| SicherisSich | 12.08.2015 16:22 |
Puh, gerade kann ich alles ganz normal bedienen, aber bis vor einer Minute ist sogar die Tastatur ausgefallen. Nur die Buchstaben und Zahlen seltsamerweise. Wirklich merkwürdig.
addition.txt Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x86) Version:11-08-2015 02
durchgeführt von Pass (2015-08-12 16:45:48)
Gestartet von C:\Users\Pass\Desktop
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3089134749-3087031263-3033358431-500 - Administrator - Disabled)
Gast (S-1-5-21-3089134749-3087031263-3033358431-501 - Limited - Disabled)
Pass (S-1-5-21-3089134749-3087031263-3033358431-1000 - Administrator - Enabled) => C:\Users\Pass
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
4660_4680_Help (Version: 1.00.0000 - Hewlett-Packard) Hidden
ACD/Labs Freeware in C:\Pass\CTA\Chemsketch\ (HKLM\...\ACDLabs in C__Pass_CTA_Chemsketch_) (Version: v14.00, FREE - ACD/Labs)
ACD/Labs Freeware in C:\Program Files\ACD2012FREE\ (HKLM\...\ACDLabs in C__Program_Files_ACD2012FREE_) (Version: v14.00, FREE - ACD/Labs)
Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version: - Microsoft Corporation)
Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden
Adobe Flash Player 17 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Media Player (HKLM\...\com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM\...\{1BDC9633-895B-4842-BCB6-8FA1EC2A3C5A}) (Version: 10.2.0.023 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.1 (HKLM\...\Adobe Shockwave Player) (Version: 12.1.0.150 - Adobe Systems, Inc.)
AMD Catalyst Install Manager (HKLM\...\{E43B4909-141E-DFF3-8C58-62B5E4D66BBA}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
ANSTOSS 3 (HKLM\...\ANSTOSS 3_is1) (Version: - )
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atheros Driver Installation Program (HKLM\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 5.0 - Atheros)
Audacity 1.2.6 (HKLM\...\Audacity_is1) (Version: - )
Avast Free Antivirus (HKLM\...\avast) (Version: 10.2.2218 - AVAST Software)
bpd_scan (Version: 3.00.0000 - Hewlett-Packard) Hidden
BPDSoftware (Version: 140.0.000.000 - Hewlett-Packard) Hidden
BPDSoftware_Ini (Version: 1.00.0000 - Hewlett-Packard) Hidden
BufferChm (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Cisco EAP-FAST Module (HKLM\...\{415B2719-AD3A-4944-B404-C472DB6085B3}) (Version: 2.1.6 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{83770D14-21B9-44B3-8689-F7B523F94560}) (Version: 1.0.12 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}) (Version: 1.0.13 - Cisco Systems, Inc.)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CorsixTH 0.01 (HKLM\...\CorsixTH) (Version: 0.01 - )
CPUID HWMonitor 1.18 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version: - CyberGhost S.R.L.)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Destinations (Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.213.000 - Hewlett-Packard) Hidden
DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
DivX Converter (HKLM\...\{13F3917B56CD4C25848BDC69916971BB}) (Version: 7.1.0 - DivX, Inc.)
DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)
DivX Plus DirectShow Filters (HKLM\...\DivX Plus DirectShow Filters) (Version: - DivX, Inc.)
DivX Version Checker (HKLM\...\{3FC7CBBC4C1E11DCA1A752EA55D89593}) (Version: 7.1.0.9 - DivX, Inc.)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.7.0.77 - DivX, LLC)
DocMgr (Version: 140.0.65.000 - Ihr Firmenname) Hidden
DocProc (Version: 140.0.100.000 - Hewlett-Packard) Hidden
DocProcQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Epson Easy Photo Print 2 (HKLM\...\{71E90740-5E5F-4D43-AB8F-CAC1D93DBB5B}) (Version: 2.5.0.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM\...\{5662F323-3D9C-4100-B60C-BC71B47DD0A1}) (Version: 3.10.0041 - Seiko Epson Corporation)
Epson E-Web Print (HKLM\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON XP-215 217 Series Printer Uninstall (HKLM\...\EPSON XP-215 217 Series) (Version: - SEIKO EPSON Corporation)
EPSON-Handbücher (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.40.0.0 - SEIKO EPSON CORPORATION)
eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden
Fax (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Fiddler (HKLM\...\Fiddler2) (Version: 4.4.5.6 - Telerik)
FileHippo.com Update Checker (HKLM\...\FileHippo.com) (Version: - )
FileZilla Client 3.7.3 (HKLM\...\FileZilla Client) (Version: 3.7.3 - Tim Kosse)
FlashDevelop 3.3.4 (HKLM\...\FlashDevelop) (Version: 3.3.4-RTM - FlashDevelop.org)
foobar2000 v1.3.3 (HKLM\...\foobar2000) (Version: 1.3.3 - Peter Pawlowski)
Free PDF to Word Doc Converter v1.1 (HKLM\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
GPBaseService (Version: 100.0.187.000 - Hewlett-Packard) Hidden
GPBaseService2 (Version: 140.0.212.000 - Hewlett-Packard) Hidden
Hewlett-Packard Active Check for Health Check (Version: 1.1.15.2 - Hewlett-Packard) Hidden
Hewlett-Packard Asset Agent for Health Check (Version: 2.0.63.2 - HP) Hidden
HP Customer Experience Enhancements (HKLM\...\{B16DA0F8-26BC-4FFC-9363-1D9F3E6C3E21}) (Version: 5.7.0.2630 - Hewlett-Packard)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Doc Viewer (HKLM\...\{082702D5-5DD8-4600-BCE5-48B15174687F}) (Version: 1.03.0001 - Hewlett-Packard)
HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)
HP Easy Setup - Frontend (HKLM\...\{51E5C397-0AA0-48DD-9CB6-7259AFFDFB0A}) (Version: 5.7.0.2630 - Hewlett-Packard)
HP Help and Support (HKLM\...\{31216452-5540-4C96-B754-94890A63D5AB}) (Version: 2.0.10.0 - Hewlett-Packard)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP OfficeJet J4600 All-In-One Series (HKLM\...\{4945F319-A24D-454C-A411-F3689987315D}) (Version: 14.0 - HP)
HP Quick Launch Buttons 6.40 D3 (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.40 D3 - Hewlett-Packard)
HP QuickPlay 3.7 (HKLM\...\{45D707E9-F3C4-11D9-A373-0050BAE317E1}) (Version: - )
HP QuickTouch 1.00 D2 (HKLM\...\{30DAA715-5032-40F9-A0AE-95C9AEBB3E3F}) (Version: 1.0.9 - Hewlett-Packard)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Total Care Advisor (HKLM\...\{f32502b5-5b64-4882-bf61-77f23edcac4f}) (Version: 2.1.3359.2635 - Hewlett-Packard)
HP Update (HKLM\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
HP User Guides 0102 (HKLM\...\{F48098CD-2D66-4861-85EC-DC1D4D09D5F9}) (Version: 1.01.0000 - Hewlett-Packard)
HP Wireless Assistant (HKLM\...\{A5CE7175-080D-49AC-B5A3-E7E3502428F5}) (Version: 3.00 I2 - Hewlett-Packard)
HP_Network_UserGuide (Version: 1.00.0000 - Hewlett-Packard) Hidden
HPDiagnosticAlert (Version: 1.00.0000 - Microsoft) Hidden
HPNetworkAssistant (Version: 1.1.70 - Hewlett-Packard.) Hidden
HPProductAssistant (Version: 140.0.213.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.212.000 - Hewlett-Packard) Hidden
HydraVision (Version: 4.2.234.0 - Advanced Micro Devices, Inc.) Hidden
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6225.0 - IDT)
J4680 (Version: 140.0.000.000 - Hewlett-Packard) Hidden
Java 7 Update 75 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217075FF}) (Version: 7.0.750 - Oracle)
Java 8 Update 45 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
JMicron JMB38X Flash Media Controller (HKLM\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.00.10.04 - JMicron Technology Corp.)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Mega Codec Pack 7.1.0 (HKLM\...\KLiteCodecPack_is1) (Version: 7.1.0 - )
L&H TTS3000 Deutsch (HKLM\...\LHTTSGED) (Version: - )
LabelPrint (HKLM\...\{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.20.2719 - CyberLink Corp.)
Lager (Version: 1.0.0.0 - Hewlett-Packard) Hidden
Lernout & Hauspie TruVoice American English TTS Engine (HKLM\...\tv_enua) (Version: - )
LesefixPRO (HKLM\...\{51B97C44-00B8-4140-AC25-8050A80C2479}) (Version: 7.1 - Dr. Michael Schlesier)
LightScribe System Software 1.12.33.2 (HKLM\...\{582287DA-0806-4AC0-BF19-C15E3A466034}) (Version: 1.12.33.2 - LightScribe)
Lost Horizon (HKLM\...\{850FD908-5381-4D6D-BE6E-8E489B366FFF}) (Version: 1.00 - Deep Silver)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
MarketResearch (Version: 140.0.214.000 - Hewlett-Packard) Hidden
Memento Mori (Patch Version 1.01) (HKLM\...\Memento Mori_is1) (Version: - dtp AG)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version: - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Age of Empires Gold (HKLM\...\Age of Empires Gold 1.0) (Version: - )
Microsoft Age of Empires II (HKLM\...\Age of Empires 2.0) (Version: - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM\...\Age of Empires II: The Conquerors Expansion 1.0) (Version: - )
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Rise Of Nations Trial (HKLM\...\RiseOfNations Trial 1.0) (Version: - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 (HKLM\...\{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}) (Version: 9.0.30411 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Mozilla Firefox 39.0.3 (x86 en-US) (HKLM\...\Mozilla Firefox 39.0.3 (x86 en-US)) (Version: 39.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 37.0 - Mozilla)
MPC-HC 1.7.0 (HKLM\...\{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1) (Version: 1.7.0.7858 - MPC-HC Team)
MSVC80_x86_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML4 Parser (HKLM\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
My HP Games (HKLM\...\WildTangent hp Master Uninstall) (Version: 1.0.0.43 - WildTangent)
MyEpson Portal (HKLM\...\MyEpson Portal) (Version: - SEIKO EPSON Corporation)
MyEpson Portal (Version: 1.1.1.0 - SEIKO EPSON CORPORATION) Hidden
Network (Version: 140.0.215.000 - Hewlett-Packard) Hidden
Nokia Connectivity Cable Driver (HKLM\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)
Nokia Suite (Version: 3.8.48.0 - Nokia) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
OpenOffice 4.1.1 (HKLM\...\{9395F41D-0F80-432E-9A59-B8E477E7E163}) (Version: 4.11.9775 - Apache Software Foundation)
OpenVPN 2.3.6-I603 (HKLM\...\OpenVPN) (Version: 2.3.6-I603 - )
OpenVPN Client (HKLM\...\{072A5217-8165-4AB7-8366-36CB3245DB60}) (Version: 1.5.6 - OpenVPN Technologies)
PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
Power2Go (HKLM\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.3919 - CyberLink Corp.)
PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 6.5.2719 - CyberLink Corp.)
PowerDirector (Version: 6.5.2719 - CyberLink Corp.) Hidden
ProductContext (Version: 140.0.000.000 - Hewlett-Packard) Hidden
ProtectDisc Driver, Version 11 (HKLM\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
ProtectSmart Hard Drive Protection (HKLM\...\{CB71A20E-B1B4-4562-81FA-33E1DBD0342F}) (Version: 3.10 A7 - Hewlett-Packard)
QuickPlay SlingPlayer 0.4.6 (HKLM\...\SlingMedia.QPSlingPlayer_is1) (Version: 0.4.6 - SlingMedia)
QuickTime 7 (HKLM\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
RealSpeak Solo fur Deutsch - Steffi (HKLM\...\{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}) (Version: 4.00.0000 - ScanSoft)
Realtek 8169 8168 8101E 8102E Ethernet Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)
Scan (Version: 140.0.167.000 - Hewlett-Packard) Hidden
ScummVM 1.5.0 (HKLM\...\ScummVM_is1) (Version: - The ScummVM Team)
Secunia PSI (2.0.0.3001) (HKLM\...\Secunia PSI) (Version: - )
Segoe UI (Version: 15.4.2271.0615 - Microsoft Corp) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 7.3 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Slik Subversion 1.6.16 (x86) (HKLM\...\{FF7E43E4-3E57-4879-95FE-98A1A4CEFE5D}) (Version: 1.6.16.0 - SlikSvn & The SharpSvn Project)
SmartWebPrinting (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Software Updater (HKLM\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION)
SolutionCenter (Version: 140.0.214.000 - Hewlett-Packard) Hidden
Sony PC Companion 2.10.197 (HKLM\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.197 - Sony)
SpriteSheetEditor (HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\455f9b150ddac308) (Version: 0.9.4.11 - Microsoft)
SpywareBlaster 5.0 (HKLM\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
Status (Version: 140.0.256.000 - Hewlett-Packard) Hidden
Subversion (HKLM\...\{3BDB3C8A-536D-423A-BE27-0CEF2A0819D3}) (Version: 1.6.17 - CollabNet)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.6.1032 - SUPERAntiSpyware.com)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
TAP-Windows 9.21.1 (HKLM\...\TAP-Windows) (Version: 9.21.1 - )
Theme Hospital (HKLM\...\Hospital) (Version: - )
Toolbox (Version: 140.0.428.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.213.000 - Hewlett-Packard) Hidden
Tunatic (HKLM\...\Tunatic) (Version: - )
UltraISO Premium V9.52 (HKLM\...\UltraISO_is1) (Version: - )
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Update Installer for WildTangent Games App (Version: - WildTangent) Hidden
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.2.0 - VideoLAN)
WebReg (Version: 140.0.213.017 - Hewlett-Packard) Hidden
WildTangent Games App (HKLM\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp) (Version: 4.0.8.7 - WildTangent)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows-Treiberpaket - Nokia pccsmcfd “LegacyDriver” (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
xp-AntiSpy 3.97 (HKLM\...\xp-AntiSpy) (Version: - Christian Taubenheim)
Zork Nemesis - The Forbidden Lands (HKLM\...\Zork Nemesis - The Forbidden Lands_is1) (Version: - GOG.com)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Wiederherstellungspunkte =========================
26-07-2015 14:26:55 Geplanter Prüfpunkt
28-07-2015 17:55:01 Windows Update
29-07-2015 19:50:56 Geplanter Prüfpunkt
30-07-2015 14:28:35 Installed Epson Event Manager
01-08-2015 09:18:35 Geplanter Prüfpunkt
02-08-2015 14:03:37 Geplanter Prüfpunkt
03-08-2015 13:54:08 Geplanter Prüfpunkt
04-08-2015 11:44:41 Windows Update
07-08-2015 12:29:43 Geplanter Prüfpunkt
07-08-2015 13:47:02 Windows Update
08-08-2015 12:24:49 Geplanter Prüfpunkt
09-08-2015 10:42:41 Geplanter Prüfpunkt
11-08-2015 12:13:07 Windows Update
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2006-11-02 12:23 - 2013-08-24 08:38 - 00564665 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 fr.a2dfp.net
127.0.0.1 m.fr.a2dfp.net
127.0.0.1 ad.a8.net
127.0.0.1 asy.a8ww.net
127.0.0.1 abcstats.com
127.0.0.1 a.abv.bg
127.0.0.1 adserver.abv.bg
127.0.0.1 adv.abv.bg
127.0.0.1 bimg.abv.bg
127.0.0.1 ca.abv.bg
127.0.0.1 www2.a-counter.kiev.ua
127.0.0.1 track.acclaimnetwork.com
127.0.0.1 accuserveadsystem.com
127.0.0.1 www.accuserveadsystem.com
127.0.0.1 achmedia.com
127.0.0.1 csh.actiondesk.com
127.0.0.1 www.activemeter.com #[Tracking.Cookie]
127.0.0.1 ads.activepower.net
127.0.0.1 stat.active24stats.nl #[Tracking.Cookie]
127.0.0.1 cms.ad2click.nl
127.0.0.1 ad2games.com
127.0.0.1 ads.ad2games.com
127.0.0.1 content.ad20.net
127.0.0.1 core.ad20.net
127.0.0.1 banner.ad.nu
127.0.0.1 cl21.v4.adaction.se
127.0.0.1 adadvisor.net
127.0.0.1 tag1.adaptiveads.com
Da befinden sich 1000 zusätzliche Einträge.
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {130C7CD2-FC9C-459D-83D3-A507F917D1DA} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3089134749-3087031263-3033358431-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {2513E3E9-9FBB-4598-9D8C-BA74703793F8} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3089134749-3087031263-3033358431-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
Task: {3D7C95CA-DF15-46BB-A199-2B1B4C9C04C6} - System32\Tasks\EPSON XP-215 217 Series Update {E3BE1AA4-4AD0-42CE-A285-B5CDE640C5E5} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {541440A7-9955-4988-9FBF-AD1B1F119C2F} - System32\Tasks\{217ADD02-83B8-49BB-A93C-5D728B32739B} => pcalua.exe -a "C:\Pass\Program Files\Fun\Zork Nemesis - The Forbidden Lands\Graphic mode setup.exe" -d "C:\Pass\Program Files\Fun\Zork Nemesis - The Forbidden Lands"
Task: {6A775681-056E-418B-91DA-70B98E0ECA2E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3089134749-3087031263-3033358431-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {7AE3AE8D-611A-4250-B30A-45E3EE589AF1} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3089134749-3087031263-3033358431-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {80812963-1ABF-4062-904A-098AE32275F7} - System32\Tasks\{3302E0C0-3C13-47EB-8B6D-6F710D3892A5} => pcalua.exe -a C:\Pass\Install\bc144\SETUP.EXE -d C:\Pass\Install\bc144
Task: {8CC1D82D-56C0-46B4-A97D-177E02925A2B} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3089134749-3087031263-3033358431-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe
Task: {8FD24EE8-F692-444E-BBE6-3921706DB98C} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-04-15] (Hewlett-Packard)
Task: {A2DAE9CB-48A4-4E6F-AF24-A88AF6FFC7A3} - System32\Tasks\{76C634FD-A087-4F20-A1B5-9F92C3B9A2B2} => pcalua.exe -a "C:\Pass\Program Files\Office\installation\setup.exe" -d "C:\Pass\Program Files\Office\installation"
Task: {C802C31E-DEA3-47A7-B380-A5BEB32C0560} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3089134749-3087031263-3033358431-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {CE8BC43A-16C0-48A8-BBE2-B86357C0ADA5} - System32\Tasks\{C44322D3-7F39-4117-AFE5-932F2181E99F} => pcalua.exe -a C:\Pass\Install\Age2upA-GER.exe -d C:\Pass\Install
Task: {D59D75ED-7410-4AE5-8825-BBB4DAA34C57} - System32\Tasks\{E7804B19-1BFB-4425-A198-8CE246DD895C} => pcalua.exe -a C:\Pass\Install\lhttsged.exe -d C:\Pass\Install
Task: {DBE5B774-6991-4B74-BB00-054B8BFF2713} - System32\Tasks\EPSON XP-215 217 Series Invitation {E3BE1AA4-4AD0-42CE-A285-B5CDE640C5E5} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {EF9C3441-F788-430E-8280-EBA11C082842} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3089134749-3087031263-3033358431-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {F04FC938-8DD9-4FE2-9798-E9619C55FA06} - System32\Tasks\avast! Emergency Update => C:\Pass\Program Files\Secure\Alwil Software\Avast 5\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: {F5153F3F-9D27-4C0E-A967-8E1D279A429D} - System32\Tasks\{7A1F73BC-4836-4489-ACF0-5A48C275F819} => pcalua.exe -a "C:\Pass\Games\ANSTOSS 3\SGLSetup.exe" -d "C:\Pass\Games\ANSTOSS 3"
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {E3BE1AA4-4AD0-42CE-A285-B5CDE640C5E5}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE
Task: C:\Windows\Tasks\EPSON XP-215 217 Series Update {E3BE1AA4-4AD0-42CE-A285-B5CDE640C5E5}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLGE.EXE:/EXE:{E3BE1AA4-4AD0-42CE-A285-B5CDE640C5E5} /F:UpdateSYSTEMĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-03-19 20:31 - 2015-05-02 22:47 - 00104400 _____ () C:\Pass\Program Files\Secure\Alwil Software\Avast 5\log.dll
2015-03-19 20:31 - 2015-05-02 22:47 - 00081728 _____ () C:\Pass\Program Files\Secure\Alwil Software\Avast 5\JsonRpcServer.dll
2015-08-10 23:14 - 2015-08-10 23:14 - 02960384 _____ () C:\Pass\Program Files\Secure\Alwil Software\Avast 5\defs\15081003\algo.dll
2015-08-12 13:51 - 2015-08-12 13:51 - 02961920 _____ () C:\Pass\Program Files\Secure\Alwil Software\Avast 5\defs\15081201\algo.dll
2013-08-07 21:25 - 2013-08-07 21:25 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2012-11-16 21:37 - 2012-11-16 21:37 - 00037376 _____ () C:\Windows\system32\atitmpxx.dll
2012-11-16 15:26 - 2012-11-16 15:26 - 00065024 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll
2010-08-12 17:45 - 2010-08-12 17:45 - 00024064 _____ () C:\Pass\Program Files\Secure\core\capiws.exe
2009-07-05 06:35 - 2009-07-05 06:35 - 00028160 _____ () C:\Pass\Program Files\Secure\core\servicemanager.pyd
2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Pass\Program Files\Secure\core\pywintypes26.dll
2009-07-05 06:35 - 2009-07-05 06:35 - 00041472 _____ () C:\Pass\Program Files\Secure\core\win32service.pyd
2009-07-05 06:35 - 2009-07-05 06:35 - 00096256 _____ () C:\Pass\Program Files\Secure\core\win32api.pyd
2009-10-26 09:27 - 2009-10-26 09:27 - 00153088 _____ () C:\Pass\Program Files\Secure\core\pyexpat.pyd
2009-10-26 09:25 - 2009-10-26 09:25 - 00040448 _____ () C:\Pass\Program Files\Secure\core\_socket.pyd
2009-10-26 09:25 - 2009-10-26 09:25 - 00645120 _____ () C:\Pass\Program Files\Secure\core\_ssl.pyd
2010-03-16 13:05 - 2010-03-16 13:05 - 00020480 _____ () C:\Pass\Program Files\Secure\core\zope.interface._zope_interface_coptimizations.pyd
2009-10-26 09:27 - 2009-10-26 09:27 - 00311808 _____ () C:\Pass\Program Files\Secure\core\_hashlib.pyd
2009-10-26 09:25 - 2009-10-26 09:25 - 00073728 _____ () C:\Pass\Program Files\Secure\core\_ctypes.pyd
2009-10-26 09:27 - 2009-10-26 09:27 - 00011776 _____ () C:\Pass\Program Files\Secure\core\select.pyd
2010-05-05 13:44 - 2010-05-05 13:44 - 00010752 _____ () C:\Pass\Program Files\Secure\core\OpenSSL.rand.pyd
2010-05-05 13:44 - 2010-05-05 13:44 - 00051200 _____ () C:\Pass\Program Files\Secure\core\OpenSSL.crypto.pyd
2010-05-05 13:44 - 2010-05-05 13:44 - 00039936 _____ () C:\Pass\Program Files\Secure\core\OpenSSL.SSL.pyd
2009-07-05 06:35 - 2009-07-05 06:35 - 00036352 _____ () C:\Pass\Program Files\Secure\core\win32process.pyd
2010-05-05 13:43 - 2010-05-05 13:43 - 00008192 _____ () C:\Pass\Program Files\Secure\core\twisted.protocols._c_urlarg.pyd
2009-07-05 06:35 - 2009-07-05 06:35 - 00110592 _____ () C:\Pass\Program Files\Secure\core\win32security.pyd
2009-07-05 06:35 - 2009-07-05 06:35 - 00017920 _____ () C:\Pass\Program Files\Secure\core\win32event.pyd
2009-07-06 04:16 - 2009-07-06 04:16 - 00111104 _____ () C:\Pass\Program Files\Secure\core\win32file.pyd
2009-07-05 06:35 - 2009-07-05 06:35 - 00024064 _____ () C:\Pass\Program Files\Secure\core\win32pipe.pyd
2008-05-25 02:45 - 2008-05-14 22:56 - 00292248 _____ () C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
2008-05-25 02:45 - 2008-05-14 22:56 - 00038184 _____ () C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvcps.dll
2008-05-25 02:45 - 2008-05-14 22:56 - 00259480 _____ () C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapEngine.dll
2008-05-25 02:45 - 2008-05-14 22:56 - 00116112 _____ () C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
2008-05-25 03:59 - 2008-03-26 15:26 - 00341328 _____ () C:\Windows\SMINST\BLService.exe
2008-05-25 03:59 - 2006-09-13 13:54 - 00081920 _____ () C:\Windows\SMINST\STString.dll
2008-05-25 03:59 - 2007-11-14 15:46 - 00126976 _____ () C:\Windows\SMINST\STWmiM.dll
2008-05-25 03:52 - 2007-01-09 11:25 - 00272024 _____ () C:\Program Files\CyberLink\Shared Files\RichVideo.exe
2015-03-13 22:34 - 2015-03-19 20:31 - 40540672 _____ () C:\Pass\Program Files\Secure\Alwil Software\Avast 5\libcef.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\.DEFAULT\...\flirt-fever.de -> www.flirt-fever.de
IE restricted site: HKU\.DEFAULT\...\imrworldwide.com -> server-au.imrworldwide.com
IE restricted site: HKU\.DEFAULT\...\softvisia.com -> avast.softvisia.com
IE restricted site: HKU\.DEFAULT\...\xxx.com -> www.xxx.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\100sexlinks.com -> 100sexlinks.com
IE restricted site: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\101hotteens.com -> 101hotteens.com
Da befinden sich 5610 mehr eingeschränkte Seiten.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\img24.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\Services: hshld => 2
MSCONFIG\Services: HssSrv => 2
MSCONFIG\Services: HssTrayService => 3
MSCONFIG\Services: HssWd => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^OpenVPN Client.lnk => C:\Windows\pss\OpenVPN Client.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: CloneCDTray =>
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.EXE" /autostart /min
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Pass\Program Files\Media\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: DivXMediaServer => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
MSCONFIG\startupreg: EEventManager => "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: ehTray.exe => C:\Windows\ehome\ehTray.exe
MSCONFIG\startupreg: EPLTarget =>
MSCONFIG\startupreg: HP Health Check Scheduler => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpWirelessAssistant => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
MSCONFIG\startupreg: HydraVisionDesktopManager => "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"
MSCONFIG\startupreg: LightScribe Control Panel => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
MSCONFIG\startupreg: Malwarebytes' Anti-Malware => "C:\Pass\Program Files\Error\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
MSCONFIG\startupreg: NokiaSuite.exe => C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
MSCONFIG\startupreg: OnScreenDisplay => C:\Program Files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe
MSCONFIG\startupreg: QlbCtrl.exe => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
MSCONFIG\startupreg: QPService => "C:\Program Files\HP\QuickPlay\QPService.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Pass\Program Files\Media\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: StartCCC => "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
MSCONFIG\startupreg: TkBellExe => "C:\Program Files\Update\realsched.exe" -osboot
MSCONFIG\startupreg: Vidalia => "C:\Pass\Program Files\Secure\Vidalia Bundle\Vidalia\vidalia.exe"
==================== FirewallRules (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe
FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe
FirewallRules: [{20AB4BAF-A546-44D8-844B-B4418880E2DD}] => (Allow) C:\Program Files\HP\QuickPlay\QP.exe
FirewallRules: [{7DCDBBEE-72F0-4152-80D8-797DAD717613}] => (Allow) C:\Program Files\HP\QuickPlay\QPService.exe
FirewallRules: [{E2B81110-4014-4092-BC6E-643E2FD561C7}] => (Allow) C:\Program Files\Cyberlink\PowerDirector\PDR.EXE
FirewallRules: [{C713727D-9D96-423D-A36C-48C86C293CFC}] => (Allow) E:\setup\HPZNUI01.EXE
FirewallRules: [{30751F16-5152-4EE3-B9D6-DFEDE32C1D21}] => (Allow) E:\setup\HPZNUI01.EXE
FirewallRules: [{85D26515-203B-4E07-BCEE-D318F77BC846}] => (Allow) C:\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{50B88FA6-9CB7-4EF4-B76D-CC54DCDAD7D7}] => (Allow) C:\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{D243D85F-9232-43DB-B5B8-F5953A05AA93}] => (Allow) C:\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{C45E51E3-3501-4AB4-A820-9549C2BFAAE7}] => (Allow) C:\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{351D5609-AC32-47E0-9BA0-E5EE56C75EF5}] => (Allow) C:\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{C3B482B8-2F44-4E6A-A714-7456E16B7ACD}] => (Allow) C:\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{41EBA4DF-C62D-4F14-BB26-E1C50CC4EFE0}] => (Allow) C:\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{8EADC376-0976-475A-B8B9-DA70CA8EA1C6}] => (Allow) C:\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{377ADD2D-B452-4B1D-B9F1-72719407C767}] => (Allow) C:\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{360E1C0D-8E1E-47D9-99F2-7DA2C8A32784}] => (Allow) C:\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{9C99A955-9B27-4403-948C-37298ED42D1E}] => (Allow) C:\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{03C2727B-9766-470F-84E9-EF5452A97D48}] => (Allow) C:\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{19D6E3B1-6274-46D4-A3C1-ED390575C65A}] => (Allow) C:\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{0D227AB4-EAD4-447A-8F95-437CD4EE65F5}] => (Allow) C:\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{51EB7D36-27B9-4D1A-8EFF-6E54AA62E7EE}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{A739C002-CCF6-4D3A-8D23-0CA336EC97DE}] => (Allow) svchost.exe
FirewallRules: [{ED0B8355-02D0-4707-A3F5-345874CF9746}] => (Allow) C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{79B741C6-EEA5-4F82-8DF5-5431C9E86EAD}] => (Allow) LPort=80
FirewallRules: [{F9A9F863-027B-4EC9-AE97-8F3875176FA7}] => (Allow) LPort=80
FirewallRules: [{8B8A2573-7A23-4B50-A3D1-6B0D9F329EFF}] => (Allow) LPort=80
FirewallRules: [{1E3A65B0-7906-4864-8213-6A12D1BE6EDE}] => (Allow) C:\Program Files\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{B608B57F-31ED-44BA-BF17-99B95860935B}] => (Allow) LPort=2869
FirewallRules: [{4AC434D9-07CF-4EAD-911B-0391AA041E82}] => (Allow) LPort=1900
FirewallRules: [{71649080-869C-4C6C-8529-42ACC7CC585A}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [TCP Query User{4C4E67D9-8BDD-4D9C-A7E1-E048BB11D8B7}C:\pass\program files\fun\age of empires ii\age2_x1\aoc.exe] => (Block) C:\pass\program files\fun\age of empires ii\age2_x1\aoc.exe
FirewallRules: [UDP Query User{05D8B5FB-2B4A-4A88-B20C-DC227491BE51}C:\pass\program files\fun\age of empires ii\age2_x1\aoc.exe] => (Block) C:\pass\program files\fun\age of empires ii\age2_x1\aoc.exe
FirewallRules: [TCP Query User{1F519B8F-9010-433B-A9FB-28C8E4DA6966}C:\pass\program files\fun\anno 1701\anno1701.exe] => (Block) C:\pass\program files\fun\anno 1701\anno1701.exe
FirewallRules: [UDP Query User{E182D246-0A37-4228-9085-80E4CE7294BC}C:\pass\program files\fun\anno 1701\anno1701.exe] => (Block) C:\pass\program files\fun\anno 1701\anno1701.exe
FirewallRules: [TCP Query User{090BFFCD-B949-47BF-8594-A59BA65F65DF}C:\pass\program files\fun\age of empires ii\age2_x1\age2_x2.exe] => (Block) C:\pass\program files\fun\age of empires ii\age2_x1\age2_x2.exe
FirewallRules: [UDP Query User{E637EFCB-4D32-4B40-A7DE-E08275D8B1F1}C:\pass\program files\fun\age of empires ii\age2_x1\age2_x2.exe] => (Block) C:\pass\program files\fun\age of empires ii\age2_x1\age2_x2.exe
FirewallRules: [TCP Query User{EA61D5CB-FB38-4B5B-8EB2-91EC188AF141}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [UDP Query User{DFFFA3E8-D954-452A-8B0D-C7E30DE16D46}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
FirewallRules: [TCP Query User{22DF832F-826B-479A-9A3B-B560A43EE1CC}C:\windows\system32\mmc.exe] => (Block) C:\windows\system32\mmc.exe
FirewallRules: [UDP Query User{F0EEB4A9-B3C8-462B-B649-B699A4678D7B}C:\windows\system32\mmc.exe] => (Block) C:\windows\system32\mmc.exe
FirewallRules: [TCP Query User{1148189F-BD32-45C9-BC2A-0AC5254A1D55}C:\pass\program files\fun\hazard - journey of life demo\binaries\win32\udk.exe] => (Block) C:\pass\program files\fun\hazard - journey of life demo\binaries\win32\udk.exe
FirewallRules: [UDP Query User{FA9BDCCE-FC7F-4A0C-AABD-E6D8666FBB4B}C:\pass\program files\fun\hazard - journey of life demo\binaries\win32\udk.exe] => (Block) C:\pass\program files\fun\hazard - journey of life demo\binaries\win32\udk.exe
FirewallRules: [{53418D86-8245-43BC-9F32-ABBB8B37420B}] => (Allow) C:\Pass\Install\webpack\OJJ4600_Full_14\setup\hpznui01.exe
FirewallRules: [{C22DE6B8-FE4C-45C3-BDF7-F80C0EBDEB36}] => (Allow) C:\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{6B94D07E-3AE4-49FC-9A96-220077E64767}] => (Allow) C:\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{FBF18251-5520-45F9-9D4B-B98EDB76DAAE}] => (Allow) C:\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{53EDA126-C63E-44A2-B7FD-C21AF639C497}] => (Allow) C:\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{813B275F-3282-49BC-8432-235E1C8BA2A7}] => (Allow) C:\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{93F6AA30-B020-4503-8E3C-7CA902860F97}] => (Allow) C:\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{01FBF190-69CC-4053-B581-D5519511B2BF}] => (Allow) C:\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{ED9BBB53-538E-4C9B-ADC2-3D6D88ED1F9B}] => (Allow) C:\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{3D5F2EB6-3B54-4884-A6CA-AA4A80517FC9}] => (Allow) C:\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{FFECB162-37FB-4D1F-8192-73BC6BCF87E6}] => (Allow) C:\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{87510BE8-0C93-4B3E-B258-0A84F2C2ED81}] => (Allow) C:\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{39F69854-7A28-4CF9-8DED-06DE41EE2F58}] => (Allow) C:\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{472F3479-F72F-44C5-991D-04A0BE1F9686}] => (Allow) C:\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{9ECD8631-FFF8-437C-8E08-54F825E25BBF}] => (Allow) C:\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{564FA5EC-638A-4BEB-93A9-A6C6B0183653}] => (Allow) C:\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{87B210AD-93AB-4BC3-938C-6A541C86C4A9}] => (Allow) C:\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{29BCB996-2BEB-41C4-9913-E1555D4443DE}] => (Allow) C:\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [TCP Query User{D5FFC4C2-3130-46B5-A23A-351C981DED89}C:\pass\program files\fun\anstoss 3\zeug\anstoss3.exe] => (Allow) C:\pass\program files\fun\anstoss 3\zeug\anstoss3.exe
FirewallRules: [UDP Query User{10F8215F-0FC9-49D5-A231-19918DA4FC16}C:\pass\program files\fun\anstoss 3\zeug\anstoss3.exe] => (Allow) C:\pass\program files\fun\anstoss 3\zeug\anstoss3.exe
FirewallRules: [TCP Query User{EACFCDBB-150A-4E4E-83A8-C2E8BBF77F1F}C:\pass\program files\fun\anstoss 3\anstoss3.exe] => (Allow) C:\pass\program files\fun\anstoss 3\anstoss3.exe
FirewallRules: [UDP Query User{5B217939-389E-423E-8C1A-7301FADA688D}C:\pass\program files\fun\anstoss 3\anstoss3.exe] => (Allow) C:\pass\program files\fun\anstoss 3\anstoss3.exe
FirewallRules: [TCP Query User{3C148F7F-3880-4F15-9296-31BDF0428FBA}C:\windows\system32\dplaysvr.exe] => (Allow) C:\windows\system32\dplaysvr.exe
FirewallRules: [UDP Query User{87FD8CA7-8097-4ED0-A0B1-DBEF402893EE}C:\windows\system32\dplaysvr.exe] => (Allow) C:\windows\system32\dplaysvr.exe
FirewallRules: [{89E304F2-1A3B-485D-BEC7-B3D5181F44DB}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [TCP Query User{A2A58C4D-5CEE-44FF-8619-B22D1AFBEB87}C:\program files\epson software\event manager\eeventmanager.exe] => (Block) C:\program files\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{4B10858D-E980-4A46-BC6E-B4DB785E28ED}C:\program files\epson software\event manager\eeventmanager.exe] => (Block) C:\program files\epson software\event manager\eeventmanager.exe
FirewallRules: [{3C9D8FE7-8FE2-4FE4-A297-C026070DFD35}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{926EA667-8AC1-420F-ACA0-A3BA01697E73}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{EB791CE8-447A-478C-AAFF-B1235CD8253D}] => (Allow) C:\Pass\Program Files\Secure\Alwil Software\Avast 5\ng\vbox\aswFe.exe
FirewallRules: [{81FBCADD-DBEB-4D91-8AB5-0ED34D30938F}] => (Allow) C:\Pass\Program Files\Secure\Alwil Software\Avast 5\ng\vbox\aswFe.exe
FirewallRules: [TCP Query User{C5606437-2B08-4F4F-B003-098ABEED1BC2}C:\program files\emule\test\emule.exe] => (Allow) C:\program files\emule\test\emule.exe
FirewallRules: [UDP Query User{CDB2E6CB-B385-4357-BC26-29AD25FF19AA}C:\program files\emule\test\emule.exe] => (Allow) C:\program files\emule\test\emule.exe
FirewallRules: [{34360D54-6877-42ED-B0E6-EEEB9A51CEEC}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{C1D10999-22AF-4919-BA9C-2EF69844A6D3}] => (Allow) LPort=4662
FirewallRules: [{06D11014-8462-4B35-86FF-D28BDDB9074B}] => (Allow) LPort=4672
FirewallRules: [{7004AB60-A52D-4D5B-81AA-2D3391BD509B}] => (Allow) C:\Users\Pass\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{694AA7F6-06D0-461F-9C2B-EF52574DFAEC}] => (Allow) C:\Users\Pass\AppData\Roaming\uTorrent\uTorrent.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Officejet J4680 series
Description: Officejet J4680 series
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (08/12/2015 01:48:00 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/11/2015 11:59:50 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/10/2015 08:43:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung QPSched.exe, Version 5.0.0.2914, Zeitstempel 0x482aeec4, fehlerhaftes Modul QPSched.exe, Version 5.0.0.2914, Zeitstempel 0x482aeec4, Ausnahmecode 0xc0000005, Fehleroffset 0x00007684,
Prozess-ID 0xc70, Anwendungsstartzeit QPSched.exe0.
Error: (08/10/2015 11:09:55 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/09/2015 08:39:29 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/08/2015 06:13:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/08/2015 03:09:41 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Eintrag <C:\USERS\PASS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\FSDNMEUR.DEFAULT-1421533925078\SAFEBROWSING-BACKUP> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (08/08/2015 03:09:41 PM) (Source: Windows Search Service) (EventID: 3013) (User: )
Description: Eintrag <C:\USERS\PASS\APPDATA\LOCAL\MOZILLA\FIREFOX\PROFILES\FSDNMEUR.DEFAULT-1421533925078\SAFEBROWSING-BACKUP> in der Hash-Zuordnung kann nicht aktualisiert werden.
Kontext: Anwendung, SystemIndex Katalog
Details:
Ein an das System angeschlossenes Gerät funktioniert nicht. (0x8007001f)
Error: (08/08/2015 11:48:39 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (08/07/2015 01:29:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung QPSched.exe, Version 5.0.0.2914, Zeitstempel 0x482aeec4, fehlerhaftes Modul QPSched.exe, Version 5.0.0.2914, Zeitstempel 0x482aeec4, Ausnahmecode 0xc0000005, Fehleroffset 0x00007684,
Prozess-ID 0xebc, Anwendungsstartzeit QPSched.exe0.
Systemfehler:
=============
Error: (08/12/2015 02:50:28 PM) (Source: VDS Dynamic Provider) (EventID: 10) (User: )
Description: Der Anbieter konnte Benachrichtigungen nicht speichern, die vom Treiber stammen. Der Dienst für virtuelle Datenträger muss neu gestartet werden. hr=80042505
Error: (08/12/2015 01:48:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: adfs%%2
Error: (08/12/2015 01:48:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058
Error: (08/11/2015 11:27:13 PM) (Source: VDS Dynamic Provider) (EventID: 10) (User: )
Description: Der Anbieter konnte Benachrichtigungen nicht speichern, die vom Treiber stammen. Der Dienst für virtuelle Datenträger muss neu gestartet werden. hr=80042505
Error: (08/11/2015 08:48:43 PM) (Source: VDS Dynamic Provider) (EventID: 10) (User: )
Description: Der Anbieter konnte Benachrichtigungen nicht speichern, die vom Treiber stammen. Der Dienst für virtuelle Datenträger muss neu gestartet werden. hr=80042505
Error: (08/11/2015 02:36:14 PM) (Source: VDS Dynamic Provider) (EventID: 10) (User: )
Description: Der Anbieter konnte Benachrichtigungen nicht speichern, die vom Treiber stammen. Der Dienst für virtuelle Datenträger muss neu gestartet werden. hr=80042505
Error: (08/11/2015 02:09:21 PM) (Source: VDS Dynamic Provider) (EventID: 10) (User: )
Description: Der Anbieter konnte Benachrichtigungen nicht speichern, die vom Treiber stammen. Der Dienst für virtuelle Datenträger muss neu gestartet werden. hr=80042505
Error: (08/11/2015 12:16:07 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {752073A1-23F2-4396-85F0-8FDB879ED0ED}
Error: (08/11/2015 11:59:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: adfs%%2
Error: (08/11/2015 11:59:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Parallel port driver%%1058
Microsoft Office:
=========================
Error: (01/18/2015 10:44:10 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6712.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 14601 seconds with 10320 seconds of active time. This session ended with a crash.
CodeIntegrity:
===================================
Date: 2015-08-12 16:45:38.829
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:45:37.457
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:45:36.053
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:45:34.617
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:45:13.058
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:45:11.592
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:45:10.141
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:44:53.839
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:44:52.451
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2015-08-12 16:44:50.984
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Processor: AMD Athlon(tm) X2 Dual-Core QL-62
Prozentuale Nutzung des RAM: 56%
Installierter physikalischer RAM: 3069.09 MB
Verfügbarer physikalischer RAM: 1331.21 MB
Summe virtueller Speicher: 6362.64 MB
Verfügbarer virtueller Speicher: 4708.48 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:140.12 GB) (Free:15.96 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (HP_RECOVERY) (Fixed) (Total:8.92 GB) (Free:1.63 GB) NTFS ==>[System mit Startkomponenten (eingeholt von lesen Laufwerk)]
Drive e: (Blood Simple) (CDROM) (Total:4.21 GB) (Free:0 GB) UDF
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (Size: 149.1 GB) (Disk ID: 61F31F63)
Partition 1: (Active) - (Size=140.1 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=8.9 GB) - (Type=07 NTFS)
==================== Ende vom raportu ============================
FRST.txt Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x86) Version:11-08-2015 02
durchgeführt von Pass (Administrator) auf PASS-PC (12-08-2015 16:43:20)
Gestartet von C:\Users\Pass\Desktop
Geladene Profile: Pass (Verfügbare Profile: Pass)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Sprache: Deutsch (Deutschland)
Internet Explorer Version 9 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) C:\Pass\Program Files\Secure\Alwil Software\Avast 5\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\epson\MyEpson Portal\mepService.exe
() C:\Pass\Program Files\Secure\core\capiws.exe
() C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\epson\MyEpson Portal\mep.exe
() C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe
() C:\Windows\SMINST\BLService.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Secunia) C:\Pass\Program Files\Filemanagement\PSI\sua.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avast Software) C:\Pass\Program Files\Secure\Alwil Software\Avast 5\ng\vbox\AvastVBoxSVC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdSync.exe
(Avast Software s.r.o.) C:\Pass\Program Files\Secure\Alwil Software\Avast 5\avastui.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON Software\Event Manager\EEventManager.exe
(DivX, LLC) C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Hewlett-Packard Co.) C:\HP\Digital Imaging\bin\hpqtra08.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Co.) C:\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\HP\Digital Imaging\bin\hpqgpc01.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registry (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [Windows Mobile-based device management] => C:\Windows\WindowsMobile\wmdSync.exe [215552 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Pass\Program Files\Secure\Alwil Software\Avast 5\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [458844 2009-07-21] (IDT, Inc.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] => C:\Pass\Program Files\Media\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [448520 2015-06-24] (DivX, LLC)
HKLM\...\Run: [EEventManager] => C:\Program Files\Epson Software\Event Manager\EEventManager.exe [1065024 2014-06-10] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1861640 2015-06-27] (DivX, LLC)
HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\Run: [] => [X]
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll Datei nicht gefunden
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2013-05-09]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Pass\Program Files\Secure\Alwil Software\Avast 5\ashShell.dll [2015-05-02] (Avast Software s.r.o.)
BootExecute: autocheck autochk * sdnclean.exe
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000 -> {32E69FD7-A893-44A3-9124-1A8723526FCD} URL =
SearchScopes: HKU\S-1-5-21-3089134749-3087031263-3033358431-1000 -> {B172245C-EEC5-4805-9477-49F2999D1362} URL =
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2010-05-28] (Hewlett-Packard Co.)
BHO: E-Web Print -> {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} -> C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-16] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Pass\Program Files\Secure\Alwil Software\Avast 5\aswWebRepIE.dll [2015-05-02] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-16] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2010-05-28] (Hewlett-Packard Co.)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2012-01-25] (SEIKO EPSON CORPORATION)
Toolbar: HKLM - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll [2014-11-27] (SEIKO EPSON CORPORATION)
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-08] (SuperAdBlocker.com)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{05477A77-DA5D-44DD-9419-82CF004A54AD}: [DhcpNameServer] 192.168.2.1 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078
FF NewTab: about:blank
FF Homepage: https://startpage.com/do/mypage.pl?prf=31f433ba33ae2168bd7fb31a02b2849f
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fnew.songza.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*'))%20%7B%20return%20'PROXY%20us08.sq.proxmate.me%3A8000%3B%20PROXY%20us02.sq.proxmate.me%3A8000%3B%20PROXY%20us11.sq.proxmate.me%3A8000%3B%20PROXY%20us03.sq.proxmate.me%3A8000%3B%20PROXY%20us04.sq.proxmate.me%3A8000%3B%20PROXY%20us10.sq.proxmate.me%3A8000%3B%20PROXY%20us05.sq.proxmate.me%3A8000%3B%20PROXY%20us01.sq.proxmate.me%3A8000%3B%20PROXY%20us09.sq.proxmate.me%3A8000%3B%20PROXY%20us06.sq.proxmate.me%3A8000%3B%20PROXY%20us07.sq.proxmate.me%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-16] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll [2014-03-11] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2015-06-29] (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-16] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin -> C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( )
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-08-22] (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-08-22] (RealNetworks, Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-12-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-12-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-12-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-12-22] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-12-22] (Apple Inc.)
FF SearchPlugin: C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\searchplugins\leo-eng-deu-v20.xml [2015-04-10]
FF SearchPlugin: C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\searchplugins\youtube-videosuche.xml [2015-03-01]
FF Extension: LEO Dictionaries - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\contextMenuExtension@leo.org.xpi [2015-04-02]
FF Extension: Ghostery - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\firefox@ghostery.com.xpi [2015-01-18]
FF Extension: ProxMate - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi [2015-05-24]
FF Extension: WordReference Translator - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\{4095283b-2f11-42cf-a805-803c7001ffd9}.xpi [2015-04-02]
FF Extension: Cookie Monster - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\{45d8ff86-d909-11db-9705-005056c00008}.xpi [2015-01-18]
FF Extension: NoScript - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2015-01-18]
FF Extension: Adblock Plus - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-18]
FF Extension: BetterPrivacy - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2015-01-18]
FF Extension: Greasemonkey - C:\Users\Pass\AppData\Roaming\Mozilla\Firefox\Profiles\fsdnmeur.default-1421533925078\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2015-04-03]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-07-21]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Pass\Program Files\Secure\Alwil Software\Avast 5\WebRep\FF
FF Extension: Avast Online Security - C:\Pass\Program Files\Secure\Alwil Software\Avast 5\WebRep\FF [2011-03-09]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-05-09]
FF HKLM\...\Firefox\Extensions: [fiddlerhook@fiddler2.com] - C:\Pass\Program Files\Fiddler2\FiddlerHook
FF Extension: FiddlerHook - C:\Pass\Program Files\Fiddler2\FiddlerHook [2013-11-21]
FF HKLM\...\Firefox\Extensions: [e-webprint@epson.com] - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2015-07-30]
FF HKU\S-1-5-21-3089134749-3087031263-3033358431-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Pass\Program Files\Secure\Alwil Software\Avast 5\WebRep\Chrome\aswWebRepChrome.crx [2015-03-19]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [119056 2013-05-23] (SUPERAntiSpyware.com)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2012-11-16] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 avast! Antivirus; C:\Pass\Program Files\Secure\Alwil Software\Avast 5\AvastSvc.exe [343336 2015-05-02] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Pass\Program Files\Secure\Alwil Software\Avast 5\ng\vbox\AvastVBoxSVC.exe [3207800 2015-05-02] (Avast Software)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [64616 2014-11-03] (CyberGhost S.R.L)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc.exe [126128 2012-05-17] (Seiko Epson Corporation)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [Datei ist nicht signiert]
R3 hpqcxs08; C:\HP\Digital Imaging\bin\hpqcxs08.dll [254824 2010-05-28] (Hewlett-Packard Co.)
R2 hpqddsvc; C:\HP\Digital Imaging\bin\hpqddsvc.dll [138600 2010-05-28] (Hewlett-Packard Co.)
R2 HPSLPSVC; C:\HP\Digital Imaging\bin\HPSLPSVC32.DLL [701288 2010-05-28] (Hewlett-Packard Co.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-02-26] (Hewlett-Packard Company) [Datei ist nicht signiert]
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MyEpson Portal Service; C:\Program Files\EPSON\MyEpson Portal\mepService.exe [703984 2014-09-22] (SEIKO EPSON CORPORATION)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 OpenVPNAccessClient; C:\Pass\Program Files\Secure\core\capiws.exe [24064 2010-08-12] () [Datei ist nicht signiert]
S3 OpenVPNService; C:\Pass\Program Files\Secure\bin\openvpnserv.exe [33080 2015-03-19] (The OpenVPN Project)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 QPCapSvc; C:\Program Files\HP\QuickPlay\Kernel\TV\QPCapSvc.exe [292248 2008-05-14] ()
R2 QPSched; C:\Program Files\HP\QuickPlay\Kernel\TV\QPSched.exe [116112 2008-05-14] ()
R2 Recovery Service for Windows; C:\Windows\SMINST\BLService.exe [341328 2008-03-26] ()
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2007-01-09] ()
S3 Secunia PSI Agent; C:\Pass\Program Files\Filemanagement\PSI\PSIA.exe [993848 2011-01-10] (Secunia)
R2 Secunia Update Agent; C:\Pass\Program Files\Filemanagement\PSI\sua.exe [399416 2011-01-10] (Secunia)
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_e2247046\STacSV.exe [221266 2009-07-21] (IDT, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 acedrv11; C:\Windows\system32\drivers\acedrv11.sys [185472 2010-02-24] (Protect Software GmbH)
R0 ahcix86s; C:\Windows\System32\DRIVERS\ahcix86s.sys [170000 2008-04-15] (AMD Technologies Inc.)
R0 Amddfltr; C:\Windows\System32\DRIVERS\Amddfltr.sys [15416 2008-01-07] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-05-02] ()
R1 aswKbd; C:\Windows\system32\Drivers\aswKbd.sys [21576 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-05-02] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-05-02] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-05-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-05-02] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-06-27] (Avast Software s.r.o.)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [35144 2014-07-16] (The OpenVPN Project)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-05-02] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-05-02] ()
R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdLH3.sys [83984 2012-02-23] (Advanced Micro Devices)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [278984 2013-04-22] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-12-27] (Disc Soft Ltd)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [25280 2008-12-29] (LogMeIn, Inc.)
S3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [35560 2012-07-10] (AnchorFree Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25416 2013-04-22] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [98520 2015-08-12] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-06-18] (Malwarebytes Corporation)
S3 PSI; C:\Windows\System32\DRIVERS\psi_mf.sys [15544 2010-09-01] (Secunia)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [473656 2012-03-28] (Duplex Secure Ltd.)
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [23040 2014-11-05] (The OpenVPN Project)
S3 taphss; C:\Windows\System32\DRIVERS\taphss.sys [33512 2012-07-10] (AnchorFree Inc)
R2 VBoxAswDrv; C:\Pass\Program Files\Secure\Alwil Software\Avast 5\ng\vbox\VBoxAswDrv.sys [220752 2015-05-02] (Avast Software)
S2 adfs; kein ImagePath
S3 AtiHdmiService; system32\drivers\AtiHdmi.sys [X]
U1 eabfiltr; kein ImagePath
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-12 16:43 - 2015-08-12 16:45 - 00027891 _____ C:\Users\Pass\Desktop\FRST.txt
2015-08-12 16:43 - 2015-08-12 16:43 - 00000000 ____D C:\FRST
2015-08-12 16:40 - 2015-08-12 16:41 - 01676288 _____ (Farbar) C:\Users\Pass\Desktop\FRST.exe
2015-08-07 20:32 - 2015-08-07 20:32 - 00000867 _____ C:\Users\Public\Desktop\DivX Player.lnk
2015-08-07 20:31 - 2015-08-07 20:31 - 00000932 _____ C:\Users\Public\Desktop\DivX Converter.lnk
2015-08-07 18:38 - 2015-08-07 18:38 - 00001026 _____ C:\Users\Pass\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk
2015-08-07 18:38 - 2015-08-07 18:38 - 00000996 _____ C:\Users\Pass\Desktop\Start Tor Browser.lnk
2015-08-07 13:16 - 2015-08-08 11:47 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-08-03 19:36 - 2015-08-12 16:43 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-03 19:35 - 2015-08-03 19:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-08-03 19:34 - 2015-08-03 19:40 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-08-03 19:34 - 2015-06-18 08:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-03 19:34 - 2015-06-18 08:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-02 21:55 - 2015-08-03 03:40 - 00000000 ____D C:\Users\Pass\AppData\Roaming\uTorrent
2015-08-01 20:55 - 2015-08-01 20:55 - 00043494 _____ C:\Users\Pass\AppData\Local\Tempdivx59af
2015-07-20 19:56 - 2015-07-14 18:02 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-20 19:56 - 2015-07-14 16:23 - 00296960 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-15 00:16 - 2015-07-31 08:21 - 00000000 ____D C:\Users\Pass\AppData\Roaming\Skype
2015-07-15 00:16 - 2015-07-15 00:16 - 00000000 ____D C:\Users\Pass\AppData\Local\Skype
2015-07-15 00:16 - 2015-07-03 18:04 - 01316864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 00:16 - 2015-06-25 04:57 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 00:15 - 2015-07-15 00:15 - 00001880 _____ C:\Users\Public\Desktop\Skype.lnk
2015-07-15 00:15 - 2015-07-15 00:15 - 00000000 ___RD C:\Program Files\Skype
2015-07-15 00:15 - 2015-07-15 00:15 - 00000000 ____D C:\ProgramData\Skype
2015-07-15 00:15 - 2015-07-15 00:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-07-15 00:15 - 2015-07-15 00:15 - 00000000 ____D C:\Program Files\Common Files\Skype
2015-07-15 00:14 - 2015-06-17 18:50 - 02264576 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 00:14 - 2015-06-17 17:09 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 00:13 - 2015-06-12 18:01 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-14 23:47 - 2015-07-14 23:47 - 00000000 ____D C:\Users\Pass\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\C-Design
2015-07-14 23:47 - 2015-05-31 10:11 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-14 23:46 - 2015-06-27 18:02 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-14 23:46 - 2015-06-27 16:21 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-14 23:46 - 2015-06-27 16:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-14 23:46 - 2015-01-09 02:17 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-14 23:45 - 2015-06-27 18:03 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-14 23:45 - 2015-06-27 18:02 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-14 23:45 - 2015-06-27 18:01 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-07-14 23:45 - 2015-06-12 15:13 - 00440768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-14 23:40 - 2015-07-03 07:31 - 12386304 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-14 23:40 - 2015-07-03 07:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-14 20:03 - 2015-06-17 03:14 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-14 20:03 - 2015-06-17 03:12 - 09750528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-14 20:03 - 2015-06-17 03:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-14 20:03 - 2015-06-17 03:10 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-14 20:03 - 2015-06-17 03:09 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-14 20:03 - 2015-06-17 03:09 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-14 20:03 - 2015-06-17 03:09 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-14 20:03 - 2015-06-17 03:09 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-14 20:03 - 2015-06-17 03:08 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-07-14 20:03 - 2015-06-17 03:08 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-07-14 20:03 - 2015-06-17 03:08 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-08-12 15:48 - 2014-05-18 19:48 - 00000917 _____ C:\Windows\Tasks\EPSON XP-215 217 Series Update {E3BE1AA4-4AD0-42CE-A285-B5CDE640C5E5}.job
2015-08-12 15:48 - 2014-05-18 19:48 - 00000731 _____ C:\Windows\Tasks\EPSON XP-215 217 Series Invitation {E3BE1AA4-4AD0-42CE-A285-B5CDE640C5E5}.job
2015-08-12 15:46 - 2006-11-02 14:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-12 15:46 - 2006-11-02 14:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-12 15:09 - 2012-02-15 18:14 - 01913171 _____ C:\Windows\WindowsUpdate.log
2015-08-12 13:46 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-12 00:32 - 2006-11-02 15:01 - 00032514 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-08-11 00:33 - 2012-09-04 01:43 - 00000000 ____D C:\Users\Pass\AppData\Roaming\vlc
2015-08-10 21:46 - 2008-12-12 03:19 - 00000021 _____ C:\Users\Public\Documents\hpqp.txt
2015-08-08 11:47 - 2015-04-02 18:36 - 00012156 _____ C:\Windows\PFRO.log
2015-08-08 11:47 - 2012-04-28 02:02 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-08-07 20:32 - 2014-07-01 20:45 - 00001430 _____ C:\Users\Pass\Desktop\DivX Movies.lnk
2015-08-07 20:32 - 2011-04-30 00:45 - 00000000 ____D C:\ProgramData\DivX
2015-08-07 20:32 - 2009-10-25 15:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2015-08-07 20:32 - 2009-10-25 15:14 - 00000000 ____D C:\Program Files\DivX
2015-08-03 19:40 - 2012-06-04 14:58 - 00000899 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-08-03 19:35 - 2010-02-20 18:10 - 00000000 ____D C:\Users\Pass\AppData\Roaming\Malwarebytes
2015-08-03 19:34 - 2010-02-20 18:10 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-02 21:37 - 2008-12-05 19:32 - 00000000 ____D C:\Pass
2015-08-01 17:28 - 2008-12-26 00:04 - 00095744 _____ C:\Users\Pass\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-30 14:36 - 2014-05-18 19:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2015-07-30 14:35 - 2014-05-18 19:49 - 00000000 ____D C:\Program Files\epson
2015-07-30 14:35 - 2014-05-18 19:15 - 00000000 ____D C:\Program Files\EPSON Software
2015-07-30 14:35 - 2008-05-25 02:27 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-07-22 21:15 - 2011-11-28 14:57 - 02271600 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-16 21:59 - 2014-07-09 14:42 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-07-16 21:59 - 2014-07-09 14:42 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-07-16 21:58 - 2014-07-11 00:08 - 00000000 ____D C:\Users\Pass\AppData\Local\Adobe
2015-07-16 19:02 - 2006-11-02 12:33 - 01567416 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-16 18:48 - 2011-12-03 15:27 - 00084328 _____ C:\Users\Pass\AppData\Local\GDIPFONTCACHEV1.DAT
2015-07-15 00:13 - 2013-08-23 16:03 - 00000000 ____D C:\Windows\system32\MRT
2015-07-14 23:50 - 2008-05-25 03:39 - 00000000 ____D C:\ProgramData\Microsoft Help
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-01-26 01:30 - 2013-06-22 23:38 - 0019140 _____ () C:\Users\Pass\AppData\Roaming\Safer-Networking.log
2008-12-05 14:43 - 2008-12-05 14:43 - 0000000 _____ () C:\Users\Pass\AppData\Local\AtStart.txt
2010-06-21 22:32 - 2012-02-14 17:04 - 0006944 _____ () C:\Users\Pass\AppData\Local\d3d9caps.dat
2008-12-26 00:04 - 2015-08-01 17:28 - 0095744 _____ () C:\Users\Pass\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2008-12-05 14:43 - 2008-12-05 14:43 - 0000000 _____ () C:\Users\Pass\AppData\Local\DSwitch.txt
2009-04-12 21:52 - 2009-04-12 21:52 - 0000000 _____ () C:\Users\Pass\AppData\Local\FnF4.txt
2008-12-05 14:43 - 2008-12-05 14:43 - 0000000 _____ () C:\Users\Pass\AppData\Local\QSwitch.txt
2015-05-19 02:43 - 2015-05-19 02:43 - 0247298 _____ () C:\Users\Pass\AppData\Local\Tempdivx021a
2015-07-06 00:27 - 2015-07-06 00:27 - 0043682 _____ () C:\Users\Pass\AppData\Local\Tempdivx1657
2015-05-19 02:43 - 2015-05-19 02:43 - 0247298 _____ () C:\Users\Pass\AppData\Local\Tempdivx22a7
2015-07-08 02:08 - 2015-07-08 02:08 - 0253196 _____ () C:\Users\Pass\AppData\Local\Tempdivx36e8
2015-08-01 20:55 - 2015-08-01 20:55 - 0043494 _____ () C:\Users\Pass\AppData\Local\Tempdivx59af
2015-07-06 00:34 - 2015-07-06 00:34 - 0043682 _____ () C:\Users\Pass\AppData\Local\Tempdivxd8dc
2008-12-09 20:07 - 2013-05-09 21:58 - 0003206 _____ () C:\ProgramData\hpzinstall.log
Einige Dateien in TEMP:
====================
C:\Users\Pass\AppData\Local\Temp\DivXSetup.exe
C:\Users\Pass\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\Pass\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Pass\AppData\Local\Temp\RSPUpgradeInstaller.exe
==================== Bamital & volsnap Check =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-08-12 13:53
==================== Ende vom raportu ============================
So und kaum bin ich fertig, geht das Touchpad-Problem wieder los. aber schreiben geht zumindest. |
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
AdwCleaner auf deinen Desktop.
SecurityCheck und:
WARNUNG an die MITLESER: 
