| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Virenfund vom 10.02.2017Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
11.02.2017, 05:43
| #1 |
 |  Virenfund vom 10.02.2017 Guten Morgen an alle die das lesen. Wie oben schon erwähnt habe ich gestern Viren auf dem Laptop gefunden. Ich habe die Viren schon länger drauf. Ich hatte bisher keine Zeit sie zu entfernen. Habe auch ältere Logs...haben jedesmal was gefunden. Am anfang waren es über Hundert. Ich denke mal ihr/du braucht/brauchst frische Logs. Unten sind drei Logfiles: 1. MBAM Scan vom 10.02.2017 2. FRST x64 Scan vom 10.02.2017 3. FRST x64 Addition vom 10.02.2017 Könnt ihr mal bei der Virenentfernung helfen, Trojaner-Board-Team? Wäre nett von euch, lasse demjenigen auch mindestens ein Lob da  ))Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 10.02.2017 Suchlaufzeit: 22:27 Protokolldatei: MBAM Scan Results 10.02.2017.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2017.02.10.06 Rootkit-Datenbank: v2016.11.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: thomas hochhalter Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 432202 Abgelaufene Zeit: 1 Std., 0 Min., 13 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 6 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2211D4A5-48D0-47F5-A7CD-81E861470F7F}, In Quarantäne, [d579b3ee9c0cbd79e0b4ebde05fd8a76], PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2211D4A5-48D0-47F5-A7CD-81E861470F7F}, In Quarantäne, [e7676d341b8d9e989df7daefe0220cf4], PUP.Optional.InstallCore, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\csastats, In Quarantäne, [fc52346db8f0ec4a8c47912c9e656c94], PUP.Optional.WinYahoo, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2211D4A5-48D0-47F5-A7CD-81E861470F7F}, In Quarantäne, [63eb307100a837ffa7ecb21703ff0df3], PUP.Optional.ProductSetup, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\PRODUCTSETUP, In Quarantäne, [d17d762b21870a2c4aa35528e61dc23e], PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{21DFC91F-715F-189F-C0DF-681F105FBB9F}, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], Registrierungswerte: 6 PUP.Optional.WinYahoo, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2211d4a5-48d0-47f5-a7cd-81e861470f7f}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f[d579b3ee9c0cbd79e0b4ebde05fd8a76]D4%26b[d579b3ee9c0cbd79e0b4ebde05fd8a76]DIE%26cc[d579b3ee9c0cbd79e0b4ebde05fd8a76]Dde%26pa[d579b3ee9c0cbd79e0b4ebde05fd8a76]Dwincy%26cd[d579b3ee9c0cbd79e0b4ebde05fd8a76]D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr[d579b3ee9c0cbd79e0b4ebde05fd8a76]D731922868%26a[d579b3ee9c0cbd79e0b4ebde05fd8a76]Dwbf_fsvideosft_17_06%26os_ver[d579b3ee9c0cbd79e0b4ebde05fd8a76]D10.0%26os[d579b3ee9c0cbd79e0b4ebde05fd8a76]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5 PUP.Optional.WinYahoo, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2211d4a5-48d0-47f5-a7cd-81e861470f7f}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f[e7676d341b8d9e989df7daefe0220cf4]D4%26b[e7676d341b8d9e989df7daefe0220cf4]DIE%26cc[e7676d341b8d9e989df7daefe0220cf4]Dde%26pa[e7676d341b8d9e989df7daefe0220cf4]Dwincy%26cd[e7676d341b8d9e989df7daefe0220cf4]D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr[e7676d341b8d9e989df7daefe0220cf4]D731922868%26a[e7676d341b8d9e989df7daefe0220cf4]Dwbf_fsvideosft_17_06%26os_ver[e7676d341b8d9e989df7daefe0220cf4]D10.0%26os[e7676d341b8d9e989df7daefe0220cf4]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5 PUP.Optional.WinYahoo, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f[ada1524fbdebf93d35e7cf4d58a843bd]D1%26b[ada1524fbdebf93d35e7cf4d58a843bd]DIE%26cc[ada1524fbdebf93d35e7cf4d58a843bd]Dde%26pa[ada1524fbdebf93d35e7cf4d58a843bd]Dwincy%26cd[ada1524fbdebf93d35e7cf4d58a843bd]D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr[ada1524fbdebf93d35e7cf4d58a843bd]D731922868%26a[ada1524fbdebf93d35e7cf4d58a843bd]Dwbf_fsvideosft_17_06%26os_ver[ada1524fbdebf93d35e7cf4d58a843bd]D10.0%26os[ada1524fbdebf93d35e7cf4d58a843bd]DWindowsIn QuarantäneB10In QuarantäneBHome, %4, %5 PUP.Optional.WinYahoo, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2211d4a5-48d0-47f5-a7cd-81e861470f7f}|URL, https://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f[63eb307100a837ffa7ecb21703ff0df3]D4%26b[63eb307100a837ffa7ecb21703ff0df3]DIE%26cc[63eb307100a837ffa7ecb21703ff0df3]Dde%26pa[63eb307100a837ffa7ecb21703ff0df3]Dwincy%26cd[63eb307100a837ffa7ecb21703ff0df3]D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr[63eb307100a837ffa7ecb21703ff0df3]D731922868%26a[63eb307100a837ffa7ecb21703ff0df3]Dwbf_fsvideosft_17_06%26os_ver[63eb307100a837ffa7ecb21703ff0df3]D10.0%26os[63eb307100a837ffa7ecb21703ff0df3]DWindowsIn QuarantäneB10In QuarantäneBHome&p={searchTerms}, %4, %5 PUP.Optional.NotChromeRun, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|GoogleChromeAutoLaunch_50371FB51B8F89FFAE4DCD6D1745FDD8, "C:\Users\thomas hochhalter\AppData\Local\chromium\Application\chrome.exe" --no-startup-window, In Quarantäne, [430b960b8028d264f1203f3cab588878] PUP.Optional.ProductSetup, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\PRODUCTSETUP|tb, 0G2O2W1R0C1R1H, In Quarantäne, [d17d762b21870a2c4aa35528e61dc23e] Registrierungsdaten: 1 PUP.Optional.WinYahoo, HKU\S-1-5-21-934394075-4118312357-3984632377-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=fSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]D1%26bSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]DIE%26ccSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]Dde%26paSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]Dwincy%26cdSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26crSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]D731922868%26aSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]Dwbf_fsvideosft_17_06%26os_verSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]D10.0%26osSchlecht: (https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome),Ersetzt,[430babf6ecbcd363d4c2d9348e764cb4]DWindowsGut: (www.google.com)B10Gut: (www.google.com)BHome, %4, %5 Ordner: 2 PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], Dateien: 29 PUP.Optional.FusionCore, C:\Users\thomas hochhalter\AppData\Local\Temp\is-0EINM.tmp\Fusion.dll, In Quarantäne, [0e400b96dbcde650986cedb98d73d927], PUP.Optional.WinYahoo, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk, In Quarantäne, [4a046c35fcacaf871594e5c36c9744bc], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\HowToRemove.html, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\chromium-min.jpg, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\control panel-min-min.JPG, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\down.png, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\ff menu.JPG, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\ff search engine-min.png, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\hp-min ff.png, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\hp-min ie.png, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\search engine.gif, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\setup pages.gif, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\sp-min.png, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\start-min.jpg, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\HowToRemove\up.png, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\bapi_chmm.dat, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\bapi_ff.dat, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\bapi_ie.dat, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\coni, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\install.log, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\meto, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\neco, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\sili, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\Sqlite3.dll, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\uninst.dat, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\uninst.exe, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE}\uninstp.dat, In Quarantäne, [60eedac75c4c6cca98c2ae74b450f40c], PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583\prefs.js, Gut: (user_pref("browser.startup.homepage", "https://www.malwarebytes.org/restorebrowser/), Schlecht: (user_pref("browser.startup.homepage", "https://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindowsErsetzt,[a2ace6bbeebadd5921cd3e8bed16d32d]B10Ersetzt,[a2ace6bbeebadd5921cd3e8bed16d32d]BHome");), %5 PUP.Optional.WinYahoo, C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583\searchplugins\yahoo! powered.xml, In Quarantäne, [212df8a93d6b7cbaaabb6fb328dc1ae6], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 10-02-2017 durchgeführt von thomas hochhalter (Administrator) auf THOMAS (10-02-2017 22:37:32) Gestartet von C:\Users\thomas hochhalter\Downloads Geladene Profile: thomas hochhalter & (Verfügbare Profile: thomas hochhalter) Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (AMD) C:\Windows\System32\atiesrxx.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe (Byte Technologies LLC) C:\Program Files\ByteFence\ByteFenceService.exe (Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe (Microsoft) C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe (McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe () C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe () C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (© 2015 Microsoft Corporation) C:\Users\thomas hochhalter\AppData\Local\Microsoft\BingSvc\BingSvc.exe (Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe (ALPS) C:\Program Files\Apoint\Apvfb.exe (Spotify Ltd) C:\Users\thomas hochhalter\AppData\Roaming\Spotify\SpotifyWebHelper.exe (The Chromium Authors) C:\Users\thomas hochhalter\AppData\Local\chromium\Application\chrome.exe (The Chromium Authors) C:\Users\thomas hochhalter\AppData\Local\chromium\Application\chrome.exe (The Chromium Authors) C:\Users\thomas hochhalter\AppData\Local\chromium\Application\chrome.exe (The Chromium Authors) C:\Users\thomas hochhalter\AppData\Local\chromium\Application\chrome.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe () C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Byte Technologies LLC) C:\Program Files\ByteFence\ByteFence.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Digital Wave Ltd) C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe (Intel Security) C:\Program Files\Intel Security\True Key\application\truekey.exe (Intel Security) C:\Program Files\Intel Security\True Key\application\truekey.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\BatteryModule.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\BatteryModule.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [212480 2010-05-31] (Alps Electric Co., Ltd.) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-16] (Microsoft Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [PMBVolumeWatcher] => c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation) HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2650576 2016-12-14] (Malwarebytes Corporation) Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\Run: [BingSvc] => C:\Users\thomas hochhalter\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation) HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\Run: [Spotify Web Helper] => C:\Users\thomas hochhalter\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-23] (Spotify Ltd) HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\Run: [Chromium] => c:\users\thomas hochhalter\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors) HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\Run: [GoogleChromeAutoLaunch_50371FB51B8F89FFAE4DCD6D1745FDD8] => C:\Users\thomas hochhalter\AppData\Local\chromium\Application\chrome.exe [1068544 2016-03-18] (The Chromium Authors) HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [BingSvc] => C:\Users\thomas hochhalter\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation) HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\thomas hochhalter\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1444976 2016-12-23] (Spotify Ltd) HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Chromium] => c:\users\thomas hochhalter\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors) HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleChromeAutoLaunch_50371FB51B8F89FFAE4DCD6D1745FDD8] => C:\Users\thomas hochhalter\AppData\Local\chromium\Application\chrome.exe [1068544 2016-03-18] (The Chromium Authors) HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation) Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{bc863aaa-54e2-4f05-a57b-5b003d0368db}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{c3fa99c0-6d20-46d3-a571-87208c430cb4}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{c765f76d-d772-48cd-a31c-377a2b7b8b64}: [DhcpNameServer] 192.168.42.129 ManualProxies: Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-934394075-4118312357-3984632377-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> DefaultScope {33912D4F-60FD-493D-B39F-51282B3AFDE4} URL = SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {75E9A305-CA85-46BD-AD1A-B3FC79057BBB} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {CC7B8E83-9661-4617-9C47-06631049DD92} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-9/4?satitle={searchTerms} SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000 -> {EA35FAC9-0E9F-4C52-A305-F85D8B14DD5E} URL = hxxp://de.shopping.com/?linkin_id=8056363 SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {33912D4F-60FD-493D-B39F-51282B3AFDE4} URL = SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://de.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {75E9A305-CA85-46BD-AD1A-B3FC79057BBB} URL = hxxp://services.zinio.com/search?s={searchTerms}&rf=sonyslices SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {CC7B8E83-9661-4617-9C47-06631049DD92} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-9/4?satitle={searchTerms} SearchScopes: HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {EA35FAC9-0E9F-4C52-A305-F85D8B14DD5E} URL = hxxp://de.shopping.com/?linkin_id=8056363 BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => Keine Datei BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2015-07-13] (DVDVideoSoft Ltd.) BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-01-10] (Intel Security) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => Keine Datei Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2017-01-10] (Intel Security) Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583 [2017-02-10] FF DefaultSearchEngine: Mozilla\Firefox\Profiles\1gskicur.default-1476352503583 -> Yahoo! Powered FF SelectedSearchEngine: Mozilla\Firefox\Profiles\1gskicur.default-1476352503583 -> Yahoo! Powered FF Homepage: Mozilla\Firefox\Profiles\1gskicur.default-1476352503583 -> hxxps://de.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_fsvideosft_17_06¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dde%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyBzz0D0DtDzz0B0C0C0C0B0F0C0B0EtDtN0D0Tzu0StCzzyCtAtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StB0D0A0BzyyEtA0CtGyDzyyEyBtGzyyB0B0CtGtBtB0AyEtGzz0Dzz0CyD0Azy0ByByB0CtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtDtAtBtDtDtCyCtG0D0FtBzztGyEyDyCtAtG0A0E0F0CtGyByByDyC0C0FyB0D0CyE0E0E2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCzyyDtA%26cr%3D731922868%26a%3Dwbf_fsvideosft_17_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome FF Keyword.URL: Mozilla\Firefox\Profiles\1gskicur.default-1476352503583 -> user_pref("keyword.URL", true); FF Extension: (True Key Add-On) - C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583\Extensions\@true-key [2017-02-10] FF Extension: (Deutsch (DE) Language Pack) - C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583\Extensions\langpack-de@firefox.mozilla.org.xpi [2017-01-31] FF Extension: (1-Click YouTube Video Downloader) - C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2017-01-15] FF SearchPlugin: C:\Users\thomas hochhalter\AppData\Roaming\Mozilla\Firefox\Profiles\1gskicur.default-1476352503583\searchplugins\yahoo! powered.xml [2017-02-06] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2016-10-05] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] () FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] () FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-08-26] (Google, Inc.) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation) FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.) FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin HKU\S-1-5-21-934394075-4118312357-3984632377-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-934394075-4118312357-3984632377-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-11-09] () FF Plugin HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2016-09-21] (Tracker Software Products (Canada) Ltd.) FF Plugin HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-11-09] () Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25] Opera: ======= OPR Extension: (NoScript Suite Lite) - C:\Users\thomas hochhalter\AppData\Roaming\Opera Software\Opera Stable\Extensions\ipiopppcaojnchgoepoemlbdccogeije [2016-10-13] ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.) R2 ByteFenceService; C:\Program Files\ByteFence\ByteFenceService.exe [146912 2017-01-18] (Byte Technologies LLC) R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-01-26] (Digital Wave Ltd.) R2 ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] () S2 FLAME II HSPA USB MODEM Service; C:\Program Files (x86)\My Connection\ApplicationController.exe [577704 2014-07-24] () [Datei ist nicht signiert] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Datei ist nicht signiert] R2 MbaeSvc; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe [155088 2016-12-14] (Malwarebytes Corporation) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.8.130\McCHSvc.exe [235216 2013-10-16] (McAfee, Inc.) R2 NovaPdfServer; C:\Program Files\Softland\novaPDF 8\Server\novapdfs.exe [51112 2016-09-26] (Microsoft) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-02] (Electronic Arts) R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert] R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-12-04] () R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [304456 2017-02-06] () R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [995800 2017-01-05] (McAfee, Inc.) R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16248 2017-01-05] (McAfee, Inc.) S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86864 2017-01-05] (McAfee, Inc.) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) S3 USER_ESRV_SVC; C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe [413336 2015-08-26] () S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation) R2 VSNService; C:\Program Files\Sony\VAIO Smart Network\VSNService.exe [836608 2010-06-08] (Sony Corporation) [Datei ist nicht signiert] R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1656600 2016-03-31] (Sony Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe -originalversion 4.4.127.0 [X] ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 ArcSoftKsUFilter; C:\WINDOWS\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [211456 2016-10-17] () [Datei ist nicht signiert] S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.) S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) R1 ESProtectionDriver; C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.sys [77408 2016-12-14] () S3 IntcDAud; C:\WINDOWS\System32\DRIVERS\IntcDAud.sys [271872 2010-06-24] (Intel(R) Corporation) [Datei ist nicht signiert] S2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [35328 2016-10-17] () [Datei ist nicht signiert] S2 lirsgt; C:\Windows\SysWOW64\DRIVERS\lirsgt.sys [18048 2016-10-17] () [Datei ist nicht signiert] R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2017-02-10] (Malwarebytes) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [29352 2015-10-14] () S3 semav6thermal64ro; C:\Windows\system32\drivers\semav6thermal64ro.sys [13792 2015-08-04] () S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) R3 ykinw8; C:\WINDOWS\System32\drivers\ykinx64.sys [288768 2016-07-16] (Marvell) U3 aspnet_state; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-10 22:37 - 2017-02-10 22:37 - 00029577 _____ C:\Users\thomas hochhalter\Downloads\FRST.txt 2017-02-10 22:32 - 2017-02-10 22:35 - 02421248 _____ (Farbar) C:\Users\thomas hochhalter\Downloads\FRST64.exe 2017-02-06 16:17 - 2017-02-06 16:18 - 00105696 _____ C:\Users\thomas hochhalter\Desktop\Lebenslauf.pdf 2017-02-06 16:15 - 2017-02-06 16:15 - 00009616 _____ C:\Users\thomas hochhalter\Desktop\Lebenslauf.odt 2017-02-06 16:13 - 2017-02-06 16:13 - 00003560 _____ C:\WINDOWS\System32\Tasks\ByteFence Scan 2017-02-06 16:13 - 2017-02-06 16:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware 2017-02-06 15:58 - 2017-02-06 15:58 - 00000000 ____D C:\ProgramData\ByteFence 2017-02-06 15:10 - 2017-02-10 21:47 - 00000000 ____D C:\Program Files\ByteFence 2017-02-06 15:10 - 2017-02-06 15:14 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\{954AA316-B1E2-CFAE-DC7A-EA46F81216DE} 2017-02-06 15:10 - 2017-02-06 15:10 - 00003466 _____ C:\WINDOWS\System32\Tasks\ByteFence 2017-02-06 15:10 - 2017-02-06 15:10 - 00001657 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HowToRemove.html.lnk 2017-01-26 23:32 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-01-26 23:32 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-01-26 22:49 - 2017-01-26 22:51 - 01496584 _____ C:\Users\thomas hochhalter\Downloads\WhatsApp2732Setup - CHIP-Installer.exe 2017-01-15 20:00 - 2017-02-06 14:11 - 00000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files 2017-01-15 19:59 - 2017-01-15 19:59 - 00001375 _____ C:\Users\Public\Desktop\Free YouTube Download.lnk 2017-01-15 19:56 - 2017-01-15 19:58 - 33826608 _____ (Digital Wave Ltd ) C:\Users\thomas hochhalter\Downloads\FreeYouTubeDownload-4.1.32.1215.exe 2017-01-12 02:02 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2017-01-12 02:02 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-01-12 02:02 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-01-12 02:02 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-01-12 02:02 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2017-01-12 02:02 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-01-12 02:02 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-01-12 02:02 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-01-12 02:02 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-01-12 02:02 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-01-12 02:02 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-01-12 02:02 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2017-01-12 02:02 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-01-12 02:02 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-01-12 02:02 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2017-01-12 02:02 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-01-12 02:02 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-01-12 02:02 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2017-01-12 02:02 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-01-12 02:02 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2017-01-12 02:02 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2017-01-12 02:02 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-01-12 02:02 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-01-12 02:02 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2017-01-12 02:02 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-01-12 02:02 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-01-12 02:02 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-01-12 02:02 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2017-01-12 02:02 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2017-01-12 02:02 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-01-12 02:02 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2017-01-12 02:02 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2017-01-12 02:02 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-01-12 02:02 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-01-12 02:02 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-01-12 02:02 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2017-01-12 02:02 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2017-01-12 02:02 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2017-01-12 02:02 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-01-12 02:02 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-01-12 02:02 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2017-01-12 02:02 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2017-01-12 02:02 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2017-01-12 02:02 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2017-01-12 02:02 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-01-12 02:02 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2017-01-12 02:02 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2017-01-12 02:02 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2017-01-12 02:02 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-01-12 02:02 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll 2017-01-12 02:02 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll 2017-01-12 02:02 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-01-12 02:02 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-01-12 02:02 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2017-01-12 02:02 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-01-12 02:02 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2017-01-12 02:02 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-01-12 02:02 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-01-12 02:02 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-01-12 02:02 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-01-12 02:01 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-01-12 02:01 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-01-12 02:01 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-01-12 02:01 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-01-12 02:01 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-01-12 02:01 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-01-12 02:01 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-01-12 02:01 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-01-12 02:01 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-01-12 02:01 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-01-12 02:01 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-01-12 02:01 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2017-01-12 02:00 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-01-12 02:00 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2017-01-12 02:00 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-01-12 02:00 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-01-12 02:00 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-01-12 02:00 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-01-12 02:00 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2017-01-12 02:00 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2017-01-12 02:00 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll 2017-01-12 02:00 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2017-01-12 02:00 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-01-12 02:00 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-01-12 02:00 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2017-01-12 02:00 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-01-12 02:00 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-01-12 02:00 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-01-12 02:00 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2017-01-12 02:00 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-01-12 02:00 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-01-12 02:00 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-01-12 02:00 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-01-12 02:00 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2017-01-12 02:00 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-01-12 02:00 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2017-01-12 02:00 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-01-12 02:00 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll 2017-01-12 02:00 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2017-01-12 02:00 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2017-01-12 02:00 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-01-12 02:00 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-01-12 02:00 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-01-12 02:00 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-01-12 02:00 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-01-12 02:00 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-01-12 02:00 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-01-12 02:00 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-01-12 02:00 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-01-12 02:00 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-01-12 02:00 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-01-12 02:00 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-01-12 02:00 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2017-01-12 02:00 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-01-12 02:00 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2017-01-12 02:00 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2017-01-12 02:00 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-01-12 02:00 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-01-12 02:00 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2017-01-12 02:00 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-01-12 02:00 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-01-12 02:00 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-01-12 02:00 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-01-12 02:00 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-01-12 02:00 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-01-12 02:00 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2017-01-12 02:00 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-01-12 02:00 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-01-12 02:00 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2017-01-12 02:00 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2017-01-12 02:00 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2017-01-12 02:00 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2017-01-12 02:00 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2017-01-12 02:00 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-01-12 02:00 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-01-12 02:00 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2017-01-12 02:00 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2017-01-12 02:00 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2017-01-12 02:00 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2017-01-12 02:00 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-01-12 02:00 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-12 02:00 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-01-12 02:00 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-01-12 02:00 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2017-01-12 02:00 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-01-12 02:00 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-12 02:00 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-01-12 02:00 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-01-12 02:00 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2017-01-12 02:00 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-01-12 02:00 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2017-01-12 02:00 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-01-12 02:00 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-01-12 02:00 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2017-01-12 02:00 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2017-01-12 02:00 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-01-12 02:00 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-01-12 02:00 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2017-01-12 02:00 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-01-12 02:00 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-01-12 02:00 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-01-12 02:00 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-01-12 02:00 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-01-12 01:59 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2017-01-12 01:59 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2017-01-12 01:59 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-10 22:37 - 2016-10-28 20:12 - 00000000 ____D C:\FRST 2017-02-10 22:27 - 2015-05-26 14:17 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\Skype 2017-02-10 22:26 - 2016-10-10 12:13 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-02-10 21:55 - 2016-11-18 20:04 - 00000000 ____D C:\Users\thomas hochhalter\AppData\LocalLow\Mozilla 2017-02-10 21:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-10 21:42 - 2016-10-13 11:16 - 00000000 ____D C:\ProgramData\Malwarebytes Anti-Exploit 2017-02-10 21:41 - 2016-09-16 16:01 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-02-10 19:54 - 2015-07-14 21:17 - 00000000 ____D C:\Program Files (x86)\Opera 2017-02-10 16:14 - 2016-11-22 19:29 - 00000000 ____D C:\Program Files (x86)\McAfee 2017-02-10 16:12 - 2016-09-16 16:33 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-02-10 16:11 - 2016-11-22 19:14 - 00000000 ____D C:\Program Files\TrueKey 2017-02-10 14:46 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-10 14:26 - 2016-12-25 11:56 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Local\tkdata 2017-02-09 18:03 - 2016-09-16 16:33 - 00003974 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1436905118 2017-02-09 18:03 - 2015-07-14 21:18 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk 2017-02-07 17:30 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-02-07 06:52 - 2016-11-22 19:31 - 00001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\True Key.lnk 2017-02-06 15:13 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF 2017-02-06 15:10 - 2016-09-04 15:42 - 00001471 _____ C:\Users\Public\Desktop\Free YouTube To MP3 Converter.lnk 2017-02-06 15:10 - 2016-09-04 15:42 - 00001408 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk 2017-02-06 15:10 - 2015-07-14 21:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2017-02-06 15:10 - 2015-07-14 21:14 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2017-02-06 14:10 - 2015-07-14 21:14 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\DVDVideoSoft 2017-02-05 21:37 - 2014-06-20 21:47 - 00000000 ____D C:\ProgramData\Skype 2017-02-05 21:36 - 2016-09-16 16:09 - 00000000 ____D C:\Users\thomas hochhalter 2017-02-04 20:01 - 2014-07-09 22:02 - 00000000 ____D C:\Users\thomas hochhalter\AppData\Roaming\vlc 2017-02-02 23:21 - 2016-11-18 19:19 - 00000000 ____D C:\Program Files\Mozilla Firefox 2017-02-02 23:21 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2017-02-02 23:21 - 2014-06-22 22:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-02-01 18:49 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-01-16 00:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache 2017-01-15 17:00 - 2016-12-09 16:10 - 00003296 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-01-15 17:00 - 2016-03-12 02:57 - 00002455 _____ C:\Users\thomas hochhalter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-01-15 17:00 - 2016-03-12 02:57 - 00000000 ___RD C:\Users\thomas hochhalter\OneDrive 2017-01-15 16:55 - 2016-02-13 18:30 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-01-15 16:32 - 2016-10-13 03:08 - 00000946 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job 2017-01-15 16:32 - 2016-10-12 19:12 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2017-01-15 16:32 - 2016-09-16 16:00 - 00374152 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-01-12 04:03 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-01-12 04:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-01-12 04:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-01-12 04:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-01-12 04:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning 2017-01-12 02:30 - 2015-12-22 11:32 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-01-12 02:23 - 2015-12-22 11:32 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-01-11 01:20 - 2016-10-13 03:08 - 00004042 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier 2017-01-11 01:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-01-11 01:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2015-04-18 20:35 - 2015-04-18 20:35 - 0000000 _____ () C:\Users\thomas hochhalter\AppData\Local\{9331956F-E7D8-491B-A1BC-1C7A0AF5B332} 2016-11-13 21:41 - 2016-11-13 21:41 - 0000016 _____ () C:\ProgramData\mntemp 2016-11-13 21:41 - 2016-11-13 21:41 - 0004996 _____ () C:\ProgramData\mudtcpaz.vzs Einige Dateien in TEMP: ==================== 2016-10-20 18:26 - 2016-10-20 18:26 - 2458672 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\thomas hochhalter\AppData\Local\Temp\libeay32.dll 2016-10-20 18:26 - 2016-10-20 18:26 - 0970912 _____ (Microsoft Corporation) C:\Users\thomas hochhalter\AppData\Local\Temp\msvcr120.dll 2016-10-10 17:33 - 2016-10-10 17:33 - 0040448 ____N () C:\Users\thomas hochhalter\AppData\Local\Temp\proxy_vole5334183344008302495.dll 2016-10-20 18:26 - 2016-10-20 18:26 - 0772672 _____ () C:\Users\thomas hochhalter\AppData\Local\Temp\sqlite3.dll 2016-11-20 06:50 - 2016-11-20 06:52 - 30533688 _____ () C:\Users\thomas hochhalter\AppData\Local\Temp\vlc-2.2.4-win32.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-02-04 20:05 ==================== Ende von FRST.txt ============================ |
|
11.02.2017, 05:44
| #2 |
| | Virenfund vom 10.02.2017 FRST Additions Logfile:
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 10-02-2017
durchgeführt von thomas hochhalter (10-02-2017 22:46:18)
Gestartet von C:\Users\thomas hochhalter\Downloads
Windows 10 Home Version 1607 (X64) (2016-09-16 15:45:34)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-934394075-4118312357-3984632377-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-934394075-4118312357-3984632377-503 - Limited - Disabled)
Gast (S-1-5-21-934394075-4118312357-3984632377-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-934394075-4118312357-3984632377-1002 - Limited - Enabled)
thomas hochhalter (S-1-5-21-934394075-4118312357-3984632377-1000 - Administrator - Enabled) => C:\Users\thomas hochhalter
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Flash Player 24 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated)
Adobe Premiere Elements 8.0 (HKLM-x32\...\PremElem80) (Version: 8.0 - Adobe Systems Incorporated)
Alps Pointing-device for VAIO (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: - ALPS ELECTRIC CO., LTD.)
AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD)
Apple Application Support (32-Bit) (HKLM-x32\...\{F2871C89-C8A5-42EE-8D45-0F02506385A6}) (Version: 5.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{9BC93467-75D1-4AA4-BD58-D9C51D88DFAB}) (Version: 5.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.115 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.368 - ArcSoft)
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
ATI Catalyst Install Manager (HKLM\...\{687C26DE-9A70-B256-170A-717DFA8B360E}) (Version: 3.0.750.0 - ATI Technologies, Inc.)
Battlefield 1942 (HKLM-x32\...\{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}) (Version: - )
Battlefield 1942: The Road To Rome (HKLM-x32\...\{D057AA08-8CBF-42E3-9EAB-23B8FED1C279}) (Version: - )
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
ByteFence Anti-Malware (HKLM-x32\...\ByteFence) (Version: 2.10.0.22 - Byte Technologies LLC) <==== ACHTUNG
Call of Duty: Black Ops - Multiplayer (HKLM-x32\...\Steam App 42710) (Version: - Treyarch)
Call of Duty: Black Ops (HKLM-x32\...\Steam App 42700) (Version: - Treyarch)
ccc-core-static (x32 Version: 2010.0209.16.306 - Ihr Firmenname) Hidden
Command & Conquer™ 4 Tiberian Twilight (HKLM-x32\...\{82696435-8572-4D8B-A230-D1AA567D0F0F}) (Version: 1.0.0.0 - Electronic Arts)
doPDF (Version: 8.7.943 - Softland) Hidden
doPDF 8 (HKLM-x32\...\{d6358cec-8eb1-4dac-842d-37f920ee7b83}) (Version: 8.7.943 - Softland)
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.4.2224 - Evernote Corp.)
Free YouTube Download (HKLM-x32\...\Free YouTube Download_is1) (Version: 4.1.32.1215 - Digital Wave Ltd)
Free YouTube To MP3 Converter (HKLM-x32\...\Free YouTube To MP3 Converter_is1) (Version: 4.1.34.126 - Digital Wave Ltd)
GameShadow (HKLM-x32\...\{F7C1C17E-70E3-475F-BD52-EA554391F15D}) (Version: 2.01.0000 - Ihr Firmenname)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - )
Hitman Blood Money (HKLM-x32\...\{A804B134-F03D-4EFD-9BC0-DCD257AA1B22}) (Version: 1.00.0000 - Eidos)
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.12.108.1 - Intel Security)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Malwarebytes Anti-Exploit version 1.9.1.1291 (HKLM\...\Malwarebytes Anti-Exploit_is1) (Version: 1.9.1.1291 - Malwarebytes)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Media Gallery (Version: 1.3.0 - Sony Corporation) Hidden
Media Gallery (x32 Version: 1.3.0.06230 - Sony Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Movavi Video Converter 17 (HKLM-x32\...\Movavi Video Converter 17) (Version: 17.0.3 - Movavi)
Mozilla Firefox 38.0.5 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 en-US)) (Version: 38.0.5 - Mozilla)
Mozilla Firefox 51.0.1 (x64 de) (HKLM\...\Mozilla Firefox 51.0.1 (x64 de)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
novaPDF 8 Printer Driver (HKLM\...\{6C88C54A-0C9C-4B57-8CF5-C6A0184B554E}) (Version: 8.7.943 - Softland)
Opera Stable 43.0.2442.806 (HKLM-x32\...\Opera 43.0.2442.806) (Version: 43.0.2442.806 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 9.2.1.4399 - Electronic Arts, Inc.)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.318.1 - Tracker Software Products Ltd)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.3.00.06040 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.3.00.06040 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00.06180 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.3.00.06110 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00.06180 - Sony Corporation) Hidden
PunkBuster für Battlefield 1942 (HKLM-x32\...\{127B684B-A002-44C8-99A7-6CF8F1E26873}) (Version: - )
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.)
Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.0.2.06210 - Sony Corporation)
Remote Play with PlayStation 3 (x32 Version: 1.0.2.06210 - Sony Corporation) Hidden
Remote-Tastatur mit PlayStation 3 (HKLM-x32\...\{65B138AE-F636-4D4C-BA5D-A06E21E47C53}) (Version: 1.0.2.06170 - Sony Corporation)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.31 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.31.104 - Skype Technologies S.A.)
SmartSound Quicktracks for Premiere Elements 8.0 (HKLM-x32\...\InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}) (Version: 3.11.3090 - SmartSound Software Inc)
SmartSound Quicktracks for Premiere Elements 8.0 (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden
Spotify (HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\Spotify) (Version: 1.0.44.100.ga60c0ce1 - Spotify AB)
Spotify (HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Spotify) (Version: 1.0.44.100.ga60c0ce1 - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Stronghold Crusader Extreme (HKLM-x32\...\{8C3727F2-8E37-49E4-820C-03B1677F53B6}) (Version: 1.20.0000 - Firefly Studios)
Tom Clancy's Splinter Cell Double Agent (HKLM-x32\...\{CAD1691A-FA24-4B95-9009-3257B8440ECC}) (Version: 1.00.0000 - Ubisoft)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.353 - TuneUp Software) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
VAIO - Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.3.0.06230 - Sony Corporation)
VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{88C252C8-A7EE-4B60-BF74-8E5919A8048F}) (Version: 1.3.00.06040 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.3.00.06180 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.3.00.06110 - Sony Corporation)
VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.3.00.06180 - Sony Corporation)
VAIO Care (HKLM\...\{6EEC3E9C-3479-42EB-B93C-E7DF7927DD82}) (Version: 8.4.4.09181 - Sony Corporation)
VAIO Care Recovery (HKLM\...\{6ED1750E-F44F-4635-8F0D-B76B9262B7FB}) (Version: 1.1.1.13230 - Sony Corporation)
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.3.0.05310 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.4.0.05240 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.4.0.05240 - Sony Corporation) Hidden
VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.2.00.05120 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.2.0.06080 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.2.0.07020 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230 - Sony Corporation) Hidden
VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.1.0.18210 - Sony Corporation)
VAIO Media plus (Version: 2.1.0 - Sony Corporation) Hidden
VAIO Media plus (x32 Version: 2.1.0.18210 - Sony Corporation) Hidden
VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 2.1.0.13220 - Sony Corporation)
VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.3.00.06040 - Sony Corporation)
VAIO Movie Story Template Data (x32 Version: 2.3.00.06040 - Sony Corporation) Hidden
VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.3.4.2 - Sony Corporation)
VAIO Quick Web Access (x32 Version: 1.3.4.2 - Sony Corporation) Hidden
VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.3.0.06041 - Sony Corporation)
VAIO screensaver (HKLM-x32\...\VAIO screensaver) (Version: 1.0.0.0 - Sony Europe)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.3.0.06080 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 7.2.0.16270 - Sony Corporation)
VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.1.0.05280 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.2.0.06230 - Sony Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
VUx64 (Version: 1.2.0 - Sony Corporation) Hidden
VUx86 (x32 Version: 1.2.0 - Sony Corporation) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.5600 - Broadcom Corporation)
Windows Live Anmelde-Assistent (HKLM-x32\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Yahoo! Powered (HKLM-x32\...\{21DFC91F-715F-189F-C0DF-681F105FBB9F}) (Version: - ) <==== ACHTUNG
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0214FB42-5A67-4A76-9057-C56D82BE37B9} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe
Task: {05B48B42-1267-405F-BD06-DF7E4710D4F3} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe
Task: {06412047-E73A-4856-AA97-34FB95E95D95} - System32\Tasks\{08B912A8-EFAA-47A2-B155-01E7A5248712} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {0890CED9-0FB8-4799-9439-76A80194973C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe
Task: {09179B73-5021-470B-8CE2-179404589993} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe
Task: {13B5C638-4B8D-4FF7-9423-DC3464A92DC6} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe
Task: {15B5E6FD-7A1B-4FF9-9B6D-3509C0FD4A0C} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {19D4651C-1764-4636-AC1D-48ECA7D5983B} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-06-08] (Sony Corporation)
Task: {1B712D48-3C97-4224-B39A-B37EE6B1F6F4} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe
Task: {1B8FBE5A-C6B5-4C3B-900C-40F749F241A5} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {208BBE3D-C041-439A-ADF0-D28BC87AF048} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe
Task: {241DF46B-4270-443B-B953-8CEB2E38F09D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {24C76B40-CC20-44D9-B724-8B11E2E9365F} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {26BA986D-D7E2-4758-9F13-C6E1A0F18822} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {31829C8A-3427-4DF0-A7E3-EBC27BD007BD} - System32\Tasks\doPDF Update => C:\Program Files\Softland\novaPDF 8\Driver\UpdateApplication.exe [2016-09-26] ()
Task: {3230FDDE-7FB4-4C66-BB05-1B2DC03E57EE} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe
Task: {441AB9A0-19DE-4CE7-BB1E-FCC5D85F1EA2} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {4448A42D-5C7F-4346-8754-D123FF90309C} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2016-04-25] (Sony Corporation)
Task: {4C0B71C7-3D3F-47A9-A1A6-115131EC327C} - System32\Tasks\Java(TM) Platform SE Auto Updater 2 0 => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
Task: {51A7D641-A933-4FC1-9D9E-75BD1DB74E76} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {54E1D2FD-FE10-474B-A9E3-56F2A5138099} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeNowTask => %SystemRoot%\System32\GWX\GWXUXWorker.exe
Task: {5A66AF35-81C0-4967-B340-15A61F2BAA7D} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe
Task: {5E5296E6-3D51-4849-9EEC-571A6C02B78E} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe
Task: {61E0BE7D-5C01-4D62-8F03-B0530BE83A49} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe
Task: {65905F9B-F63F-45A7-A800-D1E18CC9EE34} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec.exe
Task: {69EC53B8-F76D-41A0-A65A-CA29CAC94D21} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {6B1352F9-CABF-4DD2-A616-7AE3B931CEAD} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe/NOUACCHECK
Task: {73925E44-95E0-4E0F-B8FC-8F177E82346C} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {7BC415EB-CD6A-4C1E-BD63-AB15C5C44686} - System32\Tasks\USER_ESRV_SVC => Wscript.exe //B //NoLogo "C:\Program Files\Sony\VAIO Care\ESRV\task.vbs"
Task: {8B58317B-EC86-4DEF-A3A3-BFBA5C3EEC77} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2016-03-31] (Sony Corporation)
Task: {8ED43CE8-51B2-40B4-8DFA-60D599730162} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {92C8983E-66FF-471E-86A0-2675A67FC6FD} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe [2017-01-11] (Adobe Systems Incorporated)
Task: {9BFD9057-E0CC-45AE-8E6A-87DD45423B77} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {9C209932-3FAF-4956-997C-6FB4D99D60F7} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {A24FF8A8-F2EF-471C-88E2-FA8C998BA202} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {A30B1EA9-906B-4F5E-BB40-9020453CCC0D} - System32\Tasks\Adobe Reader and Acrobat Manager => c:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: {A67AE021-E2D1-433A-AB3C-1570745680F6} - System32\Tasks\SONY\Remote Keyboard with PlayStation 3\Remote Keyboard with PlayStation 3 => C:\Program Files\Sony\Remote Keyboard with PlayStation 3\VBTKBUtil.exe [2010-06-17] (Sony Corporation)
Task: {AFC94DD5-A5CD-44E2-B713-125A668F2E4D} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {B7B18293-0EB1-478D-AE17-287A50F772BB} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe
Task: {BAD2EBDC-34C6-4E04-A594-9102D0829FAD} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe
Task: {BD6D9779-7D48-460F-8B08-BF18894A572D} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe
Task: {BF78CEED-1E55-4910-B79C-929294B38FED} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {C98B97B2-3C44-4442-BAA4-2913CB3271C2} - System32\Tasks\ByteFence => C:\Program Files\ByteFence\ByteFence.exe [2017-01-18] (Byte Technologies LLC) <==== ACHTUNG
Task: {CBF0DAA8-9B26-4366-9C75-524EC00327AC} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {D46A2232-B9A1-4918-B395-EA0E4640442A} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\thomas hochhalter\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {D62BC902-1821-49E0-8F8E-4F8EE193BD52} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {D7363947-96AE-4959-8D5B-F7DB49B01864} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => sc.execonfig upnphost start= auto
Task: {D8A0C781-5A12-4D76-81E2-E64C40C8A57B} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)
Task: {DBF62AFF-0031-4E14-8437-FF454DCE0125} - System32\Tasks\Sony Corporation\VAIO Care\UpdateSolution => C:\Program Files\Sony\VAIO Care\Solution.Updater.exe [2015-07-23] (Sony Corporation)
Task: {DC6C6830-07B1-4524-807D-E78B456CE7FE} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-06-08] (Sony Corporation)
Task: {DCA66913-2C9F-4463-84FF-2076E3DAC0E4} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe
Task: {E2D25C47-C8F3-4351-BC55-1CF48E181EDF} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe
Task: {E37E838E-94A0-4738-8697-A06B85E5471F} - System32\Tasks\Opera scheduled Autoupdate 1436905118 => C:\Program Files (x86)\Opera\launcher.exe [2017-02-06] (Opera Software)
Task: {E528D49A-36B5-44FB-BF95-DFF10BFBE794} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-11] (Adobe Systems Incorporated)
Task: {E8E77DAA-F3F5-48A8-B451-E62CBB828C9A} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [2015-02-04] (Sony Corporation)
Task: {ED395077-22C7-4778-9D4A-43142C1C33C0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe
Task: {F000158A-F4FE-4F83-BC03-BC966F01EFC0} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)
Task: {F0E00F67-FA34-4E0A-A840-2CF226F10068} - System32\Tasks\ByteFence Scan => C:\Program Files\ByteFence\ByteFence.exe [2017-01-18] (Byte Technologies LLC) <==== ACHTUNG
Task: {F42616D7-4279-4262-986C-099135072BCD} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe
Task: {F790E92F-E786-4ABC-BF46-73781608D482} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2015-08-20] (Sony Corporation)
Task: {FA6E0238-4A4D-4C9A-BC9A-6230A370F5D1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashUtil32_24_0_0_194_pepper.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-10-05 18:17 - 2016-10-05 18:17 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-09-26 15:56 - 2016-09-26 15:56 - 00145696 _____ () C:\Program Files\Softland\novaPDF 8\Server\AgileDotNetRT64.dll
2013-10-17 14:27 - 2013-10-17 14:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2014-07-13 21:32 - 2014-12-04 17:36 - 00075136 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe
2017-02-06 15:58 - 2017-02-06 15:58 - 00304456 _____ () C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe
2015-08-26 12:06 - 2015-08-26 12:06 - 00413336 _____ () C:\Program Files\Sony\VAIO Care\ESRV\esrv_svc.exe
2015-08-26 12:06 - 2015-08-26 12:06 - 00709272 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_modeler.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00130712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_process_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00025752 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_system_power_state_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00059544 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_quality_and_reliability_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00194712 _____ () C:\Program Files\Sony\VAIO Care\ESRV\acpi_battery_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00159896 _____ () C:\Program Files\Sony\VAIO Care\ESRV\sema_thermal_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00158360 _____ () C:\Program Files\Sony\VAIO Care\ESRV\wifi_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00050840 _____ () C:\Program Files\Sony\VAIO Care\ESRV\devices_use_input.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00032920 _____ () C:\Program Files\Sony\VAIO Care\ESRV\intel_disktrace_input.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-15 19:40 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-12-15 19:40 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-02-06 15:58 - 2017-02-06 15:58 - 00619848 _____ () C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe
2016-12-15 19:40 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2016-09-16 16:52 - 2016-09-16 16:52 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-12 02:00 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-02-06 18:52 - 2017-02-06 18:55 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-02-06 18:52 - 2017-02-06 18:55 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-02-06 18:52 - 2017-02-06 18:55 - 42895872 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-02-06 18:52 - 2017-02-06 18:55 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\roottools.dll
2015-08-26 12:06 - 2015-08-26 12:06 - 00458904 _____ () C:\Program Files\Sony\VAIO Care\ESRV\esrv.exe
2015-08-26 12:06 - 2015-08-26 12:06 - 00185496 _____ () C:\Program Files\Sony\VAIO Care\ESRV\foreground_window_input.dll
2017-01-12 02:00 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-12 02:00 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-12 02:00 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-12 02:00 - 2016-12-21 07:48 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-01-12 02:00 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-12 02:00 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-01-10 16:48 - 2017-01-10 16:48 - 65784544 _____ () C:\Program Files\Intel Security\True Key\Application\libcef.dll
2015-07-14 21:14 - 2016-08-31 19:04 - 00114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-07-14 21:14 - 2017-01-23 12:15 - 00108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-07-14 21:14 - 2017-01-23 12:15 - 00024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-07-14 21:14 - 2017-01-23 12:15 - 00048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2014-06-20 21:29 - 2010-05-31 18:18 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2014-06-20 21:29 - 2010-05-31 18:18 - 00013312 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2016-11-11 03:40 - 2016-03-18 12:32 - 02160128 _____ () C:\Users\thomas hochhalter\AppData\Local\chromium\Application\51.0.2683.0\libglesv2.dll
2016-11-11 03:40 - 2016-03-18 12:32 - 00075776 _____ () C:\Users\thomas hochhalter\AppData\Local\chromium\Application\51.0.2683.0\libegl.dll
2017-02-06 15:09 - 2017-01-26 18:34 - 00042984 _____ () C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\jansson.dll
2017-02-06 15:09 - 2017-01-26 18:34 - 00114664 _____ () C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zlib1.dll
2017-02-06 15:09 - 2017-01-23 12:15 - 00457192 _____ () C:\Program Files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\libmp3lame.DLL
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-934394075-4118312357-3984632377-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\localhost -> localhost
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2017-02-10 16:14 - 00002024 ____A C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
0.0.0.0 media.opencandy.com
0.0.0.0 cdn.opencandy.com
0.0.0.0 tracking.opencandy.com
0.0.0.0 api.opencandy.com
0.0.0.0 api.recommendedsw.com
0.0.0.0 installer.betterinstaller.com
0.0.0.0 installer.filebulldog.com
0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
0.0.0.0 inno.bisrv.com
0.0.0.0 nsis.bisrv.com
0.0.0.0 cdn.file2desktop.com
0.0.0.0 cdn.goateastcach.us
0.0.0.0 cdn.guttastatdk.us
0.0.0.0 cdn.inskinmedia.com
0.0.0.0 cdn.insta.oibundles2.com
0.0.0.0 cdn.insta.playbryte.com
0.0.0.0 cdn.llogetfastcach.us
0.0.0.0 cdn.montiera.com
0.0.0.0 cdn.msdwnld.com
0.0.0.0 cdn.mypcbackup.com
0.0.0.0 cdn.ppdownload.com
0.0.0.0 cdn.riceateastcach.us
0.0.0.0 cdn.shyapotato.us
0.0.0.0 cdn.solimba.com
0.0.0.0 cdn.tuto4pc.com
0.0.0.0 cdn.appround.biz
0.0.0.0 cdn.bigspeedpro.com
0.0.0.0 cdn.bispd.com
Da befinden sich 4 zusätzliche Einträge.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKU\S-1-5-21-934394075-4118312357-3984632377-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\thomas hochhalter\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{4d1f1dad-413d-4a7f-a0a5-f40b64149c52}.jpg
HKU\S-1-5-21-934394075-4118312357-3984632377-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\thomas hochhalter\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{4d1f1dad-413d-4a7f-a0a5-f40b64149c52}.jpg
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup
MSCONFIG\startupreg: Apoint => C:\Program Files\Apoint\Apoint.exe
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [UDP Query User{653C8ED8-9DE0-4F3D-B989-9E0BCCCBA823}C:\program files (x86)\eidos\hitman blood money\hitmanbloodmoney.exe] => C:\program files (x86)\eidos\hitman blood money\hitmanbloodmoney.exe
FirewallRules: [TCP Query User{B8D680A7-0BAD-4BFA-90CA-82F5E0746CD6}C:\program files (x86)\eidos\hitman blood money\hitmanbloodmoney.exe] => C:\program files (x86)\eidos\hitman blood money\hitmanbloodmoney.exe
FirewallRules: [{9A0BB65F-894B-4D23-B127-349F04720B00}] => C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{70086ABE-16BC-48A6-A3A6-BDA30F1E28E9}] => C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
FirewallRules: [{F517A38E-E31E-4DC4-B753-1CE9A8B7E774}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9E58A6E9-DB87-4125-AAE8-0D65F0D5DA44}] => C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe
FirewallRules: [{D021B6B9-05F6-4D17-9072-74FEDB1F5C81}] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C2F5CF7C-466B-49C5-831D-745429F87216}] => C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{5E53A0F8-2E26-4F84-8258-9DEB240D552F}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{AA0191C3-5D1D-4EE7-AD14-A5337B4E39AC}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{24211C6A-E5D3-4553-BF59-C5C2AC4F463A}] => C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
FirewallRules: [{1F137AE3-88A8-4CA1-9CFE-B8B081B3B3A8}] => C:\Program Files (x86)\GameSpy Arcade\Aphex.exe
FirewallRules: [{70C55487-07FE-4E18-85C8-A787BB2288DA}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{E2539541-4CB3-4810-B93C-0914CCEF8B65}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{63BF27F9-6426-49C9-88FE-C4C890F70BBB}] => C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe
FirewallRules: [{6ED59EB9-D436-4273-91BB-487A94DBCA1A}] => C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe
FirewallRules: [{D15C421C-49E1-4325-AEC1-760F6DD3262D}] => C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRMP.exe
FirewallRules: [{8FD20503-0256-45D5-A554-D83FCF084870}] => C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRMP.exe
FirewallRules: [{65E52265-3F1D-43A5-932A-AFC3747F95CA}] => C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\AssassinsCreedRevelations.exe
FirewallRules: [{61D323FA-5C66-43FE-9A83-B0E583AF3E9A}] => C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\AssassinsCreedRevelations.exe
FirewallRules: [{F8272140-18B7-4737-B51E-43F4A3907A9F}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C3BE9C28-EEC8-4EB3-ABB0-26E9D827BF31}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{069029ED-A81E-45CF-BDBD-AA359C411811}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{2D126419-E169-430E-8C41-7521A7031AA6}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{18202045-F1D7-417C-A5F2-3DEDB32D513B}] => C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOpsMP.exe
FirewallRules: [{120C623F-9D83-422A-A5F9-88354677EB01}] => C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOpsMP.exe
FirewallRules: [{9911F5C2-A1C7-47A1-BBE6-6CA0EDF980DB}] => C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOps.exe
FirewallRules: [{FF98024F-D766-4102-BB3F-8538B5CCB558}] => C:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops\BlackOps.exe
FirewallRules: [{860AD3DE-A544-45ED-81E5-785401F7FD7B}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8330EBFB-C944-4646-A0ED-E651F860EE6F}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C591C438-8566-4C3D-B594-84F584FC2C94}] => C:\Program Files\Sony\VAIO Care\VCAgent.exe
FirewallRules: [{3B8F8104-EB9B-459D-B6B1-C34D9DC5D5FB}] => C:\Program Files\Sony\VAIO Care\VCAdmin.exe
FirewallRules: [{BC1BCE53-6466-45A3-B4C7-F20C5AA5EDF2}] => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
FirewallRules: [{6B609E03-CD02-4795-A43A-5E69E870CDBD}] => C:\Program Files\Sony\VAIO Care\VAIOShell.exe
FirewallRules: [TCP Query User{D2D61280-B03D-441A-95D6-6527B00B52FB}C:\users\thomas hochhalter\appdata\roaming\spotify\spotify.exe] => C:\users\thomas hochhalter\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{55401B53-8A0B-4E1B-BFF9-889676F8293F}C:\users\thomas hochhalter\appdata\roaming\spotify\spotify.exe] => C:\users\thomas hochhalter\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{E9A573FD-C606-422D-8B79-6BA361F23C1E}C:\program files (x86)\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe] => C:\program files (x86)\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe
FirewallRules: [UDP Query User{4F9D4669-F880-42F4-9447-9ABC8DCC5561}C:\program files (x86)\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe] => C:\program files (x86)\ubisoft\tom clancy's splinter cell double agent\scda-offline\system\splintercell4.exe
FirewallRules: [TCP Query User{EA5356CB-4C44-4FD0-8CDE-632F6FC1A48F}C:\program files (x86)\ubisoft\assassin's creed revelations\acrpr.exe] => C:\program files (x86)\ubisoft\assassin's creed revelations\acrpr.exe
FirewallRules: [UDP Query User{1130A740-3593-418C-B3FC-34E293C8D60B}C:\program files (x86)\ubisoft\assassin's creed revelations\acrpr.exe] => C:\program files (x86)\ubisoft\assassin's creed revelations\acrpr.exe
FirewallRules: [{D2D0E1FF-ED17-4CEE-AEC2-7E7753A7FA6A}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5A35A0D3-726A-4B65-B7EF-6076577DF8DD}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{37C045C7-2635-477D-99E9-AC635E2AB5B0}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{F34B52A4-C879-490C-A4A3-741FF474C928}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DE052E5E-6B3E-4976-8529-ECE4FB1222F9}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{92FCA4EA-B864-4585-9C51-F1C6CECFFAE0}] => C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{4F99B35D-F737-4468-9939-234ABA3255EC}] => LPort=8501
FirewallRules: [{8BA0B0C0-F7B0-4342-B2A9-E1F6AB5C3F71}] => LPort=8501
FirewallRules: [{C94C9E6E-48B3-4259-BD81-DFC661A9981C}] => C:\Users\thomas hochhalter\AppData\Local\Chromium\Application\chrome.exe
FirewallRules: [{764C8638-F666-4559-B97E-FB5EF14797BD}] => C:\Program Files (x86)\Opera\42.0.2393.517\opera.exe
FirewallRules: [{05AB57BC-FC86-4E5F-82A5-2F1F6CA20F95}] => C:\Program Files (x86)\Opera\43.0.2442.806\opera.exe
==================== Wiederherstellungspunkte =========================
12-01-2017 02:22:41 Windows Update
01-02-2017 00:05:54 Geplanter Prüfpunkt
10-02-2017 20:10:49 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager =============
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (02/10/2017 10:37:25 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: THOMAS)
Description: Das Paket „Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge“ wurde beendet, da das Anhalten zu lange dauerte.
Error: (02/10/2017 10:36:26 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: THOMAS)
Description: Das Paket „Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge#{308403d8-c23c-4fd9-b505-eae42773016d}“ wurde beendet, da das Anhalten zu lange dauerte.
Error: (02/10/2017 10:36:26 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: THOMAS)
Description: Das Paket „Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge#{43832602-1c70-4652-b7e6-c5dab698cb98}“ wurde beendet, da das Anhalten zu lange dauerte.
Error: (02/10/2017 09:44:24 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "BITS" in der DLL "C:\Windows\System32\bitsperf.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (02/10/2017 08:11:07 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (02/10/2017 04:24:27 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Die erweiterbare Leistungsindikator-DLL W3SVC kann nicht geladen werden. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Windows-Fehlercode.
Error: (02/10/2017 04:24:25 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "aspnet_state" in der DLL "C:\Windows\System32\aspnet_counters.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (02/10/2017 04:24:25 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ASP.NET_4.0.30319" in der DLL "C:\Windows\System32\aspnet_counters.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (02/10/2017 04:24:25 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Die Open-Prozedur für den Dienst "ASP.NET" in der DLL "C:\Windows\System32\aspnet_counters.dll" war nicht erfolgreich. Die Leistungsdaten für diesen Dienst sind nicht verfügbar. Die ersten vier Bytes (DWORD) des Datenbereichs enthalten den Fehlercode.
Error: (02/10/2017 12:58:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1234
Systemfehler:
=============
Error: (02/10/2017 09:42:09 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (02/10/2017 09:42:09 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (02/10/2017 09:42:08 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (02/10/2017 04:21:03 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Energy Server Service" wurde nicht richtig gestartet.
Error: (02/10/2017 04:18:43 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Übermittlungsoptimierung" wurde nicht richtig gestartet.
Error: (02/10/2017 04:15:04 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (02/10/2017 04:15:04 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\Lokaler Dienst" (SID: S-1-5-19) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
und der APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (02/10/2017 04:14:55 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
und der APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.
Error: (02/10/2017 04:14:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "FLAME II HSPA USB MODEM Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Pipe wurde beendet.
Error: (02/10/2017 04:14:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Service Installer TrueKey" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.
CodeIntegrity:
===================================
Date: 2017-02-10 22:51:02.277
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-02-10 22:51:02.275
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-02-10 20:02:35.622
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-02-10 16:13:57.883
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-02-10 16:13:57.816
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-02-07 21:43:42.667
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-02-07 21:43:42.663
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-02-07 21:43:42.550
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-02-07 21:43:26.188
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-02-07 21:43:26.185
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
Prozentuale Nutzung des RAM: 77%
Installierter physikalischer RAM: 3950.09 MB
Verfügbarer physikalischer RAM: 872.79 MB
Summe virtueller Speicher: 8302.09 MB
Verfügbarer virtueller Speicher: 3199.38 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:451.9 GB) (Free:290.55 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 4E0AB827)
Partition 1: (Not Active) - (Size=13.3 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451.9 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=450 MB) - (Type=27)
==================== Ende von Addition.txt ============================
|
|
21.02.2017, 11:55
| #3 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Virenfund vom 10.02.2017 Dein Thread wurde nicht bearbeitet, weil du dir selbst geantwortet hast, wir bearbeiten primär nur unbeantwortete Themen - brauchst du noch Hilfe?
__________________
__________________ |
|
| Themen zu Virenfund vom 10.02.2017 |
| .dll, appdata, chromium, code, control, erkannt, explorer, firefox, fund, internet, internet explorer, laptop, logfiles, malwarebytes, mbam, microsoft, mozilla, roaming, scan, setup, software, temp, viren, websites, whatsapp, windows, windowsapps, yahoo |
Linear-Darstellung
