WINDOWS 10 Fehlerhaft nach installieren von [adsfix_5_02.01.18.1.exe]Trojan/Generic.ASVCS3S.1E5

[23:11:10] [Info] WindowsUpdateFixer v2.1.0
[23:11:10] [Info] (C)2016 Zerobyte Developments
[23:11:10] [Info] ---
[23:11:10] [Info] WindowsUpdateFixer Diagnostic Report || 15.01.2018 23:11:10
[23:11:10] [Info] ---
[23:11:10] [Info] OS: Microsoft Windows 10 Home 64-Bit
[23:11:10] [Info] OS Version: 6.2.9200.0
[23:11:10] [Info] Platform: Win32NT
[23:11:10] [Info] Session created by: Acer (LAPTOP-5BTPD0B9) @ 15.01.2018 23:11:10
[23:11:10] [Info] ---
[23:11:10] [Info] Initializing Main Module...
[23:11:10] [Info] Initializing Main Module Thread...
[23:11:10] [Info] Finished initializing the Main Module Thread, starting now the Main Module Thread...
[23:11:10] [Info] Initializing ServiceController for service wuauserv...
[23:11:10] [Info] Initialized ServiceController for service wuauserv, now stopping (when needed) and fixing service...
[23:11:11] [Info] Initializing ServiceController for service BITS...
[23:11:11] [Info] Initialized ServiceController for service BITS, now stopping (when needed) and fixing service...
[23:11:12] [Info] Initializing ServiceController for service CryptSvc...
[23:11:12] [Info] Initialized ServiceController for service CryptSvc, now stopping (when needed) and fixing service...
[23:11:15] [Info] Beginning to deleting SoftwareDistribution folder (creating backup of it first)...
[23:11:19] [Info] Finished deleting SoftwareDistribution folder, backup has been created!
[23:11:21] [Info] Reregistering Windows Update DLLs, as specified...
[23:11:32] [Info] Successfully reregistered Windows Update DLLs!
[23:11:32] [Info] Running sfc, as specified...
[23:11:39] [Info] Creating Windows Update Log, as specified
[23:11:49] [Info] Main Module finished, now starting services...
[23:11:50] [Error] Error: Der Dienst CryptSvc kann nicht auf dem Computer LAPTOP-5BTPD0B9 gestartet werden. - Occured in: Start, System.ServiceProcess.dll (Type: Method)
[23:26:23] [Info] WindowsUpdateFixer v2.1.0
[23:26:23] [Info] (C)2016 Zerobyte Developments
[23:26:23] [Info] ---
[23:26:23] [Info] WindowsUpdateFixer Diagnostic Report || 15.01.2018 23:26:23
[23:26:23] [Info] ---
[23:26:23] [Info] OS: Microsoft Windows 10 Home 64-Bit
[23:26:23] [Info] OS Version: 6.2.9200.0
[23:26:23] [Info] Platform: Win32NT
[23:26:23] [Info] Session created by: Acer (LAPTOP-5BTPD0B9) @ 15.01.2018 23:26:23
[23:26:23] [Info] ---
[23:26:23] [Info] Initializing Main Module...
[23:26:23] [Info] Initializing Main Module Thread...
[23:26:23] [Info] Finished initializing the Main Module Thread, starting now the Main Module Thread...
[23:26:23] [Info] Initializing ServiceController for service wuauserv...
[23:26:23] [Info] Initialized ServiceController for service wuauserv, now stopping (when needed) and fixing service...
[23:26:24] [Info] Initializing ServiceController for service BITS...
[23:26:24] [Info] Initialized ServiceController for service BITS, now stopping (when needed) and fixing service...
[23:26:24] [Info] Initializing ServiceController for service CryptSvc...
[23:26:24] [Info] Initialized ServiceController for service CryptSvc, now stopping (when needed) and fixing service...
[23:26:28] [Info] Beginning to deleting SoftwareDistribution folder (creating backup of it first)...
[23:26:28] [Info] Finished deleting SoftwareDistribution folder, backup has been created!
[23:26:30] [Info] Reregistering Windows Update DLLs, as specified...
[23:26:35] [Info] Successfully reregistered Windows Update DLLs!
[23:26:35] [Info] Running sfc, as specified...
[23:26:39] [Info] Creating Windows Update Log, as specified
[23:26:40] [Info] Main Module finished, now starting services...
[23:26:40] [Error] Error: Der Dienst CryptSvc kann nicht auf dem Computer LAPTOP-5BTPD0B9 gestartet werden. - Occured in: Start, System.ServiceProcess.dll (Type: Method)
         

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 16.01.18
Scan-Zeit: 19:23
Protokolldatei: 5b6bac72-faea-11e7-af3e-54ab3acf78e6.json
Administrator: Ja

-Softwaredaten-
Version: 3.3.1.2183
Komponentenversion: 1.0.262
Version des Aktualisierungspakets: 1.0.3709
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10 (Build 16299.125)
CPU: x64
Dateisystem: NTFS
Benutzer: LAPTOP-5BTPD0B9\Acer

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 281153
Erkannte Bedrohungen: 44
In die Quarantäne verschobene Bedrohungen: 44
Abgelaufene Zeit: 4 Min., 2 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 26
PUP.Optional.SoftUpgrade, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SOFTUPGRADE, In Quarantäne, [951], [260473],1.0.3709
PUP.Optional.SoftUpgrade, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{AB6FF82B-5E8A-4750-9694-0F5F9F0F326D}, In Quarantäne, [951], [260473],1.0.3709
PUP.Optional.SoftUpgrade, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{AB6FF82B-5E8A-4750-9694-0F5F9F0F326D}, In Quarantäne, [951], [260473],1.0.3709
PUP.Optional.VLCUpdaterDE, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VLC Updater, In Quarantäne, [1489], [353751],1.0.3709
PUP.Optional.WebDiscoverBrowser, HKU\S-1-5-21-4026822484-3079033290-2996379304-1001\SOFTWARE\WebDiscoverBrowser, In Quarantäne, [7889], [253912],1.0.3709
PUP.Optional.VLCUpdaterDE.ShrtCln, HKU\S-1-5-21-4026822484-3079033290-2996379304-1001\SOFTWARE\AM, In Quarantäne, [7754], [402774],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\Amazon1ButtonBrowserHelper.dll, In Quarantäne, [816], [468987],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\Amazon1ButtonRuntime.dll, In Quarantäne, [816], [468987],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\Amazon1ButtonBrowserHelper.dll, In Quarantäne, [816], [468987],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\Amazon1ButtonRuntime.dll, In Quarantäne, [816], [468987],1.0.3709
PUP.Optional.Amazon1Button, HKU\S-1-5-21-4026822484-3079033290-2996379304-1001\SOFTWARE\APPDATALOW\SOFTWARE\AMAZON\Amazon1ButtonApp, In Quarantäne, [816], [441167],1.0.3709
PUP.Optional.InterStat, HKU\S-1-5-21-4026822484-3079033290-2996379304-1001_Classes\APPLICATIONS\interstat.exe, In Quarantäne, [1335], [261503],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\CLSID\{BAC72C85-CEC6-4B86-AF06-FA20C259FAB8}, In Quarantäne, [816], [386607],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{BAC72C85-CEC6-4B86-AF06-FA20C259FAB8}, In Quarantäne, [816], [386607],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{BAC72C85-CEC6-4B86-AF06-FA20C259FAB8}, In Quarantäne, [816], [386607],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\Amazon1ButtonBrowserHelper.Amazon1ButtonBHO, In Quarantäne, [816], [386607],1.0.3709
PUP.Optional.WebDiscoverBrowser, HKLM\SOFTWARE\WebDiscoverBrowser, In Quarantäne, [7889], [253915],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\Amazon1ButtonRuntime.AmazonRuntimeServer, In Quarantäne, [816], [386607],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{6557DB6C-EFE1-45AC-92A6-FBB1554B7502}, In Quarantäne, [816], [386607],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{6557DB6C-EFE1-45AC-92A6-FBB1554B7502}, In Quarantäne, [816], [386607],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\Amazon1ButtonRuntime.Amazon1ButtonRuntime, In Quarantäne, [816], [386607],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\WOW6432NODE\APPDATALOW\SOFTWARE\AMAZON\Amazon1ButtonApp, In Quarantäne, [816], [441168],1.0.3709
PUP.Optional.WebDiscoverBrowser, HKLM\SOFTWARE\WOW6432NODE\WebDiscoverBrowser, In Quarantäne, [7889], [253915],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\APPID\Amazon1ButtonBrowserHelper.dll, In Quarantäne, [816], [468987],1.0.3709
PUP.Optional.Amazon1Button, HKLM\SOFTWARE\CLASSES\APPID\Amazon1ButtonRuntime.dll, In Quarantäne, [816], [468987],1.0.3709
PUP.Optional.Amazon1Button, HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\AMAZON\Amazon1ButtonApp, In Quarantäne, [816], [441167],1.0.3709

Registrierungswert: 3
PUP.Optional.VLCUpdaterDE.ShrtCln, HKU\S-1-5-21-4026822484-3079033290-2996379304-1001\SOFTWARE\AM|VLC UPDATER, In Quarantäne, [7754], [402774],1.0.3709
PUP.Optional.VLCUpdaterDE, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\VLC Updater|URLINFOABOUT, In Quarantäne, [1489], [466464],1.0.3709
PUP.Optional.SoftUpgrade, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{AB6FF82B-5E8A-4750-9694-0F5F9F0F326D}|PATH, In Quarantäne, [951], [260475],1.0.3709

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 4
PUP.Optional.VLCUpdaterDE, C:\USERS\ACER\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\VLC UPDATER, In Quarantäne, [1489], [353749],1.0.3709
PUP.Optional.SoftUpgrade, C:\PROGRAM FILES (X86)\SOFTUPGRADE, In Quarantäne, [951], [260472],1.0.3709
PUP.Optional.VLCUpdaterDE, C:\PROGRAM FILES (X86)\VLC UPDATER, In Quarantäne, [1489], [353751],1.0.3709
PUP.Optional.Booking, C:\PROGRAM FILES\BOOKING.COM, In Quarantäne, [369], [310593],1.0.3709

Datei: 11
PUP.Optional.SoftUpgrade, C:\WINDOWS\SYSTEM32\TASKS\SOFTUPGRADE, In Quarantäne, [951], [260473],1.0.3709
PUP.Optional.VLCUpdaterDE, C:\USERS\ACER\APPDATA\ROAMING\MICROSOFT\WINDOWS\START MENU\PROGRAMS\VLC UPDATER\SOFTWARE DEINSTALLIEREN.LNK, In Quarantäne, [1489], [353749],1.0.3709
PUP.Optional.SoftUpgrade, C:\PROGRAM FILES (X86)\SOFTUPGRADE\SOFTUP.EXE, In Quarantäne, [951], [260472],1.0.3709
PUP.Optional.Booking, C:\USERS\PUBLIC\DESKTOP\BOOKING.COM.LNK, In Quarantäne, [369], [310601],1.0.3709
PUP.Optional.VLCUpdaterDE, C:\PROGRAM FILES (X86)\VLC UPDATER\SETUP.ICO, In Quarantäne, [1489], [353751],1.0.3709
PUP.Optional.VLCUpdaterDE, C:\Program Files (x86)\VLC Updater\uninstall.exe, In Quarantäne, [1489], [353751],1.0.3709
PUP.Optional.VLCUpdaterDE, C:\Program Files (x86)\VLC Updater\vlc-updater.exe, In Quarantäne, [1489], [353751],1.0.3709
PUP.Optional.Booking, C:\Program Files\Booking.COM\Booking.com.lnk, In Quarantäne, [369], [310593],1.0.3709
PUP.Optional.Booking, C:\Program Files\Booking.COM\Booking.ico, In Quarantäne, [369], [310593],1.0.3709
PUP.Optional.Booking, C:\Program Files\Booking.COM\StartURL.exe, In Quarantäne, [369], [310593],1.0.3709
PUP.Optional.Booking, C:\Program Files\Booking.COM\Version.txt, In Quarantäne, [369], [310593],1.0.3709

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
         

BitDefender Log File 


Product : Bitdefender Antivirus Plus
Scanning task : Rettungsumgebungs-Scan
Log date : Dienstag, 16. Januar 2018 21:29:25
Log path : C:\ProgramData\Bitdefender\Desktop\Profiles\Logs\system\f5230000-db60-4668-c340-7f03ceebf494\1516132407_3_01.xml

 
Scan Paths: 
Path : C:\
Path : E:\
Path : X:\
 

[-]Scan Results 

[-]Objects that were not scanned: 
Object Path Reason Final Status 

C:\Users\Default\NTUSER.DAT  (object was not found) 
C:\Users\Acer\Lokale Einstellungen\Microsoft\Windows\UsrClass.dat.LOG1  (object was not found) 
C:\Users\Acer\ntuser.dat.LOG2  (object was not found) 
C:\Users\Acer\Lokale Einstellungen\Microsoft\Windows\UsrClass.dat  (object was not found) 
C:\Users\Acer\ntuser.dat.LOG1  (object was not found) 
C:\Users\Default User\NTUSER.DAT.LOG2  (object was not found) 
C:\Users\Acer\Lokale Einstellungen\Microsoft\Windows\UsrClass.dat.LOG2  (object was not found) 
C:\Users\Default\NTUSER.DAT.LOG2  (object was not found) 
C:\Users\Acer\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG2  (object was not found) 
C:\Users\Acer\AppData\Local\Microsoft\Windows\UsrClass.dat.LOG1  (object was not found) 
C:\Users\All Users\OEM\Fub Tracking Program\Upload\_1516132857.zip=>_1516132857_fub.csv Password-protected Not scanned (file was password-protected) 
C:\Users\Acer\AppData\Local\Anwendungsdaten\Microsoft\Windows\UsrClass.dat.LOG2  (object was not found) 
C:\Users\Acer\AppData\Local\Anwendungsdaten\Microsoft\Windows\UsrClass.dat.LOG1  (object was not found) 
C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Source Engine\AppvIsvStream32.dll  (object was not found) 
C:\System Volume Information\{3808876b-c176-4e48-b7ae-04046e6cc752}  (object was not found) 
C:\System Volume Information\{29548a14-fa6a-11e7-98c9-54ab3acf78e6}{3808876b-c176-4e48-b7ae-04046e6cc752}  (object was not found) 
C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\EQUATION\AppvIsvStream32.dll  (object was not found) 
C:\Program Files (x86)\Microsoft Office\root\Flattener\AppvIsvStream32.dll  (object was not found) 
C:\ProgramData\OEM\Fub Tracking Program\Upload\_1516132857.zip=>_1516132857_fub.csv Password-protected Not scanned (file was password-protected) 
 

[-]Detailed Scan Summary 

[-]Basic 
Scanned items : 239008
Infected items : 0 (no infected items have been detected)
Suspicious items : 0 (no suspected items have been detected)
Resolved items : 0 (no threats have been detected during this scan)
Unresolved items : 0 (no issues remained unresolved)
 
[-]Advanced 
Scan time : 0: 34: 23
Files per second : 115
Skipped items : 0
Password-protected items : 2
Overcompressed items : 0
Scanned archives : 76
Input-output errors : 32
Scanned boot sectors : 0
Scanned processes : 0
Infected processes : 0
Scanned registry keys : 0
Infected registry keys : 0
Scanned cookies : 0
Infected cookies : 0
 

[-]Scan Options 

[-]Target Threat Types: 
Scan for viruses : Yes
Scan for adware : Yes
Scan for spyware : Yes
Scan for applications : Yes
Scan for dialers : Yes
Scan for rootkits : No
Scan for keyloggers : Yes
 
[-]Target Selection Options: 
Scan registry keys : No
Scan cookies : No
Scan boot sectors : No
Scan memory processes : No
Scan archives : Yes
Scan runtime packers : Yes
Scan emails : Yes
Scan all files : Yes
Heuristic Scan : Yes
Scanned extensions : none configured
Excluded extensions : none configured
 
[-]Target Processing: 
Default primary action for infected objects : None
Default secondary action for infected objects : None
Default primary action for suspicious objects : None
Default secondary action for suspicious objects : None
Default action for hidden objects : None
Default action for password-protected objects : Prompt for password
 
[-]Scan engines summary 
Number of virus signatures : 11240794
         

Rkill 2.9.1 by Lawrence Abrams (Grinler)
hxxp://www.bleepingcomputer.com/
Copyright 2008-2018 BleepingComputer.com
More Information about Rkill can be found at this link:
 hxxp://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 01/17/2018 03:07:40 PM in x64 mode.
Windows Version: Windows 10 Home 

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * Windows Defender Disabled

   [HKLM\SOFTWARE\Microsoft\Windows Defender]
   "DisableAntiSpyware" = dword:00000001

Searching for Missing Digital Signatures: 

 * No issues found.

Checking HOSTS File: 

 * HOSTS file entries found: 

  0.0.0.0 vortex.data.microsoft.com 

Program finished at: 01/17/2018 03:08:14 PM
Execution time: 0 hours(s), 0 minute(s), and 33 seconds(s)
         

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 17.01.18
Scan-Zeit: 18:44
Protokolldatei: 1975437c-fbae-11e7-98f6-54ab3acf78e6.json
Administrator: Ja

-Softwaredaten-
Version: 3.3.1.2183
Komponentenversion: 1.0.262
Version des Aktualisierungspakets: 1.0.3717
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10 (Build 16299.192)
CPU: x64
Dateisystem: NTFS
Benutzer: LAPTOP-5BTPD0B9\Acer

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 281353
Erkannte Bedrohungen: 0
(keine bösartigen Elemente erkannt)
In die Quarantäne verschobene Bedrohungen: 0
(keine bösartigen Elemente erkannt)
Abgelaufene Zeit: 9 Min., 6 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)