Karagiannaki | 17.03.2016 13:19 | Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von Alexus (Administrator) auf ALEXUS-PC (17-03-2016 11:36:53)
Gestartet von C:\Users\Alexus\Desktop\PC reinigen
Geladene Profile: Alexus (Verfügbare Profile: Alexus & UpdatusUser)
Platform: Windows 7 Home Premium (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 9 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\LevelOne\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\LevelOne\Common\RaRegistry64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Akamai Technologies, Inc.) C:\Users\Alexus\AppData\Local\Akamai\netsession_win.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Akamai Technologies, Inc.) C:\Users\Alexus\AppData\Local\Akamai\netsession_win.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
() C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe
() C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(Acer Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LevelOne Technology, Corp.) C:\Program Files (x86)\LevelOne\Common\RaUI.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
() C:\OEM\USBDECTION\USBS3S4Detection.exe
() C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-10-13] (Intel Corporation)
HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [349480 2009-09-10] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8098848 2009-09-02] (Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-25] (CANON INC.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [261888 2009-08-12] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Hotkey Utility] => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe [629280 2009-08-18] ()
HKLM-x32\...\Run: [EgisTecLiveUpdate] => C:\Program Files (x86)\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-08-04] (Egis Technology Inc.)
HKLM-x32\...\Run: [ArcadeDeluxeAgent] => C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [128296 2009-11-10] (CyberLink Corp.)
HKLM-x32\...\Run: [PlayMovie] => C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe [181480 2009-11-02] (Acer Corp.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [807392 2016-03-10] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1980416 2013-12-18] (Wondershare)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Alexus\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\Run: [Steam] => D:\Steam\steam.exe [3074128 2016-03-10] (Valve Corporation)
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\Run: [Desura] => C:\Program Files (x86)\Desura\desura.exe -autostart
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [1963912 2015-07-23] (TomTom)
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\Run: [Spotify Web Helper] => C:\Users\Alexus\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2355312 2016-01-31] (Spotify Ltd)
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\MountPoints2: H - H:\LaunchU3.exe -a
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\MountPoints2: {056a4885-f01d-11e0-8811-bc054301dacc} - G:\LaunchU3.exe -a
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\MountPoints2: {269e6bdb-3858-11e0-b331-bc054301dacc} - H:\LaunchU3.exe -a
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\MountPoints2: {3808a75b-dc25-11e2-8b0f-90fba630776d} - F:\pushinst.exe
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\MountPoints2: {639f45c2-5d1d-11e0-9dca-bc054301dacc} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\MountPoints2: {9a622f93-4352-11e0-8e40-bc054301dacc} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\...\MountPoints2: {f6f124fb-3851-11e0-8977-90fba630776d} - F:\pushinst.exe
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x64\psdprotect.dll [2009-09-10] (Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => Keine Datei
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\psdprotect.dll [2009-09-10] (Egis Technology Inc.)
Startup: C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2016-03-11]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk [2016-03-11]
ShortcutTarget: Microsoft Office.lnk -> C:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NETGEAR WNA3100 Genie.lnk [2016-03-11]
ShortcutTarget: NETGEAR WNA3100 Genie.lnk -> C:\Program Files (x86)\NETGEAR\WNA3100\WNA3100.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WUA-0614.lnk [2016-03-11]
ShortcutTarget: WUA-0614.lnk -> C:\Program Files (x86)\LevelOne\Common\RaUI.exe (LevelOne Technology, Corp.)
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\..\Interfaces\{86AFFEF6-4C8A-46C6-BB6F-224236836212}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{D0543462-15B3-4221-8093-5E0B170F454D}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{D735BBC7-946E-4EEC-9EE4-68497D387C07}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{E1FF2B5B-015A-4E7D-AABB-C920B0C0393B}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{F5546860-068A-4CE9-A532-9DC34009FF08}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{F929DFB8-1EFE-476D-88D5-4E50BF9943C5}: [DhcpNameServer] 192.168.2.1
ManualProxies:
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=130893297385394196&GUID=AA2C306F-7263-4EA5-941B-8E628294D2B1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKU\S-1-5-21-2280759433-540149345-2444648395-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
URLSearchHook: HKLM-x32 -> Standard = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\S-1-5-21-2280759433-540149345-2444648395-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE419DE419
SearchScopes: HKU\S-1-5-21-2280759433-540149345-2444648395-1000 -> {9B2EF492-512A-4736-A902-E26948ED96C3} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&intl=de&fr=yset_ie_syc_oracle&type=orcl_default
BHO-x32: Octh Class -> {000123B4-9B42-4900-B3F7-F4B073EFC214} -> C:\Program Files (x86)\Orbitdownloader\orbitcth.dll [2013-05-02] (Orbitdownloader.com)
BHO-x32: AdblockPro -> {04F2568A-3E7A-422D-A71E-DC088A635F7D} -> C:\Users\Alexus\AppData\Roaming\AdblockPro\IE\AdblockPro.dll [2011-03-29] (Adblock Pro Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-03-02] (Oracle Corporation)
BHO-x32: AdobeReader -> {AC6401E9-813B-46DA-B06F-A4FFA2F9AE6D} -> C:\Users\Alexus\AppData\Roaming\AdobeReader\IE\AdobeReader.dll [2011-03-29] (Adobe Corporation)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-03-02] (Oracle Corporation)
Toolbar: HKLM - Kein Name - !{F3FEE66E-E034-436a-86E4-9690573BEE8A} - Keine Datei
Toolbar: HKLM-x32 - Kein Name - !{F3FEE66E-E034-436a-86E4-9690573BEE8A} - Keine Datei
Toolbar: HKLM-x32 - Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files (x86)\Orbitdownloader\GrabPro.dll [2013-05-02] ()
Toolbar: HKU\S-1-5-21-2280759433-540149345-2444648395-1000 -> Kein Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Keine Datei
Toolbar: HKU\S-1-5-21-2280759433-540149345-2444648395-1000 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - Keine Datei
Toolbar: HKU\S-1-5-21-2280759433-540149345-2444648395-1000 -> Kein Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Keine Datei
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll [2009-07-26] (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10] (Skype Technologies S.A.)
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\system32\mscoree.dll [2009-11-25] ()
Filter-x32: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2009-11-25] ()
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\system32\mscoree.dll [2009-11-25] ()
Filter-x32: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2009-11-25] ()
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\system32\mscoree.dll [2009-11-25] ()
Filter-x32: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWOW64\mscoree.dll [2009-11-25] ()
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Alexus\AppData\Roaming\Mozilla\Firefox\Profiles\t8hwsy8j.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_182.dll [2016-03-10] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_182.dll [2016-03-10] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2012-06-13] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-15] (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-03-02] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-03-02] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-03-11] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Alexus\AppData\Roaming\Mozilla\Firefox\Profiles\t8hwsy8j.default\searchplugins\askcomsearch.xml [2013-06-24]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml [2012-06-30]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\webssearches.xml [2014-06-22]
FF Extension: Securita Scout - C:\Users\Alexus\AppData\Roaming\Mozilla\Firefox\Profiles\t8hwsy8j.default\Extensions\isec@securitascout.com [2014-05-28] [ist nicht signiert]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-07-30] [ist nicht signiert]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-07-30] [ist nicht signiert]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-07-30] [ist nicht signiert]
Chrome:
=======
CHR DefaultSearchURL: Default -> hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=orcl_default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://de.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\Alexus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Alexus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-03-14]
CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - <kein Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-10-10]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [955736 2016-03-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466504 2016-03-10] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466504 2016-03-10] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1424880 2016-03-10] (Avira Operations GmbH & Co. KG)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2012-01-26] ()
R2 RalinkRegistryWriter; C:\Program Files (x86)\LevelOne\Common\RaRegistry.exe [372736 2012-01-12] (Ralink Technology, Corp.) [Datei ist nicht signiert]
R2 RalinkRegistryWriter64; C:\Program Files (x86)\LevelOne\Common\RaRegistry64.exe [447488 2012-01-12] (Ralink Technology, Corp.) [Datei ist nicht signiert]
S2 RaMediaServer; C:\Program Files (x86)\LevelOne\Common\RaMediaServer.exe [625728 2011-08-18] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 USBS3S4Detection; C:\OEM\USBDECTION\USBS3S4Detection.exe [76320 2009-12-09] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 WSWNA3100; C:\Program Files (x86)\NETGEAR\WNA3100\WifiSvc.exe [316120 2014-08-18] ()
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [29288 2010-12-24] (Wondershare)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [154816 2016-03-10] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [133168 2016-03-10] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-29] (Avira Operations GmbH & Co. KG)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69888 2016-03-10] (Avira Operations GmbH & Co. KG)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
S3 fwlanusbn; C:\Windows\System32\DRIVERS\fwlanusbn.sys [552704 2009-03-20] (AVM GmbH)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-17] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
S3 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 RTL8192cu; system32\DRIVERS\rtwlanu.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-03-17 10:24 - 2016-03-17 10:25 - 00000000 ____D C:\f5f77cc2b00ce270022c6a9cb3e4
2016-03-14 22:21 - 2016-03-14 22:21 - 01609216 _____ (Malwarebytes) C:\Users\Alexus\Downloads\JRT.exe
2016-03-14 22:19 - 2016-03-14 22:20 - 01527296 _____ C:\Users\Alexus\Downloads\AdwCleaner_5.102.exe
2016-03-14 22:15 - 2016-03-14 22:16 - 05658423 _____ (Swearware) C:\Users\Alexus\Downloads\ComboFix.exe
2016-03-14 22:04 - 2016-03-17 11:36 - 00000000 ____D C:\Users\Alexus\Desktop\PC reinigen
2016-03-11 15:16 - 2016-03-11 15:16 - 00085957 _____ C:\Users\Alexus\Downloads\Auskunft_RiesterRente_Klassik_36_329_594_1_20160216_001843.pdf
2016-03-11 15:15 - 2016-03-11 15:15 - 00031176 _____ C:\Users\Alexus\Downloads\Mitteilung_Hausratversicherung_AS_1406793022_20150719_083338.pdf
2016-03-11 12:58 - 2016-03-17 11:36 - 00000000 ____D C:\FRST
2016-03-11 10:39 - 2016-03-17 11:22 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-11 10:39 - 2016-03-11 10:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-11 10:39 - 2016-03-11 10:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-11 10:39 - 2016-03-11 10:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-11 10:39 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-11 10:39 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-11 10:39 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-11 10:38 - 2015-10-08 23:38 - 22908888 _____ (Malwarebytes ) C:\Users\Alexus\Desktop\mbam-setup-2.2.0.1024.exe
2016-03-11 10:26 - 2016-03-11 10:26 - 00879096 _____ (Microsoft Corporation) C:\Users\Alexus\Downloads\NetFxRepairTool.exe
2016-03-11 09:37 - 2016-03-11 09:37 - 00000202 _____ C:\Users\Alexus\Desktop\Stardew Valley.url
2016-03-10 18:01 - 2016-03-10 18:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-03-09 13:41 - 2016-02-19 18:50 - 00038336 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 13:41 - 2016-02-19 18:47 - 01373696 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 13:41 - 2016-02-19 18:47 - 00697344 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 13:41 - 2016-02-19 18:47 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 13:41 - 2016-02-19 18:47 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 13:41 - 2016-02-19 18:47 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 13:41 - 2016-02-19 18:40 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-02 19:04 - 2016-03-02 19:05 - 00000000 ____D C:\15133bc29d84278b758ab5be06bf
2016-03-02 17:38 - 2016-03-02 17:38 - 00290472 _____ C:\Windows\Minidump\030216-24663-01.dmp
2016-03-02 17:07 - 2014-09-15 05:30 - 78445523 _____ C:\Users\Alexus\Desktop\Supernatural Staffel5 Ep20.mpg
2016-03-02 17:07 - 2013-10-01 02:19 - 91538510 _____ C:\Users\Alexus\Desktop\Supernatural Saffel5 Ep21.mpg
2016-02-26 19:20 - 2016-02-26 19:21 - 00000000 ____D C:\Users\Alexus\Desktop\download
2016-02-26 19:18 - 2016-02-26 19:19 - 00000000 ____D C:\Users\Alexus\Desktop\Camera
2016-02-26 19:08 - 2016-02-26 19:22 - 00000000 ____D C:\Users\Alexus\Desktop\kIMI
2016-02-19 16:29 - 2015-09-28 22:30 - 156903081 _____ C:\Users\Alexus\Desktop\muyb-vol.100-the-present.zip
2016-02-16 23:50 - 2016-02-16 23:50 - 00288240 _____ C:\Windows\Minidump\021616-31824-01.dmp
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2099-01-01 00:00 - 2011-08-04 23:25 - 00003938 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{FABFF01A-0295-4EF1-AB91-EF9043175331}
2016-03-17 11:28 - 2012-04-17 14:40 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-17 11:28 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-17 11:28 - 2009-07-14 05:45 - 00015568 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-17 11:19 - 2015-04-25 15:27 - 00000496 _____ C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job
2016-03-17 11:19 - 2011-02-14 17:37 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-17 11:19 - 2011-02-14 16:12 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-17 11:19 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-17 09:58 - 2011-02-14 17:37 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-17 09:45 - 2013-07-21 15:53 - 00000290 _____ C:\Windows\Tasks\DSite.job
2016-03-17 07:50 - 2015-09-22 16:28 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-15 17:07 - 2015-06-18 19:16 - 00000000 ____D C:\ProgramData\CanonIJPLM
2016-03-15 17:06 - 2011-02-15 00:56 - 00696848 _____ C:\Windows\system32\perfh007.dat
2016-03-15 17:06 - 2011-02-15 00:56 - 00148144 _____ C:\Windows\system32\perfc007.dat
2016-03-15 17:06 - 2009-07-14 06:13 - 01614244 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-15 17:06 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-03-14 21:25 - 2011-03-11 20:51 - 00002191 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-03-14 21:25 - 2011-03-11 20:51 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-03-14 21:05 - 2014-04-13 16:07 - 01591202 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-03-14 20:53 - 2011-02-14 17:09 - 00000000 ____D C:\Users\Alexus\AppData\Local\Google
2016-03-11 15:21 - 2016-01-18 18:27 - 00000000 ____D C:\Users\Alexus\Desktop\Auto MAMA
2016-03-11 12:57 - 2013-01-23 13:25 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\Avira
2016-03-11 12:53 - 2011-02-14 17:37 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-03-11 12:53 - 2011-02-14 17:37 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-03-11 12:43 - 2012-09-16 01:39 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\Orbit
2016-03-11 12:36 - 2015-09-04 14:23 - 00000966 _____ C:\Users\Public\Desktop\TomTom MyDrive Connect.lnk
2016-03-11 12:36 - 2015-07-21 17:48 - 00001365 _____ C:\Users\Public\Desktop\Decay - The Mare.lnk
2016-03-11 12:36 - 2015-06-19 16:38 - 00002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-03-11 12:36 - 2015-06-19 16:38 - 00002045 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-03-11 12:36 - 2015-06-18 19:01 - 00002073 _____ C:\Users\Public\Desktop\Canon Solution Menu EX.lnk
2016-03-11 12:36 - 2015-03-10 12:38 - 00001005 _____ C:\Users\Public\Desktop\ClipGrab.lnk
2016-03-11 12:36 - 2014-03-06 22:31 - 00001111 _____ C:\Users\Public\Desktop\NETGEAR WNA3100 Genie.lnk
2016-03-11 12:36 - 2014-03-04 20:54 - 00001199 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Video Converter.lnk
2016-03-11 12:36 - 2013-06-27 19:37 - 00001028 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BearShare.lnk
2016-03-11 12:36 - 2013-02-04 15:48 - 00002703 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Excel.lnk
2016-03-11 12:36 - 2013-02-04 15:48 - 00002691 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft PowerPoint.lnk
2016-03-11 12:36 - 2013-02-04 15:48 - 00002675 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft FrontPage.lnk
2016-03-11 12:36 - 2013-02-04 15:48 - 00002671 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Word.lnk
2016-03-11 12:36 - 2013-02-04 15:48 - 00002633 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Access.lnk
2016-03-11 12:36 - 2013-02-04 15:48 - 00002619 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Office-Dokument öffnen.lnk
2016-03-11 12:36 - 2013-02-04 15:48 - 00002615 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Neues Office-Dokument.lnk
2016-03-11 12:36 - 2012-12-02 18:04 - 00002556 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PlanetSide 2 PSG.lnk
2016-03-11 12:36 - 2012-11-20 21:30 - 00001054 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\PDF Reader PDF Reader.lnk
2016-03-11 12:36 - 2012-11-20 21:30 - 00000954 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\PDF Reader Uninstall PDF Reader.lnk
2016-03-11 12:36 - 2012-08-16 19:13 - 00001222 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Video Converter Uninstall Video Converter.lnk
2016-03-11 12:36 - 2012-08-16 19:13 - 00001109 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Video Converter Video Converter.lnk
2016-03-11 12:36 - 2012-08-13 13:53 - 00001801 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-03-11 12:36 - 2012-06-21 14:59 - 00002515 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DC Universe Online Live.lnk
2016-03-11 12:36 - 2011-06-12 15:33 - 00001690 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play games (EasyBits GO).lnk
2016-03-11 12:36 - 2011-03-24 16:59 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-11 12:36 - 2011-02-14 16:33 - 00002557 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
2016-03-11 12:36 - 2011-02-14 16:33 - 00001181 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works-Start.lnk
2016-03-11 12:36 - 2011-02-14 16:22 - 00001443 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-11 12:36 - 2011-02-14 16:22 - 00001409 _____ C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2016-03-11 12:36 - 2009-11-26 18:10 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-03-11 12:36 - 2009-11-26 18:10 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-03-11 12:36 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-11 12:36 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-03-11 12:36 - 2009-07-14 05:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-03-11 12:36 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-03-11 12:36 - 2009-07-14 05:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-03-11 12:36 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-03-11 12:36 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-03-11 12:36 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-03-11 12:35 - 2015-09-17 13:39 - 00000790 _____ C:\Users\Alexus\Desktop\Paintball2.lnk
2016-03-11 12:35 - 2015-05-09 14:22 - 00001595 _____ C:\Users\Alexus\Desktop\ts3client_win32 - Verknüpfung.lnk
2016-03-11 12:35 - 2015-05-05 15:36 - 00001560 _____ C:\Users\Alexus\Desktop\WOTLauncher - Verknüpfung.lnk
2016-03-11 12:35 - 2014-08-15 01:21 - 00001628 _____ C:\Users\Alexus\Desktop\Play The Forest.lnk
2016-03-11 12:35 - 2014-03-04 21:41 - 00001203 _____ C:\Users\Alexus\Desktop\Any Video Converter.lnk
2016-03-11 12:35 - 2013-10-12 11:13 - 00001050 _____ C:\Users\Alexus\Desktop\VirtualDJ Home FREE.lnk
2016-03-11 12:35 - 2013-03-11 23:45 - 00001205 _____ C:\Users\Alexus\Desktop\cmd.lnk
2016-03-11 12:35 - 2012-09-16 01:40 - 00001055 _____ C:\Users\Alexus\Desktop\Orbit.lnk
2016-03-11 12:35 - 2011-02-14 18:48 - 00000355 _____ C:\Users\Alexus\Desktop\Computer.lnk
2016-03-11 12:34 - 2014-02-14 18:37 - 00000000 ____D C:\ProgramData\APN
2016-03-11 12:34 - 2013-07-21 15:53 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\DSite
2016-03-11 12:34 - 2012-10-12 03:30 - 00000000 ____D C:\Program Files (x86)\Red Sky
2016-03-11 12:34 - 2012-10-12 03:26 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\PerformerSoft
2016-03-11 12:34 - 2012-05-07 22:01 - 00000000 ____D C:\ProgramData\ICQ
2016-03-11 12:34 - 2011-04-10 18:11 - 00000000 ____D C:\Program Files (x86)\AutocompletePro
2016-03-11 12:33 - 2014-02-24 15:26 - 00000000 ____D C:\ProgramData\RemoVeAodssTuoBe
2016-03-11 12:33 - 2012-11-17 00:53 - 00000000 ____D C:\Program Files (x86)\vGrabber-software
2016-03-11 12:33 - 2012-10-29 14:53 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\GameCenter
2016-03-11 09:37 - 2014-05-30 23:07 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-11 08:58 - 2012-05-06 15:40 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\BrowserCompanion
2016-03-10 21:28 - 2012-04-17 14:40 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-10 21:28 - 2012-04-17 14:40 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-10 21:28 - 2011-05-13 21:16 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-10 18:00 - 2015-04-25 15:28 - 00000470 _____ C:\Windows\Tasks\ParetoLogic Registration3.job
2016-03-10 18:00 - 2013-05-06 11:16 - 00069888 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2016-03-10 18:00 - 2013-03-27 12:16 - 00154816 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2016-03-10 18:00 - 2013-03-27 12:16 - 00133168 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2016-03-10 10:06 - 2014-12-11 17:26 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-10 10:06 - 2014-07-09 20:06 - 00000000 ___SD C:\Windows\system32\CompatTel
2016-03-10 10:05 - 2013-08-14 14:59 - 00000000 ____D C:\Windows\system32\MRT
2016-03-10 09:54 - 2011-04-01 15:21 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-07 16:30 - 2009-07-14 06:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-03-04 16:17 - 2012-08-13 13:53 - 00000000 ____D C:\Users\Alexus\AppData\Local\Spotify
2016-03-04 16:14 - 2012-08-13 13:52 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\Spotify
2016-03-04 16:01 - 2011-04-25 13:44 - 00000000 ____D C:\Users\Alexus\AppData\Roaming\TS3Client
2016-03-04 15:58 - 2012-01-06 01:44 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2016-03-02 17:51 - 2013-12-04 10:57 - 00000000 ____D C:\ProgramData\Oracle
2016-03-02 17:50 - 2013-12-04 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-02 17:50 - 2012-07-30 16:33 - 00000000 ____D C:\Program Files (x86)\Java
2016-03-02 17:49 - 2015-12-28 17:33 - 00000000 ____D C:\Users\Alexus\.oracle_jre_usage
2016-03-02 17:49 - 2015-01-07 21:57 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-03-02 17:38 - 2012-12-09 00:32 - 471940314 _____ C:\Windows\MEMORY.DMP
2016-03-02 17:38 - 2012-12-09 00:32 - 00000000 ____D C:\Windows\Minidump
2016-02-19 17:55 - 2014-09-23 23:34 - 00000000 ____D C:\Users\Alexus\Desktop\Anime
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2014-02-14 16:51 - 2014-02-14 16:51 - 4211712 _____ () C:\Program Files (x86)\WS_x64.Booster
2009-11-26 18:31 - 2009-02-10 21:23 - 0192484 _____ () C:\Program Files (x86)\Common Files\Acer GameZone online.ico
2014-02-14 18:39 - 2014-02-14 19:13 - 0028229 _____ () C:\Users\Alexus\AppData\Roaming\LiveSupport.exe_log.txt
2014-02-14 18:39 - 2014-02-15 18:17 - 0000092 _____ () C:\Users\Alexus\AppData\Roaming\regsvr32.exe_log.txt
2013-07-27 23:45 - 2015-05-06 15:45 - 0000214 _____ () C:\Users\Alexus\AppData\Roaming\WB.CFG
2014-01-01 22:45 - 2014-01-03 01:45 - 0000005 _____ () C:\Users\Alexus\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-07-21 17:45 - 2014-01-27 11:45 - 0000005 _____ () C:\Users\Alexus\AppData\Roaming\WBPU-TTL.DAT
2011-04-17 11:29 - 2011-04-17 11:29 - 0000000 _____ () C:\Users\Alexus\AppData\Roaming\wklnhst.dat
2012-08-29 22:49 - 2012-08-29 23:00 - 0017472 ____T (Un4seen Developments) C:\Users\Alexus\AppData\Roaming\Microsoft\1eaadjc.dll
2012-08-29 22:49 - 2012-08-29 23:00 - 0018724 ____T () C:\Users\Alexus\AppData\Roaming\Microsoft\bass.dll
2012-08-29 22:49 - 2012-08-29 23:00 - 1758720 ____T () C:\Users\Alexus\AppData\Roaming\Microsoft\engine_vx.dll
2012-08-29 22:49 - 2012-08-29 23:00 - 0016448 ____T (Un4seen Developments) C:\Users\Alexus\AppData\Roaming\Microsoft\kfgresk.dll
2012-08-29 22:49 - 2012-08-29 23:00 - 0012352 ____T (Un4seen Developments) C:\Users\Alexus\AppData\Roaming\Microsoft\peaadje.dll
2012-08-29 22:49 - 2012-08-29 23:00 - 0029784 ____T ((: JOBnik! :) [Arthur Aminov, ISRAEL]) C:\Users\Alexus\AppData\Roaming\Microsoft\qwadjb.dll
2012-08-29 22:49 - 2012-08-29 23:00 - 0017472 ____T (Un4seen Developments) C:\Users\Alexus\AppData\Roaming\Microsoft\rsaadjd.dll
2012-08-29 22:49 - 2012-08-29 23:00 - 0105016 ____T (Un4seen Developments) C:\Users\Alexus\AppData\Roaming\Microsoft\~DFK745236.tmp
2013-07-21 00:14 - 2013-07-21 00:14 - 0000218 _____ () C:\Users\Alexus\AppData\Local\recently-used.xbel
2011-12-29 14:49 - 2015-11-17 19:32 - 0007591 _____ () C:\Users\Alexus\AppData\Local\Resmon.ResmonCfg
2011-02-14 16:24 - 2011-02-14 16:26 - 0008455 _____ () C:\ProgramData\ArcadeDeluxe3.log
2013-07-29 18:04 - 2013-07-29 18:58 - 0000033 _____ () C:\ProgramData\droidcam-settings
2011-03-11 20:44 - 2011-03-11 20:44 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2009-11-26 18:31 - 2009-07-18 03:57 - 0036136 _____ (Oberon Media) C:\ProgramData\FullRemove.exe
Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Users\Alexus\PS2_PSG_setup.exe
Einige Dateien in TEMP:
====================
C:\Users\Alexus\AppData\Local\Temp\aacdec.exe
C:\Users\Alexus\AppData\Local\Temp\amazonicon_v5.exe
C:\Users\Alexus\AppData\Local\Temp\AskSLib.dll
C:\Users\Alexus\AppData\Local\Temp\avgnt.exe
C:\Users\Alexus\AppData\Local\Temp\BingBarSetup-Partner.exe
C:\Users\Alexus\AppData\Local\Temp\CmdLineExt.dll
C:\Users\Alexus\AppData\Local\Temp\CoJBiBLauncher.exe
C:\Users\Alexus\AppData\Local\Temp\contentDATs.exe
C:\Users\Alexus\AppData\Local\Temp\Delta.exe
C:\Users\Alexus\AppData\Local\Temp\dllscan.exe
C:\Users\Alexus\AppData\Local\Temp\dotNetFx40_Client_setup.exe
C:\Users\Alexus\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Alexus\AppData\Local\Temp\drm_dyndata_7330014.dll
C:\Users\Alexus\AppData\Local\Temp\drm_dyndata_7380014.dll
C:\Users\Alexus\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Alexus\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpsb28yr.dll
C:\Users\Alexus\AppData\Local\Temp\dxwebsetup.exe
C:\Users\Alexus\AppData\Local\Temp\EAD85C2.exe
C:\Users\Alexus\AppData\Local\Temp\foxy_security.exe
C:\Users\Alexus\AppData\Local\Temp\FreemakeVideoDownloader_3.1.1.0.exe
C:\Users\Alexus\AppData\Local\Temp\games_installer164986.exe
C:\Users\Alexus\AppData\Local\Temp\GoogleChromeInstaller.exe
C:\Users\Alexus\AppData\Local\Temp\GuardICQ.exe
C:\Users\Alexus\AppData\Local\Temp\htmlayout.dll
C:\Users\Alexus\AppData\Local\Temp\i4jdel0.exe
C:\Users\Alexus\AppData\Local\Temp\i4jdel1.exe
C:\Users\Alexus\AppData\Local\Temp\installerdll1264341.dll
C:\Users\Alexus\AppData\Local\Temp\installerdll1266790.dll
C:\Users\Alexus\AppData\Local\Temp\installerdll886990.dll
C:\Users\Alexus\AppData\Local\Temp\installhelper.dll
C:\Users\Alexus\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe
C:\Users\Alexus\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Alexus\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-6u35-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\Alexus\AppData\Local\Temp\jre-8u31-windows-au.exe
C:\Users\Alexus\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\Alexus\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\Alexus\AppData\Local\Temp\Medal of Honor_uninst.exe
C:\Users\Alexus\AppData\Local\Temp\mp3el.exe
C:\Users\Alexus\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Alexus\AppData\Local\Temp\NeoSetup.exe
C:\Users\Alexus\AppData\Local\Temp\NeoUninstall.exe
C:\Users\Alexus\AppData\Local\Temp\nsisdt.dll
C:\Users\Alexus\AppData\Local\Temp\optprosetup.exe
C:\Users\Alexus\AppData\Local\Temp\prismsetup.exe
C:\Users\Alexus\AppData\Local\Temp\prismsetupde.exe
C:\Users\Alexus\AppData\Local\Temp\rootsupd.exe
C:\Users\Alexus\AppData\Local\Temp\sdanircmdc.exe
C:\Users\Alexus\AppData\Local\Temp\sdapskill.exe
C:\Users\Alexus\AppData\Local\Temp\sdaspwn.exe
C:\Users\Alexus\AppData\Local\Temp\SecurityScan_Release.exe
C:\Users\Alexus\AppData\Local\Temp\setup.exe
C:\Users\Alexus\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Alexus\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Alexus\AppData\Local\Temp\SmartbarSetup.exe
C:\Users\Alexus\AppData\Local\Temp\SRAssetsHelper.dll
C:\Users\Alexus\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\Alexus\AppData\Local\Temp\TubeBox_Setup.exe
C:\Users\Alexus\AppData\Local\Temp\ubi9455.tmp.exe
C:\Users\Alexus\AppData\Local\Temp\uninst.exe
C:\Users\Alexus\AppData\Local\Temp\uninst1.exe
C:\Users\Alexus\AppData\Local\Temp\Uninstall.exe
C:\Users\Alexus\AppData\Local\Temp\uninstall47358877.exe
C:\Users\Alexus\AppData\Local\Temp\uninstall47358986.exe
C:\Users\Alexus\AppData\Local\Temp\uninstall47372745.exe
C:\Users\Alexus\AppData\Local\Temp\uninstall47372854.exe
C:\Users\Alexus\AppData\Local\Temp\uninstall47373166.exe
C:\Users\Alexus\AppData\Local\Temp\uninstaller-1916.exe
C:\Users\Alexus\AppData\Local\Temp\Uninstaller-3264.exe
C:\Users\Alexus\AppData\Local\Temp\Uninstaller-3680.exe
C:\Users\Alexus\AppData\Local\Temp\Uninstaller-4396.exe
C:\Users\Alexus\AppData\Local\Temp\Uninstaller-5344.exe
C:\Users\Alexus\AppData\Local\Temp\vbc.exe
C:\Users\Alexus\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Alexus\AppData\Local\Temp\vcredist_x86.exe
C:\Users\Alexus\AppData\Local\Temp\wpsetup.exe
C:\Users\Alexus\AppData\Local\Temp\WSSetup.exe
C:\Users\Alexus\AppData\Local\Temp\ytb.exe
C:\Users\Alexus\AppData\Local\Temp\_is12E6.exe
C:\Users\Alexus\AppData\Local\Temp\_isE81.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2009-11-26 18:07
==================== Ende von FRST.txt ============================ |