Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:17-10-2015
durchgeführt von klopsi (Administrator) auf KLOPSI-PC (17-10-2015 14:17:29)
Gestartet von C:\Users\klopsi\Desktop
Geladene Profile: klopsi & (Verfügbare Profile: klopsi & lol)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Spotify Ltd) C:\Users\klopsi\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\klopsi\Desktop\FRST64(2).exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782520 2015-09-25] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-09-10] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157456 2015-09-23] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\Run: [Spotify Web Helper] => C:\Users\klopsi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\Run: [Spotify] => C:\Users\klopsi\AppData\Roaming\Spotify\Spotify.exe [7660648 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_Plugin.exe [1156296 2015-09-24] (Adobe Systems Incorporated)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify Web Helper] => C:\Users\klopsi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Spotify] => C:\Users\klopsi\AppData\Roaming\Spotify\Spotify.exe [7660648 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_Plugin.exe [1156296 2015-09-24] (Adobe Systems Incorporated)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Spotify Web Helper] => C:\Users\klopsi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Spotify] => C:\Users\klopsi\AppData\Roaming\Spotify\Spotify.exe [7660648 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_Plugin.exe [1156296 2015-09-24] (Adobe Systems Incorporated)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Run: [Spotify Web Helper] => C:\Users\klopsi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Run: [Spotify] => C:\Users\klopsi\AppData\Roaming\Spotify\Spotify.exe [7660648 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_Plugin.exe [1156296 2015-09-24] (Adobe Systems Incorporated)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\...\Run: [Spotify Web Helper] => C:\Users\klopsi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\...\Run: [Spotify] => C:\Users\klopsi\AppData\Roaming\Spotify\Spotify.exe [7660648 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_Plugin.exe [1156296 2015-09-24] (Adobe Systems Incorporated)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\...\Run: [Spotify Web Helper] => C:\Users\klopsi\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2541160 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\...\Run: [Spotify] => C:\Users\klopsi\AppData\Roaming\Spotify\Spotify.exe [7660648 2015-10-07] (Spotify Ltd)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_19_0_0_185_Plugin.exe [1156296 2015-09-24] (Adobe Systems Incorporated)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\...\Policies\Explorer: [DisallowRun] 1
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2014-10-26]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{5583DB51-6D4B-4C31-8985-78B41A409026}: [DhcpNameServer] 192.168.0.1 192.168.0.2
Tcpip\..\Interfaces\{C512CCA6-D847-48AB-A263-CB6622F38614}: [DhcpNameServer] 192.168.0.1 192.168.0.2
Internet Explorer:
==================
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.dell.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000 -> {DDD8A9E4-91CD-4D0D-B526-7EACBAC873D3} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0 -> {DDD8A9E4-91CD-4D0D-B526-7EACBAC873D3} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1 -> {DDD8A9E4-91CD-4D0D-B526-7EACBAC873D3} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2 -> {DDD8A9E4-91CD-4D0D-B526-7EACBAC873D3} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3 -> {DDD8A9E4-91CD-4D0D-B526-7EACBAC873D3} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
SearchScopes: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4 -> {DDD8A9E4-91CD-4D0D-B526-7EACBAC873D3} URL = hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-05] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-05] (Oracle Corporation)
FireFox:
========
FF ProfilePath: C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default
FF Homepage: hxxp://encrypted.google.com/
FF Session Restore: -> ist aktiviert.
FF Keyword.URL:
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-24] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-24] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-05] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-05] (Oracle Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-08-21] (Pando Networks)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2515552902-1029408911-2965342807-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\klopsi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-02] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\klopsi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-02] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\klopsi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-02] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\klopsi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-02] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\klopsi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-02] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\klopsi\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-02] (Unity Technologies ApS)
FF SearchPlugin: C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\searchplugins\englische-ergebnisse.xml [2014-08-03]
FF SearchPlugin: C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\searchplugins\gmx-suche.xml [2014-08-03]
FF SearchPlugin: C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\searchplugins\google-images.xml [2014-11-06]
FF SearchPlugin: C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\searchplugins\google-maps.xml [2014-11-06]
FF SearchPlugin: C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\searchplugins\lastminute.xml [2014-08-03]
FF SearchPlugin: C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\searchplugins\webde-suche.xml [2014-08-03]
FF Extension: Avira Browser Safety - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\Extensions\abs@avira.com [2015-09-17] [ist nicht signiert]
FF Extension: WOT - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-09]
FF Extension: Cliqz - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\Extensions\cliqz@cliqz.com.xpi [2014-11-06] [ist nicht signiert]
FF Extension: Ghostery - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\Extensions\firefox@ghostery.com.xpi [2015-02-11]
FF Extension: FastestFox - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\Extensions\smarterwiki@wikiatic.com.xpi [2014-08-01]
FF Extension: CookieCuller - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\Extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}.xpi [2015-02-11]
FF Extension: Adblock Plus - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-01]
FF HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\extensions\cliqz@cliqz.com => nicht gefunden
FF HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\extensions\cliqz@cliqz.com => nicht gefunden
FF HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\extensions\cliqz@cliqz.com => nicht gefunden
FF HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\extensions\cliqz@cliqz.com => nicht gefunden
FF HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\extensions\cliqz@cliqz.com => nicht gefunden
FF HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\klopsi\AppData\Roaming\Mozilla\Firefox\Profiles\f5e6t17i.default\extensions\cliqz@cliqz.com => nicht gefunden
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ocbnpbkmjpgbdcgiflkgkpnkinifpgpj] - C:\Users\klopsi\ChromeExtensions\ocbnpbkmjpgbdcgiflkgkpnkinifpgpj\amazon-icon-2.crx [2014-08-03]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [932912 2015-09-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-09-25] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-09-25] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1147720 2015-10-14] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [240872 2015-09-10] (Avira Operations GmbH & Co. KG)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [163544 2015-09-25] (Avira Operations GmbH & Co. KG)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-31] (AVG Technologies)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-07-27] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-09-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [74952 2015-09-25] (Avira Operations GmbH & Co. KG)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
S3 Ph3xIB64; C:\Windows\System32\DRIVERS\Ph3xIB64.sys [1627520 2009-06-10] (NXP Semiconductors)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-17 14:17 - 2015-10-17 14:17 - 00023543 _____ C:\Users\klopsi\Desktop\FRST.txt
2015-10-17 14:16 - 2015-10-17 14:16 - 02196992 _____ (Farbar) C:\Users\klopsi\Desktop\FRST64(2).exe
2015-10-14 10:08 - 2015-10-14 10:52 - 00000035 _____ C:\Users\klopsi\Desktop\Neues Textdokument (2).txt
2015-10-13 19:01 - 2015-10-13 19:01 - 01682432 _____ C:\Users\klopsi\Desktop\AdwCleaner_5.013.exe
2015-10-12 19:30 - 2015-10-12 19:31 - 02195968 _____ (Farbar) C:\Users\klopsi\Downloads\FRST64(1).exe
2015-10-12 17:07 - 2015-10-12 17:07 - 00003156 _____ C:\Windows\System32\Tasks\{C271D612-4E4A-4CF7-BBDE-6F44EFE5C0F4}
2015-10-12 17:06 - 2015-10-12 17:06 - 18509368 _____ (Adobe Systems Inc.) C:\Users\klopsi\Downloads\AdobeAIRInstaller(5).exe
2015-10-11 22:38 - 2015-10-11 22:38 - 00012302 _____ C:\Users\klopsi\Desktop\Lebenslauf.odt
2015-10-11 22:06 - 2015-10-11 22:06 - 00014030 _____ C:\Users\klopsi\Desktop\Der Erlkönig.odt
2015-10-10 00:16 - 2015-10-10 00:16 - 00001469 _____ C:\Users\klopsi\Desktop\Battle.net Launcher - Verknüpfung.lnk
2015-10-02 19:42 - 2015-10-02 19:42 - 00000000 ___RD C:\Users\lol\Virtual Machines
2015-10-02 19:42 - 2015-10-02 19:42 - 00000000 ____D C:\Users\lol\AppData\Roaming\Apple Computer
2015-09-30 23:06 - 2015-09-30 23:37 - 00012521 _____ C:\Users\klopsi\Desktop\OpenDocument Text (neu).odt
2015-09-27 16:03 - 2015-09-27 16:03 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-09-27 16:03 - 2015-09-27 16:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-09-27 16:03 - 2015-09-27 16:03 - 00000000 ____D C:\Program Files\iTunes
2015-09-27 16:03 - 2015-09-27 16:03 - 00000000 ____D C:\Program Files\iPod
2015-09-27 16:03 - 2015-09-27 16:03 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-09-27 16:00 - 2015-09-27 16:00 - 00000000 ____D C:\Program Files\Bonjour
2015-09-27 16:00 - 2015-09-27 16:00 - 00000000 ____D C:\Program Files (x86)\Bonjour
2015-09-27 15:59 - 2015-09-27 15:59 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2015-09-27 15:59 - 2015-09-27 15:59 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2015-09-27 15:57 - 2015-10-02 20:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-09-27 15:55 - 2015-09-27 15:56 - 03707392 _____ C:\Users\klopsi\Downloads\msxml6_ia64(5).msi
2015-09-27 15:55 - 2015-09-27 15:55 - 02617344 _____ C:\Users\klopsi\Downloads\msxml6_x64(5).msi
2015-09-27 15:55 - 2015-09-27 15:55 - 01488384 _____ C:\Users\klopsi\Downloads\msxml6(5).msi
2015-09-27 00:07 - 2015-09-27 00:07 - 00000743 _____ C:\Users\klopsi\Desktop\Start Emsisoft Emergency Kit.lnk
2015-09-27 00:07 - 2015-09-27 00:07 - 00000000 ____D C:\EEK
2015-09-27 00:05 - 2015-09-27 00:07 - 167109544 _____ C:\Users\klopsi\Downloads\EmsisoftEmergencyKit.exe
2015-09-25 23:47 - 2015-09-25 23:47 - 00001211 _____ C:\Users\klopsi\Desktop\mbam.txt
2015-09-25 13:28 - 2015-10-12 19:31 - 02195968 _____ (Farbar) C:\Users\klopsi\Desktop\FRST64(1).exe
2015-09-24 21:57 - 2015-09-24 21:59 - 18509368 _____ (Adobe Systems Inc.) C:\Users\klopsi\Downloads\AdobeAIRInstaller(4).exe
2015-09-21 12:39 - 2015-09-21 12:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Buka
2015-09-21 12:39 - 2015-09-21 12:39 - 00000000 ____D C:\Program Files (x86)\Buka
2015-09-18 00:01 - 2015-09-18 00:01 - 00001070 _____ C:\Users\Public\Desktop\VLC media player.lnk
2015-09-18 00:00 - 2015-09-18 00:00 - 28849904 _____ C:\Users\klopsi\Downloads\vlc-2.2.1-win32.exe
2015-09-18 00:00 - 2015-09-18 00:00 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2015-09-17 23:57 - 2015-09-17 23:57 - 21104272 _____ C:\Users\klopsi\Downloads\Kartina.TV-2.70-20141016-win-x86-setup.zip
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2015-10-17 14:17 - 2014-11-01 13:29 - 00000000 ____D C:\FRST
2015-10-17 12:56 - 2014-08-01 22:25 - 01999691 _____ C:\Windows\WindowsUpdate.log
2015-10-17 12:44 - 2009-07-14 06:45 - 00026704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-17 12:44 - 2009-07-14 06:45 - 00026704 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-17 00:45 - 2014-10-26 15:36 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-17 00:42 - 2015-05-03 15:04 - 00000000 ____D C:\Users\klopsi\AppData\Local\Spotify
2015-10-17 00:39 - 2015-05-03 15:03 - 00000000 ____D C:\Users\klopsi\AppData\Roaming\Spotify
2015-10-16 12:48 - 2014-10-06 14:57 - 00000000 ____D C:\Users\klopsi\AppData\Local\Battle.net
2015-10-16 12:48 - 2014-10-06 14:57 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-10-15 18:58 - 2014-10-06 20:20 - 00000000 ____D C:\Users\klopsi\AppData\Roaming\TS3Client
2015-10-15 16:07 - 2014-10-06 20:20 - 00000000 ____D C:\Program Files (x86)\TeamSpeak 3 Client
2015-10-15 15:58 - 2015-04-16 22:58 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2015-10-15 14:58 - 2014-12-26 21:50 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-10-15 14:58 - 2014-08-03 20:34 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-10-15 12:12 - 2015-04-24 13:02 - 00014596 _____ C:\Windows\setupact.log
2015-10-14 22:49 - 2015-05-08 02:17 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-10-14 22:49 - 2014-10-26 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-10-14 22:49 - 2014-10-26 15:27 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-10-14 22:15 - 2014-08-01 22:30 - 00000000 ____D C:\Users\klopsi
2015-10-14 10:04 - 2014-10-18 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-10-14 10:04 - 2014-09-25 18:40 - 00000000 ____D C:\ProgramData\Package Cache
2015-10-13 19:05 - 2015-05-13 17:38 - 00009656 _____ C:\Windows\PFRO.log
2015-10-13 19:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-13 19:04 - 2015-02-10 16:43 - 00000000 ____D C:\AdwCleaner
2015-10-13 14:43 - 2015-04-16 23:35 - 00000000 ____D C:\Users\klopsi\AppData\Local\Razer
2015-10-13 14:43 - 2015-04-16 23:35 - 00000000 ____D C:\ProgramData\Razer
2015-10-11 22:04 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-10-11 22:03 - 2014-08-02 08:20 - 00700868 _____ C:\Windows\system32\perfh007.dat
2015-10-11 22:03 - 2014-08-02 08:20 - 00149736 _____ C:\Windows\system32\perfc007.dat
2015-10-11 22:03 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-05 09:50 - 2014-10-26 15:27 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-05 09:50 - 2014-10-26 15:27 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-05 09:50 - 2014-10-26 15:27 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-10-02 19:42 - 2014-12-26 21:49 - 00000000 ____D C:\Users\lol
2015-09-30 15:45 - 2014-08-02 20:46 - 00000000 ____D C:\Users\klopsi\AppData\Roaming\LolClient
2015-09-30 15:28 - 2014-10-06 14:59 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2015-09-27 16:05 - 2014-08-01 22:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-27 16:03 - 2015-07-22 13:56 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-09-27 15:59 - 2015-07-22 13:56 - 00002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-09-25 12:19 - 2014-10-18 14:18 - 00163544 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-09-25 12:19 - 2014-10-18 14:18 - 00074952 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2015-09-24 21:59 - 2014-12-13 15:59 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-09-24 21:59 - 2014-12-13 15:59 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-09-24 21:59 - 2014-09-21 17:38 - 00000000 ____D C:\Users\klopsi\AppData\Local\Adobe
2015-09-24 21:01 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-09-17 21:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
Einige Dateien in TEMP:
====================
C:\Users\klopsi\AppData\Local\Temp\avgnt.exe
C:\Users\klopsi\AppData\Local\Temp\EpsonInkjetDriverDownloader.EXE
C:\Users\klopsi\AppData\Local\Temp\jre-8u60-windows-au.exe
C:\Users\klopsi\AppData\Local\Temp\sqlite3.dll
C:\Users\klopsi\AppData\Local\Temp\ytb.exe
C:\Users\lol\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2015-10-03 13:32
==================== Ende von FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:17-10-2015
durchgeführt von klopsi (2015-10-17 14:18:16)
Gestartet von C:\Users\klopsi\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-08-01 20:29:58)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2515552902-1029408911-2965342807-500 - Administrator - Disabled)
Gast (S-1-5-21-2515552902-1029408911-2965342807-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2515552902-1029408911-2965342807-1002 - Limited - Enabled)
klopsi (S-1-5-21-2515552902-1029408911-2965342807-1000 - Administrator - Enabled) => C:\Users\klopsi
lol (S-1-5-21-2515552902-1029408911-2965342807-1003 - Limited - Enabled) => C:\Users\lol
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Ãåðîè Ìå÷à è Ìàãèè III: Ïîëíîå ñîáðàíèå (HKLM-x32\...\{A08343A0-0C33-42AD-921F-2F3080784687}) (Version: - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 19.0.0.190 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.13) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{A50679D9-6CBD-4FCD-BACB-62EF3894F6F3}) (Version: 4.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{316BFAA9-B213-4A4C-AF39-AC4D7EA99B54}) (Version: 9.0.0.26 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Atheros Driver Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Atheros)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.13.210 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{5dfbeba9-9f22-463d-8c95-c861911810a2}) (Version: 1.1.47.11018 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.47.11018 - Avira Operations GmbH & Co. KG) Hidden
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.2 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.16 - Piriform)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2993 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
iTunes (HKLM\...\{6F7260CC-8ECE-4C72-9415-AB1F608BB80A}) (Version: 12.3.0.44 - Apple Inc.)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Kits Configuration Installer (x32 Version: 8.100.25984 - Microsoft) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Mozilla Firefox 41.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 41.0 (x86 de)) (Version: 41.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 41.0.0.5738 - Mozilla)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Pokémon Trading Card Game Online (HKLM-x32\...\{4DAD9CAB-7AD5-4DA5-B4B0-E4806CE95363}) (Version: 2.27.0 - The Pokémon Company International)
Sauerbraten (HKLM-x32\...\Sauerbraten) (Version: - )
SDK Debuggers (x32 Version: 8.100.26936 - Microsoft Corporation) Hidden
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Spotify (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Spotify (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Spotify (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Spotify (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Spotify (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
Spotify (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\...\Spotify) (Version: 1.0.15.133.gf21970bd - Spotify AB)
SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation)
TDM-GCC (HKLM-x32\...\TDM-GCC) (Version: 1.1309.0 - TDM)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Unity Web Player (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\...\UnityWebPlayer) (Version: 4.5.5f1 - Unity Technologies ApS)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Windows Software Development Kit for Windows 8.1 (HKLM-x32\...\{ed3a6e6d-9661-4357-abe4-fcc03dc57a07}) (Version: 8.100.26936 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
==================== Wiederherstellungspunkte =========================
15-09-2015 11:49:24 Windows Update
21-09-2015 12:38:51 ??????????? Ãåðîè Ìå÷à è Ìàãèè III: Ïîëíîå ñîáðàíèå
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2015-02-11 01:48 - 00000035 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {3D4CD221-6DA5-4ACF-9FC4-1AECB90DA579} - System32\Tasks\{351B9C3B-82DA-4D3F-B9D9-77911E420896} => pcalua.exe -a C:\Users\klopsi\Downloads\AdobeAIRInstaller(3).exe -d C:\Users\klopsi\Downloads
Task: {5282935D-7A4B-421F-AC09-905E64E3CAC6} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {54C0F448-7DB4-4A24-B15C-ED266A908575} - System32\Tasks\{C271D612-4E4A-4CF7-BBDE-6F44EFE5C0F4} => pcalua.exe -a C:\Users\klopsi\Downloads\AdobeAIRInstaller(5).exe -d C:\Users\klopsi\Downloads
Task: {796A36E8-2C3F-423B-9BC1-97D47B34807D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-09-14] (Adobe Systems Incorporated)
Task: {DA4A0661-015A-4A9B-877E-FC6C5925347B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-07-23] (Piriform Ltd)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-04-16 23:12 - 2013-02-19 14:43 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2015-05-15 16:27 - 2015-05-15 16:27 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-09-23 16:47 - 2015-09-23 16:47 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\...\100sexlinks.com -> 100sexlinks.com
Da befinden sich 31997 mehr eingeschränkte Seiten.
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-2515552902-1029408911-2965342807-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-2515552902-1029408911-2965342807-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Control Panel\Desktop\\Wallpaper -> C:\Users\lol\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2515552902-1029408911-2965342807-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Control Panel\Desktop\\Wallpaper -> C:\Users\lol\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2515552902-1029408911-2965342807-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\Control Panel\Desktop\\Wallpaper -> C:\Users\lol\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2515552902-1029408911-2965342807-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-3\Control Panel\Desktop\\Wallpaper -> C:\Users\lol\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-2515552902-1029408911-2965342807-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-4\Control Panel\Desktop\\Wallpaper -> C:\Users\lol\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1 - 192.168.0.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupreg: RazerCortex => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe -autorun
MSCONFIG\startupreg: Spotify => "C:\Users\klopsi\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\klopsi\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{4C29608A-7E54-4DFD-8CE6-3ED477C245B5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{4423E682-0723-4572-BB06-AB28E0AF6B7B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{0E19DFA8-CB00-4F75-B330-720587F5884E}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe
FirewallRules: [{BCC280C8-40C5-43CA-8415-925E7E334856}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe
FirewallRules: [{803AAFDE-8D78-4B0B-A569-A7DE0F2A370D}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe
FirewallRules: [{198B852F-D33C-46CD-A799-2BEFF0B71E42}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgdiagex.exe
FirewallRules: [{F06C62E9-7B2A-4A28-9C99-32B214492384}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
FirewallRules: [{C6F4FEE3-C896-43E1-82A4-E7A10087B7EA}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
FirewallRules: [{0FE5EFFE-C169-47DC-B819-1C575EB84941}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{47620701-B5EF-428E-8AB5-84FEC55EA3FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [TCP Query User{6CC95345-D7D2-4F2C-A828-4E44D2EA3783}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{4005739A-921C-4138-95BB-7028CC081414}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{46F6BE5E-F609-4A0B-82C0-E04B7D95EA18}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{0327FE96-D11E-4280-A9A1-B5BD2FF8BA54}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{8FA9F68D-C3BC-4F8F-B8BB-4C8028388442}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{336E67D5-F3A5-4B8A-BE42-58A335E18F70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{0E4980A5-84A6-464A-8E8A-5DB3CBCD16ED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{489248B6-53EB-4E3A-8050-71B9AC35EF6B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{D2CB2F91-DE4E-4A06-8FC1-C589947F44F2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{1412A0B8-6B88-48E9-B445-CE53DF713F96}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [TCP Query User{AD887B20-F744-4D00-B6F2-CB6A1CE5C4FF}C:\program files (x86)\hearthstone\hearthstone.exe] => (Block) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{A9856614-A73A-4090-9865-DA41E414722A}C:\program files (x86)\hearthstone\hearthstone.exe] => (Block) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{F0840BF0-5EC3-48B6-B0F6-0321109610DB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{757A2F1D-5449-4608-918B-6E2368517F94}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{E309680A-154A-4658-A141-6E79F8E829C7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{FF4FC63D-8F06-4F5A-9A23-858571BB8AA3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{8A0ACD19-86EE-42EC-A0FB-92930532BA05}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{152C020C-1957-4DF7-981E-9FDFEB25ECA8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{52F7511B-D05B-4084-91E6-0E03AC9BF9A5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{0FF317A9-BB1E-45B0-81DB-6AFE6ED2DDA5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [TCP Query User{F7BB52D2-1DC3-4E37-AFA8-42546DA6D821}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{03F0716D-E872-47CC-B71F-52ABBB4BD9DB}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{F379593B-C9D1-45F0-BEC5-EA5ACF83587E}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{F16656C0-7AB3-463E-8778-5BCAABC0E8F2}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{74B0ACFC-7337-4E4C-A8A3-8B1A5C1F2ED5}C:\users\klopsi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\klopsi\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{D875459A-7AB8-4CC2-A935-0E17A1F98F75}C:\users\klopsi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\klopsi\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{D1F57119-7339-4942-AE3A-8DF719176DC9}C:\users\klopsi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\klopsi\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{E729FAA0-F180-41FE-8F7E-08E56E48ED4D}C:\users\klopsi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\klopsi\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{7FDFF312-0522-4D71-889B-E08349A46CB2}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm.exe
FirewallRules: [UDP Query User{80CB7041-5661-4070-B700-638E0AF34ED9}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm.exe
FirewallRules: [{2D5DBA68-28E8-4E3D-95BD-86A49741A48E}] => (Allow) C:\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{515BFB17-2E57-463F-BB6B-B02A348E5DAD}] => (Allow) C:\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{416CC0B4-4056-40B6-BC30-85D4639C3605}] => (Allow) C:\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{CA318D7D-BDDC-4B17-8710-FB688D1A67A9}] => (Allow) C:\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [TCP Query User{D47138F2-8401-4EB3-9B8F-77642B98DA57}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm.exe
FirewallRules: [UDP Query User{EFDA99E7-8BD5-4D21-A0BF-62E5B857A665}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm.exe
FirewallRules: [TCP Query User{ED84FB75-4DCD-4656-AB5C-5CF3E2C8AF94}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm.exe
FirewallRules: [UDP Query User{FFD28E0F-4607-4597-926B-B1965F57A005}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm.exe
FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [{D8E9A476-193C-4CF7-B660-D3F023374AE0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{34241B3C-969A-44F5-B65C-39461AD0D783}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B21D90B5-4F37-4F5F-86E7-C9B0E71D8435}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3D99E00C-E6C1-45AB-82D4-221897C23C47}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{169EF25D-3CB1-43C0-BDD2-117CE9F9FA6C}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: WebCam
Description: USB-Videogerät
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Microsoft
Service: usbvideo
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (10/17/2015 01:30:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2605
Error: (10/17/2015 01:30:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2605
Error: (10/17/2015 01:30:32 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/17/2015 01:30:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1607
Error: (10/17/2015 01:30:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1607
Error: (10/17/2015 01:30:31 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/17/2015 02:30:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2355
Error: (10/17/2015 02:30:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2355
Error: (10/17/2015 02:30:59 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (10/17/2015 02:30:58 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1326
Systemfehler:
=============
Error: (10/14/2015 02:10:03 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {1A1F4206-0688-4E7F-BE03-D82EC69DF9A5}
Error: (10/13/2015 07:05:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (10/13/2015 07:05:08 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WMPNetworkSvc" konnte sich nicht als "NT AUTHORITY\NetworkService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (10/13/2015 07:05:08 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069
Error: (10/13/2015 07:05:08 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (10/13/2015 07:05:06 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\system32\athihvs.dll
Error: (10/13/2015 07:05:06 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\system32\athihvs.dll
Error: (10/13/2015 07:05:04 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\system32\athihvs.dll
Error: (10/13/2015 07:04:38 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (10/13/2015 07:04:38 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Secunia Update Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Pentium(R) CPU P6200 @ 2.13GHz
Prozentuale Nutzung des RAM: 28%
Installierter physikalischer RAM: 7862.7 MB
Verfügbarer physikalischer RAM: 5657.21 MB
Summe virtueller Speicher: 22860.91 MB
Verfügbarer virtueller Speicher: 20322.99 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:698.54 GB) (Free:602.32 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 35C812CA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=698.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.