...\MySSID_is1) (Version:  - Gainward Co., Ltd)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version:  - Bethesda Game Studios)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version:  - Ubisoft)
G DATA INTERNET SECURITY (HKLM-x32\...\G DATA INTERNET SECURITY) (Version: 25.3.0.1 - G DATA Software AG)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version:  - Facepunch Studios)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Gods Will Be Watching (HKLM-x32\...\Steam App 274290) (Version:  - Deconstructeam)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Greenfoot (HKLM-x32\...\{8C838B70-3A71-41E8-91A6-4ADCF2E483D0}) (Version: 2.4.2 - Greenfoot Team)
HITMAN™ (HKLM\...\Steam App 236870) (Version:  - Io-Interactive)
Hotline Miami (HKLM\...\Steam App 219150) (Version:  - Dennaton Games)
Insurgency (HKLM\...\Steam App 222880) (Version:  - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java SE Development Kit 8 Update 72 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180720}) (Version: 8.0.720.15 - Oracle Corporation)
Just Cause 2 (HKLM\...\Steam App 8190) (Version:  - Avalanche Studios)
Just Cause 2: Multiplayer Mod (HKLM\...\Steam App 259080) (Version:  - Avalanche Studios)
Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.519 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.519 - LogMeIn, Inc.) Hidden
LOOT Version 0.9.2 (HKLM-x32\...\{BF634210-A0D4-443F-A657-0DCE38040374}_is1) (Version: 0.9.2 - LOOT Team)
LuPO 2.0.2.18 (HKLM-x32\...\LuPO_is1) (Version:  - Ministerium für Schule, Wissenschaft und Forschung NRW)
Machinarium (HKLM\...\Steam App 40700) (Version:  - Amanita Design)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mozilla Firefox 47.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0.1 (x86 de)) (Version: 47.0.1 - Mozilla)
MSI Afterburner 4.0.0 (HKLM-x32\...\Afterburner) (Version: 4.0.0 - MSI Co., LTD)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 3.0.0.05 - MSI)
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
NetBeans IDE 8.1 (HKLM\...\nbi-nb-base-8.1.0.0.201511021428) (Version: 8.1 - NetBeans.org)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.5 - Black Tree Gaming)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 373.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 373.06 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.0.7.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.0.7.34 - NVIDIA Corporation)
NVIDIA Grafiktreiber 373.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 373.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.0.7.34 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.0.0.0 - NVIDIA Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Origin (HKLM-x32\...\Origin) (Version: 10.2.1.38915 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.99.11.0 - Overwolf Ltd.)
Oxenfree (HKLM\...\Steam App 388880) (Version:  - Night School Studio)
POSTAL 2 (HKLM\...\Steam App 223470) (Version:  - Running With Scissors)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.23.623.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.9.6 - Rockstar Games)
SHIELD Streaming (Version: 7.1.0320 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.0.7.34 - NVIDIA Corporation) Hidden
Skype™ 7.28 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.28.101 - Skype Technologies S.A.)
Sony PC Companion 2.10.281 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.281 - Sony)
Sound Blaster X-Fi MB (HKLM-x32\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version:  - Keen Software House)
Splinter Cell Blacklist (HKLM-x32\...\Uplay Install 91) (Version:  - Ubisoft)
Spotify (HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Spotify) (Version: 1.0.41.375.g040056ca - Spotify AB)
Starbound (HKLM\...\Steam App 211820) (Version:  - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Supreme Commander: Forged Alliance (HKLM-x32\...\Steam App 9420) (Version:  - Gas Powered Games)
Surgeon Simulator (HKLM-x32\...\Steam App 233720) (Version:  - Bossa Studios)
System Shock 2 (HKLM-x32\...\Steam App 238210) (Version:  - Irrational Games)
Tales from the Borderlands (HKLM-x32\...\Steam App 330830) (Version:  - Telltale Games)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
Team Fortress 2 (HKLM\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Deadly Tower of Monsters (HKLM\...\Steam App 353700) (Version:  - ACE Team)
The Elder Scrolls V: Skyrim (HKLM\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version:  - )
The Walking Dead: Season Two (HKLM\...\Steam App 261030) (Version:  - Telltale Games)
The Witness (HKLM\...\Steam App 210970) (Version:  - Thekla, Inc.)
This War of Mine (HKLM-x32\...\Steam App 282070) (Version:  - 11 bit studios)
TI-Nspire™ Student Software (HKLM-x32\...\{F46F949B-755F-4BEF-A4B9-7B3B73D0104A}) (Version: 3.9.0.463 - Texas Instruments Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Worms Clan Wars (HKLM\...\Steam App 233840) (Version:  - Team17 Digital Ltd)
Wrye Bash (HKLM-x32\...\Wrye Bash) (Version: 0.3.0.6 - Wrye & Wrye Bash Development Team)
XFastUsb (HKLM-x32\...\XFastUsb) (Version:  - )

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {032624DA-81A0-4AFA-9D28-A971BCB0289F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-08] (Adobe Systems Incorporated)
Task: {223210AB-D960-48A6-8519-1F9767403646} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {2AF23F34-2BDA-4C51-B397-E3CC51FC111C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {40BDF797-0948-44D7-BE5E-14C9D2ECAB3A} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-09-30] (NVIDIA Corporation)
Task: {5B359467-C84A-46BE-8657-C7383E0616F4} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-09-30] (NVIDIA Corporation)
Task: {6421551A-447A-40F4-BED2-C4DF4E0979AC} - System32\Tasks\{1E44F311-2B6B-4587-87F5-8FDC14EE6412} => pcalua.exe -a C:\Users\x~1\AppData\Local\Temp\jre-8u111-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {809BDDBA-7388-4799-A40F-792D871976F0} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-09-30] (NVIDIA Corporation)
Task: {859E4209-AC91-417D-A7F9-B82EEC107A58} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-09-30] (NVIDIA Corporation)
Task: {872C0B04-9603-4DBE-A6C0-A307C53F8AA7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {958F4C64-790E-40B2-9446-3E2C6AD447D5} - System32\Tasks\{F784AE50-04B7-4242-8552-CF9D6A9C9E31} => Chrome.exe hxxp://ui.skype.com/ui/0/7.10.80.101/de/abandoninstall?page=tsProgressBar
Task: {C64944CD-F131-4323-9971-7470D05FD8EF} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-09-30] (NVIDIA Corporation)
Task: {EC6D357F-D281-4FBC-8027-B36807A96034} - System32\Tasks\{1E117853-DDE7-42CC-A239-5368E6CBAD68} => pcalua.exe -a G:\gpg4usb\gpg4usb\start_windows.exe -d G:\gpg4usb\gpg4usb
Task: {EDCAACD1-C46E-4676-AFB4-C02EF9A36400} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-09-30] (NVIDIA Corporation)
Task: {F82783D4-5169-45CE-8222-22B174AAC672} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-10-30] (Overwolf LTD)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-10-04 12:36 - 2016-10-01 20:44 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-10-06 18:14 - 2016-09-30 05:22 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-06 18:14 - 2016-09-30 05:22 - 04490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-06 18:14 - 2016-09-30 05:22 - 00419896 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2014-10-14 22:10 - 2015-12-28 23:21 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2016-09-15 04:24 - 2016-09-15 04:24 - 00423752 _____ () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2014-10-01 13:05 - 1998-10-31 09:55 - 00005120 _____ () C:\Program Files (x86)\EXPERTool\TBManage.dll
2016-11-09 17:31 - 2016-11-09 17:31 - 00697884 _____ () C:\Users\x\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0001\~df394b.tmp
2016-11-09 17:31 - 2016-11-09 17:31 - 00592896 _____ () C:\Users\x\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0001\~de6248.tmp
2014-10-01 13:18 - 2009-02-06 17:52 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2014-10-01 13:18 - 2009-04-20 10:55 - 00148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2016-10-06 18:14 - 2016-09-30 05:22 - 60819000 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2015-03-31 14:11 - 2016-09-30 05:22 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-06 18:14 - 2016-09-29 18:20 - 00500792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00255936 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-06 18:14 - 2016-09-29 18:20 - 02801208 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00244672 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00430648 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00373696 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\x\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: c2cautoupdatesvc => 2
MSCONFIG\Services: c2cpnrsvc => 2
MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: OverwolfUpdater => 3
MSCONFIG\Services: PnkBstrA => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Sony PC Companion => 3
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "E:\Program Files (x86)\Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\x\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: XFastUsb => C:\Program Files (x86)\XFastUsb\XFastUsb.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{09B2864B-6C9C-4F7A-A6CB-52679843F6D9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6FD739A1-E679-4B59-9893-6ACE3D12E4E9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B3EE5096-8E4F-4450-BB09-D0B9A18D525A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7C150491-3BEC-4A53-BF01-2B7C05FBB1F4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E5BF0306-2B9C-4299-A986-3D53EC521F89}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{74CAD704-50CD-4696-ADA7-417BBAACCAC4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{7635235B-0313-4781-B1FD-6278EB9B5CD4}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{2084AAB7-8304-448E-8C3B-2F700772BDCA}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{5651D5A4-B25A-4BB1-B934-23778B64EBC9}] => (Allow) F:\Uplay\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{77FD6447-4CA1-4F35-961D-C3588B528D40}] => (Allow) F:\Uplay\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{486CA770-9417-49AD-B17D-A6CCB34545D5}] => (Allow) F:\Uplay\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{EB541D07-530C-4319-98AB-E41E76919721}] => (Allow) F:\Uplay\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{F39702D3-E56D-401B-96E2-212E0976B38A}] => (Allow) F:\Uplay\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{78C5C751-A7F0-42B9-8817-871286FE7D23}] => (Allow) F:\Uplay\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{340C1DF6-1221-48FC-A1A3-E52D147E2B92}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{944BB9DB-CE94-4CD5-B2E9-C99265FA1D18}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{A6DF8E0D-74B7-4B0D-857B-966C8B4CE63E}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{992742A8-73D9-4E64-9748-06698B439EB1}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{50D365F6-80D1-4912-A0F7-ACE67CEA8826}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Supreme Commander Forged Alliance\bin\SupremeCommander.exe
FirewallRules: [{9EDB7175-40F8-4560-9DC7-FB1AC5D4492E}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Supreme Commander Forged Alliance\bin\SupremeCommander.exe
FirewallRules: [{5AB3B78B-042E-4468-8142-661B592D1A75}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{42BAB5A0-88D5-42F1-8056-8A69C0076774}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{EC4043F2-CD53-434E-9E02-A0339534B8F6}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B3696BD9-3180-49D3-A0FB-24F1D99EBFB0}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{C4D4E5BE-8F95-46E8-802D-5FA4ABB3C8F0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E68D203C-6093-492E-AF08-9B463AD27134}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{EDA2F22B-8EB3-4CF0-A09E-BDFF9E98A222}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B71B3C06-87A1-4DDF-BD33-30902118EB9E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C6D70968-C446-4ED9-B24E-F034007F6C6C}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{151AD146-C7C8-4156-9741-FA894C3D2588}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{F92D2A94-0285-4BB8-8FE8-87FECFDE524F}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{C8900DCA-878C-46F5-B417-127329E3094A}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{7E5530E2-665A-4507-BDC8-578006EE8F8D}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{2D92BD9E-6E01-4B96-A352-6B41D24E8C62}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{F1AC1D1C-6EE6-4E31-906A-6FF90F57E740}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{54B732CC-6269-458C-A74E-E5B3CCEB06A6}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\SS2\Shock2.exe
FirewallRules: [{649482B4-CC6F-4B6E-9F45-06BC8D31FE76}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\SS2\Shock2.exe
FirewallRules: [{1F414817-DC09-49B1-8D41-D2AE945B73C4}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{09F2D8AB-5251-4F19-B2F9-D83919CAD8C0}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{693B3B3F-3DC2-4735-B498-87CC794AE423}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{295F2194-B7B9-4248-88DC-54DDBEAF7E79}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{BC917EED-2102-4F06-91B8-5704812206BA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6ACED198-2CDD-4B80-A01F-B779ED4072AA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{A511F41E-D864-4FF6-B42E-862684008BBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{C163EAC5-59EF-42DA-8248-4A0F202C6B6E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{FD6AE801-B5F4-4BE1-91C6-CFADE6A13EDF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F10BE4E2-E9E4-45AE-94DC-AC4DF146F591}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A3F3337A-3BE2-49C6-84A5-E3A634127B00}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{4DF2EC9F-856F-4143-8491-5C69B65A3468}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{D05E36EB-0A4B-4026-8019-DFF7188F303C}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{EF220CA0-35D7-48DE-BF49-5F4C99048B8A}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{D8CE0939-8D3F-4961-8C6A-DED1665C8B18}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Surgeon Simulator 2013\ss2013.exe
FirewallRules: [{F854B19C-2CC9-447B-8310-58AF4C26AED7}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Surgeon Simulator 2013\ss2013.exe
FirewallRules: [{77EE8502-16F9-4DE4-AA20-F8486ABDBA13}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\This War of Mine\Storyteller.exe
FirewallRules: [{726B9191-85D5-46F1-BB35-02868AFD1A6D}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\This War of Mine\Storyteller.exe
FirewallRules: [{F52D0AAE-6FF1-4A2C-9192-8CC359B076E9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{42582C82-7AF1-4B68-ACB7-E4AE4E9DF607}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{610B2CB1-F76D-4B67-81BF-66A49EA69E9A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C5B0C2F7-257D-4371-A5A8-B46430CA8ED3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8D538342-C9CB-403D-B439-D483FC1718B1}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{36D11A57-5C23-4C42-8B1A-42DFEF2F6C13}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{A993F300-E4F0-45E6-8246-1E67C53DAC67}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{1882F418-8E66-45D2-B884-7E2FFCA0BD4E}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{2FA672B8-9BC4-427F-BA99-DBF62323069F}] => (Allow) F:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{14992D4C-2D62-4F4C-B4C5-40D7367F914B}] => (Allow) F:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{18B72DA7-0B4B-4195-A3AC-04F1B11F0CCA}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{A3B17882-5B0F-42A7-9B5E-729E92AA10BD}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{BBED2BAA-23EF-43CB-87FF-9F64E0A23BDD}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{5B33362B-721A-4CA0-8450-5662EBDB6392}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{4875E98C-467C-4E23-B787-2627CB505BAB}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{40600791-6F68-4809-A9F3-F8CE7F46A4BD}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{3A5B83AC-E604-4587-B1A4-E50F13FC1535}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Hitman™\Launcher.exe
FirewallRules: [{FDCF4D5C-EC7F-4471-B3BD-A3EC25BB29DC}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Hitman™\Launcher.exe
FirewallRules: [{E5E090AA-1E99-4039-A537-4EA17FD92A63}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{9A28AB9C-7167-41C8-B9A6-E7DE572E45F7}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{0D6401E9-637D-4C5C-B4F1-2DB44305B5F9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
FirewallRules: [{44F18670-5B16-4511-81F2-DDC255E8C324}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
FirewallRules: [{A72E0435-9C69-487B-B978-475701A5004B}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{D5313490-3F72-47FB-8FA1-60308A506348}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{FF26CCC7-138C-4E00-A7F6-868FC8A35A22}] => (Allow) F:\Uplay\Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{A5150E6A-A265-4ECD-AE6D-3CF685A8AE67}] => (Allow) F:\Uplay\Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{6002AC51-BE8F-48E8-9289-A56525AA8EDC}] => (Allow) F:\Uplay\Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{3E222C22-6D9D-45BA-B058-2628FFB376C4}] => (Allow) F:\Uplay\Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{DA3EA698-48F2-4A25-9CEB-EE5FBF1417D1}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Witness\witness_d3d11.exe
FirewallRules: [{C9E967D9-3508-4744-8454-132E8CC9A964}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Witness\witness_d3d11.exe
FirewallRules: [{5F4F4404-9811-4730-BFCE-F3BD5686C108}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{8FC8CD6E-1751-4E4D-BE73-33757B9D2719}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{0BAF52B2-48C6-4647-9DE1-6D178DF5BDA9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{39B40EC6-F2E4-44A0-AC14-0696C2D11871}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{29AB40F1-1B5C-42F6-B654-2D6F0796BB7F}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{2E443E57-8D02-43BD-85A5-2FA0312D7C0E}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{86467E36-B9EC-4723-9761-662029D1A379}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{BD4633F6-2CC3-422E-8741-173E84029959}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{FA3B558F-4647-46B0-9FDB-B1D3F38DEF48}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{455B9144-3C42-41B2-B5A9-799D39CCCC22}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{AE164965-43B6-4603-A066-77B11C0384C1}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{7014322E-D9FC-453F-98DA-750766775778}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{333EA40E-AC79-4ED5-991A-E95577E28009}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{8079FE10-4B5D-4CF9-9676-4465F885B783}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{526072E8-52AA-4B43-A42C-CC424FC38F10}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{5EC87861-5AC3-4269-8FB4-248654CAEB45}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{C93A5E11-9F67-44A9-9E0C-9638701EA0DE}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{55BA6613-85AD-487D-A71D-4A0A965F6887}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{99D14C8F-DDA3-422A-95E7-98615FF692DF}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{0A98A3B2-E594-499B-A47B-DB9A80A7DBD9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{2F71EE7A-FE84-4AAE-B5C0-B4A84A18C409}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A5590E44-EAB3-4206-9063-5165E85C61EF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{72337524-FE69-4860-B498-3AA7D7DEECE7}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{21D4A9A0-8B2C-4395-8892-D96DB6DF2A03}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{FACE1CB9-2E6A-4AE8-A20E-CAD9EA3EC0DD}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Worms Clan Wars\WormsClanWars.exe
FirewallRules: [{DAB0E1D5-9D4F-4CD7-888B-B41F5D5ACC1A}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Worms Clan Wars\WormsClanWars.exe
FirewallRules: [{48FDCE95-2C83-4315-9D32-4B5219A59B86}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{8F28D336-F0D2-4511-B782-F993C7C6D75F}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{352091F8-6858-4BC5-8A94-088F7D52FCBF}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{86B5AF8A-E255-41EF-B825-8DDBFA728D70}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{2316DF55-E649-41D1-A57B-DDA55535812C}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{B7D37001-E870-418D-B2F1-4B42F58236D5}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{635158AC-E13D-4729-BC3A-A9FCB1600091}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{DE581F6B-2953-4DE6-9CF0-C38267CC84D1}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{2A2A8F44-5808-4232-B00B-0B153850EF92}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{BD648180-F612-47E1-874C-1937102B366D}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{9AD04973-E237-46EB-BF81-E39596F53658}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{CF8281C8-E51B-46F8-9085-D071F6D98C6A}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{7F3F65A8-67CF-4614-99F2-4BAF5453CF73}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{538109EA-DBE3-40BE-A1AC-2FE75A27E654}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{08235365-0D15-40C5-A7E2-6B4CE87F6F0D}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{76B51D6E-0280-4FB4-A438-888BB4D402A9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{4E55BF00-DAA0-4240-BF06-6A348FFB464B}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ChoiceOfRobots\ChoiceOfRobots.exe
FirewallRules: [{77446B49-9038-402A-9B79-57CC2EE7AE28}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ChoiceOfRobots\ChoiceOfRobots.exe
FirewallRules: [{49203D81-EF5D-4425-A325-B0DD9DD0F5D8}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Machinarium\machinarium.exe
FirewallRules: [{5E85B6E5-A76A-4B66-9734-8C1DBDA5527F}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Machinarium\machinarium.exe
FirewallRules: [{4DBEC301-C78C-4F1F-8EE7-EF49A8581F51}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\the_deadly_tower_of_monsters\Binaries\Win32\TS.exe
FirewallRules: [{00FA71B9-BAD4-49EB-9CA3-9A80A9A0D1A9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\the_deadly_tower_of_monsters\Binaries\Win32\TS.exe
FirewallRules: [{9D6CCB56-AF87-4756-9C5E-41CDEF9E0467}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Oxenfree\Oxenfree.exe
FirewallRules: [{79C2AD1E-1C30-41A0-BDD0-221E5C36C1F7}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Oxenfree\Oxenfree.exe
FirewallRules: [{C2E42BC7-411C-46F0-9166-6EA8E98E5AEA}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{8FF8FFEF-07E0-491E-BDC5-D2C4B6047A5A}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{55E33863-D001-4AD6-A169-C212F99866F6}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{3FF2B389-B352-4C56-9A32-F01054FDCA42}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{0D456DF6-D71C-4891-A48E-7BB4E9ED01BF}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{C831243C-1477-4E2E-B4FE-36136285101E}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{67F575B4-8462-41F6-93C4-BE44C15977FB}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{9B37AE0E-6FD3-453E-A6A7-C94BFF00751C}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{87521C83-5109-4EF6-AC17-F283C4DCAAAB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

19-10-2016 20:42:13 Installed Minecraft
22-10-2016 16:51:58 Windows Update
28-10-2016 13:24:19 Windows Update
01-11-2016 14:44:09 Windows Update
01-11-2016 19:00:02 Windows-Sicherung
05-11-2016 23:38:18 Windows Defender Checkpoint
08-11-2016 22:02:38 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/08/2016 07:49:11 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80004005).

Error: (11/07/2016 07:27:36 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 90080108).

Error: (11/07/2016 06:24:31 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80004005).

Error: (11/07/2016 05:45:34 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Explorer.EXE, Version 6.1.7601.17567 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 9ac

Startzeit: 01d23914793c272d

Endzeit: 47

Anwendungspfad: C:\Windows\Explorer.EXE

Berichts-ID:

Error: (11/06/2016 01:51:47 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80004005).

Error: (11/05/2016 11:38:18 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {2d756b67-a146-4056-9b00-9af3acdfab67}

Error: (11/05/2016 10:41:01 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80004005).

Error: (11/03/2016 08:08:45 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 90080108).

Error: (11/03/2016 01:36:10 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80004005).

Error: (11/02/2016 02:25:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ModOrganizer.exe, Version 1.3.11.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1780

Startzeit: 01d2350c8c463098

Endzeit: 9

Anwendungspfad: E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Skyrim\Mod Organizer\ModOrganizer.exe

Berichts-ID: e1c23bbd-a0ff-11e6-b0ad-0025229f34c2


Systemfehler:
=============
Error: (11/09/2016 05:31:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (11/09/2016 05:31:45 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (11/08/2016 10:12:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (11/08/2016 10:12:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (11/08/2016 10:10:46 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{7D1933CB-86F6-4A98-8628-01BE94C9A575}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/08/2016 10:02:47 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (11/08/2016 09:53:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (11/08/2016 09:53:29 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.

Error: (11/08/2016 09:20:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Origin Web Helper Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (11/08/2016 09:20:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Origin Web Helper Service erreicht.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 31%
Installierter physikalischer RAM: 8155.77 MB
Verfügbarer physikalischer RAM: 5565.9 MB
Summe virtueller Speicher: 16309.71 MB
Verfügbarer virtueller Speicher: 13337.59 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:476.84 GB) (Free:319.84 GB) NTFS
Drive e: (Volume) (Fixed) (Total:465.75 GB) (Free:95.32 GB) NTFS
Drive f: (Volume) (Fixed) (Total:465.75 GB) (Free:258.04 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 6A1214FE)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=476.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 74BC26AE)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

M-K-D-B · 10.11.2016, 16:08

Servus,

du hast zweimal die Logdatei von JRT gepostet.

Bitte noch die Logdatei FRST.txt nachreichen, dann kann es weitergehen.

Zitat:

Zitat von NkPhillip

(1) Ich habe gestern noch einen kompletten Festplatten-Scan von "GData" machen lassen und nichts gefunden. Auf Rootkits und etwaige andere Sachen gescannt, aber nichts gefunden. Wieso wurde dann was von den anderen Programmen wie "AdwCleaner" gefunden?

Weil AntiVirenProgramme wie GData, Avira, Avast, etc. seit Jahren eine mangelhafte Erkennung im Bereich Adware/unerwünschte Software aufweisen. Es gibt hier nur wenige Ausnahmen bei den AV-Programmen, die wirklich gut im Bereich Adware/PUP sind.

Zitat:

Zitat von NkPhillip

(2) Diese Dateien wurden von den Programmen jetzt so wie ich das mitbekommen habe in eine Quarantäne verschoben. Soll ich die jetzt im Quarantäne-Ordner verschlüsselt so lassen oder kann ich den Ordner auch einfach löschen. Wie es mir schien waren alle infizierten Dateien von keiner Bedeutung für mich, soweit ich das sagen kann.

Wir entfernen/löschen endgültig alles, wenn wir fertig sind. Du musst selbst nicht weiter aktiv werden.

Zitat:

Zitat von NkPhillip

(3) Um was handelt es sich genau mit was ich da infiziert wurde? Einem Trojaner oder nur Adware? Wie sieht vermutlich der bisher angerichtete Schaden aus (hab zwar bisher nichts gemerkt, aber kann ich davon ausgehen, dass irgendwelche Daten von mir auf einen 3. Server übertragen wurden oder sowas in der Art?).

Es handelt sich um Adware und PUP (unerwünschte Software).

BrowserModifier:Win32/SupTab!blnk - "Entfernen erfolgreich" war das echt so erfolgreich?

Plagegeister aller Art und deren Bekämpfung: BrowserModifier:Win32/SupTab!blnk - "Entfernen erfolgreich" war das echt so erfolgreich?

BrowserModifier:Win32/SupTab!blnk - "Entfernen erfolgreich" war das echt so erfolgreich?

BrowserModifier:Win32/SupTab!blnk - "Entfernen erfolgreich" war das echt so erfolgreich?

Ähnliche Themen: BrowserModifier:Win32/SupTab!blnk - "Entfernen erfolgreich" war das echt so erfolgreich?